A railway cyberattack hits Ukraine’s national train ticket system

March 26, 2025
Railway Cyberattack Ukraine Train Ticket System Ukrzaliznytsia

A Ukrainian railway cyberattack has severely disrupted the online ticketing system of Ukrzaliznytsia, the country’s national railway operator.

The attack prevented passengers from purchasing tickets via the website and mobile app, forcing them to buy tickets at physical booths. This issue led to overcrowding at ticket counters, long queues, and significant delays, causing frustration among travellers.

 

With trains being one of the most reliable and safest means of transport in Ukraine, the railway cyberattack has created major inconvenience for passengers.

 

Ukrzaliznytsia confirmed the disruption in an official statement, apologising for the difficulties and deploying additional staff at ticket counters to manage the surge in demand. However, long waiting times remain a challenge.

To minimise the impact, passengers who purchased tickets online before the cyberattack but were unable to access them were advised to use the PDF copies sent to their emails. Those without access to their tickets were instructed to arrive at the station at least 20 minutes before departure to resolve the issue with station officials. Military personnel were given special provisions, allowing them to buy tickets directly from train conductors to avoid delays in their movements.

Despite the disruption in ticket sales, Ukrzaliznytsia assured passengers that train operations were not affected, and services continued to run on schedule. The railway operator stated that it had implemented backup systems to maintain stable operations and had reinforced its cyber resilience following multiple past attacks. Officials described the latest cyberattack as highly systematic and multi-layered, aimed at causing significant disruption.

The company is actively working with the SBU Cyber Department and the Government Computer Emergency Response Team (CERT-UA) to identify vulnerabilities and restore full online services. However, no specific timeline has been provided for when the ticketing system will be fully functional again.

Ukrzaliznytsia reaffirmed its commitment to ensuring the continuity of railway operations despite growing cyber threats. The Ukrainian railway cyberattack highlights the increasing risks faced by critical infrastructure and the ongoing challenges in securing essential services against cyber threats.

About the author