Over the weekend, Ukrainian drones struck a third Yandex data centre in Russia, forcing it offline and pushing the country's internet infrastructure into genuine crisis. Cloud connectivity reportedly fell to around 30% of normal. Payments stalled. Deliveries ground to a halt. For millions of Russians, the digital services they rely on every day simply stopped working.

This isn't just a dramatic headline about servers on fire. It's a case study in what happens when a country builds a hyper-centralised digital economy and then goes to war with a neighbour that has drone capabilities.

The structural problem Russia is now paying for

Yandex — often described as "Russia's Google" — is not just a search engine. It operates cloud infrastructure, mapping, food delivery, ride-sharing, fintech, and more. Russia's internet economy consolidated heavily around a small number of domestic platforms after the country began forcing tech companies to store data locally and severed ties with Western cloud providers. That strategy was meant to create sovereignty. Instead, it created a handful of extraordinarily high-value targets.

Russian bloggers have been sounding the alarm about this vulnerability publicly, warning that the country's hyper-centralised digital economy left it exposed to exactly this kind of attack. Those warnings now look prescient.

The bot traffic debate

A Cloudflare chart circulating on social media appeared to show bot traffic from Russia collapsing in the wake of the attacks. The interpretation that "Ukrainian drones took out Russia's bot farms" spread quickly. The reality is more nuanced: the bots most affected appear to be commercial crawlers and automated web services running on Yandex infrastructure — not the kind of geopolitical influence-operation bots most people had in mind. Still, the disruption to legitimate digital services is significant enough on its own.

What Yandex's engineers are dealing with

Engineers have reportedly been working around the clock to reroute traffic, restore services, and compensate for lost capacity. The repeated nature of the strikes — three data centres now — suggests Ukraine is executing a deliberate campaign rather than targeting targets of opportunity. Each successive hit compounds the recovery difficulty.

Why this matters beyond the conflict

For security and infrastructure planners outside Russia, this is a live demonstration of a threat scenario that's been theorised for years: adversarial drone strikes on civilian digital infrastructure in a peer conflict. Physical security of data centres — not just logical security — is now a serious operational concern.

It also raises questions about concentration risk that apply everywhere. Australia's own Critical Infrastructure Act and SOCI Act frameworks require operators to assess physical security and single-point-of-failure risks. Watching Russia's experience in real time is about as vivid a reminder as the threat-modelling literature is ever going to produce.

What to watch

Whether Yandex can restore meaningful service in the coming days will test the resilience of whatever redundancy it had left. More broadly, watch for whether other Russian digital infrastructure — beyond Yandex — becomes a target. If this campaign widens, the disruption could become existential for Russia's domestic internet economy in ways that no sanctions package has managed.