Zero data leakage, but losses due to lost time: what is known about the hacker attack on UZ
26 March 21:33
The large-scale cyberattack on Ukrzaliznytsia has become one of the most complex over the past year, but there was no leakage of personal data. This was announced on March 26 by the company’s chairman of the board , Oleksandr Pertsovsky, during a telethon, Komersant ukrainskyi reports.
According to him, on the night of March 26, Ukrzaliznytsia became the target of a massive cyber attack, which, according to preliminary data, had been prepared for a long time and was intended to disable as many of the company’s digital services as possible.
Pertsovsky noted that the attack was highly targeted, complex, and aimed at paralyzing critical infrastructure: ticketing systems, logistics, internal reporting, train traffic management, and customer service. Its peculiarity was that it affected almost all of the company’s strategic IT systems, but they managed to remain operational.
“It was a prepared attack to cause maximum damage. But we withstood it. Our key systems were not destroyed,” said Pertsovsky.
Risks for passengers and the company’s response
After the attack, online ticketing services were temporarily down, and there were difficulties with refunds and access to certain information resources. Against this backdrop, speculation began to appear on Telegram about the leakage of passengers’ personal data, but Ukrzaliznytsia management denied these rumors.
“We do not store personal data. We only receive confirmation of identity verification through Diia, and we do not accumulate any personal files,” explained the head of the company.
To avoid panic, Pertsovsky urged not to create queues at the ticket offices and to use the official social media of UZ, which contains step-by-step instructions on how to return or transfer tickets.
Economic consequences and threat to logistics
Despite the preservation of the main infrastructure, the attack affected the efficiency of transportation and sales, which could have a negative impact on the company’s revenues in the short term. This is especially true for freight transportation, which is critically dependent on digital planning and tracking systems.
In addition, the situation demonstrated that even the largest state-owned companies remain vulnerable to cyberattacks despite regular security updates. “Ukrzaliznytsia is one of Ukraine’s key logistics arteries, and its paralysis for at least a few days potentially affects not only passenger transportation but also export operations, transit, and humanitarian aid deliveries.
Investigation and next steps
An investigation is currently underway by the Security Service of Ukraine, but details have not yet been disclosed. Pertsovsky noted that the attack was likely of state origin or was carried out under the direction of a professional group with experience in critical infrastructure.
The company’s press service said that the restoration of all digital resources is in the home stretch, and online services will soon be fully operational. All railroad divisions continue to work in an enhanced mode.
Cyberattack on Ukrzaliznytsia: how and when to buy tickets without queues
Following a large-scale cyberattack on Ukrzaliznytsia’s online services , passengers are forced to buy tickets at station ticket offices. The company is actively working to restore the systems and promises to reach the finish line in the near future. In the meantime, the ticket offices are working in an enhanced mode, and Ukrzaliznytsia has given clear recommendations on when to come to buy tickets to avoid queues.
The previous day’s cyberattack stopped online ticket sales but did not affect train traffic or ticket offices.
“We continue to restore online services. We expect to complete the main stage in the near future,” Ukrzaliznytsia said.
The company’s specialists, together with the experts involved, are working around the clock to restore full access to the website and app.
While the online services are unavailable, ticket sales through the ticket office are limited to the next two days – March 26 and 27.
All trains are running on schedule, and the railroad is working in an emergency mode to cope with the influx of passengers.
How ticket sales are currently working
While online services are being restored, tickets are being sold through ticket offices at railway stations. For passengers’ comfort, the ticket office hours have been extended. For example, in Kyiv, instead of the usual 8 ticket offices, there are 18. All trains are running on schedule, and waiting in lines has been reduced to 10-15 minutes.
Ticket sales at ticket offices are available only for the next two days. This decision was made to ensure a fair distribution of seats and to give priority to military personnel and other passengers with an urgent need to travel.
“Ukrzaliznytsia recommends that passengers avoid peak hours when stations are overcrowded. The best time to buy tickets is at the ticket office:
- From 09:00 to 11:00: morning after the morning rush, when queues are minimal.
- From 14:30 to 16:30: in the afternoon, when the main flow of passengers decreases.
These intervals allow you to avoid crowds, because during peak hours – in the morning (7:00-9:00) and in the evening (17:00-19:00) – the stations are overloaded due to the work schedule and evening flights.
