Ukraine’s state-owned railway operator Ukrzaliznytsia confirmed it was the target of a large-scale cyberattack on Monday, temporarily disrupting its online ticket sales system, including the mobile app. Despite the attack, trains continued running smoothly across the country.
In a statement posted on its official Telegram channel, Ukrzaliznytsia assured passengers that train operations remained unaffected, with all rail services running on time and without delays. “The enemy failed to do the most important thing: train traffic remains stable, with operational processes fully switched to backup mode,” the company stated.
The cyberattack primarily hit the ticketing infrastructure, causing major issues for travelers trying to book tickets online or through the app. With digital sales down, crowds quickly formed at stations. Journalist Daryna Antoniuk reported for The Record from Kyiv’s central station, describing unusually long lines on Monday morning as dozens of passengers waited to buy tickets for both domestic and international trips.
Despite the disruption, Ukrzaliznytsia advised passengers not to panic. “If you don’t manage to buy a ticket through the ticket office, go directly to the train as a last resort,” the operator told customers, signaling efforts to keep passengers moving amid the chaos.
The full scale and source of the cyberattack remain unclear, but the incident once again highlights how critical infrastructure in Ukraine continues to face persistent cybersecurity threats. Railways are vital not only for daily commuters but also for supporting Ukraine’s wartime logistics and transportation network.
While the attackers aimed to cause maximum disruption, Ukrzaliznytsia’s quick switch to backup systems kept trains running uninterrupted—a testament to the resilience of Ukraine’s rail network amid growing digital threats.
