Nightwatch
Intelligence archive
Historical intelligence

Situation Report

Archived operational intelligence briefing retained for historical analysis.

Intelligence brief / archived issue

Situation Update (UTC)

Anchored to 2026-09-25T13:41:54Z. New facts below are drawn only from the supplied messages timestamped 13:09–13:40 UTC; source-message timestamps are not event times unless stated. A previous situation report (anchored 13:10:43Z) and a previous daily report were supplied as historical baselines; carried-forward items are labelled as previously reported and are not treated as new or independent corroboration.

Key reported developments

  • Kyiv city (Ukraine): КМВА and President Zelensky, relayed by Оперативний ЗСУ and ASTRA, reported four dead and seven injured, including a child, from a Russian drone strike on an office building in Kyiv, and said a warehouse used by McDonald's was also hit by drones; ASTRA said no casualties were reported for the warehouse. RBC-Ukraine earlier in the batch captioned footage as showing the site of a strike where three people were killed. (event time not supplied; sources: КМВА (Київська міська військова адміністрація) 2026-09-25 13:12:32; Оперативний ЗСУ 13:21:57; ASTRA 13:23:25; РБК-Україна 13:09:14; confidence MEDIUM for relayed official claims, LOW for independent verification.)
  • Kyiv city (Ukraine): РБК-Україна’s correspondent reported this was the second hit on a business centre in Kyiv today, adding that an morning Russian strike damaged a building roof; accompanying material showed a destroyed glass-fronted office building, burned cars and a crane removing debris. (event time: “morning”, no exact UTC; source: РБК-Україна 2026-09-25 13:24:13; confidence MEDIUM for the reported observation, LOW for independent verification.)
  • Sumy city, Sumy Oblast (Ukraine): РБК-Україна relayed official reporting that two Russian guided aerial bombs struck two city districts, damaging private homes and an education building, with three injured, including a 15-year-old child. (event time not supplied; source: РБК-Україна 2026-09-25 13:37:50; confidence MEDIUM for relayed official claim, LOW for independent verification.)
  • Horlivka, Donetsk Oblast (reported by ТАСС as Nikitovsky district): ТАСС, citing operational services, reported one civilian killed and initially one injured in a Ukrainian UAV attack on a market; a later ТАСС message said the number of injured rose to five. (event time not supplied; sources: ТАСС 2026-09-25 13:18:46 and 13:31:56; confidence LOW.)
  • Donetsk Oblast (Ukraine): SOTA relayed the Donetsk Oblast Military Administration expanding forced evacuation of families with children from parts of Sviatohirska hromada, Sloviansk districts, and Sukhanivka in Sloviansk hromada; a new evacuation point was approved, and the administration said Russian troops deliberately attack civilian evacuation sites. (event time not supplied; source: SOTA 2026-09-25 13:12:01; confidence MEDIUM for the official notice, LOW for the causal claim.)
  • Kyiv city and national infrastructure claim: The Russian-aligned channel Поддубный |Z|О|V| edition claimed Russian strikes on Ukrainian data centres, naming Kyivstar, Parkovy, New-Telco, United DS, BeMobile, and “today” Datagroup in BC Inkom, and claimed large internet outages in Kyiv; its photo showed a damaged office building with “APOLLO” signage but did not identify the provider. (event time not supplied; source: Поддубный |Z|О|V| edition 2026-09-25 13:25:19; confidence LOW.)
  • Chuguev, Kharkiv Oblast (Ukraine): The pro-Russian channel Colonelcassad claimed a “Banderol” loitering munition was “delivered” in Chuguev, posting images of smoke plumes and a possible UAV; no timestamp or geolocation tied the images to a single incident. (event time not supplied; source: Colonelcassad 2026-09-25 13:17:01; confidence LOW.)
  • Gulf of Finland: SOTA relayed a Finnish Air Force report that Finnish F/A-18 Hornets and Swedish JAS 39 Gripens on 24 September conducted their first joint intercept of a Russian Tu-134 escorted by MiG-31 and Su-30 aircraft over the Gulf of Finland; the Russian aircraft were said to be in international airspace. The year was not supplied. (event date 24 September; source: SOTA 2026-09-25 13:22:01; confidence LOW to MEDIUM for the relayed report, LOW for independent verification.)

