Ukrainian Drone Strikes Hit Yandex Data Centres in Russia, Disrupting Digital Services and Raising Concerns Over AI Infrastructure

VoS NEWS DESK | INTERNATIONAL | 10 OCTOBER 2026

The reported attacks illustrate how digital infrastructure has become increasingly important to national security and economic activity during the Russia–Ukraine war. Data centres are large facilities containing computer servers, storage systems and networking equipment that enable organisations to process information, host applications and deliver online services.

Yandex is one of Russia’s major technology companies, with operations spanning internet search, cloud computing, online services and artificial intelligence. Its infrastructure supports a wide range of digital activities, making the reliability of its data centres important not only to the company itself but also to customers and organisations that depend on its computing services.

Reports published on 9 and 10 October indicated that Ukrainian drone attacks had damaged Yandex facilities in the Kaluga and Ryazan regions. The Financial Times reported significant damage at the Kaluga facility, while technology reporting highlighted disruption at a data centre in the Ryazan region. The full extent of the damage and the timeline for restoring normal operations remained uncertain.

The incidents underline a significant change in modern warfare. Military operations increasingly affect the infrastructure that sustains communications, commercial transactions, cloud computing and the digital services used by millions of people. While attacks on energy facilities, transport networks and military installations have long been part of armed conflicts, data centres have become increasingly important because so many economic and administrative activities depend on them.

Yandex has developed a broad technology ecosystem serving users and businesses across Russia and other markets. Its digital services include search, email, cloud computing, online storage, payments and commercial platforms. These services rely on interconnected systems that must maintain access to data, computing power and reliable communications.

A major interruption at a data centre can affect several services at once, particularly where multiple platforms depend on the same underlying infrastructure. Users may experience difficulties accessing accounts, retrieving stored files, completing transactions or using applications hosted on affected systems.

Businesses that rely on cloud platforms can also face operational problems when computing resources become unavailable. Companies may be unable to process data, maintain customer-facing applications or access information needed for routine operations. The consequences can extend beyond the organisation directly affected if its suppliers, customers or partners depend on the same services.

Reporting on the attacks indicated that disruption to the Ryazan facility affected services associated with Yandex and other organisations using the infrastructure, including systems linked to Russian Railways and telecommunications provider MegaFon. The precise scope and duration of individual service interruptions may vary as operators investigate the damage and restore affected systems.

The incident demonstrates that digital infrastructure is not isolated from the physical world. Although users may access cloud services through websites or mobile applications, those services ultimately depend on physical buildings, electricity supplies, cooling systems, network connections and specialised computing equipment.

One of the most significant concerns surrounding the reported attacks involves their potential effect on artificial intelligence development.

Modern AI systems require substantial computing resources for training, testing and deployment. Data centres may contain specialised processors, high-speed networking equipment and storage systems designed to handle demanding workloads. If these facilities are damaged, the consequences can extend beyond temporary interruptions to everyday digital services.

Technology reporting indicated that the affected Yandex infrastructure included facilities associated with powerful computing systems used for AI development. The extent of any permanent equipment damage and its impact on the company’s future AI projects remained unclear.

AI development depends on access to computing capacity, suitable hardware, large datasets and reliable energy supplies. When one part of this system becomes unavailable, organisations may need to transfer workloads, restore data or postpone computationally intensive projects.

Replacing specialised equipment can also be more difficult than repairing ordinary office technology. Advanced processors and other components may require lengthy procurement processes, while the installation and testing of replacement systems can take considerable time.

For Russian technology companies, these challenges may be compounded by restrictions on access to certain advanced technologies and international supply chains. The wider consequences will depend on the amount of equipment damaged, the availability of replacement components and whether Yandex can redirect workloads to other facilities.

However, it would be premature to conclude that the attacks have permanently undermined Russia’s AI capabilities. The longer-term impact will depend on the extent of the physical damage, the availability of alternative computing resources and the company’s ability to restore its infrastructure.

The attacks form part of a wider conflict in which both sides have increasingly targeted infrastructure with strategic and economic importance. Ukraine has sought to weaken Russian military capabilities and the systems supporting the country’s war effort, while Russian attacks have repeatedly affected Ukrainian energy, communications and other civilian infrastructure.

Reporting on the Yandex incidents described the attacks as part of Ukraine’s broader campaign against Russian infrastructure. Ukrainian officials have also highlighted the importance of responding to Russian strikes on Ukrainian digital and economic systems.

The expansion of attacks to data centres raises difficult questions about the role of civilian technology infrastructure during armed conflict. Some facilities support commercial services, while others may provide computing or communications capabilities used by public authorities and strategically important organisations. The nature of each facility and the activities it supports can therefore be relevant to assessments under international humanitarian law.

The presence of important digital services within a country’s infrastructure can also create complex consequences for civilians. Even when a facility is not directly associated with military operations, damage to shared systems may interrupt services used by ordinary households, businesses and public institutions.

