.png "Global Insight")
On Sunday night, millions of Ukrainians received the most frightening notifications of the war — and they were fake. Ukraine's official Air Alert app was hacked, sending false warnings of a radiation threat, a chemical attack and street fighting in Kyiv, before authorities shut the app down and told the public there was no radiation danger.
Four false alerts in three minutes
According to reports from Reuters and BBC reporting, the false messages began at about 10:47 p.m. local time on Sunday, 1 November. The first, in Ukrainian, read: "Radiation threat. Radiation threat declared in Kyiv." A minute later, a message in Russian said a nuclear alert would be issued across Ukraine and told users not to worry because "the Oreshnik is on its way" — a reference to Russia's Oreshnik ballistic missile. Two more alerts followed at 10:49 p.m., warning of a chemical attack on Kyiv and of street fighting in the city, and telling people not to go outside.
False alerts also appeared elsewhere: users saw nuclear and chemical hazards and street fighting in Kharkiv, and street fighting and artillery fire in Zaporizhzhia, according to reports. In the western Lviv region, a radiation hazard signal was briefly played on loudspeakers because of the app. Officials warned that some fake messages contained links and could be part of a phishing attempt, and urged people not to click them.
What officials said — and what is still unproven
Ukraine's Air Force said on Telegram that the app had "probably been subjected to hostile interference" and stated plainly: "There is no radiation threat!" Air Force spokesman Yuriy Ignat confirmed to AFP that the app had been hacked. Ukraine's Center for Countering Disinformation said the app was "likely compromised," and the country's strategic communications centre blamed Russia for the hack. That attribution is, for now, a Ukrainian official claim: no technical evidence identifying who was responsible has been published, and this article does not treat blame as proven.
The app's team later confirmed the hack, saying third parties had carried out unauthorised interference, and that it had disabled push notifications and temporarily suspended the app. The team said the app neither stores nor uses personal data, so users faced no data risk, and that extra protection is being added. By midnight, the State Emergency Service said the national alert system that feeds regional administrations and street sirens was working normally, and the app was being brought back in stages early on 2 November — push alerts returning first, with the map's target display still to follow.
Why this hack matters
The Air Alert app, built by Ajax Systems and developer Stfalcon with support from Ukraine's Ministry of Digital Transformation, is the system millions of Ukrainians rely on for minutes of warning before missile and drone strikes. Hacking it does not just spread false information; it attacks trust in the warning itself. If people learn to doubt the next alert, the next real one may be ignored. It also comes as Ukraine continues to seek air-defence support, including the recent US Patriot missile sale.
The timing added to the alarm: the incident came on the same day a localised ceasefire around Oleshky in southern Kherson region expired. Authorities stressed that the separate national emergency warning system was not compromised, and advised Kyiv residents to use the separate Kyiv Digital app while Air Alert is restored. The episode lasted about an hour. Its lesson will last longer: in a war where a phone notification can mean shelter or death, the notification system itself has become a target.