Full Breakdown
Ukrainian Drone Strikes Cripple Yandex’s Data Centers, Disrupting Millions of Russian Users
By Drooid · · How we work
The Attacks and Immediate Outage
On October 8, Ukrainian drones struck three of Yandex’s five major data centers, knocking out roughly half of its infrastructure and causing a 94 % drop in traffic. Core services—including search, navigation, ride-hailing, online payments and the Yandex home voice assistant—were halted.
Background: Digital Sovereignty and Prior Targeting
Since 2015 Russia has required citizens’ personal data to be stored on domestic servers, a policy reinforced by 2019 legislation that created a state-controlled “sovereign Runet.” This limits redundancy and makes Russian facilities vulnerable to physical attacks. The strikes follow a pattern of reciprocal targeting: Russia bombed Ukrainian data centers in September and early October, and Iran previously hit data centers in the UAE and Bahrain after U.S. strikes.
Scale of Disruption (Data & Statistics)
- Yandex traffic fell 94 % after the attacks.
- Taxi drivers in Moscow could not view earnings or withdraw cash; one stopped working entirely.
- Users were locked out of Yandex Pay for several days, with one account holder unable to see 1.5 million rubles (? $17,830) in savings.
- Dozens of companies that rely on Yandex Cloud were forced to migrate workloads elsewhere.
On-the-Ground Impact
Individuals described the outages as life-altering. Irina, 21, said she will now keep a “substantial cash reserve” in multiple banks. Anastasiya Mityaeva, 25, said her family feared they could not pay their mortgage while accounts were inaccessible. Anton, 31, recounted sitting in a dark room because smart bulbs powered by Yandex stopped working. A taxi driver reported that the Yandex Pro app repeatedly sent erroneous ride orders, preventing earnings withdrawals and forcing him to return his rental car.
Official Responses
- Yandex issued a statement pledging that customers’ money is safe and that Yandex Pay is being restored.
- President Vladimir Putin acknowledged that the attacks have impacted Russian services.
- The Kremlin placed responsibility for protecting critical infrastructure on private firms and, in August, signed a decree allowing temporary state control of assets that fail to safeguard facilities from drone attacks.
Criticism of Yandex
Viktoria, a 30-year-old barista in Moscow, said the outage was “the last straw” after previous service problems and announced she will stop using Yandex entirely.
Why It Matters: Vulnerability of a “Sovereign Internet”
Analysts note that concentrating digital operations in a limited number of domestic sites creates a single point of failure. The attacks show how physical damage to data centers can cascade into disruptions of online marketplaces, payments, taxi services and smart-home functions. Carnegie Endowment researchers warn that damage to Yandex’s supercomputers—built with U.S.–sourced AMD processors and Nvidia GPUs—could slow Russian AI development amid sanctions and component shortages.
Conflicting Reports & Gaps
- Zelensky’s claim that bot activity declined is contested by later reports finding no clear evidence of a sustained reduction.
- The extent of damage to Yandex’s supercomputers remains unverified; Yandex has not confirmed hardware loss, and independent technical assessments are lacking.
What’s Next
The August decree permits the state to assume temporary management of companies that cannot protect critical facilities; while Yandex is not currently under such control, the framework pressures rapid repairs and backup diversification. Ukrainian officials are evaluating options to move additional computing capacity underground or abroad, a step that could further limit Russia’s reliance on domestic data centers for civilian services and state-run influence operations.