From October 8 to 11, 2026, three major data centers owned by Russian IT giant Yandex were hit by successive drone attacks, forcing a complete shutdown due to massive fires and power outages. Behind these incidents are the intensification of reciprocal attacks targeting digital infrastructure amid the situation in Ukraine, and the vulnerability of Russia’s domestic cloud infrastructure being heavily concentrated in specific companies and specific regions.

Key Points of Drone Attacks That Hit Three Locations in Four Days

From the early hours of October 8 to October 11, 2026, three of the five large-scale data centers operated by Russian IT giant Yandex within Russia were struck by drone attacks, believed to have been carried out by the Ukrainian military. The attacks were concentrated over a four-day period, affecting facilities in Sasovo, Ryazan Oblast; Grabtsevo, Kaluga Oblast; and Vladimir Oblast. At the Sasovo facility, which was the first target in the early hours of the 8th, a massive fire broke out immediately following the attack, bringing the entire facility’s operations to a complete halt. Subsequently, on the morning of the 9th, multiple server modules were completely destroyed at the Kaluga data center, and in the early hours of the 11th, infrastructure including two substations at the Vladimir facility was also destroyed, forcing a total shutdown. As a result of this series of attacks, Yandex’s cloud infrastructure, Yandex Cloud, has completely lost two of its four configured availability zones, and the remaining regions are also forced to operate under emergency restriction mode.

Details of Facility Damage and the Impact of the AI Development Supercomputer Disaster

The most serious concern regarding the recent disaster is the blow dealt to the computing infrastructure that serves as the core of artificial intelligence (AI) development. The Sasovo data center housed two systems: “Chervonenkis” (21.53 petaflops), which ranked 19th in the 2021 TOP500 global supercomputer performance rankings, and “Lyapunov” (12.81 petaflops). Additionally, the Vladimir facility was equipped with “Galushkin” (16.02 petaflops), which ranked 134th on the list, and both locations housed large quantities of NVIDIA A100 GPUs, which are essential for training large language models such as “YandexGPT.” Yandex has issued a statement saying, “It is currently impossible to confirm whether the equipment can be recovered.” However, due to Western semiconductor sanctions against Russia, procuring equivalent replacement GPUs is extremely difficult, and experts analyze that it will take 1.5 to 2.5 years to completely rebuild the supercomputer infrastructure.

Ripple Effects and Impact on Daily Life and Economic Activity

Disruption of Essential Infrastructure and Cascading Outages in Partner Services

The data center outage went beyond mere website browsing issues, causing widespread disruption to the daily life infrastructure and economic activities of Russian citizens. Yandex’s conversational AI assistant “Alice” experienced response delays and functional limitations, while major services such as the taxi-hailing app “Yandex Go,” payment feature “Yandex Pay,” delivery, maps, and email temporarily stopped working. The impact also extended internationally, with ride-hailing apps and banking payments becoming unavailable in Kazakhstan, Belarus, Armenia, Kyrgyzstan, Uzbekistan, Serbia, and other countries. Furthermore, the real estate information site “Cian,” electronic document creation services, public transportation e-ticket sales systems, and e-book apps that rely on Yandex’s cloud infrastructure went down all at once. The outage monitoring service “Detector404” was flooded with over 58,000 complaints in a 24-hour period.

Stock Price Declines and the Economic Blow Borne by Enterprise Cloud Infrastructure

Following the successive damage to its facilities, turmoil also spread through the financial markets. Yandex’s share price on the Moscow Exchange fell by approximately 6% in the week following the attack, dropping to 3,384 rubles. Daily trading volume on October 9 reached 13 billion rubles, marking a high not seen since July 2024. Corporate customers utilizing Yandex Cloud total approximately 64,000, including more than one-third of Russia’s top 500 major enterprises (RBC-500). Due to this incident, client companies have been forced to make an emergency evacuation to alternative cloud services, prompting Yandex to partner with competitors Selectel, VK Cloud, and K2Cloud to begin data migration support. According to experts, while a simple power supply failure would take one to two months to recover from, cases involving the collapse or burning down of the server rooms themselves will likely face years of stagnation, including delays in procuring physical replacement equipment.

Digital Infrastructure Defense and Future Key Points

The Intensification of the “Data Center War” and the Vulnerability of Geographic Concentration

This situation has highlighted the reality of “data center warfare” in modern security. Following attacks by the Russian military on data centers and communication hubs in Ukraine, such as “Parkovyi,” since mid-September 2026, Ukraine reportedly targeted Russia’s critical IT infrastructure as a “mirror strike” (countermeasure). In particular, Russia’s IT infrastructure is physically and structurally concentrated in just a few large-scale locations, primarily around Moscow and including Yandex. While Ukraine has distributed and evacuated its communications and data to backups outside the country, such as in Europe, Russia’s centralized data centers have come within drone range, exposing the risk that the destruction of a single facility could become a critical single point of failure (SPOF) that paralyzes the nation’s entire digital economy.

Cloud Reorganization, Strengthening of Physical Defense, and Future Outlook

Key points to watch going forward are the reconstruction methods for the damaged massive IT infrastructure and the legal and physical defensive intervention by the Russian government. In August 2026, the Russian government enacted Presidential Decree No. 604, which authorizes the state to exercise temporary management rights over critical infrastructure facilities (such as telecommunications and logistics hubs) deemed to have insufficient defense measures against drone attacks and other threats. Moving forward, data center operators, including Yandex, will be required to strengthen physical security, such as installing protective nets and moving facilities underground, and a surge in infrastructure costs and rising service prices are anticipated. Furthermore, how companies that find it difficult to operate backups domestically will ensure data redundancy, along with the speed of transition to decentralized infrastructure and the establishment of organizational systems, will be the greatest focus determining the sustainability of Russia’s digital economy as a whole.

Reference page

• [Yandex Cloud Official Status Page] https://status.yandex.cloud/ru/timeline
• 【Yandex Press Release (Official Announcement)】[suspicious link removed]

[#Yandex #DataCenter #DroneAttack #YandexCloud #AIInfrastructure #Cybersecurity #RussiaNews]