In brief
Ukrainian officials say the Air Alert app was hacked, producing false alarms that included a nuclear threat and a Russian missile deployment. The State Emergency Service restored normal service by Monday midnight, while Russia’s Emergencies Ministry confirmed a massive cyberattack. The incident follows a recently ended ceasefire in Kherson and underscores ongoing informational warfare in the conflict.
The Ukraine Air Alert smartphone app, designed to warn citizens of incoming air attacks, sent a series of false alerts on Sunday, including a claim that a nuclear weapon was imminent and that a Russian hypersonic missile had been deployed. Ukrainian authorities say the app was hacked, most likely by Russian actors, and that the false warnings triggered nationwide air‑raid sirens.
The Ukrainian Air Force posted a statement on its official Telegram channel, saying the app "appears to have been subjected to enemy influence." According to the post, the messages carried warnings of nuclear and chemical threats and the Oreshnik missile, leading residents across Ukraine to believe a catastrophic attack was underway.
This string of misinformation included a headline warning: "Hi! A nuclear alert is about to go off all across Ukraine! Don't worry, the Oreshnik a Russian intermediate‑range ballistic missile is on its way." The false alerts produced a wave of panic, causing civilians to turn on sirens that had otherwise been reserved for real threats.
In response, Ukraine’s State Emergency Service issued an all‑clear at midnight on Monday and announced that its national warning system was operating normally. The agency advised citizens not to click on third‑party links and repeated that all official caution signals would again be routed through regional administrations and street warning devices.
Russian officials, in turn, confirmed that the country’s own mobile app was hit by a "massive cyberattack" that had led to the spread of false information. The Russian Emergencies Ministry made the statement on its Telegram channel later on Monday morning, acknowledging that the attack had caused widespread misinformation.
These exchanges come at a time of heightened tension. The false alerts followed the completion of a localised ceasefire in Kherson that had begun on Tuesday and ended on Sunday. Russian missile and drone strikes had also targeted energy infrastructure earlier in the week, with President Volodymyr Zelensky reporting that hundreds of thousands of Ukrainians had been left without power.
The incident raises significant civic stakes. A state‑run emergency alert system is a key public safety institution whose reliability requires public trust. When misinformation is disseminated through such channels, it can erode confidence in government institutions, undermine the rule of law, and impair citizens’ ability to make informed decisions during crisis.
Local communities reported panic and disruptions, with many residents relocating to perceived safer areas. The strain on emergency services and the potential for widespread evacuation highlighted how a compromised public communication tool can have immediate socio‑economic consequences, especially for those who rely on timely and accurate information for survival.
The Ukrainian Centre for Strategic Communications, known as SPRAVDI, has compounded the narrative by explicitly blaming Russia for the hack in a post to X. By attributing the attack to a foreign state actor, the centre seeks to frame public perception and uphold accountability for the breach, although independent verification of the cyberattack’s origin remains pending.
Stakeholders now call for strengthened cybersecurity around Ukraine’s emergency notification infrastructure and for transparent accountability mechanisms that can quickly identify the source and scope of such attacks. As Russia and Ukraine continue to engage in both kinetic and informational warfare, the integrity of civic institutions will remain a central point of contention and a litmus test for democratic resilience in the region.
