Zelensky Confirms Ukraine Hacked Russian Alert App in Retaliation

Ukraine's cyber conflict with Russia escalated after President Volodymyr Zelensky confirmed that Ukrainian operatives retaliated against a Russian emergency alert system following an attack on Ukraine's own warning application. Both countries experienced disruptions late Sunday, November 1, and early Monday, November 2, 2026, when unauthorized messages falsely warned residents about nuclear attacks and other emergencies.

In an interview with PBS News, Zelensky acknowledged Ukraine's involvement in the Russian incident, describing the operation as a response to an attack against Ukrainian civilians. His confirmation provides the clearest explanation yet of the connection between the two disruptions.

"We only respond on their attacks," Zelensky told PBS News.

The Ukrainian president said the initial incident targeted his country's emergency notification infrastructure.

"They attacked our system. It was a cyberattack," Zelensky said.

He added that Ukraine responded after determining that the operation had specifically targeted civilians. Ukrainian authorities had previously blamed Russia for compromising their Air Alert application.

"When it was very clear … that it's their personal attack against our people, civilians," Zelensky said, explaining the circumstances behind the retaliation.

"Of course, we responded," he added.

The Ukrainian Air Raid Alert application initially displayed fabricated warnings shortly before 11 p.m. local time on Sunday. According to reporting by The Washington Post and CNN, notifications included alleged nuclear, radiation and chemical threats, alongside warnings about street fighting in Kyiv and other locations.

One notification falsely declared an emergency in the Ukrainian capital.

"Radiation threat. Radiation threat declared in Kyiv," the message read.

Another fabricated notification claimed that Russia's hypersonic Oreshnik missile had been deployed. Ukraine's air force subsequently warned users that the application had been compromised and urged residents to remain calm.

"There is no radiation threat! Stay calm and follow our updates on our channel!" the Ukrainian air force said in a Telegram statement.

Stepan Tanasiychuk, head of Ukraine's Air Raid Alert project, said the application was undergoing gradual restoration. The development team was also introducing additional security measures following the incident.

"We realise how much unnecessary worry and inconvenience this has caused," Tanasiychuk said on Instagram.

Russia experienced a separate disruption involving the mobile application operated by its Emergencies Ministry, commonly known as Emercom. According to the ministry, hackers distributed fabricated emergency notifications across 33 Russian regions on Monday morning.

The false notification claimed that nuclear warheads had been launched across the country. Russia's state news agency TASS reported that the ministry characterized the incident as a massive cyberattack that resulted in the circulation of false information.

"The app is currently operational, and its full functionality will be restored by the end of the day," the Russian Emergencies Ministry said in a subsequent statement.

The ministry also said its specialists had investigated the incident and identified the security weakness exploited by the attacker. Officials emphasized that the compromised application was not the country's only emergency communication channel, with authorities also relying on sirens, loudspeakers, text messages and media broadcasts.

Kremlin spokesman Dmitry Peskov acknowledged the broader cybersecurity risks facing Russian government infrastructure.

"All electronic resources belonging to our government agencies are under constant threat of cyberattacks," Peskov said.

He also highlighted the growing technological challenges facing government systems.

"As technologies, including AI, continue to evolve, the threat of cyberattacks is growing," he added.

Despite the alarming notifications, CNN reported that the fabricated messages appeared to cause limited public panic. Some Russian users questioned the security of official applications, while others responded with jokes and criticism on social media.

The incidents have raised concerns about the reliability of emergency notification systems in countries regularly exposed to missile and drone attacks. Both Ukrainian and Russian residents depend on timely warnings to identify potential threats.

The cyber incidents unfolded alongside continued fighting and diplomatic efforts to address the war. According to CNN, US Special Envoy Steve Witkoff announced that American officials would mediate working-level negotiations between Ukraine and Russia in Abu Dhabi from November 10 to 11, 2026.

Witkoff also announced planned discussions with representatives from France, Germany, the United Kingdom, the European Union and NATO in Brussels concerning security guarantees for Ukraine.

Meanwhile, Zelensky reported that at least 26 people had been killed in a Russian aerial bomb attack on a school being used for humanitarian purposes in Komyshuvakha, in the southeastern Zaporizhzhia region. Search and rescue operations were continuing as emergency personnel looked for people believed to be trapped beneath the rubble.

"There must be a response to this – a response from the world. A strong and tough response," Zelensky wrote on X.

The two emergency applications were subsequently reported to be undergoing restoration, while Ukrainian authorities and Russian officials continued investigating the separate security breaches.