Cyberattacks Disrupt Alert Apps in Russia and Ukraine, Triggering False Warnings
Key Facts
Ukraine’s public alert app and Russia’s Emergency Situations Ministry app were hit by cyberattacks that caused false warnings and information to be published, according to official statements cited by Reuters. In Ukraine, the air force said the air-raid alert app appeared to have been subject to “hostile interference” and denied any radiological threat. The incident displayed nuclear and chemical warnings and a threat of street fighting in Kyiv and other areas. A false message also appeared saying Russia had deployed an Oreshnik missile, before the abnormal activity disappeared. In Russia, the Emergency Situations Ministry said a large-scale attack on its app had enabled false information to be sent to the public.
The Ukrainian warnings were visible briefly and covered Kyiv and other areas, according to a Reuters report. The messages did not only warn of a nuclear or chemical danger, but also included a threat of street fighting and a message claiming that the hypersonic Oreshnik missile had been deployed. The abnormal activity then disappeared from the app. In response, the air force stressed that “there is no radiological threat” and urged residents to remain calm and follow its updates on its channel. It specifically denied a radiological danger, while the statements did not mention any actual threat of the nuclear or chemical types shown in the alerts.
Ukraine’s Ministry of Digital Transformation said the app was not working, but other alert channels remained available. It said air-raid sirens and other public notification methods were operating while the app was down. This means the false alerts appeared in the app during an incident that disrupted its operation, while the alternative alert methods cited by the ministry continued to work. The statements gave no details on how long the app was down or the scope of the impact on its users. Ukrainian authorities also did not identify who carried out the hostile interference in the information provided.
In Russia, Reuters cited the TASS news agency as reporting that the Emergency Situations Ministry app had been hit by a large-scale cyberattack that led to false information being published to the public. The ministry’s regional department in Kemerovo region confirmed that the attackers had managed to send false information to residents. The announcement did not specify what information was sent, and therefore did not confirm that the messages warned of nuclear strikes inside Russia. Authorities also did not name those responsible for the attack. The ministry said work was under way to address a vulnerability in the app and restore normal operations.
The incidents involving the two apps took place in countries engaged in the same war, but Reuters said it was not immediately clear whether the attacks were linked. The official statements cited offered no evidence of a connection between them or of a common party behind them. In Ukraine, the announced response focused on denying the radiological threat and confirming that sirens and other notification methods were working. In Russia, the announcement focused on the attack on the app and the sending of false information, with work beginning to fix the vulnerability and restore service. Addressing the Russian app remains the next step specified in the Emergency Situations Ministry’s statements, with no timeline announced for restoring its operation.
At the same time as the alert apps were breached, the governor of Nizhny Novgorod region said a large-scale drone attack had caused significant damage to an industrial facility in the Kstovo area. Authorities did not identify the damaged facility as an oil refinery. The governor said more than 100 drones had been destroyed during the night of the attack and into the morning of Sunday, 1 November 2026. He added that preliminary information indicated there had been no injuries and that emergency crews were working at the site. The announcement gave no final damage toll or time for the end of emergency operations.
The governor warned of possible temporary power outages, as well as reduced supplies of hot water and heating in some parts of the networks serving residential buildings, during repair work. Authorities thus linked the attack’s potential effects to essential services in parts of the region, without specifying the number of buildings or residents concerned. Military-monitoring channels, meanwhile, attributed the attack’s target to the Kstovo refinery known as Lukoil-Nizhny Novgorodnefteorgsintez, but this was not officially confirmed. Lukoil said the site produces diesel and jet fuel, among other products. Authorities did not confirm that the refinery was the industrial facility that was hit.