Unmanned aerial vehicle (UAV) attacks carried out by Ukraine between 8 and 11 October 2026 targeted three data centres operated by Yandex in Russia’s Ryazan, Kaluga and Vladimir regions. These attacks by Ukraine on data centres have added a new dimension to the Russia-Ukraine War. In addition to three data centres belonging to the Russian internet giant Yandex, a facility in Sasovo housing two supercomputers was also targeted in the attacks.[i] These attacks are considered to be a response to Russian attacks on data centres in Ukraine. The Russian attacks caused disruptions to digital services and temporarily rendered some leading pirated content and torrent tracker sites inaccessible. Ukraine’s attacks targeting Yandex facilities, on the other hand, disrupted cloud computing infrastructure and numerous digital services across Russia. The consequences of these disruptions quickly spread to businesses and users in Kazakhstan, Kyrgyzstan, Uzbekistan and Armenia.
Yandex occupies a central position in Russia’s digital economy, providing services to millions of consumers and thousands of businesses. Unlike an oil refinery, whose core strategic function is associated with fuel production, a large data centre supports numerous interconnected activities across the digital economy. Payment platforms, navigation systems, commercial applications, databases and artificial intelligence services all depend on the shared computing infrastructure remaining operational. Yandex’s integrated ecosystem spread the consequences of the attacks over a wider area. The company’s services cover a wide range of fields, from search engine and e-mail services to cloud computing, and from digital payments to ride-hailing and food delivery.
The disabling of critical components of this infrastructure caused disruptions to major commercial platforms and logistics networks. This showed that damage occurring at a limited number of facilities can affect a broad economic ecosystem. Similarly, Ukraine’s attacks also revealed that, in modern infrastructure warfare, the strategic importance of a target does not depend solely on its physical size or its direct function.
The economic value of an integrated digital platform stems from its capacity to connect services and reduce friction in operational processes. However, the dependence of core functions on a limited number of facilities can turn this very integration into a source of systemic vulnerability. Therefore, an attack on a few critical nodes may produce consequences in numerous economically important sectors that do not appear to be related to one another at first glance. The process of restoring the infrastructure adds another dimension to this picture. The re-procurement of specialised servers and computing equipment requires lengthy purchasing and installation processes, which can take months. For this reason, Ukraine’s attacks have created an asymmetry between the speed of destruction and the cost of recovery. While a UAV attack can disable critical equipment within minutes, rebuilding the affected capacity requires significant financial resources and technical means. Repeated attacks may force Russian technology companies to redirect their investments from innovation and growth to the reconstruction and protection of infrastructure.
The strategic consequences of the attacks also extend to artificial intelligence development capacity. Since data centres provide the computing capacity required for advanced technological research, damage to specialised hardware can constrain development processes even if software and research data remain intact. The overall impact of the attacks on Yandex’s artificial intelligence capacity has not yet been fully determined. Nevertheless, these attacks have shown that technological power ultimately rests on infrastructure that can be physically damaged under wartime conditions.
The reported decline in automated traffic volume has also raised questions about the possible effects on Russia’s foreign information operations, particularly ahead of the US midterm elections to be held on 3 November and amid ongoing concerns over online influence activities surrounding the Alternative for Germany (AfD) party in Germany.[ii] The US midterm elections to be held on 3 November 2026 will affect the legislative balance in Washington by determining the composition of the entire House of Representatives and part of the Senate. The election results will shape the domestic political environment in which the administration’s foreign policy, including its policies towards Russia and Ukraine, will take form.
Allegations that Russia conducts coordinated online influence operations have long been one of the major topics of political and security debates in the US. Speaking at the Warsaw Security Forum on Monday, Ukrainian President Volodymyr Zelenskyy said that the decline in Russian bot activity on social media following the attacks had been “noticed by everyone”. Users in various Western countries on X, Reddit and other platforms reported a decrease in right-leaning content in their feeds, ranging from accounts supporting the Republican Party in the US to supporters of the far-right AfD in Germany. Czech Member of the European Parliament Tomáš Zdechovský also drew attention to claims that online support for the AfD had declined following the attacks. Nevertheless, experts have questioned the claims regarding the impact of these attacks on social media bots and stated that more detailed examinations are needed.[iii]
The attacks on Yandex can be regarded as part of Ukraine’s broader efforts to impose costs on Russia beyond the direct front line. By targeting infrastructure that supports commercial activities and technological development, Kyiv has expanded the areas of vulnerability it can exploit during a protracted conflict. The strategic value of these attacks stems from their potential to affect multiple dimensions of the Russian state’s capacity simultaneously. Disruptions to digital services impose short-term costs on businesses and consumers. Damage to specialised computing equipment, meanwhile, creates long-term reconstruction requirements. However, this may not by itself translate into a decisive military advantage. The real significance of the attacks lies in the cumulative pressure arising from Russia having to allocate its resources to restoring its vulnerable infrastructure while simultaneously sustaining its war effort.
