𝐏𝐢𝐫𝐚𝐜𝐲 𝐓𝐡𝐫𝐞𝐚𝐭 𝐏𝐞𝐫𝐬𝐢𝐬𝐭𝐬 𝐀𝐜𝐫𝐨𝐬𝐬 𝐒𝐨𝐦𝐚𝐥𝐢 𝐖𝐚𝐭𝐞𝐫𝐬

𝐏𝐢𝐫𝐚𝐜𝐲 𝐓𝐡𝐫𝐞𝐚𝐭 𝐏𝐞𝐫𝐬𝐢𝐬𝐭𝐬 𝐀𝐜𝐫𝐨𝐬𝐬 𝐒𝐨𝐦𝐚𝐥𝐢 𝐖𝐚𝐭𝐞𝐫𝐬

𝑆𝑒𝑐𝑢𝑟𝑖𝑡𝑦 𝑟𝑒𝑝𝑜𝑟𝑡𝑖𝑛𝑔 𝑖𝑑𝑒𝑛𝑡𝑖𝑓𝑖𝑒𝑠 𝑎𝑡 𝑙𝑒𝑎𝑠𝑡 𝑠𝑖𝑥 𝑝𝑖𝑟𝑎𝑐𝑦-𝑟𝑒𝑙𝑎𝑡𝑒𝑑 𝑖𝑛𝑐𝑖𝑑𝑒𝑛𝑡𝑠 𝑜𝑟 𝑡ℎ𝑟𝑒𝑎𝑡 𝑖𝑛𝑑𝑖𝑐𝑎𝑡𝑜𝑟𝑠 𝑏𝑒𝑡𝑤𝑒𝑒𝑛 𝐽𝑎𝑛𝑢𝑎𝑟𝑦 𝑎𝑛𝑑 𝐽𝑢𝑙𝑦 2026, ℎ𝑖𝑔ℎ𝑙𝑖𝑔ℎ𝑡𝑖𝑛𝑔 𝑐𝑜𝑛𝑡𝑖𝑛𝑢𝑖𝑛𝑔 𝑟𝑖𝑠𝑘𝑠 𝑡𝑜 𝑣𝑒𝑠𝑠𝑒𝑙𝑠 𝑎𝑛𝑑 𝑐𝑟𝑒𝑤𝑠.

𝗢𝗻 𝗝𝘂𝗹𝘆 𝟮𝟮, 𝟮𝟬𝟮𝟲, maritime-security information reviewed by Through Horn Investigative Files indicates that Somali piracy remained a credible threat in Somali waters and nearby maritime routes between 1 January and 21 July 2026.

At least six incidents or threat indicators were recorded during this period. They included reported attacks, vessel hijackings, and suspected plans to target commercial and fishing vessels. Available information also suggests that four hijacking cases may remain unresolved, with crew members reportedly being held in coastal areas associated with the Bari and Mudug regions. These claims have not been responded to by the Somali government and Puntland state.

𝗢𝗿𝗴𝗮𝗻𝗶𝘇𝗲𝗱 𝗣𝗶𝗿𝗮𝗰𝘆 𝗔𝗰𝘁𝗶𝘃𝗶𝘁𝘆

Available reporting suggests that some incidents may involve organized criminal networks with the intent and operational capability to monitor vessel movements, identify potential targets and coordinate maritime operations.

Suspected piracy groups may be exploiting gaps in coastal surveillance, maritime patrol coverage and regional intelligence sharing. Reporting also indicates possible activity across multiple maritime jurisdictions, including waters between Somalia and Yemen.

The reported incidents carry different confidence and verification levels. Some were recorded as completed hijackings, while others involved indications of planned attacks. Through Horn Investigative Files holds additional information concerning individuals allegedly involved, including names, clan affiliations, contact details, and photographs. This sensitive material has not been published because disclosure could endanger individuals, compromise investigations, violate privacy and interfere with ongoing security operations.

𝗥𝗲𝗽𝗼𝗿𝘁𝗲𝗱 𝗜𝗻𝗰𝗶𝗱𝗲𝗻𝘁𝘀

1. 𝑱𝒂𝒏𝒖𝒂𝒓𝒚 1, 2026: 𝑨𝒕𝒕𝒂𝒄𝒌 𝒐𝒏 𝑪𝒉𝒊𝒏𝒆𝒔𝒆-𝒇𝒍𝒂𝒈𝒈𝒆𝒅 𝒇𝒊𝒔𝒉𝒊𝒏𝒈 𝒗𝒆𝒔𝒔𝒆𝒍

Armed individuals reportedly attacked the Chinese-flagged fishing vessel Liao Dong Yu 578 near Kulule in Bandarbeyla District, Karkaar Region. The incident reportedly occurred at approximately 10 p.m. East African Time.

