Ukraine and Russia emergency alert apps hit by fake cyber warnings
Both Ukraine and Russia say emergency alert apps were hacked to send false warnings of nuclear, chemical and other attacks, with Moscow and Kyiv giving differing accounts of who was responsible.
How it was covered
- BBC News carried 83% of the airtime and concentrated on the Kyiv alert timeline, attribution dispute and hacktivist analysis.
- BBC One concentrated on modern war, Kherson ceasefire and official blame games.
- Channel 5 concentrated on brief false-alert summaries for Kyiv and Russia's emergency app.
- BBC Two, Channel 4, GB News, ITV and Sky News: not found in tracked broadcasts.
The Full Story
A plain summary built from the channels that reported this story. Facts only one channel reported are attributed to it.
Ukraine and Russia both say their emergency alert apps have been hit by cyber attacks that sent false warnings to users. Ukraine's air alert app appeared to have been compromised late on Sunday. It sent messages about a radiological threat, a chemical attack, artillery shelling and possible street fighting in Kyiv. Russia's Ministry of Emergency Situations said its mobile app had been subjected to a massive cyber attack and that fake information had been sent to the public.
BBC News reported that Ukraine's Center for Strategic Communications blamed Russia for the hack. It showed examples of the false alerts and urged residents to disregard strange messages in the app. The BBC also reported that Ukraine's Air Force issued a statement within 15 minutes saying the app had been compromised, there was no radiation threat and people did not need to panic.
BBC News reported that the fake Ukrainian warnings began just before 11pm. They included incoming ballistic missiles and drones before shifting to nuclear, chemical and street-fighting alerts. Dan Johnson, the BBC's Ukraine correspondent in Kyiv, said the cluster of extreme warnings over five to ten minutes led many people to suspect a glitch or technical fault rather than a hack. He said the alerts caused concern but no widespread panic.
Channel 5 reported that Russian officials said hackers had gained access to the emergency ministry's app to send fake alerts. It also said residents in Ukraine received false messages that there was a huge nuclear radiation danger in the capital, Kyiv.
A similar message was reportedly sent to Russians. It read: 'risk things could get lively. Don't worry, nuclear warheads have been launched at all regions of Russia.' BBC News reported that Moscow said it did not know who was behind the attacks, while Ukraine said Russia was likely to blame. BBC One reported that neither side was taking responsibility, and the UK defence secretary said it was not yet known who was behind the specific attack.
At a meeting in Brussels, the UK defence secretary said the Ukraine hack was part of a wider threat. He said Europe had seen 'hybrid or state-sponsored terrorist attacks driven by Moscow'. The BBC reported his comments but noted that it was not yet known who was behind the specific cyber attack.
BBC News cyber correspondent Joe Tidy said the incident had all the hallmarks of a hacktivist attack. He said the quick retaliation against Russia within a few hours was unusual and suggested some coordination. Such low-skilled, attention-grabbing cyber attacks have been a feature of the Ukraine conflict, he said.
In Kyiv, people seemed to take the alerts in their stride. One person said they could laugh about it, but that the hackers had failed to trigger the reaction in society they expected.
The false alerts came as the brief humanitarian ceasefire in Kherson ended and shelling resumed. Reports from the region said drones and artillery had returned after nearly a week of relative quiet. The hack has added to concern about whether people will trust future emergency warnings.
Key Claims
Claims reported during this story's coverage, grouped by how many channels reported each one. Select a dot to see the source excerpt.
| Claim |  |  |  |  |
|---|---|---|---|---|
| Widely reported · 3 or more of 4 channels | ||||
| Both Ukraine and Russia said their emergency alert apps were hit by cyber attacks after the ceasefire ended. | Reported by Sky News | |||
| A ceasefire in the Kherson region ended and attacks resumed, with reports differing on whether it lasted five days and was localised to Oleshky or six days across the whole Kherson region; residents were warned that Russia would have used the truce to reinforce and that the resumption could be worse. | Not reported by Channel 5 | Reported by BBC One | Reported by Sky News | |
| Reported by a few · 2 channels | ||||
| The UK defence secretary said the perpetrator of the Ukraine attack was not yet known but described it as part of a wider pattern of hybrid or state-sponsored attacks driven by Moscow. | Not reported by Channel 5 | Not reported by Sky News | ||
| Ukraine blamed Russia or said it was likely responsible for the hack, while Moscow said it did not know who was behind it. | Not reported by Channel 5 | Reported by BBC One | Not reported by Sky News | |
| Only on one channel | ||||
| BBC News reported that its cyber correspondent said the rapid retaliation suggested coordination. | Not reported by Channel 5 | Not reported by BBC One | Not reported by Sky News | |
Channel Perspectives
What each channel focused on, with key quotes.
BBC News led with correspondent reports from Kyiv and cyber analysis, combining the practical impact on Ukrainians with the attribution dispute. Its first broadcast gave the most detailed timeline, including the Air Force's 15-minute reassurance, while the later bulletin stressed that Moscow said it did not know who was behind the attacks and that Ukraine said Russia was likely to blame. It also carried Joe Tidy's assessment that the quick tit-for-tat response pointed to coordination rather than a lone amateur hack.
- “it was certainly unnerving when the first of these fake warnings came through just before 11 p.m. last night”
- “It has all the hallmarks of a hacktivist attack.”
- “Moscow said it doesn't know who was behind those attacks. Ukraine said Russia was likely to blame.”
Channel 5 gave the story a brief, straight news summary at lunchtime, focusing on the false nuclear radiation warning in Kyiv and the breach of Russia's emergency ministry app. It did not carry the Kherson ceasefire context, the UK defence secretary's comments or the cyber analysts' debate over attribution. The item was sandwiched between unrelated stories about a plane crash and NHS early warning systems.
- “Authorities in both Ukraine and Russia say their emergency alert apps have been targeted by cyber attacks.”
- “Residents in Ukraine received false messages that there was a huge nuclear radiation danger in the capital, Kyiv.”
- “Russian officials said hackers have sent fake emergency alerts after getting access to the app for Russia's emergency ministry.”
BBC One's lunchtime bulletin placed the app hacking in a wider war report from Kherson, using the cyber attack as an example of modern conflict's new challenges. It carried Joe Inwood's package with residents in Kyiv taking the false alerts in their stride, and it included the UK defence secretary's claim that Moscow drives hybrid attacks across Europe. It noted that neither side had taken responsibility and that it was not confirmed who sent either message.
- “Warnings of attacks like this are usually sent to an app that many Ukrainians use.”
- “None of it was real.”
- “We don't yet know who is behind this particular cyber attack in Ukraine.”
Who was on air
People and organisations each channel put on air while covering this story. Channels' own presenters and reporters are not listed. Names as transcribed, and the list can miss people.
- 12:21 GMT
Cyril Amorsi, Ukraine reporter for BFM TV
BBC News Now · Mon 2 Nov
Broadcast Timeline
News broadcasts tracked for this story, in time order.