TLP:CLEAR · Disclosure is not limited.

Southeast Iran: mass-casualty escalation remains unsubstantiated

Time window: Last 1 day · Audience: General analyst · Type: Situation report · DTG: 2026-11-13 16:15Z · Overall confidence: HIGH

BLUF

The supplied reporting does not substantiate the claimed toll of 94 dead and 33 wounded or establish a sustained Baloch insurgent escalation in Sistan and Baluchestan. New reporting describes two October deaths and a responsibility claim by the People's Front of Fighters, but does not establish Jaish al-Adl's direct role or confirm that the dead were Iranian government forces.

Executive summary

Reporting added two October incidents in Sistan and Baluchestan: Ahmad Yagoubi died in an IED blast on 2 October, and Mohammadreza Rahimi died in an armed clash on 13 October. A local-media account says the People's Front of Fighters claimed responsibility for both; Fars described Rahimi as a Fatemiyoun member, and Yagoubi was identified as Fatemiyoun-linked. Separately, France 24 geolocated footage of armed men near Mount Kala-Pade, while a video from Gosht showed weapons training but did not establish the participants' identities or affiliation. The September reports of security personnel killed near Zahedan and a Basij commander killed in Parud remain low-reliability social-media claims. This material does not verify the headline toll or show a sustained campaign against Iranian security forces.

Change from previous assessment

Since the 12 November brief, reporting has added the 2 October death of Ahmad Yagoubi, the 13 October death of Mohammadreza Rahimi, a People's Front of Fighters responsibility claim, and footage geolocated near Mount Kala-Pade. This raises confidence that additional armed activity and disputed Fatemiyoun-linked presence were reported, but not that attacks on Iranian security forces are increasing. The 94 dead and 33 wounded toll remains unsubstantiated, Jaish al-Adl's direct role remains unconfirmed, and the Zahedan courthouse attack remains unverified.

Key judgments

1. The supplied evidence does not establish a toll of 94 dead and 33 wounded or a sustained escalation by Baloch armed groups in Sistan and Baluchestan. The October account describes the deaths of Ahmad Yagoubi and Mohammadreza Rahimi; the reported September deaths of two security personnel near Zahedan and a Basij commander in Parud rest on low-reliability social-media reporting. (Confidence: low · ASSESSED)
   • I&W: A dated, independently corroborated casualty account totals at least 94 dead and 33 wounded. This would confirm the headline toll; a verified incident ledger showing materially lower cumulative totals would break it. (0-14 days)
   • I&W: Two or more independently corroborated attacks on identified Iranian security personnel in Sistan and Baluchestan, with dates, locations and casualty counts, would confirm a sustained rise. No independently verified security-force attacks during the period would break this assessment. (1-3 months)
2. It is unlikely that the supplied reporting establishes Jaish al-Adl's direct responsibility for the October incidents. The local-media account attributes a responsibility claim for both incidents to the People's Front of Fighters, which it describes as a coalition that includes Jaish al-Adl; it does not independently verify the claim or identify Jaish al-Adl as the operational actor. (Confidence: low · ASSESSED)
   • I&W: An independently authenticated Jaish al-Adl statement naming either October incident, corroborated by separate reporting on the perpetrators, would confirm a direct link. (0-14 days)
   • I&W: Independent reporting identifies another perpetrator for either incident or establishes that the People's Front of Fighters' claim was false. This would break the current attribution. (0-30 days)
3. Reports of armed activity in Sistan and Baluchestan do not establish a Baloch insurgent offensive against Iranian security forces. The October reporting describes deaths of people identified as Fatemiyoun-linked; footage from near Mount Kala-Pade was geolocated, while the identities and affiliations of men in a separate Gosht video were not established. France 24 separately assessed that some Fatemiyoun fighters had been integrated into IRGC ranks, leaving the meaning of the reported presence contested. (Confidence: low · ASSESSED)
   • I&W: A separate investigation authenticates the identities and affiliations of the men in the 29 September Mount Kala-Pade footage and clarifies whether they were aligned with the IRGC or an armed opposition group. This would confirm or break the current assessment of contested affiliation. (0-30 days)
   • I&W: An independently verified attack in Sistan and Baluchestan names Iranian security-force victims and provides evidence linking the perpetrators to a Baloch armed group. This would break the assessment that the supplied record does not show an offensive against security forces. (1-3 months)

Outlook & scenarios

Isolated incidents and contested attribution (55%)

Likely, reporting remains centred on isolated incidents and disputed group claims in Sistan and Baluchestan rather than a verified, sustained campaign. The 2 October IED death and 13 October armed clash remain the only supplied October incidents with named victims.

