On March 24, 2025, Ukraine’s state-owned railway operator Ukrzaliznytsia reported a large-scale cyberattack that disrupted online ticket sales. Despite the attack, train operations remained stable, and services continued without delays.
- Ukrzaliznytsia hit by large-scale cyberattack.
- Online ticket sales disrupted, trains still operating.
- Kyiv's main station crowded with ticket buyers.
- Train traffic remains stable despite attack.
- Customers advised to board trains without tickets.
The cyberattack targeted Ukrzaliznytsia’s online ticketing system, impacting sales through their website and mobile app. As a result, many passengers flocked to Kyiv’s central station, leading to unusually long lines as people sought to buy tickets for travel within Ukraine and abroad. The railway operator reassured the public that train traffic remained stable and operational processes were maintained through backup systems.
Ukrzaliznytsia’s statement emphasized that while the cyberattack disrupted online services, it did not affect train schedules. Key details included:
- Train services continued without delays.
- Passengers were encouraged to purchase tickets directly at the station.
- Backup systems were in place to ensure operational continuity.
Journalist Daryna Antoniuk reported from Kyiv’s central station, noting the increased passenger volume and the challenges faced by travelers. The operator’s guidance to go directly to trains if unable to purchase tickets online reflects their commitment to maintaining service amid disruptions. This incident highlights ongoing cybersecurity challenges faced by critical infrastructure in Ukraine.
The cyberattack on Ukrzaliznytsia underscores the vulnerabilities of transportation systems to cyber threats. While the immediate impact on train operations was minimal, the incident serves as a reminder of the importance of cybersecurity measures in maintaining public services.
