A vehicle-borne bomb struck a mosque inside Kohat’s Old Police Lines during Friday prayers on September 18, 2026, followed by an armed assault on the police compound. By September 19, Pakistani officials and local reporting put the death toll at 21, including 15 police personnel, while more than 100 people were reported injured. Earlier casualty figures were substantially lower, reflecting the difficulty of establishing a final toll while rescue and security operations were still underway.
The attack was not a single explosion. It developed into a coordinated assault involving an explosives-laden vehicle, armed attackers entering the police facility and a subsequent security operation. The precise sequence and casualty figures changed as authorities recovered bodies and treated the wounded, while responsibility remained disputed in the earliest reports. A group identified in Pakistani reporting as Ittehad-ul-Mujahideen Pakistan later claimed responsibility, although attribution should be treated separately from the independently established facts of the attack.
Kohat attack timeline at a glance
| Time or stage | What happened | What is established |
|---|---|---|
| Friday, September 18, 2026 — during Friday prayers | Worshippers gathered at a mosque inside Kohat’s Old Police Lines | Police personnel and civilians were among those present |
| About 1:20 p.m. | An explosives-laden vehicle struck the police-lines area near the mosque and detonated | The timing was reported in an initial hospital report cited by Pakistani media |
| Immediately afterward | Armed attackers attempted to enter and attack the police compound | Police and security forces engaged them in a gun battle |
| Following the initial blast | Additional explosions and fighting were reported around police and intelligence facilities | Authorities conducted a clearance operation inside the compound |
| Later on September 18 | Casualty figures rose as rescue operations continued | Reports settled around 21 deaths and more than 100 injuries in local reporting |
| September 19 | Security operations continued or were reported as reaching their final stages, depending on the source | Six or more attackers were reported killed; details of the militant toll varied |
| September 19 | Responsibility was claimed by Ittehad-ul-Mujahideen Pakistan in Pakistani and international reporting | The claim was reported; attribution and organizational relationships remain separate questions |
The first explosion
The attack occurred at Kohat’s Old Police Lines, a security compound in Khyber Pakhtunkhwa. The mosque was being used for Friday prayers, meaning police personnel and other worshippers were gathered at the site when the attack began.
Provincial police chief Zulfiqar Hameed said an explosives-laden vehicle was driven into the police-lines area and detonated. Initial reporting described the blast as occurring at or near the mosque, while subsequent accounts emphasized that the compound itself was the broader target.
A report based on the initial hospital information placed the explosion at approximately 1:20 p.m. local time during Friday prayers. Because the incident was still developing, early accounts differed over precisely where the vehicle detonated and how many people had been killed.
The physical damage was extensive. Reports and images from the scene showed collapsed or damaged walls, rubble and emergency responders moving through the compound.
The attack turns into a gun battle
The explosion was followed by a second phase of the assault.
Police said armed attackers attempted to penetrate the compound after the initial blast. Reports put their number at about seven. Security personnel engaged them, turning the incident from a bombing into a prolonged armed confrontation inside a police facility.
The significance of the location is important. The Police Lines complex housed police and counterterrorism personnel, making it a security installation as well as the site of a mosque. AP reported that the compound contained counterterrorism units involved in operations against militants in the province.
Some reports also described a further suicide explosion at or near a Special Branch or intelligence-related building during the fighting. Details of this part of the sequence varied among early accounts, so it is more reliable to describe it as part of the subsequent assault rather than assume that every reported explosion represented a separate attacker.
Rescue operations begin as the death toll rises
Emergency teams began taking wounded people to hospitals shortly after the blast. Pakistan’s state broadcaster initially reported 16 deaths and 57 injuries, with the injured being transferred to Combined Military Hospital Kohat. Security forces also cordoned off the site and began a search operation.
Those figures did not remain final.
As more casualties were processed, Pakistani media reported 21 deaths, including 15 police personnel, with more than 100 people injured. Dawn reported that three of the wounded were in critical condition, while Geo News cited hospital officials who counted 103 injured people.
The changing figures illustrate why the first numbers published after a major attack should not automatically be treated as the final toll. Casualties can be counted at different hospitals, some victims may remain trapped or critically injured, and authorities may revise figures as identification and medical transfers continue.
