Goldman Sachs Paris Office Targeted in Iran-Linked Bomb Threat, Staff Sent Home

The warning that sent Goldman Sachs' Paris staff home on Thursday arrived first at the firm's London office: a U.S. government email alerting Goldman that a pro-Iranian group was threatening to use explosive devices against U.S. bank buildings in the French capital. Within hours, police had taken up positions outside Goldman's Paris headquarters. By Thursday morning, the firm had told Paris employees they could work remotely.

That sequence, from warning to police deployment to work-from-home directive, took less than 24 hours and reflects a significant recalibration of physical security posture at one of Wall Street's flagship European offices.

The group named in the threat, Harakat Ashab al-Yamin al-Islamiyya, known as HAYI, is a little-known pro-Iranian organization that French counterterrorism prosecutors are also investigating in connection with a foiled bombing at Bank of America's Paris branch just five days earlier. That prior incident is the key to understanding why Goldman's response threshold shifted so quickly.

In the early hours of Saturday, March 28, Paris police conducting surveillance near Bank of America's offices in the city's 8th arrondissement spotted two individuals approaching the building. Officers arrested a 17-year-old at the scene and later recovered a homemade device: a gasoline-filled container taped to a powerful pyrotechnic charge containing approximately 23 ounces of explosives. French forensic experts called it the most potent device ever identified in France, capable of producing a massive fireball. Three teenagers and one adult have since been formally charged with terrorist criminal conspiracy.

When HAYI's name appeared in a threat against Goldman's Paris building within a week of that plot, the calculus changed. The group was no longer a name on a watchlist. It had recruited operatives, sourced materials, and moved on a specific financial district address before dawn on a Saturday. Paris prosecutors said Thursday that no suspicious items had been found at Goldman's offices, but the police presence remained as French authorities reinforced security across Paris, including at diplomatic premises, cultural sites, and economic venues.

Goldman was not alone in pulling staff back. Citigroup sent employees home in both Paris and Frankfurt on Thursday and Friday, calling the arrangement "a precautionary measure." Goldman declined to comment publicly.

The threat has a clear macro origin. U.S. and Israeli strikes on Iran at the end of February sparked a broader regional conflict, and French security officials have said that while France is not itself considered a primary target, U.S. and Israeli interests on French soil may be singled out. Iranian Parliament Speaker Mohammad-Bagher Ghalibaf wrote on X in late March that financial organizations financing the U.S. military-industrial complex were "legitimate targets." HAYI posted a video on March 23 specifically naming U.S. bank offices in Paris and calling for acts of retaliation against U.S. interests and the Jewish community in Europe. The three minors arrested in the Bank of America plot were reportedly recruited overnight on March 26-27, offered between €500 and €1,000 to deliver the device, film the result, and leave.

For Goldman's Paris analysts and associates, Thursday's remote-work order was an unusual disruption to a firm culture that has resisted work-from-home even under ordinary circumstances. French President Emmanuel Macron, speaking from South Korea, commended French security services and pledged to remain "highly vigilant" about threats to U.S. and Israeli interests on French soil. For every U.S. bank with offices in Paris, the security perimeter around the financial district is now a live operational variable, not a background condition.