Ukraine air alert app apparently hacked, false radiation warnings sent

Ukraine's Air Force says the Air Alert app may have been compromised and denies any radiation threat, while Russia reports a cyberattack on its own emergencies app.

What happened

Ukraine's air raid alert app was apparently hacked on Sunday and briefly said the capital Kyiv faced a radiation threat, according to the Ukrainian Air Force ¹. The Air Force said the app may have been compromised by hostile actors and that there is no radiation threat ².

Separately, Russia's Emergencies Ministry said its mobile application was hit by a massive cyberattack ³. The ministry said attackers used the cyberattack to send false information to the public ⁴.

What is confirmed

Confirmed and primary reporting establishes that the Air Alert app was apparently hacked on Sunday and briefly warned Kyiv of a radiation threat ¹. The Ukrainian Air Force stated that the app may have been compromised by hostile actors and that no radiation threat exists ².

On the Russian side, the Emergencies Ministry confirmed its mobile application was hit by what it called a massive cyberattack ³, and said the attack allowed false information to be sent to the public ⁴.

Where the accounts differ

RT foregrounds the hack itself and the hackers' claimed methods, centring a group calling itself Hitcore and the Russian Telegram channel Mash, which reported that the hackers claimed to have deceived an employee of a Ukrainian company into giving them access to his computer ⁵⁶. RT also reports that Ukraine's Digital Transformation Ministry confirmed the app was temporarily disabled following a suspected cyberattack ⁷.

The BBC foregrounds official Ukrainian responses, centring the Vinnytsia oblast governor, Natalya Zabolotna, who said there had been a cyberattack on the app and warned people not to click the link in the message ⁸, and the Ukrainian Central Intelligence Agency, which said the app suffered a failure and urged people to use other sources ⁹. The BBC quotes the false alerts verbatim, including a first message at approximately 22:47 declaring a radiation threat in Kyiv ¹⁰ and a Russian-language message at 22:48 mentioning Oreshnik ¹¹.

Fox News centres Ukrainian official statements, reporting that Ukraine's Center for Strategic Communications blamed Russia for the incident ¹², while also giving space to Russia's Emergencies Ministry account of a massive cyberattack on its own app ³⁴. TRT World frames the incident within a wider ceasefire and cyberattack story, noting the Air Force confirmed hostile interference ¹³ and reporting Russia's account of a drone strike and its own emergency app being hit ¹⁴.

What is not known yet

Several details rest on single outlets. The hackers' claim to have tricked a Ukrainian company employee into giving them access to his computer was reported only by RT ⁵, as was the claim of responsibility by a group calling itself Hitcore ⁶. That the app was temporarily disabled following a suspected cyberattack was reported only by RT ⁷. RT alone reported that one message read in Russian, 'Don't worry, Oreshnik is coming' ¹⁵, that the app warned of street battles in Kiev ¹⁶, and that it warned of a radiation threat and a chemical attack at around 11pm ¹⁷.

The BBC alone reported the governor of Vinnytsia oblast saying there had been a cyberattack and warning not to click the link ⁸, the Ukrainian Central Intelligence Agency saying the Radiation Hazard signal played on loudspeakers in the Lviv region ¹⁸, and the specific timings and texts of the three alerts ¹⁰¹¹¹⁹. Fox News alone reported that Ukraine's Center for Strategic Communications blamed Russia ¹² and quoted an alert reading 'There is a radiation hazard alert in Kyiv. Do not go outside!' ²⁰. TRT World alone reported Zelenskyy's remarks to Washington ²¹, the drone strike east of Moscow ¹⁴, and the Kherson ceasefire details ²²²³²⁴. No group had publicly claimed responsibility for the air alert incident, according to Fox News ¹².

Why it matters

The incident shows that public alert systems used in wartime can be turned into channels for false warnings, according to the accounts above ¹². If confirmed, the simultaneous reports of cyberattacks on Ukrainian and Russian emergency apps suggest that both sides' public-facing services are targets ³⁴. Analysis: the divergence between RT's focus on the hackers' methods and the BBC's focus on official Ukrainian responses means readers relying on a single bloc would get a different picture of who did what and how ⁷⁸.

Opinion

Faultline's view

the confirmed core here is narrow and worth stating plainly. Ukraine's Air Force says the app may have been compromised and that there is no radiation threat; Russia's Emergencies Ministry says its own app was hit by a massive cyberattack that pushed false information to the public. Both are official statements, and both deserve the same scrutiny. Western outlets lean heavily on Ukrainian officials blaming Russia, while the claim of responsibility by a group calling itself Hitcore and the hackers' described methods appear in RT's account alone. That asymmetry is not proof of anything, but it is a reason to treat the attribution fight as unresolved rather than settled. The public interest lies in the vulnerability of alert systems, not in which capital gets to narrate the breach first.

This section is Faultline’s opinion, argued only from the receipts above. It is not part of the factual record and cites nothing new.