RH DOSSIER / Claimed-attack front

HAYI / IMCR

Purpose
An identity used to claim attacks on Jewish and Israeli-linked sites and Persian-language media. Public records do not establish a coherent, independent political movement or a separate ideology. [2][3]
Size and reach
Membership unknown. The cited cases describe a European attack network, not a publicly documented standing militia. [2][3]
Why this alignment
The UK attributes direction to Quds Force members; DOJ alleges a front for Kata’ib Hezbollah and other groups. The claimed identity can obscure the organizations behind the attacks. [2][3]
State nexus: Iran
STATE NEXUSIran
REPORTED AREABritain, Belgium, the Netherlands and wider Europe
LATEST CITED RECORD2026-10-12
RH SOURCE REVIEW13 October 2026

01 / STATE RELATIONSHIP

IRGC Quds Force

In July 2026, the UK assessed that Quds Force members almost certainly directed IMCR attacks across Europe.

UK Foreign, Commonwealth & Development Office · 2026-07-13 ↗U.S. Department of Justice · 2026-07-22 ↗UK FCDO and partner governments · 2026-10-12 ↗U.S. District Court / DOJ filing · 2026 ↗

ADDITIONAL CONNECTION / Attributed tasking / front

Kata’ib Hezbollah

DOJ alleges HAYI was a front used by Kata’ib Hezbollah and other organizations in the European attack campaign.

Criminal allegation, not a judicial finding. The map does not infer a Hezbollah (Lebanon) to HAYI command edge.

U.S. Department of Justice · 2026-07-22 ↗
Open connected dossier ↗

02 / CONTEXT IN THE RECORD

What to know

The UK says HAYI claimed the March 2026 arson attack on four Hatzola ambulances in Golders Green, London. Responsibility claims are not treated here as independent proof of who carried out each attack.

UK Foreign, Commonwealth & Development Office · 2026-07-13 ↗

DOJ alleges that the European campaign used HAYI as a front for Kata’ib Hezbollah and other designated groups. The defendant in that case is presumed innocent unless proven guilty.

U.S. Department of Justice · 2026-07-22 ↗

The 12 October joint statement again condemned HAYI-claimed attacks across Europe. It discusses the Fairford incident separately, so no HAYI-to-Fairford edge is drawn.

UK FCDO and partner governments · 2026-10-12 ↗

The U.S. complaint describes HAYI-branded attack claims in Britain, Belgium and the Netherlands, including the London ambulance arson and incidents in Antwerp and the Netherlands. These remain allegations in the filing.

U.S. District Court / DOJ filing · 2026 ↗

Where the evidence stops

Claims of responsibility, intelligence assessments and criminal allegations are separate kinds of evidence. This record does not establish every claimed attack or a judicial finding of guilt.

The cited dates establish the scope of this record. They do not confirm current operational capacity, complete membership or a present-day legal designation.

PUBLIC RECORD

Sources

  1. UK sanctions HAYI / IMCR ↗

    UK Foreign, Commonwealth & Development Office · 2026-07-13

  2. Al-Saadi indictment and alleged HAYI front ↗

    U.S. Department of Justice · 2026-07-22 · Page updated

  3. Joint statement on Iran and HAYI-claimed attacks ↗

    UK FCDO and partner governments · 2026-10-12

  4. Al-Saadi criminal complaint: European incident allegations ↗

    U.S. District Court / DOJ filing · 2026 · Incident allegations, pages 15–19; not court findings