Monthly Risk Spotlight: October 2026

AFRICA

Somali Piracy Resurgence: A More Complex Maritime Threat Environment 

Somali piracy is re-emerging in a security environment already strained by regional conflict, attacks against commercial shipping, and competing demands on international naval forces. Although a return to the mass hijackings of the early 2010s remains unlikely, increasingly capable pirate groups could exploit surveillance gaps and disrupted shipping patterns to threaten maritime personnel, delay vessel movements, and complicate assistance operations across the Western Indian Ocean, the Gulf of Aden, and the Somali Basin. The concern is therefore not piracy alone, but its growing interaction with other threats across one of the world’s most important maritime corridors. 

This resurgence reflects renewed capability rather than isolated opportunism. At least 15 incidents have occurred since April 2026, including tanker and cargo vessel hijackings. During the September recovery of the Palau-flagged tanker MT Honour 25, Puntland authorities reported five crew deaths and four injuries. These reportedly represent the first fatalities directly attributed to Somali pirates in more than a decade, raising concern about violence during interdictions and rescue attempts. 

Deterrence has weakened as naval forces are forced to divide resources between counter-piracy, Houthi missile and drone threats, protection of Red Sea shipping, and wider Middle East contingencies. Surveillance gaps give coastal groups intermittent opportunities to operate across the Gulf of Aden and western Indian Ocean. Captured dhows used as motherships extend their reach well beyond Somalia’s shoreline. Disrupted shipping patterns, commercially valuable cargoes, ransom expectations, and reported payments reinforce incentives, while successful seizures can finance subsequent attacks and rebuild coastal support networks. 

What differs from the earlier crisis is the overlapping threat environment. Piracy now coincides with militant attacks, regional confrontation, sanctions evasion, and maritime smuggling, complicating threat identification and stretching response capacity. Alleged contacts involving Houthi-linked facilitators, al-Shabaab, and Somali criminal networks could improve access to weapons, navigation equipment, or vessel information. However, opportunistic cooperation through shared trafficking networks remains more plausible than a unified campaign or Houthi command over pirate groups. Piracy itself remains principally a criminal enterprise centered on ransom, not bulk cargo sales.

Direct exposure falls on commercial crews, fishing vessels, offshore support craft, contractors, and private yachts in the Gulf of Aden, waters off Puntland, and the Somali Basin. The reported hijacking of an Iranian-flagged dhow approximately 400 nautical miles east of Mogadishu in March illustrates the potential for piracy far offshore; however, it does not establish a uniform attack radius. Slower or lightly protected vessels remain particularly vulnerable. For captured personnel, limited communications, uncertain location information, and restricted medical access can turn a hijacking into a prolonged crisis. Nearby naval assets do not guarantee evacuation or safe access to casualties. 

Operational consequences extend beyond attacked vessels. Diversions and delayed port calls can disrupt crew rotations, embarkation arrangements, flights, visas, accommodation, and contractor deployments. Missed connections may lead to longer offshore assignments, while changed vessel positions can invalidate established evacuation pathways. Transfer options, aviation range, disembarkation permissions, and receiving facilities determine whether assistance remains feasible. Operators, employers, insurers, assistance providers, and authorities may face simultaneous demands involving personnel accountability, medical uncertainty, and family communications. Recovery or release can still leave substantial medical, onward travel, and repatriation requirements. 

Organizations ashore also face indirect exposure through delayed fuel, medical supplies, equipment, and replacement parts. Less predictable deliveries can constrain remote operations, postpone maintenance, and disrupt project schedules or personnel rotations. Higher insurance, security, and crew costs add pressure even where shipping continues. Stronger vessel defenses and repeated naval interventions distinguish the current resurgence from the early 2010s, limiting the prospects for sustained mass hijackings without eliminating episodic disruption. 

