UK Raises Terror Threat Level and Warns of Likely Attack Within Six Months After London Stabbing

On the morning of April 29, 2026, a 45-year-old man armed with a knife attacked two Jewish men near a synagogue in Golders Green, north London. Shloime Rand, 34, and Moshe Shine, 76, were stabbed in broad daylight in what the Metropolitan Police declared a terrorist incident [1]. Within 24 hours, the Joint Terrorism Analysis Centre (JTAC) raised the UK's national terror threat level from "substantial" to "severe" — meaning an attack is assessed as "highly likely" within six months [2]. The government declared an antisemitism emergency and pledged tens of millions of pounds in additional security funding [3].

The attack was not an isolated event. It followed weeks of arson attacks on synagogues and Jewish community buildings across London, a Yom Kippur attack in Manchester in October 2025 that killed two people, and a sustained surge in antisemitic incidents that began after October 7, 2023 [3]. The suspect, Essa Suleiman, a British national born in Somalia, had a prior conviction for stabbing a police officer and had been referred to the government's Prevent counter-extremism programme in 2020 — a referral that was closed the same year [4][5].

How Threat Levels Are Set — and What 'Severe' Actually Means

JTAC, founded in 2003 and housed within MI5, is staffed by personnel drawn from the Security Service, Secret Intelligence Service (MI6), GCHQ, Defence Intelligence, Counter Terrorism Policing, and six other government departments [6]. Its assessments are based on fragmented intelligence about active terrorist plotting, capabilities of known actors, and comparison with attack patterns in other countries [7].

The five-tier system ranges from "low" (attack unlikely) to "critical" (attack imminent). "Severe," the second-highest level, means an attack is "highly likely" — defined since 2019 as likely within six months [7]. Home Secretary Shabana Mahmood stated that the increase "was not based solely on the Golders Green attack" but reflected "a broader rise in Islamist and Extreme Right Wing terrorist threats from individuals and small groups based in the UK" as well as "increased state-linked physical threats encouraging violence against the Jewish community" [2].

No specific intelligence was cited in the public announcement — consistent with standard practice, as JTAC does not disclose the classified material underlying its assessments [2].

Source: MI5 / Wikipedia

Data as of Apr 30, 2026CSV

Since the system became public in 2006, the UK has spent the majority of time at "severe." The "critical" designation has been activated only four times: August 2006 (transatlantic bomb plot), June 2007 (Glasgow airport attack), May 2017 (Manchester Arena bombing), and September 2017 (Parsons Green bombing) [8]. Each "critical" period lasted only days before reverting to "severe." The level was lowered to "substantial" in November 2019, briefly raised to "severe" again in November 2021 after the murder of MP David Amess and a Liverpool hospital car explosion, then lowered back to "substantial" in February 2022 [8]. The current return to "severe" is the first since then.

The Scale of Antisemitic Violence in the UK

The Community Security Trust (CST), the UK's primary tracker of antisemitic incidents, recorded 3,700 incidents in 2025 — the second-highest annual total in its history [9]. This was a 4% increase over the 3,556 incidents in 2024 and 14% below the record of 4,298 set in 2023 [9]. Monthly averages now stand at 308 incidents, exactly double the 154-per-month average recorded before Hamas's October 7, 2023 attack on Israel [9].

Source: Community Security Trust

Data as of Feb 11, 2026CSV

Prior to October 2023, annual totals had fluctuated between roughly 1,600 and 2,300 incidents. The 2023 spike represented an increase of approximately 159% over 2022 [9][10].

International Comparison

Per-capita comparisons show the problem extends across Western democracies but at different intensities. In 2023, Germany recorded more than 38 antisemitic incidents per 1,000 Jewish residents, while the UK followed with approximately 13 per 1,000 [11]. France, with a Jewish population of roughly 440,000, saw incidents nearly quadruple from 436 in 2022 to 1,676 in 2023 — making French Jews approximately three times more likely than American Jews to experience an antisemitic incident on a per-capita basis [11]. In the United States, total incidents more than doubled from 3,697 in 2022 to 7,523 in 2023 [11].

The proportion of UK antisemitic incidents resulting in prosecution remains low. While the government reported a 113% increase in antisemitic hate crimes in the year to March 2024, police capacity to investigate and prosecute such cases has not grown proportionally [12].

