Somali Piracy Is No Longer a Coastal Problem

The hijacking of the Cameroon-flagged cargo vessel LUTUF off Puntland on 17 August is important for reasons that extend beyond the seizure of another merchant ship. According to the Horn Economic Review, the vessel was carrying Turkish weapons, communications equipment and satellite equipment reportedly destined for a Turkish military facility in Mogadishu when it was seized near Marraya in Somalia’s Eyl district. Associated Press reporting placed 10 crew aboard and said eight armed men took control of the ship before steering it towards the Nugaal coast.

Taken alone, LUTUF could be treated as another indication that Somali piracy has returned. Placed alongside the pattern developing since April, however, it points towards something more significant. Pirate groups appear to be rebuilding an operational system capable of holding multiple commercial vessels at the same time, retaining dozens of hostages, using captured vessels to support additional attacks and operating across a maritime area extending from the Puntland coast into the Gulf of Aden.

By 29 July, EUNAVFOR Operation ATALANTA was monitoring four hijacked merchant vessels: HONOUR 25, SWARD, EUREKA and ASANA. Together, they accounted for as many as 67 seafarers in captivity. Since then, the picture has deteriorated further. The German Navy Shipping Centre’s 20 August security assessment identifies six merchant vessels being held by pirates: HONOUR 25, SWARD, EUREKA, ASANA, LUTUF and SEAMULL, also known as SIBU 1. The German assessment explicitly treats the August incidents as a continuation of the same piracy series.

The hostage burden is therefore growing as well. The four vessels held at the end of July accounted for 67 seafarers. LUTUF reportedly added another 10 crew. If those earlier crews remain in captivity, that would mean at least 77 known seafarers aboard five vessels, before adding the still uncertain crew complement of SEAMULL/SIBU 1. This is no longer a collection of isolated boarding incidents. It is a sustained hostage-taking environment.

The most consequential development may be the reported use of SWARD as a mothership. Recent reporting indicates that pirates have repurposed the previously hijacked vessel as a floating base from which smaller attack craft can operate. Somali reporting has gone further, linking SWARD to subsequent pirate operations, including the seizure of LUTUF. That matters because it suggests that at least one captured merchant vessel is no longer simply being held for ransom. It may now be contributing directly to further attacks.

Mothership tactics themselves are not new. Somali pirate groups used captured fishing vessels and dhows extensively during the previous piracy era to extend the range of their skiffs. India’s Information Fusion Centre – Indian Ocean Region was already warning in April that hijacked dhows were again being used to support pirate action groups farther offshore.

A captured merchant ship, however, offers much more than a dhow. It potentially provides accommodation, fuel, stores, communications, radar awareness and greater endurance. It also allows pirate groups to remain offshore for longer periods while launching smaller craft against passing traffic. If SWARD is being used in this way, the operational progression is no longer simply hijack a ship and wait for ransom. A captured vessel can begin helping create the conditions for another successful capture.

The geography of the recent incidents supports that interpretation. LUTUF represents one end of the threat spectrum. The German Navy reports that adverse weather caused the vessel to navigate closer to the Somali coast and that it was seized approximately four nautical miles south of Maraya. That was effectively a coastal interception.

Other incidents show a much broader operating envelope. EUREKA was taken near Yemen before being moved towards Somalia. ASANA was hijacked around 65 nautical miles south of Al Mukalla. GOLDEN ARSENAL was attacked more than 100 nautical miles northeast of Bosaso, where its attackers were reportedly equipped with assault rifles and RPGs. Operation ATALANTA’s account of the GOLDEN ARSENAL attack illustrates how far pirate action groups are now capable of operating from the Somali coast.

On 20 August, SEAMULL/SIBU 1 was seized in the Gulf of Aden by six armed individuals and reportedly diverted towards Somalia. The German Navy lists it alongside the other vessels currently in pirate hands.

The result is an emerging two-part attack model. Pirate groups can exploit vessels that come too close to the Puntland coast, but they can also operate well offshore in the Gulf of Aden and western Indian Ocean. Motherships are the mechanism that can connect those two environments.

The timeline is also striking. At the end of May, Operation ATALANTA reported 10 piracy-related incidents since the beginning of 2026, eight of which had occurred since April. The sequence of successful merchant-vessel hijackings then accelerated: HONOUR 25 on 21 April, SWARD on 26 April, EUREKA in early May, ASANA on 17 July, LUTUF on 17 August and SEAMULL/SIBU 1 on 20 August.

This is not a steady background level of maritime crime. It is a relatively rapid accumulation of successful hijackings.

