Ukraine's emergency alert app

Profile narrative

Ukraine's emergency alert application, officially known as Air Alert (Повітряна тривога), serves as the primary digital channel for disseminating civil defence warnings to the population across Ukraine. Developed and maintained under the auspices of the State Service of Special Communications and Information Protection (Derzhspetszviazok), the app delivers real-time notifications of air raid alerts, missile threats, and other emergency situations to millions of smartphones nationwide. Its core function is to supplement the traditional siren network by providing geolocated, instantaneous alerts that reach users regardless of their proximity to physical infrastructure, a capability that has proven essential during the full-scale invasion that began in February 2022. The platform integrates with the national Air Alarm automated warning system, receiving data from military radar and observation posts to trigger notifications within seconds of threat detection.

The application achieved near-ubiquitous adoption among Ukrainian smartphone users, with download figures reaching tens of millions across iOS and Android platforms, making it one of the most widely installed apps in the country. Its operational scope extends beyond simple push notifications; the interface includes interactive maps displaying active alert zones, shelter locations, and safety guidelines, while also supporting offline caching of critical information for use during connectivity disruptions. The system's architecture was designed for high availability under wartime conditions, employing distributed server infrastructure and redundant communication channels to withstand both kinetic and cyber attacks on national telecommunications networks. This resilience has been tested repeatedly since 2022, with the platform maintaining functionality despite widespread missile strikes on energy and internet infrastructure.

On 1 November 2026, the system suffered a significant compromise when hackers infiltrated the alert infrastructure and broadcast a false nuclear strike warning specifically targeting residents of Kyiv, causing widespread panic before authorities could issue corrections. The intrusion occurred amid a cluster of high-profile cyber incidents, including a major cryptocurrency exchange theft and coordinated attacks on internet-connected refrigeration systems across Europe, suggesting a broader campaign of digital disruption. The breach exposed vulnerabilities in the authentication and authorization mechanisms governing alert issuance, prompting an immediate security overhaul by Derzhspetszviazok in coordination with international cybersecurity partners. The incident underscored the strategic importance of the alert system as both a lifesaving utility and a high-value target for adversaries seeking to undermine public trust and social stability through information manipulation.

Incidents

1 incident linked to this organisation.