Was the "nuclear alert" in Ukraine's Air Alert app and Russia's Emergencies Ministry app real?

Overnight into November 2, Ukraine's Air Force wrote that the app had likely been "subjected to enemy influence" and that "there is no radiation threat." The State Emergency Service (DSNS) said the national warning system was working normally, and the Kyiv city administration said the "Kyiv Digital" app and street sirens worked as usual.^[1][11][10]

In its official Telegram channel, Russia's Emergencies Ministry (MChS) called it a "massive cyberattack" on the app: at about 02:45 Moscow time on November 2, a false message went out through the hacked admin panel to residents of 33 regions. Sirens, loudspeakers, SMS, TV and radio alerts kept working normally, the ministry said.^[2][7][6][4]

True. The developers of Air Alert (Ajax Systems and Stfalcon) reported unauthorized access to the operator interface used to send alerts, not to the app on people's phones; core functions were back within two hours. MChS confirmed its admin panel was hacked, found the vulnerability and passed the data to Russia's National Coordination Center for Computer Incidents.^[8][9][2][6]

Air Alert's developers say there was no leak: the app does not store or transmit personal data and has no access to key phone functions. The sources found report no leak of MChS app users' data. The main risk was the links inside the fake alerts, which people were told not to open.^[8][3]

Not proven. A previously unknown group, Hitcore, claimed the Air Alert hack; Ukraine's Air Force spoke of "enemy influence," and Ukraine's Center for Strategic Communications (SPRAVDI) blamed Russia. The MChS hack was claimed by a group called DC8044 (which describes itself as a Kyiv-based hacker community) and, according to Ukrainian media, by the ATESH movement. Ukraine's president told PBS: "We only respond to their attacks." MChS named no culprit. No independent technical investigation is publicly available.^{[3][5][13][14][15][16]}

At about 22:48–22:50 Kyiv time, users across Ukraine get alerts about radiation and chemical danger, street fighting in Kyiv, and a Russian-language message saying "an Oreshnik is incoming" with a link to a Telegram channel.^[10][12][4]

The Air Force writes that the app was likely subjected to enemy influence and that there is no radiation threat. The Center for Countering Disinformation, the State Emergency Service and the Kyiv administration also call the alerts false.^[1][11]

The developers report outside interference and switch off push notifications; core functions are restored within two hours.^[9][3]

At about 02:45 Moscow time, residents of 33 regions receive a message about "launched nuclear warheads" telling them to stock up on food for three weeks and hide in basements.^[2][7][13]

The group DC8044 and, according to Ukrainian media, the ATESH movement claim the MChS hack. The group Hitcore claims the hack of the Ukrainian app. None of it is confirmed.^[3][13][14]

MChS confirms a "massive cyberattack," says the warning system was not affected, the vulnerability has been found, the false posts have been removed from its channels on the MAX messenger, and full functionality will be back by the end of the day.^[2][6]

Kremlin spokesman Dmitry Peskov says all agencies' online resources are under threat of cyberattacks and protection must be strengthened.^[18][19]

Asked about the hack of the Russian app, Volodymyr Zelensky replies: "We just responded to the attack." He gives no details.^[15][16]

The developers explain that the intruders accessed the operator interface and server side, not the app on users' phones; there was no data leak and a security audit is ongoing.^[8]

Both sets of alerts were false; the claims by Hitcore and DC8044 are unconfirmed; recalls earlier hacks of alert systems.^[3]

Both agencies confirmed the hacks and called the messages fake; who was behind the attacks is unknown.^[4]

Relays both sides' statements: SPRAVDI blamed Russia, Russia named no culprit.^[5]

Details from MChS: admin panel hacked, 33 regions, around 02:45 Moscow time, the warning system is working.^[6][7]

Statements by the Air Force, State Emergency Service, Center for Countering Disinformation and the Kyiv administration: no threats, use official channels.^[10][11][12]

The developers' explanation: what exactly was hacked and why users' data was not affected.^[8][9]

Zelensky's PBS interview; Lenta.ru presents it as "claimed responsibility," citing a Telegram channel rather than the interview itself.^[15][16][17]

Posts a screenshot of the message for Voronezh region and claims it hacked the MChS app. Not independently verified.^[13][14]

2026-11-02

One of the fake alerts in the Ukrainian app linked to an outside Telegram channel; the Center for Countering Disinformation and the developers asked people not to follow the link or subscribe. The channel's name is not given in public sources.^[8][12]

2026-11-01

Regional media in Omsk, Yekaterinburg, Novosibirsk and other cities reported local residents getting messages "from MChS" and immediately explained it was a hack. Views could not be estimated.^[20][21][22]

2026-11-02

Outcome: Russia's Emergencies Ministry said commercial stations had been hacked; there was no threat.^[23]

Outcome: The AnonGhost group exploited a flaw in the app's interface to send fake alerts; there was no threat.^[24]

Outcome: Not a hack but an employee's mistake during a drill; the correction came only 38 minutes later. The FCC regulator pointed to the lack of safeguards against a single person's error.^[25]

Outcome: Fake; it appeared three days after the Air Alert hack, riding a wave of distrust in alerts.