Reported situation by area

  • Kyiv city (Ukraine): New evidence centres on official claims of four dead and seven injured including a child from a drone strike on an office building, the separate claim of a McDonald’s-used warehouse struck by drones, and an RBC-Ukraine report of a second hit on a business centre today after a morning strike damaged a roof. RBC-Ukraine imagery was said by its own analysis to show fire-truck markings “Києво-Печерська” and to confirm the Pechersk district; earlier supplied reporting (previous baseline) described the office-building strike in Solomianskyi district, so district attribution remains unresolved. Previously reported baseline, not new: КМВА at 13:10:34 had reported 5 dead and 30 injured including 2 children as of 16:00, and Datagroup had reported data-centre damage. (sources: РБК-Україна 13:09:14, 13:24:13; КМВА 13:12:32; Оперативний ЗСУ 13:21:57; ASTRA 13:23:25; confidence MEDIUM for relayed official claims, LOW for independent verification.)
  • Sumy city and Sumy Oblast (Ukraine): New reporting: two guided aerial bombs struck two districts of Sumy, damaging private homes and an education building and injuring three people including a 15-year-old child. The Air Force also issued an alert for a “Banderol” loitering munition toward Konotop from the north-east; no outcome was supplied. (sources: РБК-Україна 13:37:50; Повітряні Сили ЗС України 13:16:19; confidence MEDIUM for the official relay, LOW for independent verification; HIGH for alert issuance only.)
  • Donetsk Oblast (Ukraine): New reporting: expanded forced evacuation of families with children from parts of Sviatohirska hromada, Sloviansk districts, and Sukhanivka; ТАСС claimed a Ukrainian UAV attack on a market in Horlivka/Nikitovsky district killed one civilian and injured five; the Air Force reported KAB launches toward Donetsk Oblast. A Ukrainian-aligned WarArchive post claimed a night raid by 8 ОПСпП and 1 ГрСпП “UA_REG” in Donetsk Oblast, but it gave the date as 08.2026 (?) and geolocation as unknown. (sources: SOTA 13:12:01; ТАСС 13:18:46, 13:31:56; Повітряні Сили 13:35:26; WarArchive 13:28:18; confidence MEDIUM for official evacuation notice, LOW for battlefield/geolocation claims.)
  • Kharkiv Oblast (Ukraine): Colonelcassad claimed a Banderol strike in Chuguev; the Air Force reported a jet-powered UAV near Lozova. No outcomes were supplied. (sources: Colonelcassad 13:17:01; Повітряні Сили 13:25:22; confidence LOW for the strike claim, HIGH for alert issuance only.)
  • Chernihiv Oblast (Ukraine): The Air Force reported a jet-powered UAV passing Sosnytsia, heading south-west. No outcome supplied. (source: Повітряні Сили 13:14:27; confidence HIGH for alert issuance only.)
  • Poltava Oblast (Ukraine): The Air Force reported jet-powered UAVs toward Poltava and Reshetylivka. No outcomes supplied. (sources: Повітряні Сили 13:17:01, 13:32:15, 13:37:08; confidence HIGH for alert issuance only.)
  • Zhytomyr/Rivne oblasts (Ukraine): The Air Force reported a Banderol-type loitering munition moving from Zhytomyr Oblast toward Rivne Oblast, vector Berezne. No outcome supplied. (source: Повітряні Сили 13:29:54; confidence HIGH for alert issuance only.)
  • Crimea: Colonelcassad published thermal footage claiming Crimean mobile fire groups tracked and downed an airborne target over water; the target type and exact location were not independently verified. (source: Colonelcassad 13:35:01; confidence LOW to MEDIUM for the visual material, LOW for target and location claims.)
  • Gulf of Finland: SOTA relayed a Finnish Air Force report of the first joint Finnish-Swedish intercept of Russian military aircraft on 24 September; the supplied image did not clearly show the claimed Finnish or Swedish interceptors or the Tu-134. (source: SOTA 13:22:01; confidence LOW to MEDIUM.)

