Drones Strike Yandex's Sasovo Data Center: Why Data Centers Are Now War Targets

Posted on 8th Oct 2026 12:04:30 in Artificial Intelligence, Machine Learning

Tagged as: Yandex, data centers, drone strike, AI infrastructure, cloud computing

Overnight drone strikes hit one of Russia's most important data centers, forcing Yandex — the country's largest technology company — to fully suspend operations at its Sasovo facility in the Ryazan region and send emergency crews into the server halls to contain a fire. Nobody was hurt, and the company said its core consumer services stayed online. But the incident knocked parts of Yandex Cloud, Yandex Documents and Yandex Tables offline for a stretch, sent the company's shares down more than 3.4% in Moscow trading, and carried a significance far beyond one company: according to The Moscow Times, this is the first confirmed strike against Russian data infrastructure since the full-scale invasion of Ukraine began in 2022.

It did not happen in a vacuum. Since late September, Russian attacks have damaged at least eight major data centers across Kyiv, causing widespread internet blackouts in Ukraine. In the space of two weeks, data centers — the unglamorous, power-hungry buildings that quietly run everything from search engines to generative AI models — have become targets on both sides of the war. Yandex, sometimes described as “the Google of Russia,” runs the country's most popular search engine, its biggest cloud business, and YandexGPT, one of the leading generative AI models developed outside the West. When a drone can switch off a facility that powers all of it, every business that depends on the cloud has something new to think about.

What Happened at the Sasovo Data Center

The attack came overnight, in the town of Sasovo in Russia's Ryazan region, roughly 250 kilometers southeast of Moscow. A drone strike ignited a fire at the data center, which Yandex operates through Yandex DC LLC. NASA's fire-monitoring service FIRMS picked up the blaze in the early hours of Thursday, and Ryazan Governor Pavel Malkov confirmed that the roof of a local industrial facility had caught fire.

Yandex described the damage with characteristic caution. “An incident at the Sasovo data centre has affected part of its infrastructure,” the company said in a statement carried by Russian state news agency Interfax. “The situation at the site is currently under control, and there have been no casualties. The team is dealing with the aftermath of the incident and restoring the affected services.” The company told CNBC that the data center had stopped operating entirely.

The disruption was visible to users within hours. Outage-tracking platform Downdetector recorded more than 1,300 complaints about Yandex services, with the heaviest impact on Yandex Cloud, Yandex Documents and Yandex Tables. The Yandex Cloud website informed customers of problems with the electricity supply in one data center “zone” and recommended they move workloads to other zones. Yandex's flagship consumer products — search, maps and its taxi service — stayed up.

The facility itself is no small asset. According to UNITED24 Media, the Sasovo data center has a stated electrical capacity of up to 12 megawatts and is designed to host tens of thousands of servers. It also shares its industrial site with the Sasta machine-tool plant, which manufactures CNC lathes and five-axis machining centers and has been sanctioned by the United States, the European Union and others over suspected links to Russia's military-industrial supply chains, including production support for the Iskander ballistic missile system. Both sites were hit in the same overnight strike.

The company's share price fell more than 3.4% during Thursday morning trading on the Moscow Exchange — a modest but telling reaction for a conflict that until this week had stayed far away from Russia's own digital backbone.

Digital Infrastructure Moves Onto the Front Line

The strategic logic is blunt. The Sasovo strike is the first confirmed attack on Russian data infrastructure since 2022 — and it follows a deliberate Russian campaign against Ukrainian data centers, in which at least eight major facilities have been damaged since late September, leaving internet users across Ukraine cut off for days. Russia has claimed those data centers processed military intelligence for Ukrainian forces. Ukraine has not claimed responsibility for the Sasovo strike.

But the pattern is symmetrical, and that is what makes it notable. Ukraine has spent months targeting oil refineries and large retail infrastructure inside Russia, arguing they help finance the war effort. Moscow has meanwhile hammered Ukraine's power grid, prompting emergency electricity cuts in Kyiv on Thursday. Data centers now sit at the intersection of those campaigns: they are simultaneously civilian infrastructure and — in an era when militaries run on cloud computing, satellite data and AI-assisted analysis — plausible military-adjacent targets.

The ambiguity is built into the industry. Modern data centers host commercial workloads and government contracts side by side; cloud regions serve banks, hospitals and shops, but also defense ministries and intelligence contractors. The Sasta plant is a case study in that overlap: a sanctioned machine-tool factory with reported missile-supply links, operating next door to a commercial cloud facility carrying ordinary internet traffic. Once such sites are treated as military objectives, no data center is clearly off limits.