Somali piracy will likely remain elevated but episodic through mid-2027, easing during rough monsoon periods and resurging when sea conditions improve. Ransom incentives, resilient coastal networks, and intermittent surveillance gaps will sustain attacks against slower or lightly protected vessels, while successful hijackings or fatalities will increase insurance, security, and crew costs. Piracy is unlikely to close the Gulf of Aden or Western Indian Ocean, but it will make navigation more expensive and increasingly dependent on naval coverage, disciplined routing, and short-notice threat information. Uneven access to assistance remains increasingly plausible. Renewed Houthi attacks or wider regional escalation could accelerate Cape rerouting and further strain naval capacity, while coordinated disruption of motherships and stronger Somali–international action could suppress attacks. Two indicators would trigger a reassessment: a sustained rise in successful hijackings across successive favorable-weather periods would support a higher-risk outlook; a sustained decline in successful attacks during comparable sea conditions, accompanied by verified disruption of mothership networks, would support a lower-risk outlook.

AMERICAS

The Hidden Health Impacts of Extreme Weather 

A reopened airport, restored electricity, and cleared roads do not necessarily mean a destination has recovered from a hurricane. For travelers returning to storm-affected areas, significant risks can emerge after the immediate emergency, when contaminated water, increased disease exposure, and strained healthcare services complicate otherwise routine travel. 

While this year’s hurricane season across the Americas started more slowly than many forecasters expected, extreme weather threats extend well beyond the storms themselves. Aging water and sanitation infrastructure, expanding urban development, and local environmental conditions can increase public health vulnerabilities following hurricanes, tropical storms, and major flooding. Although transportation disruptions, damaged infrastructure, and power outages are often the most visible consequences, secondary health risks can persist for weeks or even months after the immediate emergency has passed. 

One of the most significant post-disaster health concerns involves mosquito-borne diseases. While heavy rainfall and floodwaters may initially wash away existing breeding sites, standing water left in damaged buildings, drainage systems, debris, and discarded containers can create favorable conditions for mosquito populations to rebound. As cleanup and recovery efforts progress, these environments may support increased mosquito activity, particularly where drainage and mosquito-control measures remain disrupted. 

These conditions can elevate exposure to diseases such as dengue fever, chikungunya, and Zika virus, which are reported across parts of the Caribbean, Central America, and South America. However, increased rainfall or flooding does not automatically result in higher disease transmission. Local disease prevalence, mosquito populations, environmental conditions, and public health responses all influence risk. For travelers, exposure may be greater when spending extended periods outdoors, visiting affected communities, participating in recovery activities, or staying in accommodations with limited mosquito-control measures. Monitoring local public health advisories and changes in reported disease activity is therefore particularly important during recovery periods. 

Floodwaters can also present health concerns long after the severe weather has ended. Exposure risks often remain during cleanup operations, particularly where flooding has overwhelmed sanitation systems or contaminated residential and commercial areas. Floodwater may contain sewage, chemicals, fuel, debris, and animal waste, creating hazards for individuals moving through or working in affected locations. 

One illness associated with severe flooding is leptospirosis, a bacterial infection that can spread through water or soil contaminated by infected animal urine. Although infections among travelers are relatively uncommon, outbreaks have been reported following major flooding events across the Americas. Contact with contaminated water can also contribute to gastrointestinal illness, skin infections, and other health complications. Travelers involved in volunteer work, field activities, or disaster recovery operations may face greater exposure than those remaining in unaffected commercial or tourism areas. Avoiding unnecessary contact with floodwater and following local public health guidance remain important precautions. 

Healthcare access is another critical consideration during recovery periods. Hospitals and clinics may face increased patient demand while simultaneously managing storm-related damage, transportation disruption, staffing pressures, and supply shortages. Where healthcare capacity is reduced, access to routine treatment, specialist services, and prescription medications may become more limited. For organizations supporting travelers, these conditions can complicate medical referrals, treatment arrangements, and assistance for individuals with existing medical needs. Even relatively minor illnesses can become more disruptive when local healthcare services are strained. 

Another often-overlooked concern involves volunteer, educational, and humanitarian travel following natural disasters. Travelers participating in rebuilding projects, community outreach initiatives, or disaster recovery efforts may enter affected areas while environmental hazards remain present. Mold contamination, airborne debris, stagnant water, and increased mosquito activity can create additional health risks, particularly for individuals spending extended periods in damaged buildings or communities where sanitation and infrastructure have not yet recovered. These activities require appropriate pre-travel assessments, health precautions, and access to medical support. 

Food and drinking water safety may also remain a concern during recovery periods. Flooding can disrupt supply chains, compromise refrigeration and food storage, contaminate water supplies, and damage local sanitation infrastructure. Travelers should monitor local health advisories and confirm that accommodation and food providers have reliable access to safe water, electricity, and appropriate sanitation facilities, particularly in recently affected areas. 

