TLP:CLEAR · Disclosure is not limited.

Jordan’s strikes in Daraa: casualty and coordination disputes

Time window: Last 1 day · Audience: General analyst · Type: Situation report · DTG: 2026-11-03 09:36Z · Overall confidence: MEDIUM

BLUF

Jordan very likely carried out airstrikes in Daraa, southern Syria, on 26 October in retaliation for the 23 October attack at St George’s Greek Orthodox Church in Hamoud, Karak. Reporting does not independently establish that the targets were linked to the Hamoud attackers or verify Jordan’s claim that more than 20 ISIL members were killed. Syrian authorities reported seven civilian deaths, and Damascus disputes Jordan’s claim that the strikes were coordinated.

Executive summary

Three masked armed men opened fire on mourners outside St George’s Greek Orthodox Church in Hamoud on 23 October. Reports describe 40 people hospitalised, but differ on the death toll: one says nine people were killed, while another describes ten funerals. Jordanian authorities reportedly arrested the three attackers. Jordan’s airstrikes in Daraa followed on 26 October. Jordan said it struck suspected ISIL positions and killed more than 20 militants; Syrian authorities reported seven civilian deaths, and Jordan acknowledged some civilian deaths without giving a number. Jordan says it coordinated the strikes with Damascus, which denies prior notification and says it opened an investigation.

Change from previous assessment

Since the 2 November brief, the assessment of Jordan’s 26 October strikes and the unresolved casualty claims is unchanged. New reporting gives more detail on the Hamoud attack, including three masked attackers, 40 hospitalised people and the reported arrest of all three suspects; it also presents a direct Jordanian-Damascus dispute over prior coordination. The church attack death toll is less settled than the prior brief’s summary implied, with accounts of nine deaths and ten funerals. No new evidence establishes the claimed ISIL casualty total or resolves coordination.

Key judgments

1. Jordan very likely conducted multiple airstrikes in Daraa, southern Syria, on 26 October, in retaliation for the 23 October attack in Hamoud, Karak. Reporting identifies the Jordanian Air Force as the unit that struck suspected Islamic State positions. (Confidence: high · REPORTED)
   • I&W: Confirm: a Jordanian Armed Forces statement or Syrian investigation identifies Jordanian strikes at sites in Daraa on 26 October. (0-14 days)
   • I&W: Break: Jordanian authorities issue a correction denying the operation or identifying a different actor, with Damascus independently confirming that account. (0-14 days)
2. The Hamoud attack is well documented, but its final death toll remains unresolved. Reporting says three masked armed men opened fire outside St George’s Greek Orthodox Church on 23 October and that 40 people were hospitalised; one account reports nine deaths, while another describes ten funerals. Jordanian authorities reportedly arrested the three attackers. (Confidence: medium · REPORTED)
   • I&W: Confirm: Jordanian authorities publish a final casualty account that addresses the difference between nine reported deaths and the account of ten funerals. (0-14 days)
   • I&W: Break: a Jordanian official casualty list establishes a final death toll and reconciles the two reported counts. (0-14 days)
3. It is unlikely that the available reporting independently establishes that the Daraa targets were ISIL sites linked to the Hamoud attackers. Jordan described the targets as suspected ISIL positions and said its strikes killed more than 20 militants; Syrian authorities reported seven civilian deaths, while Jordan acknowledged some civilian deaths. Jordan’s prime minister and Public Security Director described the attackers as embracing takfiri beliefs, but those statements do not establish ISIL membership or a link to the Daraa targets. The target identities and casualty claims remain unverified in the available reporting. (Confidence: low · ASSESSED)
   • I&W: Confirm: Jordan’s next formal account gives no verifiable target identities or evidence linking the arrested Hamoud suspects to personnel at the Daraa sites. (0-30 days)
   • I&W: Break: an investigation publishes independently corroborated evidence identifying ISIL personnel at the struck sites and linking them to named Hamoud suspects. (0-30 days)
4. Jordan and Damascus have made directly conflicting claims about prior coordination. Jordan says it coordinated the 26 October strikes with Syrian authorities; Damascus denies prior coordination or notification and says it opened an investigation. The available reporting does not resolve which account is accurate. (Confidence: medium · REPORTED)
   • I&W: Confirm: Jordan maintains that it coordinated the strikes while Damascus maintains that it received no prior notification. (0-30 days)
   • I&W: Break: the two governments publish a shared record or documentary evidence that establishes whether prior notification occurred. (0-30 days)

Outlook & scenarios

Bilateral containment (60%)

Amman and Damascus keep the coordination dispute within bilateral channels, and Jordan conducts no further reported strikes in Syria. The previously reported joint security committee provides a possible channel for discussing notification and the Syrian investigation.

