Bosnia and Herzegovina

Situation Summary

Bosnia and Herzegovina remains in a low-to-moderate threat environment (global rank #135, composite score 11) with no large-scale civil unrest or armed conflict observed in the reporting period. However, the week saw a sharp uptick in bilateral tensions with Serbia following diplomatic expulsions, a significant state-level cyber breach affecting demining operations, and routine street-level crime (armed robbery, burglary). The security picture is stable but fragmented across diplomatic, cyber, and localized criminal domains, with external actors (NATO, EU) emphasizing commitment to preventing a "security vacuum."

Key Developments

• Sarajevo, diplomatic incident – 8 Sept 2026: Bosnia and Herzegovina's Foreign Minister declared two Serbian Embassy personnel persona non grata (military attaché Milan Dulanović and an intelligence representative) and ordered their departure within 48 hours, citing Serbia's recent glorification of convicted war criminal Ratko Mladić; BiH simultaneously suspended a regional cooperation accord and downgraded bilateral contacts with Serbia to the minimum level.

• Bosnia and Herzegovina, cyber breach – 9 Sept 2026: The state Mine Action Center (BHMAC), responsible for demining operations, was breached by the Emperador ransomware group; approximately 1.7 GB of data was exfiltrated and threatened for public release unless demands are met.

• Mostar, armed robbery – 12 Sept 2026: Two masked suspects intercepted security guards during a cash transfer at a UniCredit Bank branch on Dubrovacka Street at approximately 15:40 local time, threatened them with firearms, and stole an undisclosed sum before fleeing; police launched an investigation.

• BiH-Serbia border, diplomatic expulsion closure – 11 Sept 2026: Border Police confirmed the expelled Serbian military attaché Milan Dulanović departed BiH on 10 Sept at 12:05, completing the immediate operational phase of the expulsion order; the intelligence representative had departed earlier.

• Ljubuški, West Herzegovina Canton, burglary – 9 Sept 2026: Police recorded a burglary at a family house on Ulica sestre Konzulate Grgić, where an undisclosed quantity of cash was stolen.

• West Herzegovina Canton, traffic safety campaign – 9–10 Sept 2026: The cantonal Interior Ministry launched a school-year safety campaign ("POČELA JE ŠKOLSKA GODINA 2026./2027") running 7 Sept–5 Oct, increasing police presence and traffic controls around schools.

• International security posture – 9 Sept 2026: NATO and the EU publicly reiterated commitment to BiH stability and stated that a "security vacuum" will not be allowed to emerge, signaling external reassurance amid regional tensions.

Highest-Risk Areas

Sub-national risk ranking data are not currently available in GeoBit's public dashboard. However, West Herzegovina Canton (Županija Zapadnohercegovačka) and Mostar-area targets have exhibited elevated activity in the reporting window, including armed robbery, burglary, and sustained anti-trafficking operations. Sarajevo remains the political and diplomatic nerve center, where bilateral tensions with Serbia carry disproportionate weight for regional stability.

How GeoBit Would Assist

Security teams would deploy Intel Sweep and multi-language OSINT to monitor diplomatic statements, cyber-threat reporting, and criminal activity across Bosnian media and regional sources. AOI Monitoring & Early Warning on Sarajevo and key financial/government institutions (banks, demining centers) would flag emerging threats. Cyber and Network & Actor Analysis capabilities would track the Emperador group's movements and the BHMAC breach's potential secondary impacts on regional demining timelines and asset security.

7-Day Outlook

Diplomatic friction with Serbia is unlikely to escalate beyond the current expulsion, though rhetoric may intensify ahead of Bosnian commemorations. Routine street crime (robbery, burglary) will persist as a persistent low-level risk to financial institutions and residences. Cyber extortion attempts against government entities will likely continue; organizations handling sensitive infrastructure data should expect heightened targeting.

Previous Weekly Briefs

A new Bosnia and Herzegovina brief is written every Monday, covering the week — each with its own risk map and downloadable CSV. Use the calendar to go further back.

• September 7, 2026⬇ CSV · $5
• September 1, 2026⬇ CSV · $5
• August 30, 2026⬇ CSV · $5
• August 28, 2026⬇ CSV · $5
• August 26, 2026⬇ CSV · $5
• August 24, 2026⬇ CSV · $5
• August 22, 2026⬇ CSV · $5