For organizations and individual travelers alike, preparation remains one of the most effective mitigation strategies. Before traveling to a destination recovering from severe weather, organizations should assess local public health conditions, healthcare availability, accommodation standards, and access to essential services. Travelers should keep adequate supplies of prescription medications, practice effective mosquito-bite prevention, avoid unnecessary exposure to contaminated water, and know how to access medical assistance if needed. For higher-exposure activities, such as humanitarian or recovery work, additional health precautions and contingency arrangements may be necessary. 

Extreme weather events rarely end when skies clear and floodwaters begin to recede. While airports reopen and transportation networks resume operations, public health conditions and healthcare capacity may take considerably longer to recover. Understanding these secondary effects allows travelers and organizations to distinguish between a destination that is accessible and one that is adequately prepared to support their health, safety, and medical needs.

APAC

Pakistan’s Protest Cycle: Travel Disruption Amid Continued Mobilization for Imran Khan 

Throughout 2026, supporters of imprisoned former Prime Minister Imran Khan have organized periodic demonstrations and long marches demanding his release, making political protests a recurring source of disruption across Pakistan. While Khan remains one of the country’s most prominent political figures, recent protest campaigns have highlighted an important disconnect between expectations and reality. Demonstrations promoted as mass mobilizations capable of drawing hundreds of thousands of participants have often drawn far smaller crowds, with several high-profile marches delayed, restricted, or unable to move beyond Pakistan Tehreek-e-Insaf (PTI) strongholds in Khyber Pakhtunkhwa (KP). Yet for travelers and organizations operating in Pakistan, the principal concern is frequently not the size of the protests themselves, but the extensive preventive measures authorities implement in anticipation of unrest. 

This dynamic matters in Pakistan because political demonstrations occur in an already complex operating environment. Security conditions vary considerably between provinces, movement restrictions can be introduced with little warning, and previous political confrontations have escalated rapidly, sometimes resulting in violent clashes between protesters and security forces. Unlike in many countries where demonstrations primarily affect a specific city center or public square, protests in Pakistan often trigger wider security measures that disrupt the country nationwide. Authorities regularly deploy large numbers of police and paramilitary personnel, establish checkpoints, erect barricades, and restrict access to sensitive districts in the capital, Islamabad, and Rawalpindi (Punjab) long before significant crowds arrive. As a result, the anticipation of unrest can become as disruptive as the unrest itself. 

The operational implications extend beyond inconvenience for travelers and assistance providers. During previous protest periods, transportation restrictions around Islamabad have lengthened travel times considerably and forced travelers to find alternate routes on short notice. Road closures and security cordons can complicate ground transportation and reduce access to key infrastructure. For organizations supporting travelers, a routine journey can quickly become more complicated if authorities close major routes or impose last-minute diversions. These challenges can be particularly problematic in a country where infrastructure constraints, traffic congestion, and security considerations already complicate movement under normal conditions. 

Communications restrictions further compound these difficulties. Local authorities have repeatedly implemented internet slowdowns, mobile-data outages, and temporary telecommunications disruptions during politically sensitive periods. While these measures are intended to limit protest coordination, they can also disrupt travel. A traveler caught in a rapidly changing security environment may still be physically safe, but locating the traveler and maintaining reliable communication can become much harder when mobile networks are degraded. For organizations managing travel risk, this can create operational challenges disproportionate to the actual size of a demonstration. 

A notable characteristic of recent PTI demonstrations has been the gap between projected and actual participation. Protest leaders have repeatedly projected turnout in the hundreds of thousands, but actual participation has consistently fallen well short of those projections. A recent October 2026 march toward Islamabad reportedly began with several thousand participants despite substantially larger projections. The relatively limited participation reflects broader political realities. Although PTI remains a significant political force and retains a loyal support base, it does not command support from a majority of the Pakistani electorate. In Pakistan’s February 2024 general election, PTI-backed candidates secured approximately one-third of the national vote, demonstrating substantial influence but not overwhelming public support. This helps explain why calls for nationwide mobilization have not consistently translated into sustained mass participation across the country. 

