Fake nuclear alerts hit phones in Ukraine and Russia after emergency apps were hacked
Hackers pushed false nuclear warnings through Ukraine's Air Alert app and a Russian ministry app on November 1-2, 2026. What they said and who is blamed.
The essentials: False warnings of nuclear, chemical and radiation danger reached phones across Ukraine late on Sunday, November 1, 2026, after the country’s Air Alert app was compromised. Hours later, Russia’s emergencies ministry said its own mobile app had suffered a “massive cyberattack” that sent fake information to the public. Both countries say their official warning systems kept working. A Ukrainian government body blames Russia; Moscow has named no culprit.
What did the fake alerts say?
In Ukraine, the messages began around 10:45 p.m. Kyiv time, according to NBC News, and warned residents not to go outside because of a “radiation hazard, chemical threat and street fights”. One message in Russian, as translated by The Kyiv Independent, read: “Hi! A nuclear alert is about to go off all across Ukraine! Don’t worry, the Oreshnik is on its way.” The Oreshnik is a Russian hypersonic missile. Wording varies slightly between outlets’ translations.
The incident went beyond phones. NBC reports that some public sirens and loudspeakers in the Lviv region broadcast a “radiation hazard” signal.
In Russia, the fake message claimed that “nuclear warheads” had been launched across all regions of the country and told people to stock up on food for three weeks and take shelter in basements, The Kyiv Independent and Ukrainska Pravda report.
How did each side respond?
| Ukraine | Russia | |
|---|---|---|
| App | Air Alert, developed with the Digital Transformation Ministry and Ajax Systems | Mobile app of the emergencies ministry |
| Timing | Late on November 1 | Night of November 1-2 |
| First response | Air Force: “There is no radiation threat!” | Ministry: “massive cyberattack” sent fake information |
| Status | False alerts cleared about an hour later, app gradually restored | Public warning system working, app still being repaired at 04:00 |
The Ukrainian Air Force said on Telegram that the app “appears to have been subjected to enemy influence” and urged people to stay calm, Al Jazeera reports. The app’s developers said that unauthorised persons had interfered with it and that they had disabled push notifications and suspended the service. They later said the app “does not store or use personal data, so there is no threat to users”.
Regional officials raised another concern. The governor of Vinnytsia, Natalia Zabolotna, told residents: “Do not click on the link in the message.” According to The Kyiv Independent, governors said the attack could involve a phishing operation, and the State Emergency Service repeated the warning about links.
Russia’s ministry played down the role of its app, describing it as “an additional, supplementary information service”, NBC says. It added that the hack had not affected the public notification system, according to Ukrainska Pravda.
Who is behind the attacks?
No one has been independently identified. Al Jazeera reports that SPRAVDI, Ukraine’s Centre for Strategic Communications, blamed Russia in a post on X. Russian authorities spoke only of “malicious actors”, without naming anyone.
The Kyiv Independent suggests that the Russian hack “may have been a Ukrainian response”, but that is the outlet’s reading: the Russian statement it quotes does not name Ukraine. NBC says it was not immediately clear whether the two incidents were linked. None of these reports explains how the apps were breached or how many users received the messages.
Why does it matter?
Alert apps are how civilians learn that they should take cover, so their value rests on trust. A false nuclear warning damages that trust even when it is cleared within an hour. Ukraine’s Ministry of Digital Transformation and State Emergency Service responded by explaining alternative ways to receive alerts, Ukrainska Pravda notes, and Kyiv authorities said a separate city app was working normally.
The timing also stands out. NBC reports that the hacks came just as a rare humanitarian ceasefire between the two sides ended. Civilian infrastructure has been a growing concern elsewhere too, from attacks on ships in the Black Sea to the Russian trawlers tracked near undersea cables around Britain.