Reported strikes and air-defense activity

  • Kyiv office-building and warehouse strikes: Ukrainian officials and media reported a Russian drone strike on a Kyiv office building with four dead and seven injured including a child (per КМВА, Zelensky relayed by Оперативний ЗСУ/ASTRA); RBC-Ukraine earlier captioned footage as a site where three people were killed. A separate claim by Zelensky and Ukrainian outlets said Russian drones struck a warehouse used by McDonald’s; ASTRA said no casualties were reported for that warehouse. Photos showed a burned office building and vehicles, and a large industrial fire with police/fire response, but no drone, munition debris, or McDonald’s branding was visible. (sources: РБК-Україна 13:09:14, 13:22:37; КМВА 13:12:32; Оперативний ЗСУ 13:21:57; ASTRA 13:23:25; ЦАПЛІЄНКО_UKRAINE FIGHTS 13:30:44; confidence MEDIUM for relayed official claims, LOW for independent verification.)
  • Second Kyiv business-centre hit: РБК-Україна’s correspondent reported a second hit on a Kyiv business centre today and said a morning Russian strike damaged a building roof. (source: РБК-Україна 13:24:13; confidence MEDIUM for reported observation, LOW for independent verification.)
  • Sumy KAB strikes: Two Russian guided aerial bombs were reported to have struck two districts of Sumy, damaging homes and an education building and injuring three including a 15-year-old child. (source: РБК-Україна 13:37:50; confidence MEDIUM for official relay, LOW for independent verification.)
  • Horlivka market attack claim: ТАСС, citing operational services, attributed a UAV attack on a market in Nikitovsky district of Horlivka to Ukrainian forces and reported one civilian killed and five injured across two updates. (sources: ТАСС 13:18:46, 13:31:56; confidence LOW.)
  • Chuguev claim: Colonelcassad claimed a “Banderol” strike in Chuguev with smoke imagery and a possible UAV; no timestamp/geolocation proof was supplied. (source: Colonelcassad 13:17:01; confidence LOW.)
  • Russian data-centre strike claims: Поддубный claimed strikes on Kyivstar, Parkovy, New-Telco, United DS, BeMobile and Datagroup-in-Inkom data centres, with claimed Kyiv internet outages; the attached image did not confirm the provider or facility. (source: Поддубный 13:25:19; confidence LOW.)
  • Air-defense alerts: The Ukrainian Air Force issued alerts for jet-powered UAVs over Chernihiv, Poltava and Kharkiv oblasts, Banderol-type munitions toward Konotop and Berezne, and KAB launches toward Donetsk Oblast. No interception, impact or damage results were supplied. (sources: Повітряні Сили 13:14:27, 13:16:19, 13:17:01, 13:25:22, 13:29:54, 13:32:15, 13:35:26, 13:37:08; confidence HIGH for alert issuance only.)
  • Crimea air-defense claim: Colonelcassad published thermal footage claiming a Crimean mobile fire group engaged and downed an airborne target over water; the engagement outcome and target type were not independently verified. (source: Colonelcassad 13:35:01; confidence LOW to MEDIUM for visual material, LOW for claims.)

Reported Russian activity

  • Kyiv strikes and data-centre campaign claims: Russian-aligned channels claimed strikes on Ukrainian data centres and named multiple Kyiv facilities; Ukrainian officials attributed the Kyiv office-building and McDonald’s-warehouse strikes to Russian drones. These are competing attributions; the specific targets and causes remain unverified. (sources: Поддубный 13:25:19; КМВА 13:12:32; Оперативний ЗСУ 13:21:57; confidence LOW for Russian-aligned target claims, MEDIUM for relayed Ukrainian official claims.)
  • Chuguev strike claim: Colonelcassad claimed a Banderol loitering munition was “delivered” in Chuguev, Kharkiv Oblast. (source: Colonelcassad 13:17:01; confidence LOW.)
  • Crimea mobile fire group: Colonelcassad published thermal footage claiming Crimean mobile fire groups downed an enemy UAV over water. (source: Colonelcassad 13:35:01; confidence LOW to MEDIUM for visual material, LOW for the claim.)
  • Archangel special forces raid: АРХАНГЕЛ СПЕЦНАЗА published a first-person video claiming a successful fire raid on a Ukrainian strongpoint and withdrawal without losses; the video reportedly showed movement in wooded terrain rather than the claimed engagement. (source: АРХАНГЕЛ СПЕЦНАЗА 13:10:32; confidence LOW.)
  • Courier UGV counter-UAV claim: Воин DV claimed a modernized NRTK “Курьер” with twin PKT module, operated by a 14 ОБрСпН operator callsign “Юджин”, downed a gasoline-type UAV, a Hornet-type UAV, and a new low-observable B-2 UAV while on duty with a МОГ subunit. No independent verification was supplied. (source: Воин DV 13:14:58; confidence LOW.)
  • Recruitment claims: Северный канал claimed Belarusians in the 44th Army Corps were being pressured by police to choose prison or a Russian MoD contract; МОБИЛИЗАЦИЯ | Новости | Что делать? reported a Nizhny Tagil prosecutor linking “bring a friend” recruitment payments to criminal groups and said the city budget allocated 100 million rubles for 250 contract soldiers in 2026, with 580 people sent under the scheme by the start of this year. These are single-source claims not independently corroborated. (sources: Северный канал 13:27:01; МОБИЛИЗАЦИЯ 13:23:54; confidence LOW.)
  • Gulf of Finland aircraft activity: SOTA relayed a Finnish Air Force report that Russian Tu-134, MiG-31 and Su-30 aircraft were intercepted over the Gulf of Finland on 24 September; the Russian aircraft were said to be in international airspace. (source: SOTA 13:22:01; confidence LOW to MEDIUM.)

