Researchers say they realized Russia had invaded Ukraine hours before the news broke thanks to Google Maps traffic info and a SAR satellite image of troops

It was 3:15 a.m. in Belgorod, Russia — much too early for a traffic jam, thought Jeffrey Lewis, who was watching the traffic pileup on Google Maps.

Washington Post 2022-02-26 Rachel Lerman

Context & Ripple Effects

The Belgorod observation showed that consumer mapping data and satellite imagery could expose military movement before conventional reporting caught up. Days later, Google withheld live traffic and busy-area data in Ukraine and then removed newly added user content across Russia, Ukraine, and Belarus, making the episode an early test of mapping platforms' wartime exposure.

Later coverage extends the same contest over geographic visibility: Russian authorities sought to restrict Yandex access to imagery of an oil refinery after drone attacks, while GPS disruption was reported in major Russian cities.

First-order effects

Jeffrey Lewis and other researchers gained an unusually early, publicly observable signal of Russian troop movement by pairing the Belgorod traffic buildup with SAR imagery.
Google Maps' live traffic layer became implicated as operationally sensitive information rather than solely a navigation feature for users in the region.

Second-order effects

Google's subsequent limits on live traffic and user-generated map content reduced the public signals available to researchers and other observers while preserving basic navigation.
Russian authorities and operators have stronger incentives to limit map imagery and disrupt location signals when geographic data can aid targeting or reveal vulnerable activity.

Third-order effects

Digital maps, satellite imagery, and positioning services are becoming contested information infrastructure in conflict zones, forcing platforms to balance civilian utility against the military value of public geospatial signals.

The trend: The war is turning widely used geospatial products into both open-source intelligence inputs and targets for access restrictions or signal interference.

Discussion

@armscontrolwonk Dr. Jeffrey Lewis on x
According @googlemaps, there is a “traffic jam” at 3:15 in the morning on the road from Belgorod, Russia to the Ukrainian border. It starts *exactly* where we saw a Russian formation of armor and IFV/APCs show up yesterday. Someone's on the move. https://twitter.com/...
@armscontrolwonk Dr. Jeffrey Lewis on x
I have spent my entire career doing #OSINT and even I think it's weird that we were able to see the first signs of the invasion using @googlemaps's traffic layer. https://twitter.com/...
@shashj Shashank Joshi on x
When Google Maps accidentally broadcast the invasion of Ukraine. https://twitter.com/...
@faizsays Faiz Siddiqui on x
Google Maps data helped researchers sniff out Russia's invasion of Ukraine before the news became public, via @rachelerman. Deeply surreal to see how the same data that reflects weather conditions or event-related closures signaled a looming invasion https://www.washingtonpost.co…
@arawnsley Adam Rawnsley on x
Story up about how @ArmsControlWonk and the MIIS crew first spotted the start of the invasion on Google Maps' traffic function before Putin's speech effectively declaring war. https://www.thedailybeast.com/ ...
@janecoaston Jane Coaston on x
FlightAware vibes for all https://twitter.com/...
@emollick Ethan Mollick on x
Surreal that Google Maps traffic (auto-generated from cellphones) might provide the first live data of troop movements. https://twitter.com/...
@kimzetter Kim Zetter on x
All well and good. But they can't disable the all-seeing @googlemaps https://t.co/ykCB00QDAm https://t.co/pDN4UVYI5h
@rachelerman Rachel Lerman on x
It was 3:15 am, much too early for a traffic jam. For researchers in California tracking movement on Google Maps, that could mean only one thing: Russia was invading Ukraine https://www.washingtonpost.com/ ...
@drewharwell Drew Harwell on x
“In the old days, we would have relied on a reporter to show us what was happening on the ground. Today, you can open Google Maps and see people fleeing Kyiv” https://www.washingtonpost.com/ ... @ArmsControlWonk @rachelerman
@esetresearch @esetresearch on x
Breaking. #ESETResearch discovered a new data wiper malware used in Ukraine today. ESET telemetry shows that it was installed on hundreds of machines in the country. This follows the DDoS attacks against several Ukrainian websites earlier today 1/n
@dnvolz Dustin Volz on x
A new strain of wiper malware has been detected in Ukraine and, notably, Latvia. Western officials have warned for months about the possibility that Russian cyber aggression in Ukraine could have spillover effects in the region or globally. https://www.wsj.com/...
@netblocks @netblocks on x
@MarksLarks @accessnow The telecoms connectivity situation in #Ukraine is deteriorating amid military operations by Russia. We're tracking the situation and urge combatants not to target civilian infrastructure. https://netblocks.org/...
@avastthreatlabs @avastthreatlabs on x
On top of the #HermeticWiper (https://twitter.com/...) there is also a new golang-based ransomware roaming in #Ukraine waters. https://www.virustotal.com/... https://twitter.com/...
@gothicbfly Chantal Spurgeon on x
This is the kind of thing that worries me! It wasn't too long ago that the US experienced cyberattacks that were linked to Russia. What if those were mere test runs? The next WW will have a major cyber component...this is certain! https://www.cnbc.com/...
@candiceaiston @candiceaiston on x
Oh, I'm excited to hear more on this. 🧐 https://twitter.com/...
@iskandrah Alexandra Halaby on x
“Any Russian-owned companies the FCC identifies as potential security risks to the United States could face tougher scrutiny from regulators, including the potential risk of being ejected from the US market.” https://twitter.com/...
@rachelbitecofer Rachel Bitecofer on x
Oh hell yeah https://twitter.com/...
@b_fung Brian Fung on x
A little scoop from me: The FCC has launched a sweeping review of the companies it regulates, hunting for ownership ties to Russia in a possible prelude to a clampdown. The assessment in coordination with DOJ and DHS covers all FCC licensees. https://www.cnn.com/...
@secraimondo Secretary Gina Raimondo on x
Through unprecedented coordination & cooperation with our allies in the EU, Japan, Australia, U.K, Canada, and New Zealand, these export controls will starve the Russian military of technologies it needs to wage war against Ukraine. More here https://www.commerce.gov/...
@chadbown Chad P. Bown on x
TSMC says it is fully committed to complying with new export controls after Taiwan's government said it would join global sanctions on Russia over Ukraine. (TSMC is the world's largest semiconductor manufacturer and dominates leading edge technologies.) https://www.reuters.com/..…
twitter.com twitter.com on x
Shame on you, @Apple, @tim_cook for carving out these export exceptions [screenshot in Russian about exceptions for electronic consumer goods]
@acedtect Tom Merritt on x
US puts export controls on tech going to any company supporting Russian Military. Basically what they did to Huawei but for a country. https://www.reuters.com/...
@billkristol Bill Kristol on x
It's understandable we'd be cautious about escalatory implications of broad cyberattacks inside of Russia. On the other hand, targeted cyber counter-attacks against Russian forces launching offensives within Ukraine might well be reasonable. And helpful. https://www.nbcnews.com/.…

Chronicles