Ukraine's strikes on Russian data centres hit the bot pipeline

The strike that silenced a digital army

When a Ukrainian drone hit the Yandex data centre in Vladimir on Sunday, the impact rippled far beyond Russia’s borders. Within hours, automated traffic from Yandex’s network had fallen by roughly 94 per cent compared to its September average. Bots that had been quietly shaping political discourse across Europe and the United States seemed to vanish overnight.

The coincidence was impossible to ignore. Across the channel, discussion around Reform UK’s online activity appeared to drop. In Germany, chatter tied to the far-right Alternative for Germany party (AfD) evaporated from some corners of social media. In the United States, users reported fewer automated pro-conservative responses on X.

The pattern suggested something startling: a significant portion of Russia’s influence operations abroad may have been running through Yandex’s cloud infrastructure — and that infrastructure could be targeted.

Yandex as a proxy target

Yandex, often called Russia’s answer to Google, operates one of the largest cloud and search ecosystems in the region. It is a civilian company. But its data centres host everything from routine business applications to some of the computational resources that underpin Kremlin-linked digital campaigns.

Three facilities were struck over several days: in Sasovo in the Ryazan region, in Kaluga to the south-west of Moscow, and in Vladimir east of the capital. Yandex confirmed that the Vladimir site had been damaged and its operations fully suspended, describing remaining infrastructure resources as unstable.

The strikes were part of a broader Ukrainian campaign against Russian technology infrastructure, but the timing of the bot decline — almost immediate and dramatic — points to a specific vulnerability. If Russian bot networks rely on Yandex cloud services for hosting, computing power, or distribution, then disrupting those services does not merely inconvenience a commercial provider. It degrades a weapon system.

The compute dimension of hybrid war

For years, analysts have debated how much of the noise on Western social media comes from state-sponsored bots and how much is organic outrage. The question is partly academic and partly urgent: foreign interference has shaped elections, inflamed polarization, and tested the resilience of democratic institutions.

The data from Cloudflare Radar, while not definitive proof that Kremlin-linked bots were responsible for the decline, offers the closest thing to a natural experiment yet observed. When Yandex’s Vladimir data centre went offline, automated traffic from its network plummeted. Whether the vanished traffic was mostly legitimate search-engine crawlers or deliberately engineered influence operations remains unclear — but the scale of the drop argues against a benign explanation alone.

Zelenskyy made the case directly at the Warsaw Security Forum. He said social media platforms became noticeably calmer after Ukraine began responding to Russia’s operations against its own data centres. “Less hate, less division, fewer provocations because there were fewer bots,” he said. “And it’s pretty clear where those bots were coming from.”

The remark was political as well as analytical. Zelenskyy used it to rebut claims that Europe is a source of its own instability. “Europe is not the one making everything more difficult,” he said.

What this means for influence operations

The conventional picture of Russian digital warfare involves troll farms, coordinated inauthentic behaviour, and bought ads. Less visible, but arguably more critical, is the infrastructure layer — the servers, the hosting, the content delivery networks, the botnets that run on shared commercial cloud services.

By striking Yandex data centres, Ukraine may have exposed a structural weakness in Moscow’s approach. Instead of relying on distributed, anonymised infrastructure, some Russian influence operations appear to have run through identifiable,集中ised Russian tech companies. Those companies, in turn, became targetable.

This is not the first time Ukraine has struck at Russian information infrastructure. Previous campaigns have targeted media outlets, hacking groups, and propaganda channels. What is new is the deliberate targeting of the physical compute layer — the racks, the cooling systems, the power supplies that hold a botnet together.

It is also a reminder that AI-era warfare is not only about autonomous weapons or algorithmic targeting. It is about who controls the silicon that powers the noise. If a drone can knock out a data centre that hosts thousands of automated accounts, the cost imbalance between kinetic and informational warfare shifts in favour of the defender.

The political aftershocks

The speculation has already attracted high-profile attention. In Germany, Czech MEP Tomáš Zdechovský noted the apparent link between the attacks and the drop in AfD-related activity. In the United States, the story drew comments from figures including Laura Loomer, Garry Kasparov, and former ambassador Michael McFaul.

The timing matters. The US congressional midterms fall in early November. Foreign interference concerns are already elevated, and any signal that automated accounts are shaping the debate will be scrutinised.

In Europe, the far right has long benefited from sympathetic online ecosystems. If a meaningful share of that ecosystem ran through Yandex-hosted infrastructure, the strikes may have dealt a temporary blow — or at least a warning. The infrastructure can be repaired. Bot networks can migrate. But the exposure itself is significant.

Who wins, who loses, and what comes next

Ukraine wins credibility as a technological adversary. By showing it can disrupt Russia’s information infrastructure from afar, Kyiv demonstrates that hybrid warfare is no longer a one-way street. Russia loses a layer of plausible deniability. Its bot networks were always deniable in origin; now they are also locationally exposed.

Yandex, caught between state expectations and commercial reality, bears the reputational cost. Western platforms that relied on Russian-origin automation may face pressure to tighten verification. European governments that have struggled to contain disinformation may find a new toolkit — not legal, not cyber, but kinetic.

The next question is whether other authoritarian regimes will follow Russia’s model of housing influence operations on domestic cloud providers. If Yandex’s strikes prove effective, other countries may reconsider the architecture of their own digital campaigns. The alternative — distributed, opaque infrastructure — is harder to strike but also harder to scale.

There is also a longer-term risk. Once data centres become legitimate military targets, the line between civilian and strategic infrastructure blurs further. Every cloud provider in every contested region becomes a potential battleground. The precedent set here will echo well beyond the Ukraine war.

For now, the silence from Yandex’s networks is loud. Whether it lasts depends on how quickly Russia rebuilds, how cleverly its operators adapt, and how many other data centres Ukraine decides to aim at.