Data centers targeted in Ukraine-Russia and Middle East conflicts

The escalation of attacks on data centers highlights their dual-use nature, making them pivotal in both civilian and military operations.

• Ukrainian drone strikes targeted three Yandex data centers in Russia from October 7-11, 2026, disrupting services for thousands.
• Iranian drones struck Amazon Web Services facilities in the UAE and Bahrain in March 2026, leading to permanent data loss in some regions.
• Russian forces intensified attacks on Ukrainian digital infrastructure starting September 2026, causing widespread internet and TV outages.

• The Russia-Ukraine war has expanded beyond traditional military targets to include digital infrastructure, reflecting a new phase of hybrid warfare.
• Commercial data centers are increasingly integral to military logistics, AI, and civilian services, blurring the lines between civilian and military targets.
• Regional governments are reassessing their digital infrastructure security in light of these attacks, indicating a shift in how data centers are viewed in conflict scenarios.

The recent targeting of data centers in Ukraine and the Middle East underscores a significant shift in modern warfare tactics. As conflicts evolve, the lines between civilian and military infrastructure are increasingly blurred, with data centers emerging as high-value assets.

In Ukraine, the conflict has escalated since 2022, with Russian forces launching attacks on Ukrainian data centers and telecommunications infrastructure. This strategy aims to disrupt not only military communications but also civilian services, creating chaos and undermining public trust. The Ukrainian response, marked by drone strikes on Yandex facilities, illustrates a reciprocal targeting strategy where both sides aim to cripple each other's digital capabilities.

In the Middle East, the situation is similarly complex. Following U.S.-Israeli strikes on Iranian positions, Iranian forces retaliated by targeting AWS facilities in the Gulf. This not only resulted in permanent data loss but also highlighted the vulnerabilities of cloud services that many businesses depend on. The attacks on AWS facilities disrupted banking apps and payment systems, affecting residents and businesses in the UAE for months.

The implications of these developments are profound. As data centers become integral to military operations, they are increasingly viewed as legitimate military targets. This raises critical questions under international humanitarian law regarding the protection of civilian infrastructure during armed conflicts. The ongoing attacks have prompted companies like AWS to reassess their security measures, while regional governments are investing in hardened facilities and counter-drone defenses.

Moreover, the demand for robust cybersecurity and resilient infrastructure is likely to surge as businesses and governments recognize the risks associated with their reliance on cloud services. The dual-use nature of data centers means that any disruption can have cascading effects on civilian life, making it imperative for stakeholders to adapt to this new reality.

• Businesses relying on cloud services: Disruptions can lead to service outages and financial losses.
• Residents in conflict zones: They face interruptions in essential services like banking and communications.
• Governments and military planners: They must reassess strategies for protecting critical infrastructure in light of new targeting tactics.

• Increased security measures: Expect heightened investments in cybersecurity and physical security for data centers as businesses adapt to the new threat landscape.
• Regulatory changes: Watch for potential shifts in international humanitarian law as the targeting of dual-use infrastructure raises legal questions.
• Market demand for counter-drone technologies: As attacks on data centers become more common, the market for defensive technologies is likely to grow.