Counter-Terrorism Resources: Funding and Gaps

Counter-terrorism policing in England and Wales received up to £1,018 million in the year ending March 2025 — a nominal decrease of 0.3% from the previous year and a real-terms reduction of £12 million [13]. For 2025-26, the government increased funding to £1.2 billion, though £140 million of that increase was earmarked to cover employer National Insurance contribution changes rather than operational expansion [13].

Since 2016, counter-terrorism funding has grown by approximately £454 million in nominal terms [13]. However, critics have pointed to earlier austerity-era cuts as having weakened the UK's security infrastructure. Between 2010 and 2016, overall police budgets were reduced by roughly 18% in real terms under then-Home Secretary Theresa May's oversight — a period that preceded the 2017 Manchester Arena and London Bridge attacks [14]. The 2017 attacks prompted a significant funding increase, but the intervening cuts had already reduced officer headcount by approximately 20,000 across England and Wales [14].

In response to the Golders Green attack, the government pledged an additional £25 million for Jewish community security, bringing total community security funding for the year to £58 million [3][15].

The Cost to Jewish Communities

The psychological and economic toll on British Jews has been documented in stark terms. Chief Rabbi Ephraim Mirvis said after the Golders Green attack: "I'm sad to say that today's event proves that if you are visibly Jewish, you're not safe" [16]. Prime Minister Keir Starmer acknowledged that attacks have left Jewish people "scared to show who they are in their community," including by attending synagogues, schools, or universities [3].

Security at the doors of Jewish community institutions is now, in Starmer's words, "part of what it means to be Jewish in Britain" [3]. The CST operates a volunteer security network that provides protection at synagogues, schools, and community centres — a service that Jewish communities in the UK have come to treat as a baseline necessity rather than an emergency measure [9].

The economic burden is substantial. Jewish schools, synagogues, and community centres now operate with permanent security infrastructure including CCTV, access control systems, and trained guards. The government's £58 million allocation covers only a portion of total security costs, with communities themselves funding much of the remainder [15].

Approximately 100 protesters heckled Starmer during his visit to Golders Green after the attack, holding signs reading "Keir Starmer, Jew harmer" — reflecting a perception among some in the community that government action has been too slow and too reactive [3].

The Six-Month Window: Actuarial Assessment or Intelligence-Based Warning?

The "highly likely within six months" formulation attached to the "severe" threat level is a standing definition introduced in 2019, not a bespoke assessment generated for this specific threat [7][17]. Before 2019, "severe" simply meant an attack was "highly likely" with no time horizon specified. The addition of a six-month window was intended to make the system more precise and actionable for security planners [17].

This means the six-month language is a standardized category label, not a claim based on specific intelligence about a particular plot. When JTAC raises the level to "severe," it is saying that the overall threat environment meets the criteria for that category — not that it has identified a specific attack planned within six months.

The track record of the system's predictive value is mixed. The threat level was lowered to "substantial" in May 2005 — six weeks before the July 7 London bombings that killed 52 people [8]. The Parliamentary Intelligence and Security Committee later concluded the decision to lower the level was "not unreasonable" given available intelligence, but the episode illustrates that threat assessments operate with incomplete information [8].

Conversely, the level remained at "severe" for long periods — including roughly 2014 to 2019 — during which several major attacks did occur (Westminster Bridge, London Bridge, Manchester Arena, Finsbury Park), suggesting the assessment was broadly calibrated during that stretch [8].

Does Raising the Threat Level Do More Harm Than Good?

This question divides terrorism researchers and security practitioners.

The Case for Public Alerts

Security officials argue that raising the threat level triggers concrete operational responses: increased police patrols at vulnerable sites, activation of protective security measures at transport hubs and public venues, and heightened vigilance among first responders and private security personnel [2][17]. Counter Terrorism Policing issued a statement after the April 30 increase calling on the public and businesses to remain alert and report suspicious activity [17].

The Metropolitan Police expanded its Project Servator programme — deploying plainclothes and uniformed officers in unpredictable patterns designed to deter attack planning — and increased visible armed patrols around synagogues and Jewish schools [2].

The Case Against

Academic research on the deterrent effect of public threat announcements is limited and inconclusive. Several studies have found that extensive media coverage of terrorist attacks can produce a "contagion" or copycat effect, particularly in far-right extremist networks where online communities actively celebrate and emulate prior attacks [18]. The Royal United Services Institute (RUSI) has noted that "overemphasising the threat of terrorism amplifies its negative impact and may inadvertently advance terrorist objectives" by increasing public fear — the primary currency of terrorism [19].

