Emergency alert systems in both Ukraine and Russia were targeted by cyberattacks late Sunday, resulting in false warnings of nuclear, chemical, and radiation threats. Ukraine’s air force confirmed that its public air raid app was subjected to "enemy influence" at approximately 10:47 p.m. local time, triggering red-level alerts. In Russia, the emergencies ministry reported a "massive cyberattack" on its mobile app, though officials stated the broader public warning system remained functional.
The incident occurred just as a six-day humanitarian ceasefire ended in the Russian-occupied Ukrainian town of Oleshky. The localized truce, which lasted from October 27 to November 1, was brokered by U.S. First Lady Melania Trump and Pope Leo XIV to facilitate the evacuation of hundreds of civilians. While the evacuation was described by Ukraine’s human rights ombudsman Dmytro Lubinets as a success, military operations resumed elsewhere along the front lines, with both nations trading drone strikes against industrial and energy infrastructure.
In Ukraine, the hacked app sent messages in Russian and Ukrainian claiming a "radiation threat" in Kyiv and warning of incoming "Oreshnik" missiles—a Russian ballistic system. Other alerts reported chemical attacks and street fighting in the capital. Ukrainian officials urged citizens to remain calm, noting that the use of the Russian language in the alerts immediately raised suspicions. All-clear messages were issued roughly an hour later. The Ukrainian government's Center for Strategic Communications attributed the hack to Russia.
In Russia, the compromised app reportedly sent messages claiming that Ukrainian drones carrying nuclear warheads had been launched toward Russian regions, advising residents to stock up on food for three weeks. Russia's emergencies ministry clarified that its app is an "ancillary" service and that primary alerts are delivered via sirens, loudspeakers, and broadcast media. A Ukrainian espionage group claimed responsibility for the messages sent to Russian users, though the Russian government did not immediately name a specific perpetrator.
The disruption affected residents in Ukraine and Russia who rely on mobile applications for immediate safety instructions during active hostilities. In Ukraine, where air raid sirens are frequent, the insertion of nuclear and chemical threats into official channels created a new layer of pressure on a population already facing regular drone and missile strikes. For residents of Kyiv, the alerts for street fighting and radiation required verification from secondary official sources.
The timing of the digital disruption occurred just minutes before the Oleshky ceasefire expired at 11:00 p.m. on Sunday. While the number of app users receiving the false messages was not specifically reported, the alerts were described as nationwide in Ukraine. The incident resulted in the mobilization of cybersecurity specialists in both nations to restore systems.
Trilateral talks involving Russia, Ukraine, and the United States are expected to take place later in November 2026. However, military tension remains high as Russia continues to demand the surrender of the Donetsk, Kherson, and Zaporizhzhia regions, while Ukraine maintains its campaign of strikes against Russian energy hubs. Residents in the affected regions now face reinforced security protocols for government-issued digital communications.