28 February 2026 :
February 28, 2026
IRAN
Hrana Report: The First Day of the U.S.–Israel and Iran War
Initial Report on the Scope of Attacks and Their Human Consequences
Following military attacks by the joint United States and Israel against Iran on February 28, 2026, preliminary data collected from field sources and published reports presents a picture of a large-scale, multi-wave operation: at least 59 incidents recorded across 18 provinces; a minimum estimated 333 civilian casualties; confirmed military casualties; damage to infrastructure and educational centers; severe, multi-phase internet disruptions; and a wave of legal, political, and humanitarian reactions both inside and outside Iran are among the developments.
This report offers a preliminary, data-driven account of the dimensions of the February 28, 2026 attacks on Iran, an image that reflects the crisis at multiple levels: the operational pattern of the strikes, the human cost, damage to infrastructure, communication disruptions, and international and domestic responses.
For now, efforts are being made to provide a conservative estimate of the figures so that, with the subsequent collection of additional data, the numbers can be brought closer to reality. In cases where there was a possibility of overlap or double counting, hasty aggregation has been avoided, and the data has been assessed based on distinguishable and more reliable cases. Accordingly, this text should be regarded as the first coherent snapshot of an evolving situation, one that will become more precise in subsequent sections of the report as verification processes are completed and field details become clearer.
Overview of the Attacks and the Initial Pattern of Incidents
Based on preliminary data collected from today’s attacks, at least 59 incidents have been recorded across 18 provinces in Iran. In terms of type of attack, geographic distribution, and timing, these incidents present a picture of a large-scale, multi-wave operation.
Approximately 73 percent of the recorded incidents were related to missile strikes. They were followed by cases with unspecified methods of attack (around 17 percent) and drone strikes (over 10 percent). Regarding the weapons used, preliminary data indicate that the majority of the recorded attacks were carried out using cruise missiles.
Geographically, Tehran recorded the highest number of incidents, followed by East Azerbaijan and West Azerbaijan provinces. Additionally, several incidents were reported in the provinces of Bushehr, Fars, Hormozgan, Sistan and Baluchestan, Khuzestan, and Alborz, reflecting the broad geographic scope of the attacks across different regions of the country.
An analysis of the recorded times indicates that more than half of the incidents occurred within a concentrated window during the morning hours, with approximately 56 percent taking place between 9:00 and 9:30 a.m. (Tehran time). A second wave is also observed around 7:00 p.m. This temporal concentration may indicate that the attacks were carried out in multiple phases, although in some cases the recorded time of the incident may not exactly correspond to the precise time of occurrence.
At present, a large portion of the attack targets and their nature remain unspecified. Nearly 70 percent of the targets have been categorized as “unspecified,” while approximately 19 percent have been identified as military targets and close to 12 percent as civilian targets. This pattern indicates that the verification process and legal classification of the targets are still ongoing and may change as further information becomes available.
Additionally, among the recorded incidents, no cases of prior warning before the attack have been documented.
A significant portion of the incidents are in the “confirmed” verification category; however, in many cases the final assessment of the extent of damage has not yet been completed, and some of the damage remains classified as “unspecified.”
This picture suggests that today’s attacks were carried out on a wide scale, both in terms of geographic scope and the volume of recorded incidents. Nevertheless, details regarding the nature of the targets, the extent of damage, and human casualties will be clarified with greater precision in subsequent reports as the verification process is completed.
Civilian Casualties
Following a review and refinement of the initial civilian casualty data, and after removing overlapping aggregate figures as well as excluding ambiguous cases, the minimum reliable estimate in this section indicates that at least 133 civilians have been killed and 200 civilians injured so far; that is, a total of at least 333 civilian casualties in cases that have been recorded individually and with specific figures.
This estimate represents a minimum figure. In several instances, the occurrence of harm has been documented, but the exact number of injured has not been specified and therefore has not been included in the final tally. In other words, the actual number of civilian casualties is likely higher than this figure.
In addition to this case-based estimate, a nationwide aggregated statistic released as of 8:45 p.m. reported 201 deaths and 747 injured. However, due to the possibility of overlap with provincial and local reports, as well as differences in the scope of coverage, this aggregated figure has not been incorporated into the case-based total in this section, in order to avoid double counting.
In terms of geographic distribution, the highest explicitly recorded figures in this section relate to Hormozgan and Fars provinces. In Hormozgan, reports from one incident in Minab and another in Bandar Jask indicate significant casualties. In Lamerd (Fars Province), recorded figures report civilians killed and injured in a sports hall and a residential area. Additionally, cases of civilian injuries have been documented in Tehran, Qazvin, and Khuzestan.
Regarding the types of locations affected, preliminary data show that schools and spaces associated with children and students are among the sites damaged, a matter of particular humanitarian and legal concern. In some cases, damage has also been reported in urban areas and other civilian locations, including residential neighborhoods and workplaces.