The International Maritime Organization was already warning in July about the deterioration, calling for the release of 44 seafarers then held aboard HONOUR 25, EUREKA and SWARD. The addition of ASANA, LUTUF and SEAMULL/SIBU 1 since then demonstrates how quickly the operational picture has changed.

The contrast with Asia is instructive. The ReCAAP Information Sharing Centre recorded 35 incidents of armed robbery against ships in Asia during the first half of 2026, representing a 64 per cent decline from 96 incidents during the same period in 2025. All 35 incidents were legally classified as armed robbery against ships rather than piracy, and 21 occurred in the Straits of Malacca and Singapore.
The severity profile was also much lower. ReCAAP recorded no CAT 1 incidents, four CAT 2 incidents, 13 CAT 3 incidents and 18 CAT 4 incidents. Its CAT 1 category covers the most serious cases, including violence, kidnapping, killing and vessel hijacking. In other words, Asia continues to experience a higher volume of routine maritime crime, but much of it involves theft from vessels with relatively limited harm to crews.

The Straits of Malacca and Singapore nevertheless remain the principal Asian hotspot. Of the 35 incidents recorded by ReCAAP during the first half of the year, 21 occurred there, accounting for 60 per cent of Asia’s total. Most took place while ships were underway, with 20 of the 21 incidents occurring in the eastbound lane of the Traffic Separation Scheme. The clustering was particularly strong around Pulau Cula, Pulau Karimun Besar and Pulau Nongsa. The modus operandi is also very different from Somalia. In the Singapore Strait, bulk carriers accounted for 13 of the 21 incidents, while six involved tug boats or supply vessels and only two involved tankers. Most attacks involved small groups armed with knives or similar weapons, and 18 of the 21 crews suffered no injuries. Engine spares, scrap metal and other unsecured items were common targets.

Somalia presents almost the inverse picture. The number of incidents may be lower, but the consequences are much greater. Successful hijackings result in prolonged detention, dozens of seafarers held at once, armed pirate groups using assault rifles and RPGs, and vessels being moved back towards Somali waters for long-term control.

Raw incident numbers therefore tell only part of the story. Severity matters.

The target profile also deserves attention. Tanker hijackings create a much broader risk picture because crew safety, cargo exposure, pollution, fire, salvage and sanctions compliance can all become part of the same incident.

SEAMULL/SIBU 1 is particularly interesting in that regard. Cross-checking IMO 9204776 against sanctions and maritime blacklist data identifies the vessel under the name SIBU 1 in existing sanctions-related datasets. That means the case sits at the intersection of piracy and the wider opaque maritime trading system. A vessel can simultaneously be part of a sanctions-risk environment and a victim of hijacking, creating a complicated problem for insurers, governments, naval forces and commercial counterparties.

The wider regional security environment may also be helping pirate groups. Somali piracy is re-emerging while naval and maritime-security forces are simultaneously dealing with Houthi attacks in the Red Sea, conflict-related attacks in the Persian Gulf and Strait of Hormuz, Iranian maritime activity, mines, navigation interference and escort missions. The German Navy Shipping Centre’s current assessment lists 56 attacks against merchant shipping in the Persian Gulf, Strait of Hormuz and Gulf of Oman during the present conflict period, alongside continuing attacks in the southern Red Sea and the six vessels being held by Somali pirates.

Pirate groups do not need to be connected to any of those conflicts to benefit from them. They only need to exploit a maritime-security environment in which naval attention is divided across several theatres at once.

The LUTUF incident also highlights the continuing importance of shore-based support. Associated Press reported that a small boat travelled from shore to deliver khat to the hijackers. That small detail is significant. Holding multiple merchant ships and dozens of hostages requires food, water, fuel, communications, guards, negotiators and local access. The ships are the visible part of the piracy system, but the enabling infrastructure remains ashore.

The central risk is therefore not simply that Somali piracy has returned. It is that successful attacks may now be creating additional pirate capability. A captured dhow extends the range of skiffs. A captured merchant vessel can extend it further. If that vessel is then used to facilitate another hijacking, piracy begins to develop a self-reinforcing operational cycle.

That is why the six vessels currently held should not simply be viewed as six unresolved piracy cases. They may increasingly represent parts of an operating network.

For commercial shipping, the implication is important. The threat is no longer confined to vessels passing close to the Puntland coastline. The 2026 incidents demonstrate exposure from Somali coastal waters to the southern coast of Yemen and deep into the Gulf of Aden.

Somali piracy is again becoming a problem of range, movement and maritime infrastructure, rather than simply robbery at sea.