2.1.4. Security incidents

Between 1 October 2025 and 31 May 2026, ACLED recorded 513 security incidents in Aleppo governorate. Of these, 255 were coded as explosions/remote violence, 157 as battles, and 101 as incidents of violence against civilians. The majority of the incidents occurred in January 2026 (238 incidents). An analysis of ACLED data for the period since the fall of Bashar Al-Assad, from 9 December 2024 to 31 May 2026, indicates two peaks in security incidents in the governorate: January 2025, with 353 incidents, and January 2026 with 238 incidents. More than half of the incidents of the first peak were due to a military escalation between the Turkish and Türkiye-backed forces and the SDF.484 In comparison, the second peak occurred during the takeover of SDF-controlled areas in Aleppo by the Syrian transitional government.485 Between April and December 2025, the monthly number of recorded security incidents remained below 100 and between February and May 2026, the monthly number of incidents remained below 40.486

During the reference period, ACLED recorded security incidents in all eight districts of Aleppo governorate. The highest number was documented in Ain Al-Arab (154 incidents), followed by Jebel Saman district, which includes Aleppo City (150 incidents), and Menbij (90 incidents). These were also the three districts with the highest number of incidents recorded in the governorate since the fall of Bashar al-Assad. By contrast, the lowest number of incidents was recorded in Jarablus district, with six incidents.

According to ACLED data, the military forces of Syria and the SDF were the main actors involved in security incidents during the reference period, with the SDF appearing in around 50 % of all recorded incidents, either coded as Actor 1 or Actor 2, and the Syrian military forces in around 45 %. Unidentified armed groups were additionally linked to approximately 28 % of incidents. A comparison between the current reference period and the overall security situation since 9 December 2024 suggests that the military forces of Türkiye no longer featured as a major actor in security incidents in the governorate. 19 of all recorded security incidents during the reference period were linked to ISIL; all but three of these were coded as battles.

101 security incidents during the reporting period were coded as ‘violence against civilians’, 43 of which involved unidentified armed groups. 24 incidents involved the SDF and their internal security forces (Asayish), 17 the military forces of Syria and 7 the police forces of Syria.488