In one provincial report, figures for those killed and injured were received; however, the report explicitly stated that it was unclear whether the individuals were civilians or military personnel. For this reason, these cases have not been included in the final estimate of this section. Likewise, in several other entries, phrases such as “a number of injured” or “an unspecified number” were used, which at this stage prevents their conversion into precise figures.
Demographic information about the victims also remains incomplete. Although in some cases reference has been made to child victims or injured students, in many records a precise breakdown by age, gender, and the proportion of children to adults has not yet been provided.
Overall, the findings from this section so far indicate significant civilian casualties across several provinces, alongside the natural information gaps typical of the initial stage of documentation, gaps that, with the completion of field reports and more detailed data classification, may lead to a more precise assessment of the human dimensions of the attacks.
Military Casualties
Based on preliminary data collected regarding military casualties, and after removing overlapping aggregate figures as well as excluding cases that remain under independent review, the minimum reliable estimate in this section indicates that at least 8 military personnel have been killed and 2 injured so far; that is, a total of at least 10 cases of military fatalities and injuries recorded separately and in a clearly distinguishable manner.
This estimate is a minimum and conservative figure. The reason is that some initial reports were released in general terms and without precise numbers (for example, using phrases such as “a number killed and injured”), while others are still undergoing independent review and confirmation. In order to prevent double counting or unintended inflation of figures, these cases have not been included in the main total of this section.
Separate reports have also indicated the deaths of several senior military-defense figures; however, in the current dataset these cases remain classified as “under review.” Should they be independently confirmed, the total number of recorded military fatalities may surpass the present minimum estimate.
In terms of geographic distribution, the cases recorded in this section are primarily concentrated in Tehran; Sistan and Baluchestan (including Konarak and Chabahar); and West Azerbaijan (including Shahin Dezh). This pattern indicates that the documented military casualties are not confined to a single region, but have been reported in several operationally significant locations across the country.
Among the recorded cases, both identified individuals and cases without publicly disclosed identities are present. Some entries have been documented individually and with full names, while others have been recorded without personal identification but linked to a specific incident. Given that these unnamed cases are connected to distinct incidents and differing statuses (killed/injured), they have been retained as independent cases in the minimum estimate.
In terms of verification status, the picture in this section is mixed: some cases have been registered as confirmed, while others remain at the level of initial confirmation. This indicates that although the occurrence of military casualties in several locations appears reliable, the final details regarding the precise number, the full identities of the victims, and the distribution of personnel across different military branches are still being completed.
Overall, the preliminary data in this section indicate that today’s attacks have resulted not only in civilian casualties but also in significant military losses. However, in this area, due to security considerations, restrictions on information release, and the publication of general and non-numerical reports, the process of finalizing definitive figures may involve further delays.
Damage to Infrastructure and Facilities
Following a review and refinement of the preliminary data, at this stage at least 14 distinct targets have been recorded across 7 provinces. This estimate is based on cases that could be separately identified and avoids double counting a single target within one incident.
According to these data, the majority of the recorded targets consist of military bases and facilities. Of the total recorded targets, 9 cases (approximately 64 percent) fall into the category of military targets. In addition, 3 cases involve civilian infrastructure or dual-use facilities (around 21 percent), and 2 cases involve educational centers/schools (approximately 14 percent). This pattern indicates that although the primary focus of the recorded attacks was on military targets, damage to infrastructure and civilian centers is also clearly reflected in the preliminary data.
In terms of geographic distribution, the highest number of recorded targets appears in Hormozgan and Sistan and Baluchestan (3 cases each). They are followed by Tehran, Kurdistan, and Fars (2 cases each), and then Markazi and Yazd (1 case each). This distribution shows that damage to facilities was not confined to a single geographic axis, but was reported in the south, southeast, west, and central regions of the country as well.
Among the recorded civilian targets, or targets with both military and civilian applications, are Mehrabad Airport, an industrial town, as well as schools and a children’s sports hall. From a humanitarian and legal perspective, the documentation of damage to educational centers and child-related spaces is of particular importance, as these categories of targets may play a significant role in subsequent assessments of the attacks’ impact on the civilian population.
Information obtained regarding the targeted infrastructure after the attacks indicates that three facilities were taken out of operation (rendered non-operational), while one has been reported to remain operational. No information is currently available regarding the status of the other targets beyond these four cases. Notably, the non-operational cases recorded at this stage primarily relate to children’s educational centers.
In terms of verification, 12 targets have been registered as confirmed and 2 as initially confirmed. In some cases, visual evidence (video) is also available alongside news reports, which may be important for further review and field verification.
Nevertheless, the data in this section are still incomplete. In most cases, no estimate has been recorded of the number of people affected by damage to infrastructure, and therefore at this stage it is not possible to provide a reliable numerical summary of the scope of indirect human impacts (such as disruptions to transportation, education, or public services). Environmental impacts have also in most records either been reported as “no effect” or remain in need of further assessment.