2. 𝗙𝗲𝗯𝗿𝘂𝗮𝗿𝘆 𝟭, 𝟮𝟬𝟮𝟲: 𝗙𝗶𝘀𝗵𝗶𝗻𝗴 𝘃𝗲𝘀𝘀𝗲𝗹𝘀 𝗿𝗲𝗽𝗼𝗿𝘁𝗲𝗱𝗹𝘆 𝘁𝗮𝗿𝗴𝗲𝘁𝗲𝗱

Security information indicated possible preparations to target Iranian-owned fishing vessels operating in the Red Sea and Indian Ocean. The suspected activity was associated with Bandarbeyla District in the Karkaar Region.

3. 𝗠𝗮𝗿𝗰𝗵 𝟭𝟲 𝟮𝟬𝟮𝟲: 𝗥𝗲𝗽𝗼𝗿𝘁𝗲𝗱 𝗵𝗶𝗷𝗮𝗰𝗸𝗶𝗻𝗴 𝗼𝗳 𝗠𝗩 𝗦𝗪𝗔𝗥𝗗

The MV SWARD was reportedly hijacked near the Dhinowda–Dhigdhig coastal area of the Mudug Region. Reporting attributed the incident to a coordinated piracy group operating from the Mudug coastline.

4. 𝗔𝗽𝗿𝗶𝗹 𝟮𝟭 𝟮𝟬𝟮𝟲: 𝗥𝗲𝗽𝗼𝗿𝘁𝗲𝗱 𝗵𝗶𝗷𝗮𝗰𝗸𝗶𝗻𝗴 𝗼𝗳 𝗠𝗧 𝗛𝗢𝗡𝗢𝗨𝗥 𝟮𝟱

The MT HONOUR 25 was reportedly seized near Kulule in the Bari Region. Available reporting linked the incident to a suspected piracy network operating from northeastern Somalia.

5. 𝗠𝗮𝘆 𝟮 𝟮𝟬𝟮𝟲: 𝗥𝗲𝗽𝗼𝗿𝘁𝗲𝗱 𝗵𝗶𝗷𝗮𝗰𝗸𝗶𝗻𝗴 𝗼𝗳 𝗠/𝗧 𝗘𝗨𝗥𝗘𝗞𝗔

The M/T EUREKA was reportedly hijacked near Gumbax in the Bari Region. The operation was believed to have originated from the Puntland coastline.

6. 𝗝𝘂𝗹𝘆 𝟭𝟳, 𝟮𝟬𝟮𝟲: 𝗥𝗲𝗽𝗼𝗿𝘁𝗲𝗱 𝗵𝗶𝗷𝗮𝗰𝗸𝗶𝗻𝗴 𝗼𝗳 𝗠𝗩 𝗔𝘀𝗮𝗻

The MV Asan was reportedly hijacked approximately 120 nautical miles off Hadhramaut, Yemen. Initial reporting suggested possible links to piracy activity operating across maritime approaches associated with Mukalla and the Mudug coastline. This assessment requires further corroboration.

𝐌𝐚𝐫𝐢𝐭𝐢𝐦𝐞 𝐓𝐡𝐫𝐞𝐚𝐭 𝐀𝐬𝐬𝐞𝐬𝐬𝐦𝐞𝐧𝐭

The reported incidents indicate recurring piracy activity around the Bari, Karkaar, and Mudug coastal areas. They also suggest the possible expansion of the threat into wider regional maritime routes.

Common threat indicators include suspected monitoring of vessel movements, coordinated vessel seizures, the use of coastal areas for operational support, and the exploitation of limited surveillance coverage.

These patterns suggest that some piracy operations may be organized rather than purely opportunistic. However, additional intelligence and multi-source verification are needed to determine the structure, leadership, and operational reach of the suspected networks.

𝐈𝐦𝐩𝐚𝐜𝐭 𝐨𝐧 𝐌𝐚𝐫𝐢𝐭𝐢𝐦𝐞 𝐎𝐩𝐞𝐫𝐚𝐭𝐢𝐨𝐧𝐬

Piracy threatens crew safety, freedom of navigation, and the continuity of commercial operations. It can also disrupt fishing activity, delay vessel movements, and increase insurance and transportation costs.

Somalia’s coastal communities are particularly vulnerable because many households depend on fishing, port services, and maritime transport. A decline in maritime security can therefore affect local livelihoods, regional commerce, and economic stability.

