Published · Updated

Hacked warning apps sent false radiation and nuclear alerts in Ukraine and Russia

Ukraine's Air Alert app sent false radiation, chemical-weapons and street-fighting warnings before being temporarily suspended, while a Russian Ministry of Emergency Situations app was targeted in a separate mass cyberattack. There was no radiation emergency in Ukraine, and other civilian warning systems and air-raid sirens continued operating.

Key points

  • Air Alert sent a false radiation warning to Kyiv users late Sunday evening.
  • The app also falsely warned of chemical-weapons attacks and street fighting; no radiation emergency occurred.
  • Ukrainian authorities advised residents not to click links in the compromised app.
  • Air Alert was temporarily suspended after third-party interference and was then gradually restored.
  • Other Ukrainian civilian warning systems and air-raid sirens continued operating.
  • Russia's Ministry of Emergency Situations said attackers distributed false nuclear-launch and shelter information through its channels.
  • It remains unclear whether the Ukrainian and Russian cyberattacks were connected.

Why it matters

The compromises showed that civilian emergency-warning apps can be used to generate false nuclear, radiation, chemical-weapons and street-fighting alerts, potentially prompting dangerous public reactions. The disruption came amid heightened tensions, while Ukrainian authorities stressed that no radiation emergency existed and that other warning channels remained operational.

What happened

Late Sunday evening, Ukraine's Air Alert app sent users in Kyiv a false radiation warning. It also issued false alerts about chemical-weapons attacks and street fighting. Ukrainian officials said no radiation threat existed and urged the public to remain calm, follow official updates and avoid links in the compromised app. The false alerts disappeared soon after appearing, and the app was temporarily taken out of service before its developers began restoring it gradually. Other civilian warning systems and air-raid sirens continued to operate.

Shortly afterward, Russia's Ministry of Emergency Situations reported a mass cyberattack on its mobile app and official channels. The compromised channels falsely claimed that nuclear warheads on P1-SUN carriers had been launched across Russian regions and advised residents to stock food and shelter in basements. The ministry said teams were working to restore the app, while its website was intermittently unavailable overnight.

How Ukrainian sources describe it

Ukrainian reporting focuses on the Air Alert compromise, the false radiation, chemical-weapons and street-fighting warnings, the absence of an actual radiation emergency and the temporary suspension of the app. Ukrainian authorities urged citizens not to click links in the application and stressed that other warning systems and air-raid sirens continued working. The Center for Strategic Communications blamed Russia, while the Ukrainian Air Force said the app may have been compromised by an enemy.

How international sources describe it

International coverage presents the incidents as parallel cyberattacks on civilian emergency-warning applications in Ukraine and Russia. It emphasizes the false alerts sent to residents of both countries, the temporary disruption of the Ukrainian app and restoration work on the Russian app. Russian authorities did not identify a suspected attacker, and the relationship between the two incidents remains unclear.

Where reporting differs

One report suggested that the Russian cyberattack might have been a Ukrainian counterattack. However, Russia's Ministry of Emergency Situations did not identify a suspected attacker, and there is no confirmed evidence establishing whether the attacks on the two countries' apps were connected.

Background

Ukrainian authorities attributed the compromise of Air Alert to Russia, while the Ukrainian Air Force said the application may have been breached by an enemy. The Russian Ministry of Emergency Situations did not say whom it suspected of attacking its app. Ukrainian military authorities had recently evacuated 167 people from threatened areas in Ukraine's southern Kherson region.