The attacks also expose a tension in Russia’s pursuit of digital sovereignty. The development of domestic technologies may reduce dependence on foreign providers. However, when critical infrastructure is concentrated in a limited number of facilities, national ownership alone does not guarantee resilience. The Yandex case shows that having control over technology and being able to protect it against physical destruction are distinct strategic requirements. For Ukraine, the capacity to reach such infrastructure and disrupt its functioning constitutes a new instrument that can be used to exert pressure on Russia. When considered together with attacks on oil refineries, military facilities and logistics hubs, the targeting of data centres demonstrates that Russia’s economic and technological assets cannot be regarded as insulated from the consequences of the war.
This development also brings to mind the argument that took place at the White House in February 2025, in which US President Donald Trump contended that Ukrainian President Volodymyr Zelenskyy had “no cards” in negotiations with Russia. The attacks on Yandex show that strategic room for manoeuvre cannot be assessed solely through territorial control, conventional military resources or the balance of external assistance. In this context, Ukraine’s attacks can be regarded as another “card” that can be used in a strategy of economic and technological attrition. However, the factors that would make this card strategically valuable will depend on the scale and duration of the disruption, the reconstruction costs and Russia’s capacity to adapt. Nevertheless, the attacks have revealed that digital infrastructure can be both a strategic asset and a significant source of vulnerability.
Serious disruptions affecting Yandex services were also experienced in Kazakhstan, Kyrgyzstan, Uzbekistan and Armenia. Russia’s relations with Central Asia and the South Caucasus are generally analysed through trade, energy, migration, transport and security cooperation. Digital services, however, constitute a new layer of interdependence that is gaining increasing importance for everyday economic activities.
Yandex’s regional presence extends beyond search engine and online information services. For example, in Central Asian countries and Armenia, the company operates Yandex Go, a super-app that brings together ride-hailing, food delivery and other services. The company’s broader service ecosystem also supports various areas ranging from delivery operations to public transport information. During the disruptions in October, users in Central Asia reported experiencing problems with hailing taxis, navigation and accessing public transport information.[iv] These disruptions revealed that dependence on a foreign technology provider can become a source of vulnerability even if the country concerned is not directly involved in the conflict. A service may be used within a country; however, part of the computing resources and technical functions of that service may depend on infrastructure located abroad. Therefore, damage occurring at these facilities can disrupt local economic activities without any attack taking place on the country’s own territory. These consequences are particularly important for Kazakhstan and Uzbekistan, where digital transformation and the development of domestic technological capacity form part of broader economic modernisation goals.
In conclusion, Ukraine’s attacks on Yandex data centres show that the nature of modern warfare has expanded beyond conventional military targets to encompass the digital infrastructure that enables economic and technological development. While the disruptions at the data centres exposed Russia’s vulnerability stemming from the concentration of its infrastructure, they also revealed the cross-border consequences of digital dependence in Central Asia and the South Caucasus. For Kyiv, the strategic value of these attacks lies in their potential to turn the concentration in Russia’s technological infrastructure into a source of sustained economic pressure. Whether these disruptions will produce lasting strategic consequences, however, will depend on the extent of the damage and on Russia’s capacity to remedy the vulnerabilities exposed by the attacks.
[i] “Drones hit Yandex site in first major attack on Russian data hub”, Reuters, https://www.reuters.com/world/drones-hit-yandex-data-centre-first-major-attack-russian-data-hub-2026-10-08/, (Access Date: 18.10.2026).
[ii] “Russia’s Yandex bot traffic nearly eliminated overnight after Ukraine drone strikes cripple multiple of ‘Russia’s Google’ data centers”, Tom’s Hardware, https://shorturl.at/ucCED, (Access Date: 18.10.2026).
[iii] “Zelenskyy Says Yandex Strikes Crippled Pro-Kremlin Bots But Tech Experts Question Evidence”, Radio Free Europe, https://www.rferl.org/a/zelenskyy-says-yandex-strikes-crippled-pro-kremlin-bots-but-tech-experts-call-evidence-weak/33875054.html, (Access Date: 18.10.2026).
[iv] “What the Ukrainian Strikes on Yandex Tell Us About Central Asia’s Digital Infrastructure”, The Diplomat, https://thediplomat.com/2026/10/what-the-ukrainian-strikes-on-yandex-tell-us-about-central-asias-digital-infrastructure/, (Access Date: 18.10.2026).
