2024 Lebanon electronic device attacks

Overview

The 2024 Lebanon electronic device attacks were two days of coordinated explosions involving communications equipment issued by Hezbollah, an Iranian-backed terrorist organization. On September 17, thousands of pagers used by the group detonated. On September 18, a second wave principally involved hundreds of walkie-talkie radios. The explosions struck Hezbollah personnel across Lebanon and Syria. Lebanese officials reported at least 37 deaths and nearly 3,000 injuries after the two days of blasts; most reported casualties were Hezbollah operatives. Civilians were also harmed. The operation formed part of the Israel–Hezbollah conflict (2023–present), which Hezbollah had opened by attacking Israel on October 8, 2023. [1][2][3]

Israeli intelligence carried out the attack through a compromised supply chain. Former Mossad officers later described shell companies posing as legitimate foreign manufacturers and untraceable explosives concealed in device batteries. Hezbollah had procured pagers and radios to avoid electronic monitoring, then distributed them to commanders, fighters and some allies. Remote detonation turned equipment intended to protect its communications into a means of striking personnel throughout its network. The blasts disrupted Hezbollah’s command and control and demonstrated how control of procurement could overcome a group’s efforts to evade surveillance. [2][3]

Hezbollah leader Hassan Nasrallah acknowledged a “major and unprecedented” blow and vowed retaliation. Israel intensified strikes against Hezbollah launchers, weapons sites and commanders in the days that followed. An Israeli strike killed Nasrallah on September 27, and Israeli incursions into Lebanon began on September 30. Those events belonged to the wider campaign that followed the device attacks; they were separate from the September 17–18 explosions. [1][4][5][6]

Background

Hezbollah began attacking Israel on October 8, 2023, in support of Hamas, one day after the October 7 attacks. Its fire across Israel’s northern border continued for nearly a year before the device operation. By September 2024, Hezbollah had fired more than 8,000 rockets, anti-tank missiles and explosive drones at Israeli civilian and military targets. More than 60,000 Israeli civilians had been displaced from their homes in the north. The sustained attacks made their safe return a central Israeli security objective. [1][7]

The confrontation involved repeated Israeli strikes on Hezbollah targets in Lebanon and Syria as the group continued launching projectiles into Israel. Israeli leaders connected the return of northern residents to ending the threat against their communities through military or diplomatic action. Israel’s Security Cabinet made their safe return a priority as the confrontation intensified. Prime Minister Benjamin Netanyahu publicly reiterated in September that his government was determined to bring those residents home safely. The device attacks occurred within this continuing conflict, rather than at the start of a new dispute. [1][4][8]

Hezbollah’s choice of communications equipment reflected its concern about electronic monitoring. Pagers could carry brief messages without relying on the ordinary mobile-phone practices the group sought to avoid; walkie-talkies served its field communications. The organization obtained and issued these devices for use by its own personnel. That distribution gave the compromised equipment access to commanders and fighters across multiple locations. It also made the security of the procurement chain as consequential as the security of messages transmitted after delivery. [2][3]

The summer of 2024 added to the pressure along Israel’s northern border. In July, a Hezbollah rocket killed 12 children and wounded more than 30 people near a soccer field in Majdal Shams, in the Golan Heights, part of the State of Israel and the historic region of Bashan. Most of Bashan lies in Syria and is today occupied by Syria. The deaths sharpened attention to Hezbollah’s ability to strike Israeli communities while displaced northern residents remained unable to return home. [1]

Course of the war

The operation depended on preparations made before September 2024. Mossad created shell companies that appeared to be legitimate foreign manufacturers within the supply chain used to obtain Hezbollah’s communications equipment. Explosives were placed inside batteries in a form designed to escape detection. Hezbollah then procured the compromised devices and distributed them among its personnel. The method combined commercial disguise, physical access to equipment and intelligence about the group’s procurement and communications needs. [2]