International reporting also showed the discrepancy. AP initially reported 21 deaths and 80 injuries, while later AP reporting cited 21 deaths and 103 injuries following updated local information.
The security operation
The security response continued after the initial blast because some attackers had entered the compound.
Pakistani reporting said six of the seven attackers were killed during the ensuing operation, although accounts differed over exactly when and how individual attackers were eliminated. Later AP reporting described a much longer standoff, with security forces concluding an approximately 20-hour operation and reporting additional explosions inside the compound.
This extended phase matters when reconstructing the timeline. The Kohat incident was therefore not simply a suicide bombing followed by an evacuation. It involved an initial explosive attack, an attempted assault on a fortified security facility and a subsequent clearance operation.
That sequence also explains why casualty and attacker figures changed during September 18 and September 19.
Who claimed responsibility?
Responsibility was unclear in the first reports.
Reuters reported that no group immediately claimed the attack and that the Tehreek-e-Taliban Pakistan (TTP) denied involvement.
Later reporting identified Ittehad-ul-Mujahideen Pakistan, an organization associated in Pakistani reporting with Hafiz Gul Bahadur, as having claimed responsibility. Dawn and Pakistan Today both reported the claim. Al Jazeera likewise reported a claim by a faction associated with the Pakistani Taliban.
These claims should not be treated as independently proving who planned or carried out the attack. Attribution in militant attacks often involves competing statements, changing organizational labels and claims issued while investigations are still underway.
There is also an important distinction between the TTP, the Pakistani Taliban organization, and Afghanistan’s Taliban government. They are separate organizations, even though reporting frequently discusses their relationships in the context of Pakistan-Afghanistan security tensions.
Why Kohat matters to the wider security picture
Kohat is in Khyber Pakhtunkhwa, a province that has experienced persistent militant violence, particularly in districts close to Pakistan’s border with Afghanistan. The attack occurred amid a broader escalation involving Pakistani security forces and militant organizations operating in the region.
The timing was also notable. Al Jazeera reported that the Kohat attack came one day after a roadside bombing in neighbouring Hangu district killed six soldiers. Pakistani security forces subsequently reported operations against suspected militants.
Pakistan has repeatedly accused militants of using sanctuaries in Afghanistan, while Afghanistan’s Taliban authorities have rejected such accusations. Those competing claims form part of the broader diplomatic and security dispute between Islamabad and Kabul and should not be confused with independently established evidence about the Kohat attackers.
The attack also demonstrates why police installations can present a dual vulnerability: they may contain security personnel and counterterrorism infrastructure while simultaneously serving as locations where officers and their families gather for religious observance.
What is known—and what remains uncertain
Several elements of the Kohat attack are now relatively well established: it occurred on September 18 during Friday prayers; an explosives-laden vehicle was used; the attack struck the Old Police Lines area in Kohat; armed attackers subsequently engaged security forces; and at least 21 people were killed according to the latest local reports available on September 19.
Other details remain less settled. These include the precise number and role of every attacker, the exact sequence of the secondary explosions, the final number of wounded, and the degree to which any particular militant organization directed or coordinated the assault.
That distinction is especially important in a developing attack story. Early casualty figures and preliminary descriptions are often superseded as hospitals, police and investigators consolidate their information. Likewise, a militant group’s claim of responsibility is evidence of a claim—not by itself conclusive proof of operational responsibility.
What to watch next
The most important developments after the immediate rescue operation will be the completion of the security investigation, confirmation of the final casualty figures and further evidence concerning the attackers’ identities and organizational links.
Authorities are also likely to investigate how an explosives-laden vehicle and armed attackers reached a police compound containing counterterrorism personnel. That question goes beyond the immediate chronology: it may determine whether the Kohat attack is understood primarily as a deadly strike on worshippers, an assault on a police installation, or a coordinated operation designed to achieve both objectives.
For readers following the wider conflict, the key issue is therefore not simply the final death toll. It is whether investigators establish a clear operational chain connecting the vehicle bombing, the armed assault and the group that claimed responsibility—and what that evidence reveals about the evolving militant threat in Khyber Pakhtunkhwa.