Despite these developments, a shift toward nationwide political upheaval remains unlikely. Pakistan’s security forces possess extensive experience managing periods of political unrest and have demonstrated the ability to contain demonstrations through a combination of preventive deployments, movement restrictions, crowd-control measures, and communications controls. While these tactics often disrupt travelers and organizations, they have also historically limited protest movements’ ability to sustain momentum over extended periods. 

Looking ahead, further demonstrations in support of Imran Khan remain likely as political tensions persist. For travelers, the greatest risk is likely to remain indirect rather than direct exposure to violence. The more probable challenge is navigating a security environment where authorities respond aggressively to the possibility of unrest, even when protest turnout ultimately falls short of expectations. This dynamic is likely to remain a defining feature of Pakistan’s operating environment in the months ahead.

ECIS

Protest Disruption Becomes a Recurring Challenge for European Travel  

Political and social protests have remained a prominent feature of Europe’s security landscape. While most demonstrations remain peaceful, they can still disrupt travel through road closures, transportation delays, increased police activity, and occasional clashes between protesters and authorities. Travelers visiting European cities should remain aware of current events and understand how evolving protest movements may affect mobility and safety. 

This broader pattern is visible in Spain, where an individual housing dispute grew into a nationwide expression of economic frustration. Demonstrations erupted following the eviction of 87-year-old Madrid resident María del Carmen Abascal amid the country’s ongoing housing crisis. The case became a national symbol of growing concerns over rising rents, housing shortages, and the impact of tourism-related property development. Protesters organized large encampments and demonstrations in several locations, most notably in the Puerta del Sol in the capital, Madrid, later spreading to numerous cities across the country. The case generated significant public pressure and became a symbol of broader frustration over housing availability and affordability. While the demonstrations initially centered on the eviction, they highlighted wider concerns over rising rents and housing shortages that are likely to remain politically sensitive.

A similar transformation of a specific incident into a wider protest movement has occurred in Serbia, although with more direct political consequences. Prolonged student-led protests have developed into the most serious challenge to President Aleksandar Vučić’s rule in more than a decade. The movement originated after the collapse of a railway station canopy in Novi Sad in November 2024 that killed 16 people. Protesters have accused authorities of corruption, lack of transparency, and political interference in public institutions. Against this backdrop, Vučić resigned from the presidency on September 27 while seeking to maintain a political role through parliamentary elections. The demonstrations have drawn hundreds of thousands of participants and continue to shape Serbia’s political environment ahead of upcoming votes. 

Where the movements in Spain and Serbia grew from catalytic events, France’s unrest reflects a more established cycle of organized labor mobilization. Ahead of key government budget discussions, civil servants have returned to the streets as public-sector unions raise concerns about proposed spending and employment conditions. Although most demonstrations remain organized and peaceful, labor actions in France often disrupt transportation, including rail and public transit, as well as government services. Across these contexts, the common thread is how unresolved economic or governance concerns can quickly shift from public frustration to sustained street action, affecting travelers even when demonstrations are not near major tourist attractions.

For travelers, the primary risk associated with protests is typically incidental exposure rather than deliberate targeting. Demonstrations, regardless of size, can quickly cause localized transportation disruptions, heightened police deployments, restricted access to city centers, and changing security conditions. Travelers are advised to avoid protest locations whenever possible, monitor local media, and remain flexible with transportation plans. Before departure, travelers should review the political climate, monitor local news, and understand upcoming political events. Practical safety measures include checking local news each morning, allowing extra travel time when visiting major cities, avoiding large crowds, and keeping mobile devices charged in case routes change unexpectedly. If travelers encounter a demonstration, they should leave the area calmly, avoid photographing confrontations, and follow local authorities’ instructions. Maintaining situational awareness around government buildings, public squares, transportation hubs, and symbolic political locations is particularly important during periods of heightened political activity. While Europe remains a safe destination for most travelers, recent events in Spain, Serbia, and France show how social, economic, and political grievances can quickly spark large public gatherings. By staying informed, remaining flexible, and avoiding active protest sites, travelers can significantly reduce their exposure to disruption while continuing to travel safely throughout the region.

