Ukrzaliznytsia

Profile narrative

Ukrzaliznytsia, also known as Ukrainian Railways, is the national railway operator of Ukraine and functions as a state‑owned enterprise responsible for providing passenger and freight rail transport throughout the country. The organisation sells tickets through multiple channels, including an online ticketing platform, a mobile application, traditional ticket offices at stations, and, when necessary, on‑board sales conducted by conductors. As the country’s primary rail carrier, it serves both domestic travel needs and freight movements that support various sectors of the Ukrainian economy. Its status as critical infrastructure means that the continuous operation of its networks is essential for national mobility, supply‑chain logistics, and emergency response capabilities. Being a state‑owned entity places it under the oversight of Ukrainian governmental authorities, which influences its strategic planning and investment decisions.

In March 2025, Ukrzaliznytsia experienced a large‑scale cyberattack that disabled its online ticket sales, website, and mobile‑app services, prompting the operator to deploy extra staff at ticket offices, authorize conductors to issue tickets on board, and establish manual procedures for refunds and special requests while train services continued to run on schedule. The response involved collaboration with the SBU Cyber Department, CERT‑UA, and other cybersecurity experts, who assisted in deploying backup infrastructure, conducting diagnostics, and restoring the affected systems after thorough verification. A previous notable incident occurred in June 2017 when the NotPetya malware, delivered via a compromised update of the M.E.Doc accounting software, targeted Ukrainian organisations including the operator’s rail infrastructure, causing widespread data destruction across critical sectors. Another recorded event in May 2022, though lacking a detailed public summary, is also part of the organisation’s incident history. These episodes have underscored Ukrzaliznytsia’s role as a vital national asset that must maintain operational resilience against cyber threats.

Incidents

2 incidents linked to this organisation.