Aisha, a senior firmware engineer at a small IoT security startup, stared at the alert on her screen. One of their fleet of air quality monitors, deployed across a city’s subway system, had gone silent. Then another. Then fifty.

The EU’s on attacks against information systems criminalizes the alteration of equipment identifiers.