Reported Ukrainian activity

  • Official statements and emergency response: КМВА and President Zelensky, relayed by Оперативний ЗСУ and ASTRA, reported casualties and the McDonald’s-warehouse strike; Ukrainian emergency services imagery showed firefighting and police response at damaged sites. (sources: КМВА 13:12:32; Оперативний ЗСУ 13:21:57; ASTRA 13:23:25; confidence MEDIUM for relayed official claims.)
  • Air Force alerts: The Ukrainian Air Force issued multiple alerts for jet-powered UAVs, Banderol-type loitering munitions, and KAB launches across Chernihiv, Sumy, Poltava, Kharkiv, Zhytomyr, Rivne and Donetsk areas. No outcomes were reported. (sources: Повітряні Сили 13:14:27, 13:16:19, 13:17:01, 13:25:22, 13:29:54, 13:32:15, 13:35:26, 13:37:08; confidence HIGH for alert issuance only.)
  • Sumy reporting: РБК-Україна relayed official reporting on two KAB strikes in Sumy, with Sumy City Council watermarked imagery showing damage and emergency response. (source: РБК-Україна 13:37:50; confidence MEDIUM for relayed official claim.)
  • POW-family meeting: The Координаційний штаб з питань поводження з військовополоненими reported an online meeting with families of captured and missing Ukrainian border guards, covering negotiation process, accounting categories, Mariupol defenders, illegally convicted servicemen, and wounded/seriously ill personnel. No date, participant list or outcomes were supplied. (source: Координаційний штаб 13:17:34; confidence MEDIUM that the post was published, LOW for outcomes.)
  • Donetsk night-raid claim: WarArchive published night-vision footage claiming a raid by 8 ОПСпП and 1 ГрСпП “UA_REG” on enemy positions in Donetsk Oblast; the post gave the date as 08.2026 (?) and geolocation as unknown. (source: WarArchive 13:28:18; confidence LOW.)
  • Horlivka market attack attributed to Ukrainian forces by Russian state media: ТАСС claimed Ukrainian UAVs attacked a market in Nikitovsky district of Horlivka, causing one civilian death and five injuries. No Ukrainian confirmation was supplied. (sources: ТАСС 13:18:46, 13:31:56; confidence LOW.)

