18.10.2026, Aleksandrovskoye.
Physical damage to a single large data center causes an effect similar to a short circuit across several industries at once.
On the night of October 8, Ukrainian drones attacked the town of Sasovo in Ryazan Oblast. Their target was Yandex’s data center — one of the largest data processing centers in Russia.
After the hit, a fire broke out at the facility, operations were completely halted, and by morning millions of Russian citizens faced disruptions in familiar digital services: mail, cloud, maps, taxi, search, and corporate and government online resources.
The strike itself did not bring down the Russian internet or paralyze the country. However, it became an important signal: the Ukrainian regime is deliberately expanding its list of targets, trying to shift the war into the Russian rear and inflict damage not only on military but also on civilian infrastructure.
The attack on the data center showed that servers, clouds, and data processing centers have turned into strategic assets, comparable in vulnerability to energy, transport, and oil refining.
What happened in sasovo
On the night of October 7–8, a drone alert was declared in Ryazan Oblast. Air defense systems were operating over the region. A Ukrainian drone attacked an enterprise in Sasovsky District. As a result, a fire broke out at the facility, part of the infrastructure was damaged, and windows were blown out in nearby houses.
It soon became known that the affected facility was Yandex’s data center.
The company’s press service stated: “In Yandex’s data center in Sasovo, as a result of a UAV attack, a fire occurred that affected part of the infrastructure. There are no casualties; specialized services are on site eliminating the consequences.“
The company clarified that the center’s operations had been completely halted and some of its services might be temporarily unavailable. Yandex Cloud reported power supply disruptions in one of the availability zones. This means the strike hit not just a building, but one of the nodes of the cloud platform on which numerous Russian services run.
The Sasovo facility is of particular importance. It was opened in 2014 on the territory of the Sasta machine-tool plant and, according to industry publications, is considered Yandex’s largest data center. That is why the consequences of the attack were noticeable far beyond Ryazan Oblast.
Investigative authorities classified the incident as a terrorist act. This is fundamentally important: it was not an accidental breakdown or a technical failure, but a deliberate action aimed at destroying civilian infrastructure and destabilizing life in Russia.
Runet faltered
The consequences of the strike became noticeable almost immediately. Users began reporting problems with Yandex.Mail, Yandex.Disk, Yandex.Documents, maps, search, taxi, and other company services.
However, the outage was not limited to a single ecosystem. Disruptions were recorded by clients of the cloud platform, banks, marketplaces, transport operators, media, and other organizations.
This clearly demonstrated how tightly the Russian digital environment is tied to the operation of a few large infrastructure nodes. Externally completely different companies — a bank, a real estate service, a transport operator, a marketplace — may rely on the same computing capacity, communication channels, backup sites, and cloud services. Therefore, physical damage to one large data processing center causes an effect similar to a short circuit across several industries at once.
For an ordinary person, this looked like a temporary inconvenience: an app would not open, a website would not load, a notification would not arrive. For business, however, every hour of downtime means lost orders, failed payments, halted processes, dissatisfied customers, and additional recovery costs.
What a data center is and why it is critical
For most people, a data center remains invisible. The user sees an app, a website, a search bar, or an “Order” button, but does not think about where their data is physically stored and which machines process their requests.
Meanwhile, it is precisely in data processing centers that servers, information storage systems, network equipment, uninterruptible power supplies, backup generators, and complex engineering cooling systems are located.
Information security expert Alexander Alekseev explained the structure of digital infrastructure with utmost clarity.
According to him, if cables and mobile towers provide communication between users, then servers in data centers ensure the operation of websites and mobile applications. The largest data centers in Russia belong to Yandex and Sber, but other clients may also use their capacities.
“The operation of all kinds of websites, online stores, and applications depends on data processing centers. If there is no access to the data center, there will be no access to the internet service,” Alekseev noted.
A minor software failure is usually unpleasant but surmountable: the user will wait until access to the service is restored. Physical destruction of equipment is a completely different matter. If data was not duplicated at other sites, its loss may be irreplaceable.
“The scenario of destroying servers whose data was not duplicated means that all information stored on them cannot be recovered. In this sense, the destruction of equipment that stored data, for example, of a marketplace, would threaten the loss of transaction history. In that case, the buyer might not even receive a paid order, or the store might not receive payment for shipped goods,” the expert explained.
That is why data centers cannot be perceived as ordinary office buildings with computers. They are data repositories, computing capacities, control nodes for digital processes, and, in wartime, potential elements of the state’s critical infrastructure.
