On Wednesday, 11 November 2026, the state news agency «Ukrinform» suffered a cyberattack, as a result of which the attackers altered the homepage of its official website and its profile on the social media platform X. Pro-Russian slogans, a crossed-out Ukrainian flag and external links appeared on the sites. Following the hackers« intervention, the website was temporarily placed in maintenance mode. The agency’s Director-General, Serhiy Cherevaty, confirmed the attack and stated that specialists were working alongside the Security Service of Ukraine (SBU) and the State Special Communications Service to rectify the damage. This was reported by »Ukrainska Pravda’, citing the agency’s management and its official statement.
Key points at a glance:
On 11 November, hackers attacked the Ukrinform website and its account on the social media platform X.
Pro-Russian content and an external link have appeared on the website’s homepage.
The agency’s account on X has been renamed ZELENET and its design has been updated.
Following the attack, the website was temporarily placed in maintenance mode.
The circumstances surrounding the incident are being investigated with the involvement of the SBU and the State Special Communications Service.
What changes did the hackers make to the «Ukrinform» website and social media accounts?»
Following an unauthorised cyberattack, visitors to the agency’s website saw the word «ZELENET», a crossed-out Ukrainian flag and a link to an unknown Telegram channel instead of the usual homepage. Similar changes also appeared on Ukrinform’s profile on the social media platform X.
The attackers changed the account’s display name to ZELENET, added a pro-Russian slogan and third-party symbols. At the same time, the username @UKRINFORM remained unchanged, which could have given the impression that the posts came from an official source.
Subsequently, a notice regarding temporary technical work was posted on the website. The agency announced that it was resuming normal operations of its information resources.
Hackers attacked the Ukrinform website and its X account on 11 November. Pro-Russian content appeared. The SBU and the State Service for Special Communications are investigating the consequences.
What «Ukrinform» has said and who is investigating the attack
Managing Director of the agency Serhiy Cherevaty confirmed in a comment to «Ukrainska Pravda» cyberattack and stated that this was not the first attempt to interfere with the work of «Ukrinform» in recent months.
According to him, in 2024–2025, with the support of American partners, the agency installed new equipment to strengthen the security of its information systems. However, cybercriminals are constantly refining their methods, in particular by using artificial intelligence tools.
In an official statement, «Ukrinform» noted that it is cooperating with the State Service for Special Communications and Information Protection, the relevant department of the Security Service of Ukraine and other institutions.
Experts are investigating the circumstances of the breach, assessing the potential consequences and working to restore systems. No technical details of the attack or confirmed information about those responsible have yet been made public.
Has the website been restored following the cyberattack?
The attack on «Ukrinform» was yet another instance of interference in the operations of Ukrainian news outlets during November. In particular, on 4 November, The Kyiv Independent reported a cyberattack. The attackers gained access to the publication’s website management system and email newsletter service, after which some readers received false messages.
On the night of 5 November, hackers also breached the «Ukrainska Pravda» email newsletter service. The editorial team reported that fake emails claiming there had been a terrorist attack in Kyiv were being circulated in its name. No link has been established between these incidents and the attack on «Ukrinform».
As of the evening of 11 November, the agency had confirmed that restoration work was underway, but had not reported that the consequences of the cyber-attack had been fully resolved. It also remains unclear whether the attackers gained access to internal data or editorial systems. «Ukrinform» has promised to provide further updates on the results of the investigation and the restoration of operations.
Click Here For The Original Source.
——————————————————–
