TLP:CLEAR · Disclosure is not limited.

West Africa: H1 2026 jihadist surge, Mali offensive and Niger airport strikes elevate regional risk

Time window: Last 1 day · Audience: General analyst · Type: Situation report · DTG: 2026-07-12 14:42Z · Overall confidence: MEDIUM

BLUF

Jihadist violence very likely surged across West Africa in H1 2026, with 624 armed attacks in Burkina Faso, Mali, Niger and Nigeria and Jama’at Nusrat al‑Islam wal‑Muslimin (JNIM) responsible for most of them. High‑profile strikes on Niamey’s international airport and a large coordinated offensive in Mali point to rising capability and intent as groups seek to expand beyond traditional strongholds, keeping Côte d’Ivoire at elevated risk.

Executive summary

Reporting indicates a sharp escalation in jihadist activity across West Africa in the first half of 2026: 624 armed attacks were recorded across Burkina Faso, Mali, Niger and Nigeria. Burkina Faso saw 264 attacks, Mali 181, Niger 82 and Nigeria 97. JNIM remains the dominant actor, responsible for 421 of the 624 attacks, including 253 in Burkina Faso and 146 in Mali, while ISWAP claimed 73 attacks in Nigeria. Separately, Niger’s Diori Hamani International Airport in Niamey was attacked twice in under six months in 2026, first by ISIS, Sahel Province on 29 January and then by JNIM on 18 June, underscoring pressure on a dual‑use civilian and key air command complex. In Mali, coordinated JNIM, FLA operations on 25 April 2026 spanned multiple cities and were described as the largest offensive since 2012, amid contested attributions that also reference IS, Sahel activity. Beyond the Sahel core, authorities in Morocco dismantled a cell linked to ISIS in the African Sahel and the United States continues to flag terrorist risk in Côte d’Ivoire alongside movement restrictions for its personnel. These developments point to sustained operational tempo in the Sahel and widening exposure in adjacent states.

Change from previous assessment

Since the 10 July brief, new high‑confidence reporting quantifies a surge of 624 armed attacks across Burkina Faso, Mali, Niger and Nigeria in H1 2026 and attributes most to JNIM. Additional reporting details two 2026 attacks on Niamey’s international airport and describes a large, coordinated offensive across Mali on 25 April. Côte d’Ivoire remains under U.S. movement restrictions and terrorism risk advisories, but the analytic picture now includes multi‑country attack data and strategic‑node targeting, raising our assessment of regional threat tempo. Initial assessment of this topic’s broader regional dynamics is expanded and confidence is raised for the surge judgment; uncertainty remains around contested attributions in Mali.

Key judgments

1. Jihadist violence very likely surged across West Africa in H1 2026: 624 armed attacks were recorded across Burkina Faso, Mali, Niger and Nigeria, with JNIM responsible for 421 of those incidents and ISWAP claiming 73 in Nigeria. (Confidence: high · REPORTED)

• I&W: By end-September 2026, cumulative Burkina Faso attack totals exceed 300, keeping pace with or above the H1 trend. (1-3 months)
• I&W: Two consecutive months with fewer than 20 recorded or claimed attacks in both Burkina Faso and Mali. (1-3 months)

2. Jihadist organisations are likely seeking to expand activity beyond traditional strongholds in Niger, Mali and Burkina Faso, evidenced by reporting on expansion efforts, a Morocco-led takedown of an ISIS Sahel-linked cell, and continued U.S. advisories flagging terrorist risk in Côte d’Ivoire. (Confidence: medium · ASSESSED)

• I&W: Public claims or arrests of JNIM or ISIS, Sahel operatives linked to plotting or logistics on Ivorian territory, or additional Morocco announcements dismantling Sahel-directed cells. (0-14 days)
• I&W: U.S. threat posture for Côte d’Ivoire is lowered or movement restrictions for official travel are eased. (1-3 months)

3. Niger likely faces sustained multi‑front pressure: Niamey’s Diori Hamani International Airport was attacked on 29 January 2026 by ISIS, Sahel Province and on 18 June 2026 by JNIM, targeting a facility that hosts both civilian and key air command functions. (Confidence: medium · ASSESSED)

