Ukraine and Russia reported cyberattacks on their emergency-alert apps overnight November 1–2, 2026. The messages included false nuclear-threat warnings; Ukraine’s Air Alert app also showed bogus alerts about chemical danger, street fighting and Russia’s Oreshnik missile. The reports establish that both countries said their apps were compromised, but do not establish who carried out either attack or whether the incidents were connected.
3
5
9
What the false alerts said
In Ukraine, users saw messages warning of nuclear and chemical threats in Kyiv and other areas, as well as possible street fighting. Another false message claimed the Oreshnik missile had been deployed. Ukraine’s Air Force said the app had been subjected to hostile interference and urged people to stay calm; officials said there was no radiation threat.
1
3
11
Hours later, Russia’s Emergencies Ministry said its app had suffered a “massive cyberattack” that spread false information. Reports described fabricated nuclear-threat notifications, including in Belgorod, Oryol, Voronezh and Rostov regions. One report said a message claimed nuclear warheads had been launched toward every Russian region and told recipients to prepare supplies; the precise wording and details of that message are less firmly established in the available reporting.
5
30
49
Ukraine’s app was disrupted, then restored
Ukraine’s Air Alert service was temporarily suspended after unauthorized parties interfered with it. Ukrainian authorities later said it had been restored overnight.
13
20
During the disruption, Ukraine’s Ministry of Digital Transformation advised people to use smartphone emergency notifications, sirens and official Air Force channels for air-threat information. The alert channel also cautioned users against clicking links in suspicious notifications.
20
46
That guidance matters because people use emergency alerts to decide when to seek shelter. A false warning can cause unnecessary alarm, while an outage can complicate access to warnings about real threats. The reported breach is not a reason to dismiss future alerts: officials pointed users toward other channels while the app was unavailable.
2
46
Who was responsible remains unverified
Ukraine’s Center for Strategic Communications blamed Russia for the attack on the Ukrainian app. That was an official accusation; the reporting available here does not provide independently verified technical evidence identifying the attacker.
10
22
Attribution claims around the Russian app are also unconfirmed. Atesh said pro-Ukrainian hackers had breached it, but reporting noted that the claim was not independently confirmed. Russia’s acknowledgment that its app was attacked confirms the reported incident, not the identity of whoever carried it out.
17
A separate report said a false post mentioned the group Hitcore and that Russian Telegram channel Mash reported a responsibility claim from people it described as the group’s representatives. That claim could not be independently verified.
31
It is also unknown whether the two app breaches were coordinated or connected. Reporting said the link between them was unclear, so their close timing alone is not proof of a shared operation or retaliation.
3
9
The attacks coincided with a local truce’s end
The reports came as a six-day local ceasefire around Oleshky in Ukraine’s Kherson region ended on Sunday. Kyiv said Russia rejected an extension. The timing provides context, but the available reports do not establish that the truce’s end caused or was connected to the app attacks.
6
9