Civilian and infrastructure impact

  • Kyiv city (Ukraine): Official claims: four dead and seven injured, including a child, from a Russian drone strike on an office building; RBC-Ukraine earlier captioned footage as three killed. A warehouse used by McDonald’s was reported struck by drones, with ASTRA saying no casualties were reported there. Imagery showed a badly damaged office building, burned vehicles, a large industrial fire, and emergency response. The previous baseline, not new, had 5 dead and 30 injured including 2 children as of 16:00. District attribution remains disputed: RBC analysis pointed to Pechersk district via fire-truck markings; earlier reporting described Solomianskyi district. (sources: РБК-Україна 13:09:14, 13:24:13; КМВА 13:12:32; Оперативний ЗСУ 13:21:57; ASTRA 13:23:25; confidence MEDIUM for relayed official claims, LOW for independent verification.)
  • Sumy city (Ukraine): Two guided aerial bomb strikes in two districts damaged private homes and an education building; three people injured, including a 15-year-old child. (source: РБК-Україна 13:37:50; confidence MEDIUM for official relay, LOW for independent verification.)
  • Horlivka, Donetsk Oblast (reported by ТАСС as Nikitovsky district): ТАСС reported one civilian killed and five injured in a claimed Ukrainian UAV attack on a market. This is a single Russian state-media claim. (sources: ТАСС 13:18:46, 13:31:56; confidence LOW.)
  • Donetsk Oblast (Ukraine): Authorities expanded forced evacuation of families with children from parts of Sviatohirska hromada, Sloviansk districts, and Sukhanivka; a new evacuation point was approved. The administration claimed Russian troops deliberately attack civilian evacuation sites. (source: SOTA 13:12:01; confidence MEDIUM for the notice, LOW for the causal claim.)
  • Data-centre and connectivity claims: A Russian-aligned channel claimed strikes on multiple Ukrainian data centres and large internet outages in Kyiv; no independent confirmation of the specific facilities or outage scale was supplied. Previously reported baseline, not new: Datagroup had said its data centre was damaged and services continued from backups. (source: Поддубный 13:25:19; confidence LOW.)
  • Chuguev, Kharkiv Oblast: Colonelcassad claimed a strike in Chuguev with smoke imagery; no casualty or independently verified damage information was supplied. (source: Colonelcassad 13:17:01; confidence LOW.)

Information environment and disputed claims

  • Casualty-figure inconsistency: Within the supplied batch, RBC-Ukraine footage was captioned as three killed, while КМВА/Zelensky statements relayed by Оперативний ЗСУ and ASTRA said four dead and seven injured including a child. The previous situation report, as historical baseline only, had a later КМВА figure of five dead and thirty injured including two children. The supplied material does not reconcile these figures. (sources: РБК-Україна 13:09:14; КМВА 13:12:32; Оперативний ЗСУ 13:21:57; ASTRA 13:23:25; confidence MEDIUM for relayed claims, LOW for independent verification.)
  • McDonald’s warehouse attribution: Ukrainian officials and outlets claimed a Russian drone struck a McDonald’s-used warehouse; photos showed an industrial fire and emergency response but no McDonald’s branding, drone, or munition. The claim remains unverified. (sources: РБК-Україна 13:22:37; ASTRA 13:23:25; ЦАПЛІЄНКО_UKRAINE FIGHTS 13:30:44; confidence MEDIUM for the official claim, LOW for independent verification.)
  • Kyiv district and target attribution: RBC-Ukraine imagery analysis said fire-truck markings “Києво-Печерська” confirmed Pechersk district; previous baseline described Solomianskyi district. Russian-aligned channels claimed the target was BC Inkom/Datagroup and part of a data-centre campaign; the attached photo showed “APOLLO” signage and did not identify the provider. (sources: РБК-Україна 13:09:15; Поддубный 13:25:19; confidence LOW for attribution claims.)
  • Russian data-centre campaign narrative: Поддубный presented a systematic campaign against Ukrainian telecom/data infrastructure and named Kyivstar, Parkovy, New-Telco, United DS, BeMobile and Datagroup/Inkom; the post is partisan and the specific strikes and effects were not independently confirmed. (source: Поддубный 13:25:19; confidence LOW.)
  • Chuguev euphemistic claim: Colonelcassad’s “Banderol delivered” formulation is a loaded, partisan claim; the two images lacked a shared timestamp/geolocation and did not show the target or battle damage. (source: Colonelcassad 13:17:01; confidence LOW.)
  • Horlivka market claim: ТАСС reported the market attack and casualty figures from unnamed operational services; no independent confirmation or Ukrainian response was supplied. (sources: ТАСС 13:18:46, 13:31:56; confidence LOW.)
  • Nordic intercept report: SOTA relayed a Finnish Air Force report and image; the image did not clearly show the claimed Finnish or Swedish interceptors or the Tu-134, and the year was not supplied. (source: SOTA 13:22:01; confidence LOW to MEDIUM.)
  • Archangel and Courier UGV claims: Both Russian-aligned posts are promotional and source-produced; the claimed raid without losses and multiple UAV kills, including a low-observable B-2, were not independently verified. (sources: АРХАНГЕЛ СПЕЦНАЗА 13:10:32; Воин DV 13:14:58; confidence LOW.)
  • Threatening propaganda: A Russian-aligned channel, НгП раZVедка, posted abusive and threatening commentary calling for continued drone attacks and targeting of Ukrainian commercial/social sectors. No operational evidence was supplied. (source: НгП раZVедка 13:21:05; confidence LOW.)
  • EU aid claim repeated: Оперативний ЗСУ again relayed Kaja Kallas’s statement on €6.6 billion in European Peace Facility terms for Ukraine, with €900 million, €1 billion and €4.7 billion components; this repeats a claim already in the previous baseline and no official EU legal text was supplied in the messages. (source: Оперативний ЗСУ 13:28:12; confidence MEDIUM that the statement was published, LOW for independent confirmation.)
  • Recruitment/crime claims: Северный канал and МОБИЛИЗАЦИЯ published single-source claims about coercive recruitment of Belarusians and recruitment-linked crime in Nizhny Tagil; neither was independently corroborated in the batch. (sources: Северный канал 13:27:01; МОБИЛИЗАЦИЯ 13:23:54; confidence LOW.)
  • Dempster–Shafer beliefs: The supplied beliefs place most mass on “Uncertainty” (0.56), with smaller masses on US laser air-defense deployment/upgrade and Russian laser use; they relate to a separate technology discussion and do not corroborate any reported Ukraine-war event here. (analytic support only; no independent corroboration.)

