At 22:47 on Sunday night, phones across Ukraine received an alert that no duty officer had issued: "Radiation threat. Radiation threat declared in Kyiv."

A minute later a second push arrived — in Russian, a language Ukraine's state alert system does not broadcast in: "Hi! There will be a nuclear alert across Ukraine. Don't worry, it's Oreshnik flying." Oreshnik is Moscow's name for its intermediate-range ballistic missile, a word Ukrainian officials have learned to read as shorthand for escalation.

Two more followed inside two minutes, both in Ukrainian: a chemical-attack warning for the capital ("Don't go outside") and a warning of "street fighting" in Kyiv. Then came a run of all-clears, each one attached to one of the false alerts.

The Air Force moved faster than the app's operators. "The Air Alarm application has probably been subjected to hostile interference," it wrote on Telegram. "There is no radiation threat! Stay calm and follow our updates on our channel." Asked by AFP whether the app had been hacked, air force spokesperson Yuriy Ignat answered plainly: "Yes, it has been."

Ukraine's Centre for Strategic Communications, known as SPRAVDI, blamed Russia. The Centre for Countering Disinformation warned that the threat information the app was broadcasting "does not correspond to reality." The Ministry of Digital Transformation, which backs the app, said it was not operating and that sirens and other channels still worked. In Lviv region, civil-defence loudspeakers played the radiation-hazard signal; the governor of Vinnytsia said the app had been attacked and told residents not to click the link in the message. The separate app that covers only the capital kept working normally.

THE TIMING IS PART OF THE MESSAGE

The alerts landed minutes after a localised ceasefire in the eastern Kherson region expired — the longest truce of the war, brokered with the involvement of US first lady Melania Trump, which Moscow declined to extend. A psychological operation that produces a believable nuclear scare at the exact moment a truce collapses does two things at once: it floods civil-defence channels and it tells the public that the quiet they just had was never theirs to keep.

Hours later, Russia reported an incident of its own. The state news agency TASS quoted the emergencies ministry saying its mobile app — the one used to warn Russians about drone attacks and other threats — had been hit by a "massive cyber attack" and was being restored. There is no confirmation that the two events are connected, and each side has an obvious interest in the comparison.

WHY AN ALERT APP IS A SOFT TARGET

The Ukrainian app's entire value is speed: for a ballistic missile, people may have minutes to reach shelter. That same property is what makes it worth attacking. A warning system optimised to deliver one trusted line to millions of phones in seconds has no room for a slow verification step, and its credibility rests on the assumption that a notification is the same thing as an official decision.

Once that assumption breaks, the damage outlasts the incident. Authorities spent the night telling people to trust sirens and Telegram channels instead of the app — a downgrade in reach at the moment reach matters most, and a gift to anyone who wants to argue that no warning can be trusted.

WHAT IS NOT KNOWN

Three questions remain open, and they are the ones that decide the fix. First, where the breach happened: the push pipeline that fans messages out to handsets, the backend that signs an alert, or an operator account with permission to publish. Each implies a different remediation, and only the first is a third-party problem. Second, who did it — Kyiv blames Moscow, but no technical attribution has been published, and the Russian-language taunt is evidence of intent, not of identity. Third, whether the Russian emergency-app attack is related, coordinated, or a coincidence being used for symmetry.

Until those are answered, the honest reading is the narrow one: Ukraine's national alert channel was successfully spoofed during a war, and the spoofing worked well enough that the Air Force had to tell the country, in public and in real time, that the sky was not falling.

Sources