On September 17, 2024, pagers held by Hezbollah members began exploding across Lebanon. Blasts occurred in the Beirut area and other parts of the country, while explosions were also reported in Syria. The large number of devices and their distribution produced simultaneous emergencies in several places. Lebanese health officials reported thousands of injuries on the first day. The reports of casualties grew as hospitals treated those wounded and as further information emerged from affected areas. [3][9]

A second coordinated wave followed on September 18. Hundreds of walkie-talkie radios used by Hezbollah exploded, including devices in the southern suburbs of Beirut. One blast occurred near a funeral for a victim of the previous day’s pager explosions. The two waves struck different categories of communications equipment on successive days, extending the disruption beyond the initial pager network. Reports also described explosions involving other devices, but Hezbollah-issued pagers and walkie-talkies were the principal equipment in the operation. [3][10][11]

Lebanese officials’ reported toll after the attacks reached at least 37 killed and nearly 3,000 injured, mainly Hezbollah operatives. Those figures cover the explosions and should be distinguished from casualties in the Israeli air and ground campaign that followed. The presence of bystanders near some devices meant the effects were not confined to their holders. The devices’ distribution by Hezbollah to commanders, fighters and some allies remains central to understanding whom the operation was designed to reach. [1][3][11]

Nasrallah addressed the attacks on September 19. He called the damage to Hezbollah a “major and unprecedented” blow, promised an investigation and vowed retaliation. He also said the group would continue fighting. Immediately after his speech, Israel struck approximately 30 Hezbollah rocket launchers and infrastructure sites; an Israeli military spokesperson said those sites contained approximately 150 launcher barrels. Israel also struck weapons-storage facilities in southern Lebanon. The sequence showed that the device operation had not ended the cross-border confrontation. [1][4][12]

From September 19 through 27, Israel intensified strikes in southern Lebanon and Beirut, targeting Hezbollah’s firepower and leadership. Senior commanders were killed during the wider autumn campaign. On September 27, an Israeli strike on Hezbollah’s headquarters in Beirut killed Nasrallah. Israeli forces began incursions into Lebanon on September 30, after the device attacks and the subsequent airstrikes. The transition from covert sabotage to sustained strikes and ground action marked a widening of Israel’s campaign against Hezbollah’s capacity to attack northern Israel. [5][6][13][14]

Israel's conduct and the protection of civilians

The September device operation targeted communications equipment Hezbollah had issued to commanders and fighters. Some allies of the organization also received devices. This matters when assessing the intended targets: the pagers and radios were part of Hezbollah’s communications system, rather than ordinary devices selected from the general public. Reported casualties were mainly Hezbollah operatives. At the same time, explosions in populated places harmed civilians, and an accurate account of the operation includes those injuries and deaths. The identity of intended device holders does not erase harm to people nearby. [1][3][9][11]

The supply-chain method gave Israeli intelligence a way to strike numerous Hezbollah personnel without first locating each one for a separate airstrike. It also meant devices could detonate wherever their holders carried them, including streets, homes and gatherings. Accounts of the attacks therefore require attention both to Hezbollah’s control over procurement and distribution and to the circumstances in which individual explosions occurred. Public reporting identified a broad death and injury toll, while the extent and character of civilian harm remain questions of individual circumstances rather than something determined by the overall total alone. [2][3][9][11]

Israel’s broader security objective was the safe return of northern residents displaced by Hezbollah fire. Hezbollah had continued attacks on Israeli civilian and military targets since October 2023, and Israeli action in September took place against that sustained threat. Netanyahu linked the residents’ return to action capable of changing conditions along the border. The protection of Israeli communities and the protection of civilians around Hezbollah equipment are both necessary parts of the operation’s history. Neither the strategic purpose nor the intelligence method by itself establishes the effect of every individual blast. [1][4][7][8]