Further Jordanian air operation (25%)

Jordan conducts another strike in southern Syria after attributing a new attack in Jordan to an ISIL network or identifying an active cell linked to the Hamoud attackers. Such an operation would extend the cross-border military action beyond the reported 26 October strikes.

Diplomatic deterioration (10%)

Damascus’s investigation rejects Jordan’s account of coordination, and the two governments do not establish a shared account of the strikes. Their public dispute persists without a functioning joint follow-up mechanism.

High-impact wildcard: verified link between the Hamoud attackers and ISIL in Daraa (5%)

Investigators publish corroborated evidence linking the arrested Hamoud suspects to ISIL personnel at the Daraa sites. Jordan then conducts repeated strikes against those networks, increasing the risk of further civilian casualties and a sharper dispute with Damascus.

Recommendations

1. Keep Jordan’s claim of more than 20 ISIL deaths, Syria’s report of seven civilian deaths, and Jordan’s acknowledgement of civilian casualties as separate, attributed accounts until independent casualty and target evidence is available.
2. Track Jordanian and Syrian statements, investigation findings, and any documentary record of prior notification. Treat coordination as unresolved until the two accounts are reconciled.
3. Follow public updates on the three arrested Hamoud suspects. Do not treat official descriptions of takfiri beliefs as proof of ISIL membership or a link to the Daraa targets.
4. Monitor whether the previously reported joint security committee meets and whether it establishes a clear cross-border notification process.

Confidence & uncertainty

Reporting from major media, an NGO and a specialist blog supports the occurrence, date and location of the Jordanian strikes. Confidence is lower on the effects and rationale: Jordan and Syrian authorities give conflicting accounts of casualties and coordination, and the available material does not independently verify the identities of those killed or a link between the Daraa targets and the Hamoud attackers.

Intelligence gaps

• [EEI 1.2 · PARTIAL] Changes in Jordanian force posture, border closures, air-defense deployments, or military alert levels along the Syria border. Recommended collection: official statements/local reporting
• [EEI 1.4 · UNCOVERED] New attacks on Jordanian territory, border personnel, security forces, or religious sites attributed to ISIS or Syria-based actors. Recommended collection: incident reporting/security services
• [EEI 2.1 · UNCOVERED] ISIS claims of responsibility, threats, operational instructions, or propaganda referencing the church attack, Jordan, or the retaliatory airstrikes. Recommended collection: militant communications
• [EEI 2.3 · PARTIAL] Arrests, weapons seizures, disrupted plots, or identified ISIS cells in Jordan following the church attack. Recommended collection: Jordanian security reporting
• [EEI 2.4 · UNCOVERED] Attempts to move ISIS personnel, weapons, or facilitators across the Jordan-Syria border after the strikes. Recommended collection: border security reporting
• [EEI 3.1 · PARTIAL] Syrian government condemnation, military alerts, air-defense activity, or announced retaliatory measures against Jordan. Recommended collection: Syrian official statements/military reporting
• [EEI 3.2 · UNCOVERED] Military movements or operational changes by Syrian forces, Iran-aligned groups, or other armed actors near southern Syria and the Jordanian border. Recommended collection: satellite imagery/local security reporting
• [EEI 3.3 · PARTIAL] Public or private diplomatic interventions by the United States, Russia, Gulf states, Israel, or Arab League members concerning the strikes. Recommended collection: diplomatic statements
• [EEI 3.4 · PARTIAL] New cross-border incidents, airspace violations, rocket or drone launches, or attacks on Jordanian, Syrian, or coalition-linked positions. Recommended collection: military incident reporting
• [EEI 4.1 · UNCOVERED] Additional attacks, sectarian threats, protests, communal violence, or mobilization linked to the church attack or the airstrikes. Recommended collection: local media/social media
• [EEI 4.2 · UNCOVERED] Changes in border-crossing operations, refugee movements, commercial traffic, or humanitarian access between Jordan and Syria. Recommended collection: border authorities/humanitarian reporting
• [EEI 4.3 · UNCOVERED] Changes in travel advisories, embassy security measures, foreign force protection, or warnings concerning Jordan and southern Syria. Recommended collection: government advisories

Red cell review: CONCUR WITH COMMENT

TLP:CLEAR