Ukraine railways says hit by 'multi-level' cyberattack

Ukrzaliznytsia faces cyberattacks amid Russian invasion, disrupting online services but maintaining railway operations for Ukrainian travelers.

The Ukrainian national railway operator said Monday (March 24, 2025) its technicians and the state security service were countering a sophisticated cyberattack for a second day running.

Ukrzaliznytsia, whose facilities have been targeted by drone and missile attacks throughout Russia's invasion, operates a sprawling railway network across Ukraine that links with European countries.

It did not say who or what was behind the attack and said its services were continuing uninterrupted. Online ticket sales were however unavailable over the weekend and into Monday.

"Ukrzaliznytsia's online systems have suffered a large-scale targeted cyberattack," the company said in a statement, adding that it was working with the Security Service of Ukraine to resolve the situation.

"This attack was very systematic, non-trivial and multi-level," it said, adding that neither physical assaults nor "vicious" cyberattacks were able to derail its services.

It said it was still transporting Ukrainian servicemen throughout the country. Ukrzaliznytsia is a vital service for millions of Ukrainians travelling both internally and abroad.

Four of its employees were wounded last week in Russian strikes on the central Dnipropetrovsk region, while its services were also interrupted by Russian strikes on the Kirovograd region.