Key points
- On 17 September 2024, pagers used by Hezbollah members exploded across Lebanon; the health minister reported 12 dead, including two children, and about 2,800 injured. Radios exploded the next day.
- Israel’s prime minister said in November 2024 that he approved the operation; reporting describes pagers supplied with explosives built in.
- Experts rejected the idea that hackers made the batteries explode. It is better described as a hardware supply-chain compromise with a remote trigger than as a cyberattack.
What this article covers: the 2024 Lebanon pager and radio explosions: the documented facts, the reported attribution, and whether it counts as a cyberattack.
Its place in the series: the series’ case study of supply-chain compromise, showing how trusted devices can be turned into weapons before they reach their users.
On 17 and 18 September 2024, thousands of pagers and hundreds of walkie-talkies exploded across Lebanon. In the hours that followed, many people, including on this site, asked whether hackers had made the devices explode. The evidence that has emerged since points to something different: devices tampered with during manufacturing and supply, then triggered remotely. This article separates what is documented, who is reported to be responsible, and whether the operation should be called a cyberattack.
What is documented
On 17 September 2024, pagers used by members of Hezbollah exploded almost simultaneously across Lebanon. Lebanon’s health minister, Firass Abiad, said 12 people were killed, including two children, and between 2,750 and 2,800 were injured (Naharnet) (The New Arab). A second wave of explosions involving hand-held radios followed the next day, raising the death toll further (Report.az, citing Lebanon’s health ministry). Our news report from October 2024 describes the events in more detail: The Day the Pagers Exploded.
Who is reported to be responsible
Hezbollah blamed Israel immediately. In November 2024, Israeli Prime Minister Benjamin Netanyahu said publicly that he had approved the operation (Khaleej Times). Subsequent reporting traced the pagers to a supply chain involving a Taiwanese brand licence and a Hungary-registered company, and reported that the devices had been manufactured or modified with explosives built in (Khaleej Times) (The Tribune). These accounts rely on officials and sources quoted by news organisations; full technical details have not been published by any government.
Was it a cyberattack?
On the evidence available, not in the usual sense. A cyberattack normally means causing harm through code or network access alone. Early speculation that hackers had overheated the pagers’ batteries was rejected by experts, who said the blasts were too large for a battery failure and pointed instead to explosives inserted during manufacturing and detonated by a received message (Logically Facts).
The more accurate description is a supply-chain compromise of hardware with a remote trigger. It still belongs in a series about digital threats to human life, for three reasons:
- The trigger was a communication signal, so the network was part of the weapon.
- It shows that a device’s supply chain is part of its security. A product can be compromised before the buyer ever receives it.
- It shows how people can be targeted through devices they carry and trust.
What it means for everyday connected devices
Ordinary phones, pagers and radios cannot be made to explode by software alone; a lithium battery fire is very different from a blast like those in Lebanon. The realistic lessons are about trust in the supply chain:
- Know where devices come from. Organisations should buy communication equipment through verified channels and be wary of unusual intermediaries.
- Inspect high-risk equipment. Devices issued in bulk to staff in sensitive roles can be sampled and inspected before deployment.
- Treat hardware as part of security. Supply-chain risk management applies to physical devices as much as to software updates.
Other articles in this series cover devices that can be attacked through software, such as pacemakers and connected cars. The series overview explains how this case differs from attacks carried out through code.
Frequently asked questions
What happened in the Lebanon pager explosions?
On 17 September 2024, thousands of pagers used by Hezbollah members exploded across Lebanon. Lebanon’s health minister said 12 people were killed, including two children, and about 2,800 were injured. Walkie-talkies exploded the following day, causing further deaths.
Who carried out the pager attack?
Hezbollah blamed Israel, and in November 2024 Israeli Prime Minister Benjamin Netanyahu said he had approved the operation. News reports say the pagers were supplied through front companies with explosives built in.
Was the pager attack a cyberattack?
Not in the usual sense. Experts rejected the theory that hackers overheated the batteries. Reporting indicates explosives were placed in the devices during manufacturing and detonated by a received message, making it a supply-chain compromise with a remote trigger rather than an attack carried out through code alone.
Can hackers make a phone or pager explode?
There is no evidence that software alone can make an ordinary phone or pager explode. Malware can in rare cases cause battery overheating, but the Lebanon blasts required explosives placed inside the devices.
Last reviewed: 21 October 2026.
