Authorities in Ukraine and Russia reported cyberattacks on their emergency alert apps overnight from November 1 to 2, 2026. Ukraine’s app sent false warnings about radiation, chemical threats and street fighting; Russia reported false alerts on its own system hours later. The attacks’ timing is documented, but reporting available here does not establish that they were coordinated—or that Ukrainian President Volodymyr Zelenskyy confirmed a retaliatory hack.
2
8
29
What happened in Ukraine
Ukraine’s public air-raid alert app began sending false messages just before 11 p.m. local time on November 1. Reuters reported warnings for Kyiv and other areas, including radiation and chemical threats and the risk of street combat. One false message claimed Russia had launched an Oreshnik missile and declared a nuclear alert.
2
The warnings appeared within an app people rely on for air-raid information, making the false messages especially alarming. Ukraine’s alert channel said unauthorized parties had interfered with the app and temporarily suspended the service; it also warned users not to click suspicious notification links. The app was later reported to be running again.
1
3
Russia reported an attack hours later
Early on November 2, Russian authorities said hackers had accessed the Emergency Situations Ministry’s app and sent false information to the public. AP reported that it was unclear whether the attacks on the two countries’ apps were related.
29
CBS News, citing Russian media, reported that false alerts went to users in 33 regions. Those messages falsely claimed nuclear warheads had been launched and told residents to stock up on food and shelter in basements. That reported reach and content should be treated as claims in Russian media, not as independently established details.
39
Who was behind the hacks?
A Russian Telegram channel said the group Hitcore claimed responsibility for the breach of Ukraine’s app. AP said it could not independently verify the claim, and the group’s affiliations and motives were unclear. A claim of responsibility alone does not confirm who carried out an attack or how access was gained.
17
29
The supplied reporting does not confirm the alleged role of the group Atesh in sharing the Russian alert, or a report that Ukrainian lawmaker Oleksandr Merezhko initially declined to confirm Ukrainian responsibility. It also does not substantiate the claim that Zelenskyy confirmed Ukraine retaliated specifically for an attack on civilians. The reports cited here establish the app disruptions and false alerts, not those attribution claims.
2
29
What is known about impact and recovery
Ukraine temporarily suspended its app and later reported that it was back online. Russia’s authorities said efforts to restore their app were continuing at the time of AP’s report.
1
3
The reporting available here does not establish whether radiation readings changed, whether defense operations were affected, or whether other public-warning systems continued to function. Those details should not be inferred from the false notifications themselves.
The separate Oleshky ceasefire context
The app incidents came as a six-day humanitarian ceasefire around Russian-occupied Oleshky ended. Ukraine’s General Staff accused Russian forces of using the pause to strengthen their positions; that is an allegation attributed to Ukrainian officials, not an independently confirmed account in the supplied report.
19 Ukrainian officials also said Russia declined to extend the ceasefire.
23
The timing places the cyberattacks alongside a separate development in the war, but the available reports do not show that the ceasefire’s end caused or was linked to the attacks on the alert apps.