Scale compounds the message. Russia's Defense Ministry said its air defenses intercepted 399 Ukrainian drones over 18 Russian regions and annexed Crimea during the same overnight wave — an indication of how cheap, persistent and hard to fully defend drone warfare has become. It takes a multi-million-dollar air-defense system to reliably stop a drone that costs a few thousand dollars. A single leaker can knock out a building that hosts tens of thousands of servers.

Yandex Blurs the Maps: Camouflage Comes for the Cloud

The most striking corporate response did not involve firewalls or backups — it involved a map. Russian independent outlet Verstka reported this week that Yandex has blurred satellite imagery of all four of its cloud data centers on its own mapping service: the Sasovo site, plus facilities in Mytishchi, Kaluga and Vladimir. Searches for their addresses no longer show that Yandex data centers are located there.

The logic is a cold acknowledgment of how modern targeting works. Drone operators and their planners increasingly rely on open-source intelligence — commercial satellite imagery, mapping services, social media photos and public records — to identify and geolocate high-value facilities. By erasing its own data centers from its own maps, Yandex is attempting to deny attackers one of the cheapest intelligence sources available. It is a tactic long used by militaries for sensitive bases and arsenals, now applied to commercial cloud infrastructure.

The irony is sharp: a company whose core business is organizing the world's information has started deleting its own facilities from the record. And the move carries a side effect for customers. Businesses that want to verify exactly where their cloud workloads physically live — a routine requirement for data-residency and compliance audits in many industries — may find that information harder to obtain, precisely because the operator now treats location data as a security liability.

Why the AI Boom Makes This Bigger Than One Company

Global spending on data centers is running at historic levels as the artificial intelligence boom pushes demand for computation, and facilities are getting larger, denser and more concentrated. Those economics create a paradox. Every efficiency gain pushes the industry toward bigger campuses in fewer locations, connected to a handful of power grids and fiber routes — the same concentration that makes them operate cheaply also makes them vulnerable. A 12-megawatt facility like Sasovo is now on the small side; the newest AI campuses are measured in hundreds of megawatts or gigawatts.

The security calculus is unforgiving. Defending a large fixed site against drones requires layered detection, interception and hardening — radar, jamming, netting, redundancy — that most commercial operators have never had to budget for, because until this month the threat was theoretical in most of the world. Cyber defenses, the industry's traditional focus, are irrelevant against a physical projectile. And insurance markets, which are only beginning to model physical attack scenarios for critical digital infrastructure, will eventually reprice the risk.

The precedent matters beyond Russia and Ukraine. Data centers are now explicit, publicly discussed targets in an active war between two industrialized states. Any conflict between well-armed adversaries now carries an implicit threat to the digital infrastructure on both sides — and data centers are precisely where AI training runs, cloud applications live and a growing share of the world economy executes its transactions.

What Businesses Should Take Away

Few companies outside a conflict zone need a drone contingency plan tomorrow. But the Sasovo strike and Ukraine's blackouts together offer a rare stress test of assumptions that most cloud-dependent businesses take for granted. A few practical points stand out:

• Understand your provider's failure zones. Yandex told customers to shift workloads to other “zones” when one lost power — but all of those zones belong to the same cloud operator in the same country. Genuine resilience requires geographic diversity across providers and jurisdictions, not just availability zones on a diagram.
• Keep backups somewhere your provider cannot reach. The oldest rule in computing is still the best one: if your only copy lives with one vendor, your continuity plan ends wherever their incident begins.
• Ask harder questions about physical security. Providers rarely publish details about site hardening, power redundancies and emergency response. If infrastructure risk is being repriced, procurement conversations should include it.
• Watch the escalation curve. If strikes on data hubs become routine rather than exceptional, expect knock-on effects on cloud pricing, insurance and data-residency planning — and expect the industry's own security spending to shift from purely digital defenses toward the physical world.

Yandex says it is restoring the affected services at Sasovo, and the site's long-term fate is unclear. What is already clear is that the AI era's most important buildings are no longer just power-hungry — they are strategically valuable, publicly identifiable and, as of this week, demonstrably attackable. For an industry that has spent a decade worrying about firewalls, the lesson from Sasovo is simpler and heavier: servers can be defended with code, but buildings cannot.

Sources

• CNBC — Russia's Yandex halts operations at data center after drone strike
• NBC News — Drones hit Yandex data center in first major attack on Russian data hub
• The Moscow Times — Ukrainian Drones Hit Yandex Data Center After Wave of Russian Attacks
• Ukrainska Pravda — Yandex data centre shuts down after drone attack in Russia
• UNITED24 Media — Yandex Hides All Four Cloud Data Centers on Maps After Ukrainian Drone Strike