Twenty-one years after the 7/7 London bombings, most people remember
them as a tragic day in history. Terrorist organizations remember them
differently. For al-Qaeda, London was not simply a successful attack. It
was an operational campaign. The first phase succeeded. The second phase
failed.
That distinction matters because terrorist organizations do not
simply celebrate attacks. They study them. Every success and every
failure becomes part of their institutional knowledge, shaping how
future generations think about acts of violence. Understanding that
mindset is one of the reasons the London bombings remain one of the most
important case studies in modern terrorism.
On the morning of July 7, 2005, four suicide bombers detonated
explosive devices on three London Underground trains and a double-decker
bus during the morning rush hour. Fifty-two innocent people were
murdered, more than 700 others were injured, and an entire city was
shaken. The attacks demonstrated how a small, coordinated cell using
relatively simple explosives could create mass casualties, overwhelm
emergency responders, disrupt an entire transportation network, and
dominate international headlines within minutes.
For al-Qaeda, London represented far more than an attack on the
United Kingdom. It was proof that locally radicalized operatives with
overseas training and limited resources could execute a coordinated
mass-casualty attack inside a Western capital without the level of
centralized planning required for September 11. The objective was never
simply to kill. It was to create fear, undermine public confidence,
disrupt daily life, and demonstrate that Western societies remained
vulnerable.
One Campaign. Two Phases.
One of the biggest misconceptions about 7/7 is that it was a single
attack.
It was not.
The 2005 London Bombings, Phase I and Phase II.
Just fourteen days later, on July 21, another coordinated team of
four suicide bombers attempted to strike London’s transportation system
during another morning rush hour. The second operation mirrored the
first in almost every respect. The target set was nearly identical, the
timing was nearly identical, and the strategic objective remained the
same. The only reason Britain did not experience another mass-casualty
attack was because the main explosive charges failed to function. Only
the detonators fired.
That was not a change of heart. It was a bomb-making failure.
Had those devices functioned as intended, historians would likely
remember the London bombing campaign of 2005 rather than speaking
separately about “7/7” and “7/21.” The distinction between those dates
exists largely because one phase succeeded while the other failed.
From al-Qaeda’s perspective, however, the campaign did not end on
July 7. The organization has historically distinguished between
operations that fully achieve their intended objectives and those that
do not. Operations such as Bojinka, the unfinished U.S. Capitol attack
associated with the September 11 plot, and the second phase of the
London bombings occupy a unique place within al-Qaeda’s institutional
memory. They are preserved not simply as historical events, but as
unfinished campaigns whose lessons, and in some cases whose objectives,
continue to endure.
Success and
Failure Look Different to Terrorists
Western audiences often measure success by casualties. Terrorist
organizations measure success by campaign objectives. Viewed through
that lens, the London operation produced mixed results. The first phase
achieved strategic surprise, mass casualties, worldwide media attention,
and significant psychological impact. The second phase failed because of
technical shortcomings, not because the operational concept changed.
That distinction matters because terrorist organizations conduct
their own after-action reviews. They study successful attacks, but they
study unsuccessful attacks just as carefully. They examine bomb
construction, operational security, communications, surveillance, target
selection, emergency response, and tradecraft. They ask a single
question: what increases the probability of success next time?
The July 7 attacks demonstrated what worked: small autonomous cells,
homemade explosives, public transportation targets, rush-hour timing,
suicide operatives, and maximum psychological impact with relatively
limited resources. The July 21 attacks demonstrated what failed. The
operational concept survived. The bomb design did not.
Every successful terrorist attack changes terrorist tradecraft. Every
failed terrorist attack changes it as well. Terrorist organizations do
not archive incomplete operations. They preserve them.
Every
Terrorist Attack Begins Long Before the Explosion
One of the greatest misconceptions about terrorism is that an attack
begins when the violence starts. From an intelligence perspective, the
explosion is the final stage of an operation, not the beginning. Every
successful terrorist attack starts months, and sometimes years, earlier
with radicalization, recruitment, training, financing, overseas travel,
communications, logistics, surveillance, bomb construction, and
rehearsals. The attack that captures international attention is simply
the final step in a much longer operational process.
Reminder: Terrorist Attacks Are Processes, Not Events.
That distinction matters because every stage before execution creates
opportunities for detection.