Overall, the preliminary picture in this section indicates that today’s attacks, in addition to military targets, have also caused damage to infrastructure and certain civilian and educational centers. As the data are completed and the operational status of targets becomes clearer, a more precise assessment of the severity of the damage, service-related consequences, and the extent of impact on the civilian population is expected to become available.
Internet and Communication Disruptions and Their Impact on the Flow of Information
Based on data collected regarding the state of communications, at least three distinct entries documenting nationwide internet disruption were recorded on the day of the attacks. These entries should not be interpreted as three separate incidents, but rather as successive stages of a single national disruption. For this reason, a simple aggregation of these cases as “three independent shutdowns” has been avoided in order to maintain a picture closer to reality.
The data indicate that within a short time frame, the disruption escalated from a noticeable reduction in access to a severe collapse in national connectivity. In the first entry, the level of internet connectivity in Iran had dropped to approximately 54 percent of normal levels—reflecting widespread disruption, though not a complete shutdown, in parts of the country.
Only about 23 minutes later, in the subsequent entry, national connectivity reportedly fell to around 4 percent of normal levels—a dramatic decline effectively indicating that a large portion of public internet access across the country had become inoperable. The short interval between these two entries suggests a rapid intensification of the disruption during the early hours of the crisis.
In a later entry reported in the final hours of the day, it was stated that the country had been offline for 12 hours following the imposition of a nationwide internet shutdown. Taken together with the previous two data points, this presents a multi-stage pattern: reduced access, severe collapse of connectivity, and prolonged nationwide offline status.
In terms of geographic scope, all three recorded entries indicate a national-level disruption, not limited to any specific province or city. This characteristic heightens the significance of this section, as during military attacks, a nationwide internet disruption is not merely a technical issue; it directly affects the flow of information, the ability to conduct field verification, citizens’ access to safety information, and communication among families.
From a documentation perspective, this situation carries important implications: the lower the level of connectivity, the more difficult it becomes to record and transmit field evidence (including images, videos, and local reports), and the greater the time gap between the occurrence of an incident and its registration or publication. For this reason, it is expected that some data regarding casualties and damages may enter the documentation and verification cycle only in the hours and days ahead, as disruptions are partially lifted.
Overall, the preliminary picture in this section indicates that alongside the attacks, Iran experienced severe and multi-phase internet disruption, one that likely affected the quality of access to information, the speed of informal relief efforts, and the independent documentation process. As data are completed and the timing of disruptions is aligned with other recorded incidents, a more precise assessment can be made of the relationship between the timing of the attacks and the pattern of communication shutdowns.
Reactions and Statements; The Dominance of Legal and Humanitarian Concerns Alongside Domestic Security Warnings
Based on statements recorded on February 28, at least eight positions were issued by international bodies, government officials, political parties, and one cultural figure regarding the U.S. and Israeli military attacks on Iran. These positions have largely focused on three main issues: concern for the safety of civilians, emphasis on international legal standards, and the necessity of de-escalation.
Among these statements, a significant share comes from international institutions and actors engaged in human rights and humanitarian law. The UN Special Rapporteur on the situation of human rights in Iran described the attacks as a violation of the UN Charter and lacking authorization from the Security Council. Volker Türk, the United Nations High Commissioner for Human Rights, also condemned the military strikes and subsequent retaliatory attacks, expressing concern for the safety of civilians. At the same time, the President of the International Committee of the Red Cross called for immediate respect for the laws of war, echoing similar humanitarian concerns.
At the state level, reactions have likewise centered primarily on humanitarian concerns and the need for de-escalation. The Ministry of Foreign Affairs of Turkey issued a statement expressing deep concern for civilian lives. The Prime Minister of Spain also condemned the U.S. and Israeli military attack and emphasized the urgent need to reduce tensions in the region. This pattern suggests that even in positions that did not enter into detailed legal analysis, concern over the expansion of the crisis and its humanitarian consequences has been the central theme.
Inside Iran, a distinct official response has also been recorded. The Prosecutor’s Office issued a warning addressing individuals who, according to the statement, engage in “spreading fear, rumor-mongering, or threatening citizens’ security” in cyberspace or other arenas. This stance indicates that alongside the military and humanitarian dimensions of the crisis, domestic authorities have focused on controlling narratives, managing the public sphere, and countering what they describe as rumors.
News outlets close to security institutions also warned potential domestic critics, stating that “checkpoint units across the country have been armed and have received legal authorization to open fire.”
Overall, the preliminary picture of reactions suggests that the positions expressed at this stage have largely revolved around concern over the humanitarian and legal consequences of the attacks, while within Iran, a security-oriented approach toward information control and narrative management has simultaneously become more pronounced. As developments continue and further positions are issued by governments and international bodies, the main lines of political alignment and division regarding these attacks will likely become clearer.