MENA

Critical Infrastructure as a Travel Risk Indicator: Why System Disruptions Matter for Mobility

Recent conflict dynamics in the Middle East have demonstrated that critical infrastructure disruption can affect traveler mobility before a broader deterioration in the physical security environment becomes apparent. Aviation, telecommunications, transportation, energy, payment, and digital systems underpin regional mobility and crisis response. Because these systems are highly interconnected, disruption in one area can quickly affect flight operations, border processing, financial transactions, emergency communications, and business continuity across multiple locations. This exposure is particularly significant in regional transit hubs, where concentrated passenger flows and reliance on interconnected services can amplify localized disruptions. As a result, organizations should assess infrastructure resilience alongside traditional security indicators when evaluating travel risk. 

For organizations, the key question is whether an incident is isolated and recoverable or signals broader degradation in regional operating capacity. Recent periods of heightened tension have coincided with airspace restrictions, flight suspensions, cyber incidents, and communications outages. Operational consequences for travelers, such as cancellations, rerouting, delays, and reduced access to essential services may emerge before any wider deterioration in the security environment. Consequently, clusters of infrastructure-related disruptions may serve as early indicators of escalating mobility risk, even when local threat reporting remains unchanged. 

The attempted cyberattacks in the United Arab Emirates (UAE) in August 2026 illustrate the distinction between an isolated incident and a broader decline in operating capacity. Authorities reported that coordinated attacks targeting the aviation, energy, and education sectors were contained without interrupting services. Because the attacks caused no operational disruption, immediate travel restrictions were unnecessary. Nevertheless, the incident exposed potential vulnerabilities in systems that support regional mobility and economic activity. If successful, the attacks could have disrupted airport operations, transportation networks, communications, traveler-accountability processes, payment systems, and fuel distribution. 

Even unsuccessful attacks can reveal hostile intent, expose system dependencies, and indicate the potential for future targeting. Organizations should therefore increase monitoring and validate contingency arrangements after such incidents.

Escalation decisions should be based on the scope, duration, geographic reach, and operational consequences of a disruption. A short-lived outage with clear recovery timelines may warrant enhanced monitoring without requiring broader travel restrictions. However, concurrent disruptions affecting aviation, telecommunications, transport, energy, or payment networks should prompt organizations to verify itineraries, communication channels, local support arrangements, and traveler-accountability procedures. Prolonged degradation of essential services may justify route adjustments, movement deferrals, or activation of business continuity measures. 

Key escalation indicators include multiple airline suspensions, airspace restrictions, sustained communications outages, repeated attacks against the same sector, and confirmed disruptions affecting airports, borders, payment systems, or fuel supplies. Organizations should align these indicators with predefined response thresholds, ranging from enhanced traveler communications and itinerary validation to movement restrictions or relocation when critical services become unreliable. Such an approach supports proportional decision-making while allowing flexibility as conditions evolve. 

Infrastructure disruption is likely to remain a persistent regional risk as cyber operations and opportunistic targeting continue alongside fluctuating security conditions. Organizations should integrate infrastructure indicators into travel risk assessments, establish clear escalation thresholds, maintain redundant communications, and regularly test transport, payment, and traveler-accountability contingencies. The critical question is not simply whether a system remains operational, but whether sufficient redundancy exists to sustain mobility if conditions deteriorate. Viewing infrastructure disruption as a mobility risk rather than solely a technical issue can support earlier intervention, reduce exposure to cascading operational impacts, and help avoid unnecessary restrictions in response to isolated incidents. 

 

About On Call International:
When traveling, every problem is unique–a medical crisis, a political threat, even a common incident such as a missed flight. But every solution starts with customized care that ensures travelers are safe and protected. That’s why for over 30 years, On Call International has provided fully-customized travel risk management and emergency assistance services protecting millions of travelers, their families, and their organizations. Visit www.oncallinternational.com and follow us on LinkedIn to learn more.

This report (“Report”) has been prepared by On Call International, LLC (“OCI”) for informational purposes only. OCI cannot guarantee the accuracy of any information contained in the Report, which it has compiled.  In preparing the Report, OCI has relied on currently available information to which it has access regarding any conditions or events that may impact travel to the intended destination and is not providing any information or making any representations regarding conditions or events that may subsequently arise. 
OCI cannot guarantee the safety or conditions of travel to a specific destination and is not liable for any illness, risks, loss, or damages, or any other adverse consequences incurred by any traveler.  As such, travelers are ultimately responsible for making their own informed decisions regarding travel to their intended destination.