Russian Hackers Sat Inside Ukraine's Largest Telecom for Months

The most consequential cyberattack in Ukraine's recent history struck at the heart of civilian communications. On December 12, 2023, Russian state hackers attributed to the Sandworm unit disrupted Kyivstar's services nationwide, leaving over 24.3 million customers — nearly the entire adult population of Ukraine — without phone reception or mobile internet. Ukraine's cybersecurity chief revealed the hackers had been inside Kyivstar's systems since at least May 2023, and had likely gained full access to the network by November, months before actually triggering the attack.

The Attack Silenced Air Raid Sirens During an Active War

This wasn't just a communications outage — it had life-safety consequences. The cyberattack disrupted air raid warning systems in Kyiv and Sumy regions, alongside banks, ATMs, and point-of-sale terminals, at a cost the company later estimated in the tens of millions of dollars to recover from. Ukraine's SBU cybersecurity chief described the incident as "one of the highest-impact disruptive cyberattacks on Ukrainian networks" since the full-scale invasion began, calling it a direct warning that "no one is actually untouchable" — even a company that had invested heavily in its own cybersecurity.

Ukraine's Data Protection Law Predates GDPR — and Companies Aren't Required to Tell You About Breaches

Ukraine's underlying privacy legal framework has real gaps that matter for ordinary users. Ukrainian legislation does not establish a direct obligation to report data security breaches to the appropriate state authority or to affected individuals — meaning if your personal data is exposed by a company operating in Ukraine, you may never be formally notified. A new draft law aimed at aligning Ukraine's framework with GDPR standards was adopted at first reading in November 2024, but full implementation has been delayed specifically because of the ongoing war, leaving citizens with fewer formal protections than most of the rest of Europe currently has.

Ukraine Is Also Actively Fighting Back in Cyberspace

The privacy and security landscape in Ukraine isn't purely defensive. Ukrainian cyber-specialists working with military and security intelligence have conducted extensive counter-cyberattacks against Russian banking systems, internet providers, and state institutions throughout the ongoing conflict — reflecting how deeply intertwined cybersecurity and national security have become in Ukraine's daily reality. For ordinary citizens, this means the broader digital environment is one of active, sustained cyber conflict, not a stable peacetime backdrop.

What Users in Ukraine Should Do Right Now

A VPN encrypts your internet traffic and masks your real IP address, providing a meaningful layer of protection against everyday tracking and data harvesting, and helping maintain connectivity options if a specific service or provider is disrupted or targeted. Choose a VPN with a verified no-logs policy and strong AES-256 encryption, and given how directly telecom infrastructure has already been targeted in Ukraine, keep an alternative connectivity method or backup provider in mind in case your primary service is disrupted. Enable two-factor authentication on your important accounts, use encrypted messaging apps for sensitive communications, and stay alert to phishing attempts, which often surge during periods of heightened conflict or uncertainty.

VPNs Are Fully Legal in Government-Controlled Ukraine

VPN use is completely legal in Ukraine, and the country is grouped among the more open, low-censorship nations globally, alongside the US, UK, Japan, and Mexico. Even under ongoing martial law since February 2022, the government hasn't restricted VPN use for its own citizens — the legal basis for martial law sits in the Constitution and Ukraine's Law "On the Legal Status of Martial Law," and it governs security measures, not personal privacy tools.

A Critical Distinction: Occupied Territories Are Different

The situation changes sharply in Russian-occupied parts of Ukraine. Russia has systematically blocked free information and effectively all Ukrainian sites in occupied territory, with residents heavily relying on VPNs to bypass these restrictions — and a new Russian law passed in July 2025 specifically targets internet searches and VPN circumvention in these areas. If you're in or communicating with contacts in occupied territory, obfuscation and extreme caution matter far more than they do elsewhere in Ukraine.

What to Look For in a UCN VPN for Ukraine

For government-controlled Ukraine, a UCN VPN with WireGuard® encryption and a verified no-logs policy is a sound everyday choice — no special obfuscation is required. Ukraine has long banned Russian platforms like VKontakte and Odnoklassniki since 2017 as a national security measure, so a UCN VPN is also useful for anyone needing to reach international services or maintain secure communications during wartime infrastructure disruptions, including power and connectivity outages caused by strikes on energy infrastructure.

What "No-Logs" Actually Means

A no-logs policy means the VPN provider stores no record of your browsing activity, IP address, or connection times — so there's nothing to hand over if it's ever requested. This matters in Ukraine given the heightened wartime security environment, where journalists, volunteers, and ordinary citizens alike benefit from knowing their browsing history genuinely cannot be reconstructed or exposed.

Getting Started in Under a Minute

Download the UCN VPN app, sign in, and tap Connect — your traffic is encrypted immediately. In government-controlled Ukraine, this is a simple, low-friction daily habit; in or near occupied territory, prioritize a UCN VPN with obfuscated protocols and treat any online activity there with real caution given Russia's active, escalating restrictions in those areas.

Ukraine's own internet remains open under wartime conditions — the real risk sits specifically in Russian-occupied territory, where a UCN VPN is often the only way to reach uncensored information at all.