Ukraine Strikes on Yandex Data Centers Cause Widespread Financial and Service Disruptions in Russia

Key points

• Ukraine struck Yandex data centers in Ryazan, Kaluga, and Vladimir between Oct. 6 and Oct. 12, 2026.
• Yandex Pay outages left millions of Russians unable to access cash or savings for several days.
• Services like taxi apps, food delivery, and digital home keys failed, affecting daily life across major Russian cities.
• Ukraine’s Center for Countering Disinformation reported an 83.6% drop in pro-Russian bot activity after the Sasovo strike, but activity rebounded by Oct. 10.
• Cloudflare data showed no significant drop in malicious bot traffic, contradicting claims that the strikes silenced Russian influence networks.
• Russia’s digital sovereignty laws and lack of international backups made its data centers more vulnerable to physical attacks.

Background

This escalation follows a pattern of reciprocal attacks on digital infrastructure. In late September 2026, Russia struck Ukrainian data centers in Odessa and Kyiv. Ukraine responded by targeting Yandex facilities starting in early October. Previous archive coverage noted that these strikes were part of a broader campaign to disrupt both military and civilian digital services, raising questions about the legality of targeting dual-use assets under international humanitarian law.

How outlets are covering it

NBC News emphasized the immediate impact on ordinary Russians, citing interviews with citizens who could not access money, pay rent, or order taxis. The Conversation highlighted the strategic vulnerability of Russia’s concentrated data centers due to its 'digital sovereignty' policies, which limit international backups. Mashable and Cloudflare provided conflicting data on the disinformation angle: Ukraine’s Center for Countering Disinformation claimed a sharp drop in bot activity, but Cloudflare’s analysis found no significant change in malicious bot traffic, suggesting the drops were likely due to routine web crawling cessation rather than a halt in influence operations. Zelenskyy initially claimed the strikes made it 'easier to breathe' on social media, but his office later narrowed this to refer to the 'atmosphere' rather than a verified drop in bot activity.

Why it matters

The strikes demonstrate that physical attacks on digital infrastructure can have immediate, tangible effects on civilian life, from financial access to smart home functions. They also highlight the fragility of Russia’s digital ecosystem, which relies on concentrated, domestically controlled infrastructure with limited redundancy. The debate over the impact on disinformation underscores the difficulty of measuring the effectiveness of physical strikes against digital influence operations, as automated traffic and bot activity are not easily distinguishable from routine web crawling.

What to watch

Yandex is working to restore services, but some users report ongoing issues, such as incorrect balances in Yandex Pay. Russian authorities are reviewing data center security, with President Putin holding a meeting on digital security, though the Kremlin denied a direct link to the strikes. Ukraine may continue targeting Russian digital infrastructure, while Russia may retaliate against Ukrainian data centers. The long-term impact on Russian digital resilience and the global debate over the legality of targeting dual-use assets will likely intensify.