UPD. Ukrzaliznytsia has resumed online sales after a cyberattack. How the services work now
The UZ website and application were restored to non-stop operation in 89 hours after an unprecedented attack on the railway’s key operating systems.
The UZ website and application were restored to non-stop operation in 89 hours after an unprecedented attack on the railway’s key operating systems.
«At the first stage, only basic functionality will work: sale and refund of tickets to all destinations with a depth of 20 days. Despite the enemy’s constant attacks on the infrastructure — offline and online — we continue to move forward and become even stronger,» the company said in a statement.
Also, UZ reported that no sensitive information was leaked.
«Railway workers, specialists from the Cyber Department of the Security Service of Ukraine, CERT-UA at the State Service for Special Communications, and other partners are working to restore all other services, primarily client services. Our stations and ticket offices continue to operate in an enhanced mode throughout the country as a safety precaution, and trains — like all the days before — run according to the schedule. Thank you for your patience and support! —— Temporary technical disruptions in work are possible due to peak service overloads,» Ukrzaliznytsia reported.
So far, the UZ application is working slower than usual, however, you can already buy tickets — dev.ua tested the function. However, the company is recording temporary technical outages in the UZ online applications due to peak service overloads after the restoration of work.
UZ also added answers to the most frequently asked questions right in the app.
UPD 09:00. UZ reported that the system is currently operating with increased load, as thousands of users are simultaneously making requests.
- The application provides ticket purchase and refund functions.
- Discounted tickets can currently only be purchased at box offices that are operating in enhanced mode.
- Ticket sales at box offices have been extended according to the «two-day» rule — that is, only for the current and next day, to avoid crowds at train stations.
«Be sure to pay attention to this information if you are going to the station! Ticket sales for more distant dates at ticket offices are currently unavailable (this rule does not apply to military personnel and passengers with limited mobility). Other functions of the application are still being restored — this will take some time,» UZ noted.
For passengers staying abroad, during the period of full stabilization of the application, the possibility of purchasing tickets from/to Ukraine («there», «back», «there and back») is available at the international ticket offices of the railways of the following countries:
- Poland: PKP Intercity
- Hungary: MÁV Start
- Austria: ÖBB
- Slovakia: ZSSK
- Moldova: CFM
- Czech Republic: RegioJet
Some of these train operators also offer online ticket purchasing:
- Hungary (MÁV Start): https://www.mavcsoport.hu/en
- Austria (ÖBB), https://www.oebb.at/.../tickets.../online-mobile-ticketing
- Czech Republic (RegioJet): https://regiojet.com/
«If tickets are not available online, we recommend contacting the international ticket offices of the specified railway operators directly. The addresses of these offices can be found on the official websites of the relevant railways or by contacting their information services. Ticket sales by foreign railways are carried out to the full depth of sales, depending on the availability of free seats,» the UZ statement said.
As a reminder, on Sunday morning, March 23, Ukrzaliznytsia reported a failure in the company’s IT system. The company did not immediately indicate the reasons for the failure. In the morning, the chairman of the board of UZ admitted that an unprecedented cyberattack was carried out on the servers and IT resources of Ukrzaliznytsia — targeted, complex and multi-level. Online services are still not working.
Cyber experts also gave their first assessments of a large-scale hacker attack on the servers and IT infrastructure of Ukrzaliznytsia.
According to the company, a backup infrastructure has now been deployed in a secure environment, with all components prepared for immediate restart from backup copies of critical systems.
Ukrzaliznytsia also reminded about how the mechanism for organizing cargo transportation and providing services works. It is noted that after the restoration of cargo services, document processing will again be carried out electronically.
Chairman of the Board of UZ Oleksandr Pertsovsky said that the company is implementing compensation packages for passengers.
UPD. Cyberattack on Ukrzaliznytsia: «Everything will be online soon.» The company is introducing compensation offers for passengers
UPD. Cyberattack on Ukrzaliznytsia: «Everything will be online soon.» The company is introducing compensation offers for passengers
«To hack a straw-man IT house like Ukrzaliznytsia, you don’t need super technologies. All you need is access to the Internet and a few hundred dollars to buy 1-2-day exploits on the black market.» Cyber experts gave their first assessment of the attack on UZ
«To hack a straw-man IT house like Ukrzaliznytsia, you don’t need super technologies. All you need is access to the Internet and a few hundred dollars to buy 1-2-day exploits on the black market.» Cyber experts gave their first assessment of the attack on UZ
UPD. Targeted, complex and multi-level attack on servers and IT resources of Ukrzaliznytsia. Online services have been down for 24 hours: how to buy tickets
UPD. Targeted, complex and multi-level attack on servers and IT resources of Ukrzaliznytsia. Online services have been down for 24 hours: how to buy tickets
Not delay, but professionalism: why you shouldn’t always rush to restore backups. Example of Ukrzaliznytsia
Not delay, but professionalism: why you shouldn’t always rush to restore backups. Example of Ukrzaliznytsia
Read the country’s main IT news in our Telegram
Read the country’s main IT news in our Telegram
