A cyberattack struck Ukraine’s state railway service on Monday, shutting down the online ticketing system. As a result, long lines formed at train stations. Ukrainian officials blamed Russia, claiming the attack was an attempt to create instability.

Cyberattack Disrupts Ukraine’s Rail System

Since 2022, air transport has been suspended due to ongoing missile and drone strikes. Therefore, Ukraine’s railway system remains essential for both travel and cargo. However, Moscow has not responded to the incident.

Meanwhile, officials referred to the attackers as the “enemy,” a term often used for Russia. Although the cyberattack disrupted ticketing services, train operations continued as usual. Nevertheless, the online ticketing system remained down for over 24 hours.

The railway company, Ukrzaliznytsia, first reported the issue on Sunday. Consequently, passengers had to buy tickets at stations or onboard trains.

On Telegram, Ukrzaliznytsia described the attack as “very systemic, unusual, and multi-level.”

By Monday morning, long queues had formed at Kyiv’s central train station. Furthermore, ticket counters only sold tickets for travel until Tuesday.

Ukraine Suspects Russian Hackers

Although Ukrzaliznytsia did not directly blame Russia, Ukrainian security officials strongly suspected Russian hackers were behind the attack.

One security official explained that the attack aimed to "exert psychological pressure on Ukrainians and destabilize the social and political situation."

Similarly, a government source stated, "It was some hacker group. We think that they are Russians. It is a strong strike but not critical."

Trains Keep Running Despite Cyberattack

Since the Russian invasion, trains have become the primary mode of transportation in Ukraine. Not only do they move passengers, but they also transport weapons and military equipment.

In fact, Deputy Prime Minister Oleksiy Kuleba reported that the railway carried 20 million passengers and 148 million tonnes of freight in 2024 alone.

Despite the attack, the system remained functional. Ukrzaliznytsia board chairman Oleksandr Pertsovskyi reassured the public on national television.

"Operational traffic did not stop for a single moment. The enemy attack was aimed at stopping trains, but we quickly switched to backup systems."

Ultimately, although the cyberattack caused temporary delays, Ukraine’s railway system continued running without major disruptions.