The war between Russia and Ukraine has also reached critical internet infrastructure. During several days in October 2026, drone attacks damaged three major data centers operated by the Russian technology company Yandex. The incidents were followed by widespread disruptions affecting cloud services, payment systems, online stores, taxi applications, and other digital platforms. These events demonstrate how the physical destruction of data centers can have serious consequences for an entire digital economy.
Three Attacks on Russian Data Centers in Four Days
Between October 8 and 11, 2026, a series of reported drone attacks targeted the technological infrastructure of Yandex, one of Russia's largest providers of internet, cloud computing, and artificial intelligence services.
October 8, 2026 – Sasovo, Ryazan Region
A drone attack reportedly caused a fire and a complete shutdown of the data center. The facility housed tens of thousands of servers and two major supercomputers used for artificial intelligence development.
The full extent of physical damage to the servers and computing infrastructure had not been reliably confirmed at the time of reporting.
October 9, 2026 – Kaluga, Kaluga Region
Another attack reportedly damaged several modules of a data center, forcing the affected sections offline.
According to published reports, the facility had a capacity of more than 3,800 server racks and an installed power capacity of approximately 63 MW.
October 11, 2026 – Vladimir, Vladimir Region
A third attack reportedly damaged the infrastructure of another major Yandex data center. The company confirmed that operations at the facility had been completely suspended.
The facility also housed the Galushkin supercomputer, used for demanding computational workloads and artificial intelligence projects.
Within just four days, three significant technological facilities forming an important part of Russia's digital infrastructure were reportedly damaged.
Digital Blackout: Which Internet Services Stopped Working?
The disruptions were not limited to the cloud infrastructure itself. Applications and services that directly or indirectly depend on Yandex infrastructure were also affected.
According to published reports, users experienced problems with search engines, electronic payments, online orders, transportation applications, and numerous other internet services.
Overview of services that reportedly experienced outages or operational disruptions:
| Category | Affected Services |
|---|---|
| Search Engines and Maps | Yandex Search, Yandex Maps |
| Transportation and Taxi Services | Yandex Go, Yandex Taxi, Yandex Pro |
| Food Delivery | Yandex Eda, Delivery Club, Dodo Pizza |
| Payment Systems | Yandex Pay |
| Email and Cloud Services | Yandex Mail, Yandex Cloud |
| Music and Video Streaming | Yandex Music, Kinopoisk |
| Smart Home Services | Dom s Alisou, Alice Voice Assistant |
| Online Shopping and Retail | Wildberries, Pyaterochka, Magnit, Lenta |
| Restaurants | Vkusno i Tochka |
| Real Estate and Classifieds | Cian, Sutochno.ru, Avto.ru |
| Other Services | Flowwow, DDX Fitness, Dom.ru |
Some users outside Russia also reportedly experienced problems, including in Kazakhstan, Armenia, Belarus, and Serbia.
Important: This list includes services that reportedly experienced disruptions between October 8 and 11, 2026. It does not mean that all listed platforms were unavailable simultaneously or that their outages are still ongoing. Some services were gradually restored.
Yandex Cloud Operating Under Emergency Conditions
One of the most significant consequences of the attacks was the disruption of the Yandex Cloud platform.
Numerous companies rely on this infrastructure to operate applications, databases, websites, and other internet services.
Through its official incident reporting system, the provider acknowledged availability problems affecting certain services and restrictions on allocating new cloud computing resources.
Reports also indicated delays in technical support and limited options for restoring affected infrastructure.
For cloud customers, incidents of this scale can have several serious consequences:
- Unavailable Virtual Servers: VPS and cloud instances hosted in affected locations may become inaccessible.
- Database Outages: Applications may lose access to databases or stop processing requests correctly.
- API Failures: Services relying on external systems may experience communication failures.
- Limited Migration Options: A shortage of available computing capacity can complicate migration to alternative data centers.
- Technical Support Delays: Large numbers of affected customers can significantly increase incident resolution times.
- Geographic Redundancy Failures: When multiple facilities are damaged simultaneously, standard disaster recovery mechanisms may also fail.
Payment Systems: Users Unable to Complete Transactions
One of the most sensitive consequences was the disruption of the Yandex Pay payment system.
According to the company's official statement, some customers experienced difficulties checking account balances, paying for purchases, and transferring money.
The provider stated that account information was stored in multiple copies and that no data loss had been detected.
By October 13, the company had announced the partial restoration of payment functionality for some customers.
This incident highlights the fundamental difference between data protection and service availability. Data may remain intact while users are still unable to access or use the service.
Supercomputers and Artificial Intelligence Development at Risk
The attacks also affected data center facilities housing powerful supercomputers used for developing and training artificial intelligence models.
The Chervonenkis and Lyapunov supercomputers were located in Sasovo, while the Galushkin supercomputer was housed in Vladimir.
