Drone strikes on Yandex’s data centers have turned a battlefield attack into an operational inconvenience for users who suddenly lost access to their digital services.
According to reports from The Register and BleepingComputer, the attacks occurred between October 8 and 11, leaving two facilities offline and a third operating at reduced capacity. The disruptions reportedly affected services connected to Yandex, which provides cloud infrastructure and other digital platforms to businesses and consumers.
The incident highlights how physical attacks on data centers can disrupt services far beyond the facilities themselves, particularly when businesses depend on infrastructure they do not directly control.
Three Yandex data centers reportedly damaged
The strikes on Yandex are among several infrastructure attacks attributed to Ukraine during the conflict, with Ukraine's president, Volodymyr Zelenskyy, confirming the strikes as retaliation for Russia's strikes on Ukraine's data centers, The Register reported.
Per BleepingComputer, the Sasovo facility was hit first on Oct. 8 and shut down completely after sustaining severe damage. The facility in the Kaluga region suffered partial damage on Oct. 9 that reduced its capacity, while the one in the country’s Vladimir region also shut down completely after a later attack on Oct. 11.
Yandex operates a range of consumer and enterprise services, including search, email, maps and cloud infrastructure. Disruptions to its data centers can therefore affect not only the company's own applications but also businesses that depend on its computing and storage services.
Recovery timeline and data loss remain unclear
So far, there is no confirmed evidence that users who cannot access files stored in Yandex’s affected data centers have permanently lost their data. However, the physical damage to the facilities means that possibility cannot be ruled out, particularly if some data was not replicated to unaffected infrastructure or cannot be recovered from backups.
The financial impact of the outage also remains unclear.
Widespread downtime can cost businesses revenue, interrupt transactions, delay operations, and leave customers unable to access services they depend on. The longer the disruption lasts, the greater those costs can become, particularly for businesses that rely on Yandex Cloud to run their applications and lack readily available alternatives.
The total losses will depend on how long services remain disrupted, how many customers are affected, and how quickly normal operations can resume.
The extent of the physical damage and the time required to restore the affected infrastructure also remain uncertain. Replacing damaged servers and storage equipment may be relatively straightforward, but rebuilding a data center's full capacity can involve repairs to power, cooling, networking, and other supporting systems.
Per The Register, Yandex says it is working to restore services while prioritizing the most-used services, but has not provided a timeline for full recovery. That leaves questions about how long reduced capacity will persist and whether the company can restore all affected services without further disruption.
What businesses can learn from the outage
The reported disruption underscores the importance of planning for failures that extend beyond individual servers or applications.
Businesses relying on cloud infrastructure should maintain recoverable backups, distribute critical workloads across independent facilities where appropriate, and regularly test disaster recovery procedures. Organizations dependent on a single provider should also assess whether alternative infrastructure could support essential operations during a prolonged outage.
Physical damage can be more difficult to recover from than a temporary software failure. Rebuilding a damaged facility may require replacing equipment and restoring power, cooling and network connectivity before services can return to normal.
The broader lesson is that cloud services still depend on physical infrastructure. Businesses cannot prevent every disruption, but they can reduce the impact by ensuring critical systems and data remain recoverable when a facility or provider becomes unavailable.
Other news: Unauthorized access to Denmark’s national population registry exposed personal information tied to approximately 8.8 million people.