Ukrainian drone strikes have plunged Russia’s internet into crisis. Meduza explains why the damage has been so extensive, and why a full recovery will likely take months.

Overnight on October 11, Ukrainian forces launched a drone strike on a Yandex data center in Russia’s Vladimir region. It was the third attack in a row on the Russian tech giant’s infrastructure: On October 8 and 9, drones targeted facilities in Sasovo, in the Ryazan region, and in Kaluga, respectively.

Each strike caused widespread outages across the Russian internet. The disruptions temporarily took down Yandex’s own services, including Yandex Go, Yandex Eats, and Yandex Pay, which vast numbers of Russians rely on. Many other websites and services also went down. The attacks affected major banks, retailers, online marketplaces, classified ad platforms, news websites and apps, and much more. All these companies, including CIAN, Sports.ru, Magnit, and Vkusno i Tochka, used Yandex’s infrastructure to store their data.

Russians lost access to a range of everyday services: They couldn’t call a taxi, make payments, order deliveries, check their email, use the Alice voice assistant, and so on.

Because too much of the data storage market depends on Yandex’s infrastructure. And when the company designed its data centers, it didn’t anticipate drone attacks. That’s apparent from an October 11 update to its user agreement: Yandex classified attacks “using drones, missiles, and other weapons” as force majeure events and disclaimed liability for their consequences.

According to BBC News Russian, the company regularly ran drills in which it shut down one of its six data centers and shifted the load to the others. But Ukraine has now attacked three data centers, and two of them — in Sasovo and near Vladimir — were shut down entirely. That makes restoring even some services much harder.

For comparison, Iran attacked Amazon data centers in the Middle East in the spring of 2026. On September 15, the company said customer data stored in one particular availability zone in the UAE (mec1-az2) and in all availability zones in Bahrain had been permanently lost. Efforts to recover data in two other UAE zones (mec1-az1 and mec1-az3) were still incomplete at that point — six months after the strikes.

At least. Three of the company’s six major data centers have so far escaped attack: another one in the Vladimir region and one each in Ivanteyevka and Mytishchi, near Moscow.

Yandex has acknowledged that its cloud data storage platform, Yandex Cloud, switched to emergency mode after just the third strike on the company’s infrastructure. This means the company has “run out of spare capacity,” and “that’s a very bad sign,” Eldar Murtazin, lead analyst at Mobile Research Group, told Fontanka. Any further strike, whether on data centers already attacked or on those Ukrainian forces have yet to target, would clearly only deepen the crisis.

Yandex advised them to arrange backup capacity with other providers: Selectel, K2Cloud, and VK Cloud. That means backing up their data and renting servers in competitors’ data centers.

Selectel has its own data centers in Moscow and St. Petersburg, as well as a partner facility in Novosibirsk. K2Cloud lists three availability zones in Moscow and one in St. Petersburg on its website. VK Cloud has four availability zones in Russia and another two in Kazakhstan.

Incidentally, Yandex also set up its own server infrastructure in Kazakhstan back in 2024.

In theory, that’s an option. But Russian companies are required to store certain data exclusively within Russia, so they have to choose among Russian data centers.

Under the Yarovaya laws, for example, telecom operators must store all user traffic from the past six months and all its metadata from the past three years inside the country. All companies are prohibited from storing customers’ personal data outside Russia.

VK’s and Yandex’s infrastructure in Kazakhstan can only handle data relating to customers in that neighboring country.

This restriction doesn’t apply to ordinary users, however. So you could try switching from Yandex Disk to Google Drive. That comes with a different risk, though: Russian authorities could try to block these foreign services at any time, without explanation.

We don’t know why Yandex, specifically, didn’t pay enough attention to protecting its infrastructure. But the data storage industry certainly studied what happened to online marketplaces.

As we said above, Yandex’s data centers are very popular. The company uses them for its own services and also actively rents out computing capacity and disk space for data storage. Companies without a backup plan to switch quickly to other servers and recover inaccessible data were unable to operate normally for a time. It’s still hard to predict which companies will be unable to recover from the strikes on Yandex’s infrastructure and whose data will never be restored.

We don’t know. A source in the IT industry told Kommersant that much will depend on how quickly Yandex can find equipment to replace its damaged infrastructure. Delivery times for this equipment can currently be as long as six months, the source said. Amazon’s experience in the Middle East, described above, gives little reason for optimism either: A full recovery will probably take months in any event.

That’s right. ComNews Group CEO Leonid Konik told Vedomosti that Yandex’s own losses could be as high as a day’s revenue if all its services were down everywhere at the same time. That would amount to about 4 billion rubles a day. The actual figure is “much lower,” since the outages were only partial. Still, including the losses of dozens of other major companies, the combined damage runs to billions of rubles a day.

As we said above, Ukrainian forces could try to disable Yandex’s remaining major data centers. If that happens, the company may be unable to repair its infrastructure without moving at least some of its capacity to competitors’ facilities.

The Ukrainian military could also start destroying other Russian companies’ data centers. We’ve already seen something similar with online marketplaces: Initially, only Wildberries warehouses were targeted, but drones later began striking Ozon logistics centers as well.

If events unfold this way, Russia’s IT industry faces a major setback. Rebuilding these data centers is slow and expensive. New facilities will also have to be built with potential drone attacks in mind. That could mean acquiring reliable air defenses, using underground protective structures (bunkers), or building several small data centers in different locations instead of one large one. According to BBC News Russian, manufacturers of mobile data centers the size of a standard shipping container are among the beneficiaries of the Ukrainian attacks. These could be a solution for some organizations, but they are unlikely to replace Yandex’s data centers fully.