These systems represent expensive technological infrastructure consisting of high-performance servers, specialized networking equipment, and advanced computing accelerators.
Their potential loss could significantly reduce the computing resources available for artificial intelligence research and development.
However, the direct destruction of individual supercomputers had not been reliably confirmed at the time of publication.
Decline in Automated Internet Traffic and Web Crawlers
Following the attacks, claims appeared on social media suggesting a massive decline in the activity of Russian internet bots.
The Cloudflare Radar analytics platform recorded significant changes in automated traffic originating from Yandex infrastructure.
However, these statistics cannot automatically be interpreted as evidence of a shutdown of propaganda accounts or coordinated disinformation networks.
A substantial portion of automated internet traffic consists of legitimate search engine crawlers that scan websites for indexing purposes.
The supported conclusion is that automated traffic associated with Yandex was disrupted, not that all Russian internet bots or coordinated online operations stopped functioning.
Why Could Rebuilding a Destroyed Data Center Take Months?
A modern data center is far more than a building filled with servers. Its operation depends on an extensive network of interconnected technological systems that must function together.
A physical attack or subsequent fire can damage:
- Physical servers and storage systems.
- Electrical distribution infrastructure and transformers.
- Uninterruptible power supply (UPS) systems.
- Cooling equipment and air conditioning infrastructure.
- Network equipment and fiber-optic connections.
- Fire suppression and monitoring systems.
- Technical rooms and structural components of the building.
Restoring operations may require much more than replacing a few damaged servers.
If power distribution systems, cooling infrastructure, or other essential components are destroyed, extensive reconstruction of the entire facility may be necessary.
According to published reports, delivery times for certain replacement technologies may extend to several months.
In Russia, recovery efforts may be further complicated by trade restrictions, limited availability of specialized components, and additional security costs.
Digital Infrastructure Is Being Targeted on Both Sides of the Conflict
Damage to data centers has not been limited to Russian territory.
Russian attacks in previous weeks also affected Ukrainian technological infrastructure.
The operator of the Parkovyi data center in Kyiv reported critical damage to its facility and a complete shutdown of operations.
According to published information, customer data was also stored at backup locations within the European Union.
These incidents demonstrate how the physical infrastructure supporting the internet can become a target during armed conflict, with consequences extending to civilian users and businesses.
What Should Hosting Providers and Server Operators Learn from These Outages?
The events of October 2026 provide an important warning for the global hosting industry.
Even a modern data center equipped with redundant power supplies, advanced cooling systems, and backup internet connectivity may not withstand severe physical destruction.
Several essential measures can help improve the availability and resilience of internet services:
1. Geographically Distributed Backups
Backups should never be stored exclusively in the same data center as production servers. Ideally, organizations should use multiple independent locations, potentially including backup infrastructure in another country.
2. Disaster Recovery Planning
Every critical service should have a documented recovery procedure covering the complete loss of its primary data center.
This plan should include methods for restoring servers, databases, network configurations, and access credentials.
3. Independent Infrastructure
Backup environments should not share all critical dependencies with their primary infrastructure.
Even geographically separated servers may not provide genuine independence if they rely on common storage systems, centralized management platforms, or a single network connection.
4. Regular Recovery Testing
Simply having backups does not guarantee that they can be successfully restored.
Organizations should regularly verify backup integrity, test recovery procedures, and measure how long it takes to restore normal operations.
5. Monitoring and Emergency Communication
Rapid outage detection and transparent customer communication can help minimize additional operational and financial damage.
Conclusion: Physical Data Center Security Is Just as Important as Cybersecurity
The October attacks on Yandex data centers demonstrated how damage to several physical facilities can disrupt a much larger digital ecosystem.
The reported outages affected cloud services, electronic payments, online shopping, transportation applications, and everyday digital communication.
This was not a complete shutdown of the Russian internet, but rather a significant disruption of important online services and cloud infrastructure.
The key lesson is that true high availability cannot depend solely on the quality of a single data center. What matters most is the ability to survive its complete loss and restore operations using independent infrastructure.
For website owners, VPS operators, database administrators, and businesses running critical applications, it is therefore essential to focus not only on cybersecurity, but also on physical security, geographic redundancy, and a reliable backup strategy.
Sources and References
- Yandex Cloud – Official Incident Report
- Yandex – Official Statement on Yandex Pay Disruptions
- Reuters – Drone Attack on the Vladimir Data Center
- Kommersant – Data Center Damage and Cloud Market Impact
- Vedomosti – Overview of Affected Internet Services
- Data Center Dynamics – Damage to Ukraine's Parkovyi Data Center
Article prepared based on information reported as of October 13, 2026. Service availability and damage assessments may change as infrastructure recovery efforts continue.