Threat watch / Attack
Kyiv Independent: CMS and newsletter service used to send fake news
Attackers got into the outlet's content system and a newsletter service, then sent four fake emails, one claiming a nuclear strike on Kyiv.
- Sector
- Media
- Way in
- Not public yet
- Product or vendor
- None named
- How it happened
- Access to the content management system and to "one of the services the Kyiv Independent uses to send newsletters". How that access was obtained is not public.[1] Checked 7 Nov 2026
- What was stolen
- The outlet's voice rather than data. It says payment data was not at risk.[1] Checked 7 Nov 2026
- Who was impacted
- The Kyiv Independent and its readers (nearly 3 million a month, more than 35,000 paying members). How many received the fake emails is not public.[1][2] Checked 7 Nov 2026
- Threat actor
- Not attributed. Suspected Russian actors, according to the outlet, based on the messages' content. No technical evidence was given.
Timeline
- Ukraine's air alert app pushes fake nuclear and chemical threat alerts; Russia's Emergencies Ministry says its own warnings app was attacked. No confirmed link to this case. [3][2]
- From 1 a.m. Kyiv time, four fake emails go out in Russian and English, including a false claim that Zelensky "launched a nuclear warhead at Kyiv". [1]
- The outlet blames suspected Russian actors based on the messages' content; The Record notes it gave no technical evidence. [2]