A verified rise in attacks on security personnel (20%)

Unlikely, independently corroborated reporting establishes further attacks on Iranian security personnel in Sistan and Baluchestan and provides dated casualty figures. Repeated incidents with verified attribution to the People's Front of Fighters or Jaish al-Adl would support an assessment of escalation.

Fatemiyoun or IRGC links clarify the reported armed presence (20%)

Unlikely, new independently checked evidence clarifies whether the men in the Mount Kala-Pade and Gosht footage were Fatemiyoun-linked, IRGC-integrated or affiliated with an armed opposition group. This would shift the assessment of the footage away from the current uncertainty over identity and affiliation.

Wildcard: coordinated, high-casualty attacks (5%)

Very unlikely, coordinated attacks by the People's Front of Fighters, including elements linked to Jaish al-Adl, target Iranian security personnel in places such as Zahedan, Parud or Saravan and produce a much higher verified toll. The supplied reporting does not establish coordination, command links or an attack plan.

Recommendations

1. Do not present the 94 dead and 33 wounded figure as established. Keep it labelled unverified unless a dated, independently corroborated casualty account supports it.
2. Track the 2 October Yagoubi IED death and 13 October Rahimi clash separately from the September reports of security personnel killed. Record victim identity, affiliation, location and perpetrator attribution as distinct fields.
3. Treat the People's Front of Fighters' responsibility claim as a reported claim, not independent confirmation. Do not assign direct responsibility to Jaish al-Adl without separate evidence.
4. Prioritise independent authentication of the Mount Kala-Pade and Gosht footage, including the identities and affiliations of the people shown. Keep possible Fatemiyoun or IRGC links separate from evidence of Baloch armed-group activity.

Confidence & uncertainty

Overall confidence is high for the narrow, source-scoped conclusion that the supplied record does not validate the headline toll or establish sustained escalation. The record contains two named October deaths and September reports of security personnel deaths, but the October responsibility claim comes from a local-media account and the September accounts rely on low-reliability social media. Confidence in the actual scale, perpetrators and trend remains low because attribution and affiliations are not independently established.

Intelligence gaps

• [EEI 1.1 · PARTIAL] Confirmed number, locations, dates, targets, and methods of attacks attributed to Baloch armed groups in Sistan-Baluchestan during the reporting period. Recommended collection: local media/social media
• [EEI 1.2 · PARTIAL] Verified Iranian military, Islamic Revolutionary Guard Corps, police, border-guard, and civilian fatalities and wounded associated with the attacks. Recommended collection: official statements/local reporting
• [EEI 1.3 · UNCOVERED] Evidence of coordinated or simultaneous attacks across multiple districts, including attacks on bases, checkpoints, patrols, government facilities, or transport routes. Recommended collection: local reporting/geospatial imagery
• [EEI 1.4 · PARTIAL] Use of newly observed weapons, explosives, drones, ambush tactics, or improved command-and-control by the armed groups. Recommended collection: battlefield reporting/video analysis
• [EEI 2.1 · UNCOVERED] Deployment or redeployment of IRGC, army, police, border guards, special forces, armored vehicles, aircraft, or drones to Sistan-Baluchestan. Recommended collection: satellite imagery/local reporting
• [EEI 2.2 · UNCOVERED] New checkpoints, curfews, internet or telecommunications disruptions, road closures, arrests, raids, executions, or other emergency security measures. Recommended collection: local media/social media
• [EEI 2.3 · UNCOVERED] Changes in Iranian control of border crossings, district administrative centers, highways, or key security installations. Recommended collection: geospatial imagery/local reporting
• [EEI 2.4 · UNCOVERED] Verified civilian displacement, civilian casualties, protests, sectarian incidents, or retaliatory violence following security-force operations. Recommended collection: humanitarian reporting/local sources
• [EEI 3.1 · UNCOVERED] Attacks or armed incidents spreading to new districts, major transport corridors, coastal areas, or provinces outside the current southeastern operating area. Recommended collection: incident databases/local reporting
• [EEI 3.2 · PARTIAL] Evidence of cross-border movement, staging areas, weapons transfers, training, or safe-haven activity involving Pakistan, Afghanistan, or other neighboring territory. Recommended collection: border reporting/satellite imagery
• [EEI 3.3 · UNCOVERED] Public claims, intercepted communications, or captured equipment indicating material, financial, intelligence, or operational support from foreign governments or transnational militant networks. Recommended collection: official releases/open-source intelligence

Red cell review: CONCUR

TLP:CLEAR