• I&W: Further attempted strikes, IEDs, or indirect fire events against Niamey airport or its support infrastructure. (0-14 days)
• I&W: Publicised dismantling of the cells behind the January and June attacks followed by a 90‑day lull in attacks on strategic sites in Niamey. (1-3 months)

4. JNIM is likely the principal driver of escalation in Mali, with coordinated operations on 25 April 2026 across Gao, Sévaré, Kidal, Mopti, Mamaribougou and Bamako described as the largest offensive since 2012; contested attributions indicate FLA claims in Bamako and reporting that IS, Sahel also acted under cover. Reporting also attributes the killing of Defence Minister Sadio Camara in Kati on 25 April to JNIM. (Confidence: medium · ASSESSED)

• I&W: New JNIM or FLA multi‑city operations within Mali, striking two or more urban centres within a single 72‑hour period. (0-14 days)
• I&W: Malian authorities re‑establish control in Kidal and maintain incident levels below pre‑25 April trends for at least 60 days. (1-3 months)

5. Côte d’Ivoire remains at elevated security risk, reflected in U.S. movement restrictions for official personnel, advisories urging similar precautions for U.S. citizens, and warnings of terrorist violence; maritime threats to shipping off Côte d’Ivoire add exposure. (Confidence: high · REPORTED)

• I&W: Host‑nation or partner advisories further tighten travel or curfew measures in northern or coastal areas of Côte d’Ivoire. (0-14 days)
• I&W: U.S. advisory downgrades risk level or rescinds convoy and night‑driving restrictions. (1-3 months)

Outlook & scenarios

High‑tempo Sahel violence persists with incremental outward pressure (60%)

Attack rates across Burkina Faso, Mali, Niger and Nigeria remain at or above H1 2026 levels, with JNIM continuing to claim the majority. Networks probe beyond the Sahel core, signalled by additional disruptions of ISIS Sahel‑linked cells in the Maghreb and continued high threat posture for Côte d’Ivoire. This sustains cross‑border insecurity and complicates regional stabilisation efforts.

Escalation against strategic nodes in Niger and Mali (40%)

JNIM, and to a lesser extent ISIS, Sahel, prioritise strikes on strategic targets such as Niamey’s airport and urban centres across Mali, replicating 25 April‑style coordinated operations. Pressure on Niger’s capital intensifies as groups seek symbolic and operational effects that outpace security force adaptations.

Disruption of external nodes slows expansion attempts (30%)

Regional services replicate Morocco’s dismantling of an ISIS Sahel‑linked cell, degrading facilitation networks outside the Sahel. Attack rates plateau or dip modestly while core theatres remain violent, and coastal exposure in Côte d’Ivoire stabilises at current advisory levels.

Recommendations

1. Maintain a running, source‑documented tracker of H1 2026 attack counts and group attributions for Burkina Faso, Mali, Niger and Nigeria, updating monthly to flag any acceleration or deceleration against the 624‑attack baseline.
2. Task OSINT collection to monitor and archive official or semi‑official communiqués from JNIM and ISWAP for claims in Burkina Faso, Mali and Nigeria, with rapid cross‑checks against reported incidents for attribution accuracy.
3. Map and monitor critical nodes in Niger, prioritising Niamey’s Diori Hamani International Airport and adjacent military facilities, and set alerts for any reports of indirect fire, IED placements or attempted incursions.
4. For Côte d’Ivoire, align field movements and programme planning with current U.S. advisory constraints; pre‑identify alternate routing and schedule windows that comply with no‑night‑driving and convoy requirements.
5. Engage liaison channels to collect on arrests or disruptions of Sahel‑linked cells in Morocco and other partner states, using these as early indicators of outward expansion or its disruption.
6. Prepare a concise leadership brief with contingency branches for: a) renewed multi‑city attacks in Mali; b) another strategic‑node strike in Niamey; and c) any credible plot indicators in Côte d’Ivoire, including recommended posture adjustments for each.

