Berlin attack highlights Europe’s shift to individualized, multi-layered terror threats - analysis

A July 25 van attack near Berlin's Pride celebrations killed a Polish woman and injured 29. The 21-year-old suspect, Abdul Ballout, was killed by police the next day. German prosecutors found a video of him pledging allegiance to ISIS, though the attack was not directed by the group. The case highlights Europe's shift to individualized, online-radicalized threats, as Europol reports 45 attacks and 486 arrests in 2025, with most involving lone actors.

A deadly attack near Berlin's Pride celebrations on July 25 has reopened a difficult question for European authorities: how to assess individuals whose extremist commitment is visible online but has not yet developed into a specific attack plan. The suspect, 21-year-old Abdul Ballout, drove a van into a crowd near the closing events of Christopher Street Day, killing a Polish woman and injuring at least 29. He was killed the following day during a confrontation with police. German prosecutors confirmed that investigators recovered a video in which a masked individual believed to be Ballout announced his intention to carry out an attack and pledged allegiance to the Islamic State (ISIS). The attack was not directed or operationally coordinated by ISIS, based on information publicly disclosed so far. It nevertheless reflects a model of violence increasingly central to the jihadist threat in Europe: an individual radicalized through propaganda, acting with accessible weapons and without sustained contact with the organization's central leadership. Europol's latest terrorism assessment reports 45 terrorist attacks and 486 terrorism-related arrests in 2025, with jihadist terrorism accounting for 24 attacks and 347 arrests. Most attacks and plots involved lone actors or small, self-initiated cells. The imbalance between arrests and attacks may indicate that authorities are intercepting suspects during preparatory phases. The Berlin case illustrates the limitations of prevention when warning signs do not produce a clear assessment of imminent intent. Ballout had published prohibited ISIS propaganda on Instagram twice in June 2024, traveled to Lebanon in 2025 allegedly intending to reach Syria, and was convicted in May 2026 for preparing a serious act of violence and offenses involving prohibited propaganda. The court postponed a decision on suspending the sentence, released him under probation, and lifted the arrest warrant. Prosecutors appealed. Experts argue that online propaganda sharing is often treated as a lesser offense, but it is frequently the only visible marker of radicalization before an individual moves to violence.