International humanitarian law requires parties to armed conflicts to distinguish between military objectives and civilian objects and to comply with applicable rules governing attacks. Whether a particular facility qualifies as a military objective depends on the relevant facts and legal criteria; its technological importance alone does not settle that question.

As digital systems become more closely connected to national economies and public services, governments and technology companies face growing pressure to consider how infrastructure can be protected and how disruption to civilians can be minimised.

Data centres are designed to operate continuously, but their resilience depends on more than the strength of their buildings. Reliable electricity, backup power, cooling systems, network redundancy, physical security and effective disaster recovery procedures are all essential.

Large technology companies often distribute their operations across multiple facilities to reduce dependence on a single location. Where workloads and backups can be transferred to unaffected sites, services may be restored more quickly following a disruption.

However, redundancy is not always complete. Different facilities may share network connections, administrative systems or other dependencies. Some specialised equipment cannot be replaced immediately, and transferring large volumes of data may take time even when alternative capacity is available.

Companies must also consider the security of stored information. Physical damage does not automatically mean that data has been permanently lost, particularly where secure backups exist elsewhere. Nevertheless, operators must assess whether systems have been compromised, whether stored information remains accessible and whether recovery procedures can be carried out safely.

The Yandex incidents are likely to intensify attention on these questions across the technology sector. Operators of cloud platforms, financial services, telecommunications networks and AI systems may need to reassess the risks associated with concentrated computing infrastructure.

Disruptions to large data centres can create costs across several parts of the economy. Technology companies may face repair expenses, lost revenue, service-level obligations and the cost of transferring workloads to alternative facilities.

Customers may also incur losses if interruptions prevent them from operating applications, processing transactions or accessing business information. For companies that depend on digital services for everyday operations, even a temporary outage can affect productivity and customer confidence.

The broader impact depends on the duration and scale of the disruption. Short interruptions may be manageable if systems recover quickly, whereas prolonged outages can require businesses to adopt alternative providers or redesign parts of their technology infrastructure.

The attacks may also influence decisions about where future data centres are built. Organisations operating in areas exposed to security risks may consider distributing computing capacity across additional locations, improving backup arrangements or increasing investment in physical protection.

Such measures can strengthen resilience but may also increase costs. Building additional facilities requires investment in land, energy, cooling, hardware and skilled personnel. Companies must balance these expenses against the financial and operational risks of a major interruption.

For Russia’s technology sector, the longer-term implications will depend on the ability of companies to maintain reliable services while operating in a challenging geopolitical environment.

The reported attacks also carry lessons for the international technology industry. Cloud computing has enabled organisations to reduce the need for their own physical servers by relying on large, professionally managed facilities. However, this model can concentrate computing resources in locations where a single incident may affect many customers.

AI development has increased the importance of such facilities because training advanced models and operating large-scale AI services can require substantial computing capacity. As investment in AI infrastructure grows, so does the importance of protecting the physical systems on which it depends.

Governments and companies may increasingly treat data centres as critical infrastructure alongside electricity networks, telecommunications systems and major transport facilities. This could lead to additional investment in physical security, disaster recovery and geographically distributed computing resources.

The incident also highlights the relationship between technological independence and infrastructure resilience. Countries seeking to develop domestic AI capabilities need more than software expertise; they also require reliable computing facilities, access to hardware, energy capacity and robust systems for protecting information.

Nevertheless, no single incident can determine the future of a national technology sector. The long-term outcome will depend on how quickly affected infrastructure can be restored, how effectively companies manage operational risks and whether alternative computing resources remain available.

VoS STRATEGIC INSIGHT

The reported attacks on Yandex data centres illustrate how the boundaries between conventional warfare and digital infrastructure are becoming increasingly blurred. Modern economies rely on physical computing facilities to support communications, financial transactions, logistics, public services and artificial intelligence. Damage to these facilities can therefore produce consequences far beyond the immediate location of an attack.

For technology companies, resilience must be treated as a strategic requirement rather than a secondary technical consideration. Geographic redundancy, secure backups, alternative power supplies and tested recovery procedures can help reduce the consequences of physical disruption. However, these safeguards require sustained investment and careful planning.

For governments, the incidents highlight the importance of protecting essential digital infrastructure while establishing clear legal and operational standards for its treatment during armed conflict. Civilian dependence on shared technology systems makes it especially important to assess the potential consequences of attacks and to minimise harm to people who rely on those services.

For the AI industry, the episode is a reminder that technological progress depends on reliable physical foundations. Advanced algorithms cannot operate at scale without computing facilities, energy, specialised hardware and secure networks. Disruption to any of these elements can affect research, commercial services and national technology strategies.

Ultimately, the significance of the Yandex incidents will depend on the extent of the damage, the recovery of affected systems and the wider development of the Russia–Ukraine conflict. The broader lesson, however, is already clear: in an increasingly connected world, the protection of digital infrastructure has become an important component of economic resilience and national security.

Source: Financial Times | Tom’s Hardware | International reporting on the Russia–Ukraine conflict