Overnight cyberattack disrupts Ukrposhta postal app and digital services

On 25 June 2026, Ukrposhta, Ukraine's national state-owned postal operator, said that a "nighttime hostile attack on IT systems" had left its mobile application temporarily malfunctioning and disrupted some of its digital services. "Our specialists are already working on the restoration," the company said, promising further updates as systems came back.

Ukrposhta gave few details about the nature of the attack or the extent of the damage, and did not say whether any data had been accessed. Reporting at the time attributed the attack to no specific group; while one outlet said Russian hackers were responsible, no evidence or formal attribution was published.

Context

Ukrposhta is far more than a mail carrier: it delivers pensions and social payments, handles parcels and logistics for much of the country and operates financial payment services, which makes its digital channels part of Ukraine's civilian critical infrastructure. Its facilities had also been damaged by Russian air raids, and the cyberattack came days after the National Bank of Ukraine found on 23 June that the company's chief executive did not meet professional suitability requirements for running a payment services provider.

Why it matters

Since 2022, Russian state-linked groups have repeatedly targeted Ukrainian telecom, energy and logistics operators, combining disruptive cyberattacks with physical strikes. Even a short outage of the national postal operator's apps affects millions of users who depend on it for deliveries and payments, and the incident is another example of the sustained pressure on Ukraine's civilian services during the war.