Confidence & uncertainty

Overall confidence is medium. The surge in attacks and distribution by country and group is drawn from multiple, mutually reinforcing high‑confidence reports that align on totals and attributions to JNIM and ISWAP. Assessments on Niger’s multi‑front pressure and the significance of the Niamey airport attacks rely on think‑tank reporting with moderate reliability, which tempers confidence. Reporting on Mali’s 25 April offensive is detailed but includes contested attributions among JNIM, FLA and ISIS, Sahel, introducing uncertainty. Expansion beyond core Sahel states is supported by a single expansion report, a Morocco cell takedown and U.S. advisories for Côte d’Ivoire, which together suggest intent but not a fully proven geographic spread.

Alternative analysis (red cell)

Reported incident counts and individual events indicate substantial violent activity in West Africa in H1 2026, but the available claims do not establish an upward trend or unambiguous group-level responsibility across the region. Isolated takedowns and advisories are compatible with either nascent expansion attempts or precautionary responses and do not by themselves demonstrate sustained geographic growth of jihadist operational footprints; for Niger and Mali, attributions for high-profile attacks and the primacy of any single actor remain contested and require higher-admiralty corroboration.

Intelligence gaps

• [EEI 1.2 · PARTIAL] Observed movement of armed groups, armed convoys, or weapons caches toward or within 20–100 km of named population centers, military bases, border crossing points, or major road/rail routes. Recommended collection: IMINT
• [EEI 1.3 · PARTIAL] Recent local reporting, social‑media posts, or detainee/source statements claiming operational readiness, recruitment of attack teams, or calls for immediate attacks against specific targets. Recommended collection: OSINT
• [EEI 2.1 · UNCOVERED] Estimated numbers of fighters (by group) present in defined districts/regions and recent trends (increasing, stable, decreasing) based on ground reports, detainee statements, or biometric registration. Recommended collection: HUMINT
• [EEI 2.2 · UNCOVERED] Identification and geolocation of training camps, safe havens, or arms depots, including imagery of training activity, firing ranges, or stockpiled weapons and explosives. Recommended collection: IMINT
• [EEI 2.4 · PARTIAL] Reports of foreign fighter arrivals/departures, external trainers or advisors present, or documented external technical assistance (IED construction, communications encryption) to named groups. Recommended collection: SIGINT
• [EEI 3.1 · UNCOVERED] Documented instances and amounts of extortion/taxation on towns, markets, transporters, or humanitarian agencies, including receipts, lists of taxed goods, and affected road segments. Recommended collection: HUMINT
• [EEI 3.3 · PARTIAL] Financial intelligence on suspicious cross‑border transfers, known money‑courier movements, or identified donor networks linked to named groups, including remittance patterns and intermediary accounts. Recommended collection: FININT
• [EEI 4.1 · PARTIAL] Changes in government/security force posture: troop deployments/withdrawals by unit and location, declared states of emergency, curfews, checkpoints established or removed, and equipment transfers/arrivals. Recommended collection: OSINT
• [EEI 4.2 · PARTIAL] Evidence of improved or degraded cross‑border security cooperation: joint patrols, information‑sharing agreements, troop movements across borders, or closing/opening of border crossings. Recommended collection: HUMINT
• [EEI 4.4 · PARTIAL] Documented incidents of security‑force abuses or communal reprisals (dates, locations, victims), and reports of local grievances exploited by jihadist recruiters. Recommended collection: LAW_ENFORCEMENT

Cited sources

[1] The Brown Land News · 624 Attacks in 6 Months in West Africa: How Are Armed Groups Redrawing the Security Map? - The Brown Land News (B) · sha256:33587c04ab48 [2] independentarabia.com · شمال أفريقيا في مرمى ارتدادات الحرب المفتوحة بالساحل (B) · sha256:fff2ff53a257 [3] U.S. Department of State · Cote d’Ivoire Travel Advisory | Travel.State.gov (A) · sha256:dfea756cf67c [4] ecss.com.eg · تحولات مكافحة الإرهاب في النيجر (C) · sha256:09c4696aeeba [5] Wikipedia · 2026 Mali offensives (B) · sha256:23eaae2b4f04

Source content hashes were computed at collection time; the cited text is preserved unmodified for the life of this product.

Red cell review: PARTIAL DISSENT

TLP:CLEAR