Ukraine's New Target Class: Drone Strikes on Russian Data Centers Set Back Moscow's AI Ambitions

Ukraine's New Target Class: Drone Strikes on Russian Data Centers Set Back Moscow's AI Ambitions

NEW SUBJECT (Oct 22, 2026): Ukraine's deep-strike campaign has moved from refineries and warehouses to the servers Russia's digital economy and AI program run on — and Moscow's own data-sovereignty laws made the damage worse.

• The campaign. Per AP (Oct 22): "Ukraine this month hit three main data centers belonging to tech giant Yandex, one for Russia's biggest bank, Sberbank, and one for social media platform VKontakte.¹" The sequence: a Yandex center in Sasovo, Ryazan region on Oct 8 (housing two of Yandex's three supercomputers — its most powerful machine ranked 19th globally), Kaluga on Oct 9, Vladimir on Oct 11, Sberbank's AI hub in Balakovo on Oct 14, and a VKontakte center in St. Petersburg on Oct 18. Ukraine also hit Wildberries and Ozon warehouses.
• The damage. Banking, e-commerce, geolocation, ride-hailing, Yandex's Alisa assistant and multimodal AI chatbots all suffered lasting disruptions; Russia's arbitration courts had to cancel or postpone sessions. Most experts predict repairs "could take months, if not years." Mikhail Klimarev, head of the Internet Protection Society: "This effectively sets Russia far behind in the AI race." CFR's Connor Martin notes Russia will likely struggle to quickly replace the US-designed Nvidia A100 chips powering Yandex's supercomputers — sanctions plus the global chip deficit make repairs long and costly: "I'm not sure it can be done in half a year, a year, or even at all" (Klimarev).
• Why they're soft targets. Data centers are "massive buildings packed with servers and supporting power and cooling infrastructure" — lasting damage from a light drone load. Eurasia Group's Nick Reiners: "The problem in Russia is that they've got to cover a big country with air defense and they don't have enough."
• The sovereign-internet boomerang. Moscow's data-localization rules require all storage at home — so everything was in reach. Klimarev: "Paradoxically, the strikes on data centers have saved the Russian internet from isolation, as they will now have to move computing assets, most likely, to Europe… It's quite likely that many Russian businesses are now roaming the European market to rent computing assets."
• The precedent. The vulnerability was first exposed by Iran, whose drones hit two AWS data centers in the UAE and one in Bahrain — AWS said it could not restore access to two of them. Infrastructure war has gone digital on both sides of the region's conflicts; see Ukraine Leverages Fire Point Domestic Missiles and FP-1 Drones for Deep Strategic Strikes for the missile/drone campaign this grew out of, and Kramatorsk Bus Strike — Deadliest Single Attack of the Year — Caps Russia's Winter-Setting Assault Wave for Russia's mirror-image grid attacks.