There is also evidence that threat announcements can trigger backlash against Muslim communities. Previous threat level increases have been followed by spikes in anti-Muslim hate incidents, creating a secondary victimisation pattern [18]. The Iran-linked group that claimed responsibility for the Golders Green attack — Harakat Ashab al-Yamin al-Islamia — may have sought precisely this kind of communal polarisation [1][4].

Some critics have argued that threat level changes serve political as well as security functions, allowing governments to demonstrate responsiveness without necessarily improving protection. The JTAC is formally independent from ministers, but the decision to publicise threat changes remains a government communication choice [6][8].

Prevent: The Programme That Saw Suleiman and Let Him Go

The revelation that Essa Suleiman had been referred to Prevent in 2020 — with the referral closed the same year — has focused scrutiny on the programme's capacity to track and intervene with individuals who pose long-term risks [4][5].

In the year ending March 2025, Prevent received 8,778 referrals, up from 6,922 the previous year [20]. Of these, 1,798 (21%) were for extreme right-wing concerns — a 37% increase from the prior year — while 870 (10%) were for Islamist extremism [20]. The remaining 70% fell into mixed, unclear, or other categories.

Source: UK Home Office

Data as of Nov 12, 2025CSV

The programme has faced persistent criticism from multiple directions. William Shawcross's 2023 independent review found that Prevent had been too focused on right-wing extremism at the expense of Islamist threats [21]. Critics from civil liberties organisations have argued the opposite — that the programme disproportionately surveils Muslim communities and has a chilling effect on free speech [21]. Both sides agree on one point: the programme's capacity to track online radicalisation remains limited.

A new Prevent Assessment Framework was introduced in September 2024 to strengthen decision-making consistency, and an Independent Prevent Commissioner was appointed in December 2024 [20]. In September 2025, the Home Office issued updated guidance clarifying referral thresholds [20]. Whether these reforms would have changed the outcome in Suleiman's case — where a referral was made and closed six years before the attack — remains an open question.

Legal Powers and Civil Liberties Constraints

The government's response to the Golders Green attack has included proposals to fast-track legislation allowing individuals acting as proxies of state-sponsored groups to be investigated and prosecuted under the National Security Act [22]. The legislation is expected in the King's Speech on May 13 [22]. Home Secretary Mahmood also signalled she would consider proscribing the Islamic Revolutionary Guard Corps (IRGC), though she said it would be "inappropriate to confirm such a move before the laws are on the statute books" [22].

Existing counter-terrorism powers include stop-and-search authority under Section 44 of the Terrorism Act 2000, pre-charge detention of up to 14 days (reduced from 28 days in 2011), and bulk surveillance capabilities under the Investigatory Powers Act 2016 [23][24].

Stop-and-search use has declined substantially, from 1,052 stops in 2011 to just 204 in 2023 [23]. Civil liberties advocates, including Liberty, have challenged the Investigatory Powers Act in court, arguing that bulk data collection and weakened "double-lock" warrant safeguards represent disproportionate interference with privacy and free expression [24].

Security officials have argued that expanded pre-charge detention and wider surveillance authority might have helped in the Suleiman case — allowing longer investigation of the 2020 Prevent referral or monitoring of his activities after release from his prior prison sentence [23]. Civil liberties groups counter that such expansions would affect thousands of innocent people for each genuine threat identified, and that the existing legal framework already provides extensive investigative powers that were not fully used in this case [24].

Jonathan Hall KC, the Independent Reviewer of Terrorism Legislation, has been examining the balance between security powers and civil liberties since his appointment in 2019. His most recent report noted the challenge of legislating against threats that blend state sponsorship with individual radicalisation — precisely the pattern alleged in the Golders Green attack [23].

What Comes Next

The Golders Green attack sits at the intersection of several overlapping crises: a sustained increase in antisemitic violence, the challenge of state-linked terrorism, failures in the Prevent pipeline, and long-running debates over the appropriate scope of counter-terrorism powers.

The government's immediate response — raising the threat level, pledging additional funding, and promising fast-tracked legislation — addresses the most visible dimensions of the crisis. The harder questions involve whether the UK's counter-terrorism infrastructure can adapt to threats that do not fit neatly into existing categories: suspects who pass through Prevent and are released, proxy networks linked to foreign states, and a hate-crime environment where incidents have doubled in three years but prosecutions have not kept pace.

The threat level will remain at "severe" for the foreseeable future. For Britain's Jewish community, living under that designation is not new — it is the continuation of a reality that has been intensifying for years.