𝐒𝐭𝐫𝐞𝐧𝐠𝐭𝐡𝐞𝐧𝐢𝐧𝐠 𝐌𝐚𝐫𝐢𝐭𝐢𝐦𝐞 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲

Counter-piracy measures should prioritize early warning, coastal surveillance, incident verification, and rapid intelligence sharing.

Vessel operators should maintain reliable communications, provide crews with updated security briefings, and report suspicious activity through recognized maritime-security channels. Authorities should strengthen coordination with coastal communities, fishing organizations, and regional security partners.

Information should be classified accurately as confirmed, credible but unverified, suspected, or under assessment. Sensitive personal and operational details should not be published when disclosure could endanger individuals or compromise security operations.

𝐎𝐮𝐭𝐥𝐨𝐨𝐤

Piracy is likely to remain an active maritime security concern in Somali waters and neighboring sea routes. Suspected piracy networks may retain the intent and capability to conduct coordinated operations, particularly in areas with limited surveillance and enforcement coverage.

Protecting Somalia’s maritime domain will require credible intelligence, continuous threat monitoring, and sustained cooperation among Somali authorities, coastal communities, vessel operators, and international partners.

𝐍𝐎𝐓𝐄: 𝑇ℎ𝑖𝑠 𝑎𝑟𝑡𝑖𝑐𝑙𝑒 𝑖𝑠 𝑏𝑎𝑠𝑒𝑑 𝑜𝑛 𝑠𝑒𝑐𝑢𝑟𝑖𝑡𝑦 𝑖𝑛𝑓𝑜𝑟𝑚𝑎𝑡𝑖𝑜𝑛 𝑟𝑒𝑣𝑖𝑒𝑤𝑒𝑑 𝑏𝑦 𝑇ℎ𝑟𝑜𝑢𝑔ℎ 𝐻𝑜𝑟𝑛 𝐼𝑛𝑣𝑒𝑠𝑡𝑖𝑔𝑎𝑡𝑖𝑣𝑒 𝐹𝑖𝑙𝑒𝑠. 𝑅𝑒𝑙𝑒𝑣𝑎𝑛𝑡 𝑔𝑜𝑣𝑒𝑟𝑛𝑚𝑒𝑛𝑡 𝑎𝑔𝑒𝑛𝑐𝑖𝑒𝑠, 𝑚𝑎𝑟𝑖𝑡𝑖𝑚𝑒-𝑠𝑒𝑐𝑢𝑟𝑖𝑡𝑦 𝑜𝑟𝑔𝑎𝑛𝑖𝑧𝑎𝑡𝑖𝑜𝑛𝑠 𝑎𝑛𝑑 𝑜𝑡ℎ𝑒𝑟 𝑎𝑢𝑡ℎ𝑜𝑟𝑖𝑧𝑒𝑑 𝑠𝑡𝑎𝑘𝑒ℎ𝑜𝑙𝑑𝑒𝑟𝑠 𝑚𝑎𝑦 𝑐𝑜𝑛𝑡𝑎𝑐𝑡 𝑢𝑠 𝑡𝑜 𝑑𝑖𝑠𝑐𝑢𝑠𝑠 𝑡ℎ𝑒 𝑟𝑒𝑝𝑜𝑟𝑡𝑖𝑛𝑔 𝑜𝑟 𝑟𝑒𝑞𝑢𝑒𝑠𝑡 𝑓𝑢𝑟𝑡ℎ𝑒𝑟 𝑐𝑙𝑎𝑟𝑖𝑓𝑖𝑐𝑎𝑡𝑖𝑜𝑛, 𝑠𝑢𝑏𝑗𝑒𝑐𝑡 𝑡𝑜 𝑐𝑜𝑛𝑓𝑖𝑑𝑒𝑛𝑡𝑖𝑎𝑙𝑖𝑡𝑦, 𝑣𝑒𝑟𝑖𝑓𝑖𝑐𝑎𝑡𝑖𝑜𝑛 𝑎𝑛𝑑 𝑖𝑛𝑓𝑜𝑟𝑚𝑎𝑡𝑖𝑜𝑛-𝑝𝑟𝑜𝑡𝑒𝑐𝑡𝑖𝑜𝑛 𝑟𝑒𝑞𝑢𝑖𝑟𝑒𝑚𝑒𝑛𝑡𝑠.

𝐇𝐨𝐫𝐧 𝐈𝐧𝐯𝐞𝐬𝐭𝐢𝐠𝐚𝐭𝐢𝐯𝐞 𝐅𝐢𝐥𝐞𝐬 – 𝐃𝐞𝐬𝐤. 𝐈𝐧𝐟𝐨@𝐡𝐢𝐟𝐢𝐥𝐞𝐬.𝐨𝐫𝐠