Cloud Security · AI Security
Drone Strikes Shut Down Yandex AI Data Centres in Russia
Ukraine has used drones to disable multiple data centres run by Yandex, Russia’s largest tech company, disrupting AI and online services. The attacks follow similar strikes on Ukrainian infrastructure.
Ross GrantUpdated 3 min read
The short version
Ukraine used drones to attack data centres run by Yandex, a major Russian tech company. This caused some of Yandex’s online services and AI tools to go offline. The attacks are part of a wider conflict where both sides are targeting each other's technology infrastructure. Ordinary users in Russia experienced outages as a result.
What happened?
Ukrainian drone strikes hit several Yandex data centres in Russia in early October 2026, causing fires and forcing shutdowns. Yandex, Russia’s largest tech company, confirmed service disruptions and advised users to activate disaster recovery plans. The attacks are part of an escalation between Russia and Ukraine targeting each other’s technology infrastructure.
What was targeted and who is affected
In early October 2026, Ukrainian drone strikes hit several data centres belonging to Yandex, Russia’s largest technology company. Yandex is often called “Russia’s Google” because it runs the country’s most popular search engine and a range of online services, including food delivery, taxis, and AI-powered tools. The attacks affected data centres in the Sasovo, Kaluga, and Vladimir regions, according to Ars Technica (opens in a new tab) and Al Jazeera (opens in a new tab).
Yandex confirmed that operations at the Vladimir data centre were completely suspended and that some services were unavailable. The company advised users to activate disaster recovery plans and warned that technical support might be disrupted. Russian users reported problems accessing media sites, banking apps, and other online services.
Timeline and escalation
The strikes took place over several days. The first attack was reported on October 8, 2026, targeting the Sasovo data centre, which houses two of Yandex’s three supercomputers used for training its AI model, YandexGPT. The following days saw further attacks on facilities in Kaluga and Vladimir. Yandex said no employees were hurt, but the attacks caused fires and forced the shutdown of critical infrastructure.
These strikes are part of a broader escalation, with both Russia and Ukraine targeting each other’s technology infrastructure. Ukrainian officials described the attacks as a response to Russian strikes on Ukrainian data centres and telecoms facilities, which have disrupted internet and mobile services for thousands in Ukraine. Ukrainian President Volodymyr Zelenskyy said, “We always respond in mirror-like fashion,” referring to the tit-for-tat nature of these attacks (Al Jazeera (opens in a new tab)).
Impact on AI and online services
The Sasovo data centre was especially important, as it housed supercomputers used to train Yandex’s large language model, YandexGPT. Disabling these facilities disrupted not only search and media services but also AI-powered applications. Russian users experienced outages in video streaming, banking, real estate, and even the website of a major football club (Ars Technica (opens in a new tab)).
Yandex warned that the remaining infrastructure was unstable and that further disruptions were possible. The company was working to restore services and assess the damage, but the full extent of the impact on its AI development and business operations is not yet clear.
Broader context and risks
These attacks highlight how data centres have become strategic targets in modern conflicts. Damaging a major provider’s infrastructure can have wide-reaching effects, not just on government or military operations but on millions of ordinary users who rely on digital services. The strikes on Yandex follow similar incidents elsewhere, such as drone attacks on Amazon data centres in the Middle East earlier in 2026.
The escalation between Russia and Ukraine shows that technology infrastructure is now a key part of warfare. Both sides are targeting data centres, telecoms, and logistics hubs to disrupt each other’s economies and daily life. For companies running critical infrastructure, this underlines the need for robust disaster recovery and incident response plans.
What happens next
Yandex and Russian authorities are working to restore affected services and strengthen defences. The company has asked users to prepare for further instability. Meanwhile, the risk of more attacks remains high as both sides continue to target each other’s digital infrastructure.
For security professionals, this incident is a reminder of the importance of physical security, redundancy, and rapid response capabilities for cloud and AI infrastructure. The situation is still developing, and further details may emerge as Yandex and authorities complete their investigations.
Uncertainties
- There are no primary sources confirming the details; all reports are from secondary outlets.
- The full extent of the disruption to Yandex’s services and AI operations is not yet clear.
- It is not confirmed whether all reported attacks were successful or the exact methods used.
France 24 (opens in a new tab), Financial Times (opens in a new tab)
Claimed vs confirmed
- Confirmed
Ukrainian drones struck Yandex data centres in Sasovo, Kaluga, and Vladimir, disabling services.
Yandex confirmed shutdowns and service disruptions after drone attacks, as reported by multiple outlets.
- Confirmed
The attacks were a response to Russian strikes on Ukrainian data centres.
Ukrainian officials and President Zelenskyy described the attacks as a mirror response to Russian actions.
- Confirmed
Two of Yandex’s three AI supercomputers were knocked out in the Sasovo attack.
Ars Technica and Al Jazeera report the Sasovo data centre housed key supercomputers for YandexGPT.
The impact
- Money
- The cost to Yandex is not yet known, but disruption to data centres can lead to significant business losses. Under Russian or international law, companies may face regulatory scrutiny after major outages.
- Reputation
- Yandex’s reputation as a reliable provider is at risk, especially as outages affected millions of users. The incident highlights the vulnerability of even the largest tech companies to physical attacks.
- Customers
- Ordinary users in Russia experienced outages in search, banking, media, and other services. Customers should be aware of possible further disruptions and follow any guidance from Yandex on service availability.
Why it matters
Millions of people rely on Yandex for search, transport, and digital services. Disabling its data centres disrupts daily life and shows how technology infrastructure is now a target in modern conflicts. The incident highlights the need for strong disaster recovery and security planning for critical digital services.
How does it work?
The attacks used drones to physically damage data centres, causing fires and disabling servers. This disrupted the operation of AI models and online services by knocking out the underlying hardware and network connections. Physical attacks like these can bypass digital defences and directly impact service availability.
Key points
- Yandex data centres in Russia were disabled by Ukrainian drone strikes.
- The attacks disrupted AI services and online platforms used by millions.
- Physical attacks on tech infrastructure are now a part of modern warfare.
- Yandex advised users to activate disaster recovery plans.
- The full impact and details of the attacks are still being assessed.
Sources
Financial Times
Reference
France 24
Reference
Ars Technica
Reference
Al Jazeera
Reference
