Published · Updated

Ukraine’s Air Alert app apparently hacked, sending false radiation and missile warnings

The official Air Alert app likely came under a cyberattack or other hostile interference on the evening of 1 November, sending users false warnings about radiation, chemical, nuclear, missile and street-fighting threats. Ukraine’s Air Force said no radiation threat existed, while other warning systems and the Kyiv Digital app continued operating normally.

Key points

  • The first false radiation warning for Kyiv appeared at about 22:47 on 1 November.
  • A Russian-language message alleging a nationwide nuclear alert and the launch of an Oreshnik appeared at about 22:48.
  • The app’s threat map turned red across Ukraine and showed a missile-strike threat.
  • Air-raid sirens did not sound during the false notifications.
  • The Air Force of the Armed Forces of Ukraine reported at 23:02 that the app had likely been hacked or subjected to hostile interference.
  • By 23:10, the app displayed an error and was temporarily suspended for technical work and restoration.
  • The app team said users’ personal data had not been exposed.
  • Ukraine’s nationwide and street-level alert systems continued operating normally.

Why it matters

The Air Alert app is a key channel for warning the public about air-raid threats. False alerts can cause confusion and panic while undermining trust in emergency information. The incident also exposed a critical public-alerting service to unauthorized interference, although other warning systems remained operational. The app team said users’ personal data was not exposed and urged the public not to follow links in suspicious notifications.

What happened

At about 22:47 on 1 November, the Air Alert app began displaying false warnings of radiation danger for Kyiv, followed by warnings about chemical danger and street fighting. Around 22:48, it displayed a Russian-language message alleging a nuclear alert throughout Ukraine and the launch of an Oreshnik. The threat map turned red across the country and indicated a missile-strike threat, but air-raid sirens did not sound.

At 23:02, the Air Force of the Armed Forces of Ukraine said the app had likely been hacked or subjected to hostile interference and confirmed that no radiation threat existed. By 23:10, the app was showing an error. The app team later said third parties had interfered with its operation, disabled push notifications and suspended the service for technical work and restoration. The team also said the app does not store personal data.

Ukraine’s nationwide and street-level warning systems continued operating normally, with signals passed to regional administrations. Notifications in the Kyiv Digital app also continued to work normally.

How Ukrainian sources describe it

Ukrainian coverage has focused on the Air Force’s warning, false alerts received in Kyiv and Kharkiv, the temporary shutdown and official advice to rely on sirens, emergency notifications and verified Air Force channels. Reports provide detailed timelines and note that Ukraine’s other warning systems continued to function. Some Ukrainian headlines attribute the attack directly to Russia, while the official statements cited in the available material describe hostile interference or a likely cyberattack without definitively identifying the perpetrator.

How international sources describe it

International coverage has concentrated on the apparent hacking, the false radiation warning and the Air Force’s assurance that no radiation threat existed. It has been shorter and has focused less on the sequence of alerts and technical response than Ukrainian reporting.

Where reporting differs

Official assessments differed over whether the incident was a cyberattack, unauthorized interference or a possible breach. The Air Force described the app as likely hacked or subjected to hostile interference, while the app team reported unauthorized interference and Andrii Kovalenko identified unauthorized access or a cyberattack as possible causes. Descriptions of the app as temporarily disabled for technical work concern a later stage of the same incident rather than a contradictory account.

Background

The first false radiation warning for Kyiv appeared at about 22:47, followed by warnings about chemical danger and street fighting. A Russian-language message alleging a nationwide nuclear alert and the launch of an Oreshnik appeared around 22:48. The threat map turned red across Ukraine and showed a missile-strike threat, while sirens did not sound. The Air Force announced the likely compromise at 23:02. By 23:10, the app was displaying an error, and the team suspended its operation for technical work and restoration.