Ukraine and Russia report hacked alert apps sent fake nuclear warnings

What happened

On the evening of Nov. 1, 2026, Ukraine’s Air Alert smartphone app, used by millions, sent a series of false warnings starting about 22:47 local time. Messages reported a radiation threat in Kyiv, a nuclear alert across Ukraine linked to Russia’s Oreshnik missile (in Russian), a chemical attack threat, and street fighting in Kyiv, urging people not to go outside. Loudspeakers in some areas, including Lviv, played related signals. Ukraine’s Air Force said on Telegram there was no radiation threat, the app appeared to have been subjected to enemy influence, and people should stay calm and follow official channels. Ukraine’s Centre for Strategic Communications (SPRAVDI) blamed Russia. Hours later, Russia’s Emergencies Ministry said its own mobile app had suffered a massive cyberattack that spread false information, including claims about Ukrainian P1-Sun drones carrying nuclear warheads and calls to stockpile food.^{⁠[1, 3, 6, 7]}

Background

Ukrainians rely on the Air Alert app, backed by the Ministry of Digital Transformation, for real-time warnings of Russian missile and drone attacks during the war that began with Russia’s full-scale invasion in 2022. The Oreshnik is a Russian intermediate-range ballistic missile that Moscow says can carry nuclear warheads. The false alerts came minutes before a localized ceasefire in the Kherson region ended at 23:00 Sunday; that truce had allowed civilian evacuations. Both countries have previously accused each other of cyber operations against civilian alert systems.^{⁠[1, 6, 7]}

How the coverage differs

Center outlets such as Business Insider described fake nuclear-threat warnings hitting millions of users in both Ukraine and Russia on the same day, quoting the Oreshnik and P1-Sun messages and noting mutual accusations of past cyber campaigns. BBC News and Al Jazeera similarly reported both incidents, the sequence of Ukrainian alerts, SPRAVDI’s blame of Russia, Russia’s statement that it did not identify a perpetrator, and the timing after the Kherson truce. Right-leaning Fox News focused on the Ukrainian app, the radiation and chemical warnings that spread in Kyiv, the Air Force’s denial of any threat, and SPRAVDI’s accusation, while briefly noting Russia’s later claim of a cyberattack on its app. Other right-leaning outlets in the source list similarly centered the Ukrainian hack and false nationwide warnings without equal detail on the Russian app.^{⁠[1, 3, 6, 7]}

What's still unclear

It is not independently confirmed who compromised either app. Russia has not publicly accused a specific actor. A Ukrainian partisan group, Atesh, posted that it was behind the Russian-app messages, but that claim was not verified. The exact number of users who received the alerts and the full technical method of the compromises remain undisclosed.^{⁠[1, 7]}

Written by Grok from the full articles, at a reader's request. AI can get details wrong; check the sources.