Ukraine and Russia Emergency Alert Apps Send False Nuclear Warnings After Hacks

Ukraine’s widely used Air Alert app sent false warnings of radiation, chemical attacks and street fighting on the night of 1 November before officials took it offline.

The alerts began around 22:47 local time. Users in Kyiv and other areas received messages declaring a radiation threat. One erroneous notice said Russia’s hypersonic Oreshnik missile had been deployed. The Ukrainian Air Force stated on Telegram that the app appeared to have been subjected to enemy influence and that there was no radiation threat.

The Ministry of Digital Transformation confirmed the app was not operating. Air raid sirens and other public channels continued to function. Officials warned residents against clicking links in the messages, citing a possible phishing risk. The false alerts were cancelled within about an hour.

Hours later, early on 2 November Moscow time, Russia’s Emergencies Ministry reported a massive cyberattack on its own mobile application. The ministry said the attack allowed false information to reach the public. It did not identify the source. Ukraine’s Centre for Strategic Communications blamed Russia for the attack on the Ukrainian app.

The incidents occurred as a six-day localised ceasefire in Ukraine’s Kherson region expired. Ukrainian forces had used the pause to evacuate 167 civilians from the Russian-occupied town of Oleshky and surrounding areas. Moscow declined to extend the truce.

The Air Alert app is the primary real-time warning system for incoming Russian strikes across Ukraine. A separate app for the capital continued to operate normally according to Kyiv authorities. The temporary outage forced reliance on sirens and official channels during a period of ongoing Russian attacks on energy infrastructure.

Russian authorities described the attack on their Emergencies Ministry app as enabling the spread of false information. No details on the content of those messages or the number of users affected were immediately available. Ukrainian officials described the timing as hostile interference rather than a technical failure.

The dual incidents highlight the vulnerability of digital alert systems used by both sides. Ukraine has relied on the app since the full-scale invasion began. Russia maintains a comparable tool for drone and other threats. Neither side has released technical details of the compromise.

Residents in affected areas were instructed to ignore the false messages and monitor official updates. No physical attacks matching the alerts were reported. The Ukrainian app was gradually restored later, though target displays remained temporarily suspended.

The events followed the end of the Kherson truce and continued Russian drone activity. Ukrainian President Volodymyr Zelenskyy stated that around 280,000 households lost electricity after recent strikes, including 200,000 in the Dnipro region.

Cyber operations targeting public warning systems add a layer of disruption beyond kinetic strikes. Both governments have urged calm and directed citizens to verified channels. The practical effect was a short period of confusion rather than widespread panic, as authorities quickly issued corrections.

Further investigation will determine whether the two hacks were coordinated or separate. For now, both apps have been restored or replaced by alternative methods while the underlying conflict continues.