Terrorist tactics and propaganda

Hezbollah’s attacks against Israel supplied the immediate conflict context. The organization opened fire on October 8, 2023, in support of Hamas and continued launching rockets, anti-tank missiles and explosive drones for almost a year. Its attacks displaced more than 60,000 people from northern Israeli communities. The communications network struck in September supported an armed organization conducting that sustained campaign. Hezbollah’s effort to avoid electronic monitoring also explains why it placed operational trust in pagers and radios. [1][2][7]

After the explosions, Nasrallah described the operation as a grave blow while promising that Hezbollah would recover and retaliate. His speech sought to preserve the organization’s resolve in the face of an evident breach of its security. The attacks had demonstrated Israeli intelligence and technological reach inside Hezbollah’s supply chain, as well as the vulnerability of devices the group had chosen to reduce surveillance risk. Public discussion that focused solely on a possible Hezbollah response could obscure the operational damage already inflicted on its communications and personnel. [1][2][12]

The detonations also had a psychological effect on Hezbollah members. A pager or radio ordinarily gave a fighter a means of receiving instructions; after the attacks, similar equipment could no longer be assumed safe. That uncertainty extended beyond the two classes of devices that principally exploded. It challenged confidence in procurement, distribution and routine contact between commanders and fighters. The later turn toward couriers and handwritten notes was a practical response to this loss of trust in electronic communications, with consequences for the speed and reach of command. [2]

Outcome

The immediate outcome was a severe disruption of Hezbollah’s communications system and command and control. Thousands of pagers and hundreds of radios were affected across Lebanon and Syria, while thousands of people were injured and at least 37 were killed in the reported toll. Nasrallah’s acknowledgment of an unprecedented blow reflected the scale of the damage to the organization. Because the compromised devices had been distributed through Hezbollah’s own channels, the attack reached personnel across its network in a short period. [1][2][3]

The operation did not by itself bring an end to Hezbollah’s attacks or settle the question of northern Israelis’ return. Nasrallah vowed retaliation and continued resistance. Israel followed with strikes against rocket launchers, infrastructure, weapons sites and leaders, including the strike that killed Nasrallah on September 27. Incursions into Lebanon began on September 30. The explosions were therefore a decisive episode within a larger military campaign, rather than the campaign’s final action. [4][5][6][12]

Its distinctive achievement lay in turning a communications-security choice against the organization that made it. Hezbollah had sought to avoid electronic monitoring by adopting pagers and walkie-talkies. Israeli intelligence instead gained access before those devices reached users. The result illustrated the strategic importance of supply-chain security: a group can limit what its devices transmit and still be exposed if an adversary has altered the devices themselves. [2]

Aftermath and legacy

In the days after September 18, Israel’s campaign moved rapidly from device explosions to intensive strikes across southern Lebanon and Beirut. The killing of Nasrallah removed Hezbollah’s longtime leader, while the September 30 incursions brought Israeli forces into Lebanon. These later actions followed the communications breach and compounded pressure on Hezbollah’s leadership and military infrastructure. They also kept Israel’s stated objective—the safe return of displaced residents in the north—at the center of the confrontation. [4][5][6][8][13]

The lasting operational effect extended beyond the people and devices struck on September 17 and 18. Hezbollah and other adversaries moved sensitive communications toward couriers and handwritten notes after the attack. Those methods reduced reliance on compromised electronic equipment but changed how instructions could move through an organization. The episode became a prominent example of an intelligence operation in which shell companies, disguised manufacture and explosives concealed in batteries were used to penetrate an adversary’s supply chain. [2]

The attacks also shaped debate about technological advantage and deterrence. Israel demonstrated an ability to reach into equipment Hezbollah had obtained for security, while Hezbollah faced the danger that tools trusted by its members could become weapons against them. The operation’s civilian casualties remain part of its record alongside its effect on Hezbollah’s command system. In the history of the Israel–Hezbollah conflict, the September explosions stand as a distinct two-day operation that preceded the larger series of strikes, Nasrallah’s death and the Israeli incursions that followed. [1][2][3][5][6]