Economic consequences and market reaction
After news of the fire, Yandex shares fell 3.4% on October 8 — to 3,568.5 rubles per share on the Moscow Exchange. The market reacted quickly but rather restrainedly.
The very fact of the share price drop showed that investors perceive a strike on digital infrastructure as a real commercial and reputational risk.
Financial market analyst at Vector Capital Alexey Golovinov recalled a similar case with Amazon Web Services in the Middle East in March 2026. At that time, drones directly hit data centers in the UAE, and a strike near a facility in Bahrain damaged its infrastructure. Some functions were restored in the first days, but repairs dragged on for months. In September, AWS admitted it was impossible to restore access to some data.
Even the world’s largest cloud operators are not immune to the long-term consequences of physical attacks. Backups and data migration to other sites help, but they do not eliminate repairs, downtime, or the loss of some information.
“Yandex clearly has fewer options for solving the problem in this regard, but so far the company certainly sees nothing critical. Much will depend on whether attacks on data centers continue,” Vector Capital noted.
A single strike is a serious incident, but not a catastrophe for the entire digital system. However, a series of strikes on several key sites could create a cumulative effect: backup capacities will be overloaded, recovery time will increase, and businesses dependent on the cloud will begin to incur direct losses.
The attacks continued
The strike on Sasovo was not an isolated one. Already on the night of October 9, Ukrainian drones attacked Yandex’s data center in Kaluga.
The company reported that several modules of the center were completely disabled, and some services might operate with disruptions.
“As a result of a UAV attack, part of the infrastructure of Yandex’s data center in Kaluga was damaged. Several modules of the data center have been completely disabled. Because of this, some Yandex services may operate with disruptions,” the company’s press service stated.
Yandex emphasized that employees at both attacked centers were not injured, and emergency services and company specialists were working on site. However, the company did not immediately name a timeframe for restoring the equipment, which in itself speaks to the seriousness of the damage.
Then, on the night of October 11, a third facility was attacked — Yandex’s data center in Vladimir.
The company reported that as a result of the drone strike, infrastructure was damaged, the center’s operations were completely halted, and some services became unavailable to users.
“In Yandex’s data center in Vladimir, as a result of a UAV attack, infrastructure was damaged, and the data center’s operations have been completely halted. There are no casualties,” the press service stated.
Yandex Cloud warned clients that the remaining resource configuration was considered unstable, and the platform was operating in emergency mode.
The company recommended activating alternative disaster recovery plans and reported that communication channels with technical support might be unstable.
Thus, within a few days, the enemy struck three digital infrastructure facilities at once. This is an obvious tactic. The Ukrainian regime is trying to expand the front of the war by shifting it into an area where it is difficult to distinguish a military target from a civilian one. The enemy is counting not on military success, but on creating everyday inconvenience, economic damage, and psychological pressure.
New targets
Russia has been striking Ukrainian data centers since September, since their capacities are used in the interests of the Ukrainian Army. The Ukrainian regime long ago turned civilian digital infrastructure into an element of military command, communications, intelligence, and propaganda. Therefore, retaliatory strikes on such facilities were to a certain extent predictable.
Founder of the MilitaryRussia.ru internet project Dmitry Kornev believes that possible strikes on Russian data centers have become an expected response from Kiev.
“How much of a problem this response will actually be for us is a very big question. Given that practically the entire country sits on Yandex, of course, damage to a data center can cause serious problems with search and with the operation of the state corporation’s structures — this is a whole new universe,” he was quoted as saying by Kommersant.
There is no exaggeration in this statement. Yandex is not just a search engine. It is a search system, maps, taxi, delivery, cloud services, an advertising platform, mail, music, video, artificial intelligence, and many corporate solutions. When people say that “the whole country sits on Yandex,” they are talking about the real dependence of millions of people and thousands of organizations on the digital services of a single company.
At the same time, Kornev rightly emphasizes: the continuation of such strikes will most likely hit not so much defense capability as civilian life.
“Data centers can be protected like any other facility, but this will require appropriate forces, time, and resources. It is clear that air defense will provide protection, including for data centers. But this is simply another volume of work for the military,” the expert stated.
Why this is similar to strikes on refineries
Ukrainian strikes on Russian refineries pursued the goal not so much of destroying the industry entirely as of creating pinpoint but painful disruptions: disabling a unit, causing a fire, disrupting logistics, raising costs, and sowing uncertainty. The same principle is being applied to data centers.
