Emergency Alert Apps in Ukraine and Russia Hacked Hours Apart, Sending False Warnings
On the night of November 1, 2026, Ukraine’s official Air Alert app told users in Kyiv that a radiation threat had been declared, then warned of chemical attacks and street fighting. None of it was true. The Ukrainian Air Force said the app had probably been hacked, and the government took it offline.
A few hours later, early on November 2 Moscow time, Russia’s Emergencies Ministry said its own mobile app had been hit by a “massive cyberattack” that sent false information to the public, Reuters reported, citing the state news agency TASS. Whether the two incidents are linked isn’t known.
What Happened in Ukraine
The fake alerts started at 22:47 Kyiv time (20:47 GMT) on Sunday, according to a timeline compiled by the BBC:
- 22:47: “Radiation threat declared in Kyiv,” in Ukrainian.
- 22:48: a Russian-language message: “There will be a nuclear alert across Ukraine. Don’t worry, it’s Oreshnik flying,” a reference to Russia’s Oreshnik ballistic missile.
- 22:49: chemical threat and street fighting alerts for Kyiv, both telling people not to go outside.
- 23:53: a series of all-clear messages for the Kyiv alerts.
Users elsewhere got similar warnings. BNO News saw nuclear, chemical and street fighting alerts for Kharkiv, and street fighting and artillery alerts for Zaporizhzhia. Ukrainian media reported that in the Lviv region some street sirens also played the radiation warning (24 Kanal).
The Air Force said on Telegram that the app “appears to have been subjected to enemy influence” and added: “There is no radiation threat! Stay calm and follow our updates on our channel!” (Reuters via ThePrint). Vinnytsia’s governor, Natalia Zabolotna, warned residents not to click a link in the message, which officials said could be part of a phishing operation (Kyiv Independent).
The Ministry of Digital Transformation said the app had “apparently been compromised” and temporarily disabled it (BBC), while air raid sirens and other public alert methods kept working (Reuters). The Air Alert app was developed by the ministry with the Ukrainian security company Ajax Systems, according to the Kyiv Independent.
Russia's Emergencies Ministry App
Russia’s Emergencies Ministry (MChS) announced the attack on its app early on Monday, November 2; Russian outlets carried the statement from about 3:30 a.m. Moscow time. According to TASS, as reported by Reuters, the “massive cyberattack” resulted in “the spread of false information to the public,” and the ministry is working to restore the app.
Russian outlets Life.ru and Moskva 24 quoted the ministry as saying specialists were fixing the vulnerability and restoring normal operation. Life.ru reported that users were told messages from the app might be unreliable while the work continues, and that technical work was also under way on the ministry’s website.
The ministry hasn’t said what the false messages contained or how many users received them, and no one has claimed responsibility.
What We Know and What We Don't
Both governments describe the incidents as attacks on official alert apps. Beyond that, the public record is thin. As of early November 2, neither side had said:
- how the attackers got in, for example through the apps’ servers, a push-notification service or a third-party supplier;
- how many people received the false alerts;
- who was responsible. Ukraine’s Air Force blamed “the enemy” without naming a group, and Russia’s ministry named no one;
- whether the two attacks are connected. Reuters said it was not immediately clear.
We’ll update this article as the investigations produce answers.
How to Get Reliable Alerts When an App Fails
The incidents show the weak spot of relying on a single app for warnings that people act on in seconds. Ukraine’s Ministry of Digital Transformation listed these alternatives while the Air Alert app is offline (24 Kanal):
- Emergency alerts on your phone (cell broadcast). These come from the mobile network, not from an app. Turn them on in your phone’s settings: on an iPhone under Settings > Notifications, at the bottom of the screen; on Android the location varies by model, usually under safety or emergency settings.
- Street sirens and other public warning systems, which the ministry says are working.
- The Air Force’s official channels on Telegram, WhatsApp and Viber.
- The Kyiv Digital app for people in Kyiv.
A few habits help anywhere:
- Treat an alert that asks you to open a link with suspicion. A real air raid warning tells you to take shelter; it doesn’t need you to visit a website.
- If an alert tells you to take shelter, sheltering is still the safe choice. Check an official second source from there before you act on anything more drastic.
- Keep more than one alert source switched on, so that one compromised channel isn’t the only thing you hear.
Our Mission
We believe security online security matters and its our mission to make it a safer place.