# Hackers Send Fake Nuclear Attack Alerts Through Russia's Emergency Ministry Channels After Ukraine's Air-Raid App Is Breached

The false warnings appeared in about 10 Russian regions overnight, and a separate group claims it took casualty data from Russia's federal statistics agency.

- Published: 2026-11-02T05:15:08.429Z
- Canonical: https://polylog.news/2026-11-02/hackers-send-fake-nuclear-attack-alerts-through-russia-s-eme
- Publisher: Polylog (Global desk)
- Section: geopolitics
- Sources: [Deutsche Welle](https://www.dw.com/en/ukraine-russia-report-hacking-attacks-on-emergency-alert-apps/live-79825079), [Polylog editors](https://polylog.news), [Komsomolskaya Pravda](https://www.kp.ru/daily/277829/5323142/?from=twall), [Ukrinform](https://www.ukrinform.net/rubric-ato/4180280-hackers-breach-russias-statistics-agency-obtain-data-on-russian-losses-in-ukraine.html)

At about 2:45 a.m. Moscow time on Monday, identical messages appeared on the official channels of Russia's Ministry of Emergency Situations (MChS) and its regional alert channels. They claimed that ["nuclear warheads had been launched"](https://t.me/ostorozhno_novosti/56703) across Russia, according to the independent Russian Telegram outlet Ostorozhno Novosti. The business channel [Bankrollo](https://t.me/bankrollo/69375) reported that the ministry's accounts on Max, the state-backed messaging app, were hacked nationwide and that the ministry confirmed a large cyberattack. Ukrainian outlets reported that the messages told users to stock up on food and shelter in basements, and that they reached [about 10 regions](https://zn.ua/WORLD/kiberataka-na-mchs-rf-khakery-razoslali-opoveshchenija-o-trevohe-v-svjazi-s-zapuskom-jadernykh-boeholovok.html), including St. Petersburg and the Moscow, Nizhny Novgorod, Tyumen, Tula, Chelyabinsk and Belgorod regions.

Moscow's official position is that the core system was not affected. The pro-government tabloid [Komsomolskaya Pravda](https://www.kp.ru/daily/277829/5323142/?from=twall) reported that the national population warning system "is operating normally" and that the ministry urged citizens to stay calm and trust only official information. No one has claimed responsibility for the attack.

[Deutsche Welle](https://www.dw.com/en/ukraine-russia-report-hacking-attacks-on-emergency-alert-apps/live-79825079) reported that both Ukraine and Russia say apps used to send public emergency alerts were attacked. Ukrainian outlets described the Russian breach as a [response to the hacking of Ukraine's "Air Alert" app](https://zn.ua/WORLD/kiberataka-na-mchs-rf-khakery-razoslali-opoveshchenija-o-trevohe-v-svjazi-s-zapuskom-jadernykh-boeholovok.html). Separately, the Belarusian hacktivist group Cyber Partisans and the group Silent Crow claimed they breached the internal network of [Rosstat, Russia's federal statistics service](https://www.ukrinform.net/rubric-ato/4180280-hackers-breach-russias-statistics-agency-obtain-data-on-russian-losses-in-ukraine.html), and obtained data on Russian losses in Ukraine. That claim, reported by Ukraine's state agency Ukrinform, has not been independently verified.

## What this means

Each side is now targeting the communication channels its adversary's civilians rely on. A false nuclear alert costs little to send. It forces the state to spend on hardening its systems, and it weakens public trust in real alerts. The Russian state's main exposure is Max, which the government promotes as the single channel for official communication. A breach there weakens the case for routing state services and messaging through one platform, and it is likely to bring tighter identity checks and monitoring on it. In January 2018, a false missile alert in Hawaii caused panic and led to new federal rules on how alerts are authorized. Expect similar tightening in both countries. The desk's forward read: within weeks, Moscow is more likely to centralize control of Max and require stronger verification for official channels than to abandon the platform. More breaches of civilian alert and payment systems on both sides are likely over the coming months. If Russia responds by restricting regional bodies' access to Max, that would show the breach exposed weaknesses in the platform itself rather than in individual accounts.

## What to watch

- New Russian rules on who can post to official Max channels. They will show whether the state treats the platform as security infrastructure.
- Any publication of the Rosstat data. Release would test official Russian casualty figures and the hackers' claim.
- Attacks on banking or payment apps in either country. That would extend the cyber campaign from civilian morale to economic activity.