One of the most valuable lessons from studying attacks like London is
recognizing that terrorism is an iterative process. Organizations
recruit, train, plan, test, adapt, and learn. Every operation becomes a
source of intelligence for the next one. Successful attacks reinforce
existing tradecraft. Failed attacks expose technical weaknesses that can
be corrected. Terrorist campaigns evolve because terrorist organizations
deliberately study both success and failure.
Looking Beyond the Bombers
The London bombings also remind us that the public and intelligence
professionals often see terrorist attacks very differently. The public
sees the attack cell. Counterterrorism professionals look for the
network.
The existence of the July 21 follow-on attack alone demonstrates that
this was never the work of four isolated extremists. It was an
operational campaign involving multiple attack cells, shared ideology,
overseas connections, and a broader extremist ecosystem capable of
sustaining follow-on operations.
Like most terrorist operations, 7/7 did not emerge in isolation. The
bombers were influenced by radical preachers, overseas training
networks, facilitators, and ideological supporters. Some individuals
connected to that broader extremist milieu were later prosecuted on
separate terrorism offenses, while others were arrested and released
without charge.
The fact that no one was ultimately convicted of directly assisting
the execution of the July 7 attacks does not mean the broader network
did not exist. It illustrates a reality familiar to intelligence
professionals: identifying a terrorist network and proving every element
of it beyond a reasonable doubt in court are not always the same
thing.
Recruiters, radicalizers, trainers, financiers, bomb-makers,
facilitators, propagandists, and logisticians all contribute to
terrorist operations. Many will never carry a bomb or appear in a
courtroom, yet they remain essential parts of the network that enables
an attack to occur.
Why Public
Transportation Remains a Prime Target
Transportation systems continue to be attractive targets because they
allow terrorists to accomplish multiple objectives simultaneously. A
single attack can generate casualties, disrupt commerce, overwhelm
emergency responders, dominate media coverage, undermine public
confidence, and create uncertainty far beyond the immediate attack site.
Millions of people who were never physically endangered begin asking
themselves whether it is safe to take the train the next morning.
Terrorism has always been about psychology as much as physical
destruction.
The London bombings also reinforced another enduring lesson:
terrorist campaigns often include redundancy. Multiple attack cells,
alternate operatives, and follow-on attacks increase the likelihood that
at least part of the operation will succeed. Rather than depending on a
single opportunity, planners build campaigns designed to survive
setbacks. The July 21 attacks failed, but their existence remains
operationally significant because they reveal how terrorist
organizations think about campaigns rather than isolated attacks.
What You Should Watch For
One of the most consistent indicators before a terrorist attack is
surveillance. Terrorists rarely attack a location they have not already
studied. They often visit repeatedly, learning rush-hour patterns,
identifying entrances and exits, observing security personnel, noting
camera placement, and identifying where crowds naturally bottleneck.
They are often more interested in the security surrounding a location
than in the location itself.
Recognizing Pre-Operational Indicators
Routine is valuable to society because it allows millions of people
to move efficiently through daily life. It is also valuable to
terrorists because routine creates predictability. Predictable crowd
density, predictable schedules, and predictable security postures
simplify operational planning. Most people conducting surveillance are
not terrorists. Most unattended bags are harmless. Most unusual behavior
has an innocent explanation. But security professionals cannot assess
what is never reported.
Pay attention to behavior rather than appearance. Notice individuals
who seem unusually focused on security procedures instead of their own
travel, repeated visits that appear to have no obvious purpose,
coordinated behavior among multiple people, attempts to access
restricted areas, or bags that appear to have been deliberately
abandoned. Trust your instincts when something genuinely feels out of
place, and allow trained professionals to determine whether there is
cause for concern.
Remember the Victims.
Study the Attack.
One of the greatest mistakes we make is treating attacks like the
London bombings as historical anniversaries rather than operational case
studies. Our adversaries do not remember attacks the way we do. They
preserve the lessons, study what succeeded, analyze what failed, and
continue examining the operations they believe remain unfinished. If we
only remember these events once a year while they continue studying them
year after year, we place ourselves at a disadvantage.
Understanding how our adversaries think is one of our strongest
defenses. They study attacks like 7/7 because they are searching for
lessons they can apply in the future. We should be just as committed to
studying them ourselves. We honor the victims by remembering what
happened. We protect the living by understanding how these campaigns are
planned, recognizing the operational indicators they leave behind, and
disrupting attacks before they reach execution.
The enemy gets a vote. They always have.
Our responsibility is to understand how the enemy thinks, recognize
the warning signs before they become headlines, and stay one step ahead
of the threat.
·
Relevant
Originally published by Sarah Adams. View the original post →