Yandex Confirms Service Outage as Drone Strikes Disable Three Data Centers

Drone Strikes Knock Out Yandex Cloud Infrastructure

Yandex, Russia's largest technology company and often described as "Russia's Google," has confirmed a widespread, multi-day service outage after drone strikes damaged three of its five Russian data centers between October 8 and October 11, 2026. The attacks forced Yandex to completely shut down two facilities and partially disable a third, leaving customers unable to reliably reach cloud storage, Yandex Pay, and dozens of other consumer and enterprise services. Yandex described the ongoing situation as "unstable" and said it was operating in "emergency mode," urging cloud customers to activate alternative disaster-recovery plans because it could not provide a reliable restoration timeline.

Internet monitoring group NetBlocks reported that Yandex Cloud's network connectivity had dropped to roughly 30% of normal levels by October 11, and the disruption has rippled outward to third-party businesses that depend on Yandex Cloud for hosting, including at least one electronic-filing service provider.

Incident Details

Attribute	Value
Company	Yandex (publicly listed as YDEX on MOEX)
Incident type	Physical drone strikes on data center facilities
Data centers struck	Sasovo (Ryazan region), Kaluga region, Vladimir region
Attack dates	October 8, 9, and 11, 2026
Attribution	Ukrainian military drone strikes, per Russian regional officials and Western press reporting
Facilities fully shut down	2 of 3 (Sasovo, Vladimir)
Facilities degraded	1 of 3 (Kaluga — several modules disabled)
Network connectivity (Oct 11)	~30% of normal, per NetBlocks
Services affected	Yandex Cloud, Yandex Pay, Alice assistant, Yandex Music, Telemost, Smart Home, and 80+ platforms
Casualties	None reported at Yandex sites; 9 people injured in the Kaluga region per the regional governor
Secondary damage	Vladimir-region fire knocked two electrical substations offline, cutting power to roughly 5,000 residents
Restoration timeline	Not provided by Yandex as of publication

What Happened

October 8 — Sasovo Data Center Hit First

The first strike hit Yandex's data center in Sasovo, in Russia's Ryazan region, triggering a fire and a complete shutdown of the facility. BleepingComputer and multiple Russian-focused outlets described it as the first confirmed drone strike against Russian digital infrastructure since the start of the war in Ukraine, distinguishing it from the energy-grid and refinery strikes that have characterized the conflict's infrastructure campaign to date.

October 9 — Kaluga Data Center Struck, Modules Disabled

A second strike, one day later, hit Yandex's data center in the Kaluga region southwest of Moscow. Yandex said several hardware modules were completely disabled, warning customers that some services could experience disruptions. Kaluga region governor Vladislav Shapsha said nine people were injured and surrounding infrastructure was damaged in the attack.

October 11 — Vladimir Data Center Shut Down Completely

A third strike hit Yandex's facility in the Vladimir region, reportedly idling a hub with roughly 50 MW of capacity and resulting in a complete shutdown. This facility supported Yandex Pay and portions of Yandex Cloud, and its loss is believed to be the single largest contributor to the connectivity collapse NetBlocks measured. The strike had consequences beyond Yandex's own infrastructure: Vladimir regional governor Alexander Avdeyev confirmed drones also struck infrastructure outside the city, starting a fire and forcing two electrical substations offline, cutting power to roughly 5,000 residents.

Cascading Effects Across Yandex's Ecosystem

With three of five data centers compromised inside four days, the outage cascaded across Yandex's consumer and enterprise stack. Yandex's own status page, cited by BleepingComputer, listed the Console, API, IAM, Container Registry, managed databases, S3-compatible object storage, and Managed Kubernetes as available; Compute, AI Studio, and security services as only partially available. Consumer-facing products including the Alice voice assistant, Yandex Music, Telemost videoconferencing, and Yandex Smart Home also reported disruptions, alongside enterprise Yandex Cloud components such as Compute Cloud, Object Storage, Managed Kubernetes, PostgreSQL, and ClickHouse. Yandex Cloud vice president Dima Pirogov said the team was "checking every step" of the restoration process and sought to reassure customers that stored funds were safe, while declining to commit to a recovery date.

Impact Assessment

Impact Area	Description
Data availability	Cloud storage and file access intermittently unreachable; Yandex has not confirmed whether any stored data was permanently lost
Payments	Yandex Pay degraded, impacting merchants and consumers relying on it for transactions
Enterprise customers	Businesses hosted on Yandex Cloud, including at least one electronic-filing provider, reported downstream outages
Consumer services	Alice, Yandex Music, Telemost, and Smart Home all affected, disrupting daily use for millions of Russian consumers
AI/ML workloads	AI Studio and related compute services left in a partially available state
Physical/human impact	Nine injuries reported in the Kaluga region; ~5,000 residents without power near Vladimir
Reputational/strategic	First confirmed strike on Russian data center infrastructure in the war, signaling an expansion of drone targeting beyond energy and industrial sites

Recommendations

For Yandex Cloud Customers

Activate disaster-recovery and failover plans now rather than waiting for a restoration estimate — Yandex itself has told customers it cannot provide one.
Where contractually and technically possible, replicate critical workloads and backups to infrastructure outside the affected Russian regions or to an alternate provider.
Monitor Yandex's official status page and NetBlocks' connectivity reporting for independent confirmation of recovery, rather than relying solely on vendor statements.
Audit which internal systems depend on Yandex Cloud (object storage, managed databases, Kubernetes) and document the blast radius of continued degradation.

For Security and Risk Teams

Treat this incident as a precedent: physical/kinetic attacks on cloud data center infrastructure are now a realistic risk category for providers operating in active conflict zones, not just a theoretical one.
Update business-continuity and vendor-risk assessments for any downstream dependency on Russian-hosted cloud services, including shadow IT or regional subsidiaries using Yandex Cloud.
Factor geopolitical and physical-security risk into cloud vendor selection criteria alongside the usual cybersecurity and compliance checklists.

For General Users

Expect continued intermittent access to Yandex consumer apps (Mail, Maps, Music, Alice, Smart Home) until all three affected facilities are fully restored.
Export or back up any critical files stored in Yandex cloud storage to a secondary location where possible, given Yandex has not ruled out data loss.
Be cautious of phishing or scam attempts that may exploit outage-related confusion to impersonate Yandex support channels.

Key Takeaways

Three of Yandex's five Russian data centers — Sasovo, Kaluga, and Vladimir — were struck by drones between October 8 and 11, 2026, with two shut down completely and one degraded.
Network connectivity to Yandex Cloud fell to roughly 30% of normal levels as of October 11, per independent monitoring from NetBlocks.
The outage affected a broad swath of services, from consumer apps like Alice, Yandex Music, and Telemost to enterprise cloud infrastructure including Compute Cloud, Object Storage, Kubernetes, PostgreSQL, and ClickHouse, as well as the Yandex Pay payments platform.
Yandex has not provided a restoration timeline and is actively advising customers to invoke their own disaster-recovery plans.
The strikes caused physical harm beyond Yandex's property line: nine people injured in the Kaluga region and roughly 5,000 residents without power near Vladimir after substations went offline.
This marks the first confirmed drone strike campaign against Russian data center infrastructure since the start of the war, expanding the scope of physical risk that cloud providers operating in conflict zones must plan for.