Evidence limitations and unresolved questions

  • Event times are mostly missing: The Kyiv strikes, business-centre second hit, Sumy KAB strikes, Horlivka market attack, Chuguev claim, data-centre claims, Donetsk evacuation expansion, and Nordic intercept mostly lack exact UTC event times; source-message timestamps are not event times. The Nordic intercept date is given as 24 September but without a year.
  • Casualty figures remain unresolved: The batch contains three killed (RBC caption), four dead and seven injured including a child (КМВА/Zelensky relayed), and the previous baseline’s five dead and thirty injured including two children. No final consolidated count or reconciliation was supplied.
  • No independent corroboration was supplied for: the McDonald’s warehouse strike; the second Kyiv business-centre hit; the specific Russian data-centre target claims and outage scale; the Chuguev Banderol strike; the Horlivka market attack and casualty figures; the Crimea UAV-downing claim; the Archangel raid and Courier UGV claims; the Nordic intercept details; the Belarusian recruitment-pressure claim; the Nizhny Tagil recruitment/crime claim; the WarArchive night-raid date/geolocation; and the EU €6.6 billion package details.
  • Air alerts lack outcomes: The Ukrainian Air Force alerts for jet-powered UAVs, Banderol munitions and KAB launches carried no interception, impact or damage results.
  • Kyiv district discrepancy unresolved: RBC-Ukraine’s imagery analysis pointed to Pechersk district, while the previous baseline described Solomianskyi district. The supplied material does not establish which is correct or whether multiple sites were involved.
  • Data-centre and service-impact details remain unresolved: The batch does not establish the full extent of damage to Datagroup or other data centres, which facilities were affected, how many customers or services were disrupted, or whether reported Lutsk transport-board outages (previous baseline) were directly caused by Kyiv data-centre damage.
  • Weather context: Supplied numeric observations as of 2026-09-25T13:30 UTC include Kharkiv/Vovchansk 15.5°C, mainly clear, wind 1.2 m/s, cloud 65%, precip 0.0 mm; Luhansk/Svatove 16.9°C, mainly clear, wind 1.4 m/s, cloud 30%, precip 0.0 mm; Donetsk/Pokrovsk 17.2°C, mainly clear, wind 0.8 m/s, cloud 37%, precip 0.0 mm; Zaporizhzhia/Orikhiv 18.9°C, mainly clear, wind 1.2 m/s, cloud 31%, precip 0.0 mm; Kherson 19.1°C, overcast, wind 2.6 m/s, cloud 100%, precip 0.0 mm. No supplied message connects these observations to any specific strike, damage or civilian impact.
  • Previous baselines were not resolved: The previous situation report and previous daily report remain historical context only. Their events — including earlier Kyiv casualty tallies, earlier Sumy strikes, sector claims, and Datagroup/Lutsk statements — are not treated here as new evidence or independent corroboration.