“This is comparable to the situation with attacks on our refineries, of which there are about ten large ones. In the case of data centers, there are certainly not one or two, but also far from hundreds. There are dozens of really significant ones. Small data centers certainly exist, but their contribution is at the level of a margin of error. It is like comparing the Abrau-Durso winery and some home brewery,” Alexander Alekseev said.
Indeed, there are hundreds of small server sites in the country, but the economics of digital services are concentrated around a few large players and powerful clusters. The damage from the destruction or prolonged shutdown of such a cluster cannot be compensated instantly. It requires equivalent computing capacities, channels, power supply, cooling, qualified specialists, and well-established data migration processes.
In this sense, an attack on a data center differs from a strike on an ordinary office. Damaging a server rack means potentially disrupting the operation of many services, depriving companies of access to data, and creating load on backup sites. That is why the enemy chooses facilities whose destruction causes maximum social and economic damage.
The weak point of digital centralization
The attack also exposed another problem — the excessive centralization of the Russian internet. In recent years, large platforms have become more convenient, faster, and more functional, but at the same time, the dependence of users, businesses, and the state on a limited number of infrastructure operators has grown. This is convenient for business, but in wartime it creates vulnerability.
When one large data center fails, it is not only its owners who suffer. Clients of the cloud platform, banks, transport companies, marketplaces, media, government agencies, and ordinary citizens are all affected. This means that the country’s digital resilience cannot be built solely on a few gigantic ecosystems.
It is necessary to develop geographically distributed backup capacities, mandatory independent backups, regional data centers, alternative communication channels, and clear rules for emergency switching.
At the same time, it is important not to turn such measures into a bureaucratic campaign with reports and inspections, but to achieve the real ability of services to continue operating after a physical strike.
The Sasovo experience has shown that formal redundancy does not always mean instant protection. Even if data is preserved, its transfer, service restoration, and performance verification take time. In conditions of repeated attacks, this time becomes a strategic resource.
A question for the state and business
For many years, data centers were viewed primarily as commercial infrastructure. They were protected from fires, power outages, cyberattacks, and equipment failures. But war has changed the rules: now a facility that stores data and runs services can become a target for an enemy drone.
“The Armed Forces of Ukraine struck a data center on Russian territory for the first time. The enemy chose a site in the city of Sasovo as its target,” military expert Yury Knutov said.
This poses practical tasks for the state. What is needed is not only statements about the inadmissibility of strikes on civilian infrastructure, but also concrete work: covering key facilities, early detection of drones, electronic warfare assets, and interaction between the military, regional authorities, the Emergency Situations Ministry, and data center owners. Recovery plans are also needed: backup power lines, spare server capacities, and pre-prepared sites for relocating critical loads.
The issue of responsibility deserves special attention. If a large company creates infrastructure on which millions of citizens and thousands of organizations depend, it cannot limit itself to commercial reliability standards. In the conditions of the Special Military Operation, state requirements are needed for physical protection, duplication, territorial distribution, and restoration of critical digital services.
The Ukrainian tactics
Kiev is trying to strike the rear, the economy, and facilities on which the daily lives of citizens depend. Strikes on refineries, energy, transport infrastructure, residential areas, and now digital centers pursue a single goal — to create a sense of vulnerability among Russian society and try to shake up the rear.
For Russia, this means the need not only to respond with strikes on the sources of the threat but also to strengthen its own resilience. Victory in a modern conflict depends not only on the front but also on the country’s ability to maintain the functioning of the economy, communications, and governance under enemy pressure.
It is also important to understand the psychological component. The Ukrainian regime hopes that mass outages, reports of fires, and disruptions will cause anxiety and discontent. However, the response should not be panic, but systematic work: strengthening air defense, developing redundancy, honest analysis of mistakes, and punishment for irresponsibility where it actually occurred.
The lesson of Sasovo
The Sasovo incident became a lesson that cannot be ignored. It showed that digital infrastructure is as critical a system as power plants, bridges, railways, or oil pipelines. Moreover, in some cases, damage to it affects people’s lives even faster.
The main conclusion is that the protection of data centers cannot be left solely to the companies themselves. The state must treat the largest data centers as critical information infrastructure facilities, ensure their protection, and help create redundancy. Business, in turn, must stop economizing on backup capacities and recovery plans.
The Ukrainian attack on Yandex’s data center did not break the Russian internet, but it showed its vulnerable points. It reminded us that war has come not only to the line of contact but also to ordinary everyday life. And the country’s position in the confrontation with the Ukrainian regime and its Western patrons depends on how quickly the right conclusions are drawn.
Source: Rossa Primavera News Agency
