NextFin News - Russia has widened its campaign against Ukraine's critical infrastructure to include data centres and internet backbone nodes, with strikes on multiple Kyiv facilities on September 23 disrupting service for around 100,000 households and prompting Kyiv to accuse Moscow of deliberately targeting the civilian systems that carry missile and drone alerts. The attacks mark a shift from the seasonal energy-grid bombardments of previous winters toward a systematic effort to degrade the digital infrastructure that keeps Ukraine's economy, government and air-defence warnings functioning.
The Situation: A Data Centre Is Now a Front-Line Target
On the morning of September 23, Russian Geran-5 jet-powered attack drones struck Kyiv's Solomianskyi district, hitting an office building that housed a data centre and key communications and internet backbone nodes serving the capital. It was not an isolated incident. Over the following two days, Russian strikes hit multiple data centres and internet providers in Kyiv, disrupting service for around 100,000 households as Moscow expanded its attacks on Ukraine's internet infrastructure, Ukraine's Digital Transformation Ministry said.
Russia's Defense Ministry explicitly claimed responsibility for strikes on two Kyiv data centres on September 23, identifying them as New-Telco and United DC. Moscow alleged that New-Telco handled internet traffic for Ukraine's Defense Ministry and that United DC provided communications and data-processing services for Ukrainian security agencies. Those claims about the facilities' military use could not be independently verified.
Ukrainian Foreign Minister Andrii Sybiha rejected Moscow's characterization of the facilities. "Russia has targeted major Ukrainian data centers, seeking to disrupt the flow of information. Rapid alerts about missile and drone threats are essential – they save lives," Sybiha said. "This is critical civilian infrastructure that ensures people can access life-saving information. It is not a military target. It is essential to keep everyday life functioning."
The human cost of the campaign extends beyond connectivity. Russian strikes killed at least seven people across Ukraine, and Kyiv officials said more than 40 people were wounded in strikes on gas stations, offices, a college building, businesses and the rail network. In Kyiv alone, eight people were injured in the September 23 attack, and one of those hospitalized in critical condition later died, Mayor Vitali Klitschko said.
Several providers reported direct damage to their infrastructure. UTELS said a strike damaged a Kyiv data centre housing its core equipment, leaving it without power. Pavutyna said one of its data centres was hit, causing outages for some customers. Crazy Network said a strike damaged a central internet traffic exchange in Kyiv, disrupting internet and telephone services in the capital and in Vinnytsia and Khmelnytskyi oblasts. Etherlink said an attack damaged its main network node, knocking some customers offline and forcing the company to relocate the core of its network.
Other companies reported more extensive losses. Hosting provider MiroHost said the data centre in Ukraine that housed its infrastructure was destroyed in the attack, company founder Oleksandr Olshansky said. Around 90-95% of MiroHost customers use infrastructure outside Ukraine and were unaffected, he added. CityHost also said equipment it stored at a Kyiv data centre had been destroyed, disrupting some of its services.
The September strikes follow earlier damage to telecommunications infrastructure in Kyiv. A key data centre was damaged in a Russian attack on July 2, causing disruptions for several providers, while infrastructure belonging to mobile operator Kyivstar was damaged in separate attacks in September. Against that backdrop, Anatolii Frolenkov, a representative of the 1-IX internet exchange point, framed the escalation in stark terms: "This is the beginning of a phase where, since September, they have started taking it out systematically."
The Analysis
From the Power Grid to the Server Room: Why the Target Set Shifted
The move against data centres is not a change of strategy so much as a change of target within a strategy Russia has pursued since 2022: break Ukraine's critical infrastructure to degrade the state's ability to function and demoralize the population. What has changed is the target's vulnerability.
Russia intensified strikes on Ukrainian energy infrastructure each fall and winter since 2022 to degrade Ukraine's energy security. In the winter of 2025-2026, Moscow launched 15 large-scale strikes on Ukraine's energy system between December and February — more than three times the average of the previous three winters — leaving Kyiv's 3.5 million residents without power for about half of each day in January. Yet the campaign did not achieve a decisive result. Russia attempted to split Ukraine's energy grid in half along a west-east axis and create "energy islands" cut off from Ukraine's electricity generation, international deliveries and transmission systems. Deeper integration of Ukraine's energy network with the European one, combined with decentralization, created redundancies that blunted the effect.
Data centres present a softer, higher-leverage target. Unlike the energy grid, which Ukraine has spent years hardening and integrating with Europe, the country's digital infrastructure is more fragmented and less redundantly financed. A single drone strike on a building housing backbone nodes can knock out service for 100,000 households — a disproportionate effect from a comparatively cheap munition. And because the same infrastructure carries the rapid alerts that warn civilians of incoming missiles and drones, degrading it has immediate humanitarian consequences.
The timing is consistent with a broader winter campaign. The Institute for the Study of War assessed in late August that Russia was preparing to increase strikes on Ukrainian energy infrastructure ahead of and during the winter of 2026-2027 as part of its annual campaign to break Ukraine's energy grid in the dead of winter. Russia's Defense Ministry said on August 29 that it was preparing "massive" strikes against Ukrainian energy facilities in response to Ukraine's continued long-range strike campaign against Russian civilian, fuel and energy infrastructure. The data-centre attacks are the digital flank of that same offensive.
Resilience Is Real — But It Is Expensive
The central question is whether the strikes can achieve what the energy campaign could not: a sustained degradation of a critical system. On the evidence so far, the answer points to scattered, recoverable outages rather than a blackout — but recovery carries a steep and compounding price tag.
Frolenkov said knocking out internet access across Ukraine would be extremely difficult. Providers can limit the impact of individual strikes by duplicating network equipment, maintaining backup communications routes, and distributing infrastructure across different locations, including outside Ukraine. MiroHost's experience illustrates the model: 90-95% of its customers use infrastructure outside Ukraine and were unaffected when its domestic data centre was destroyed. CityHost began restoring services in emergency mode using backups hosted on overseas infrastructure.
"The internet will not disappear completely," Frolenkov said. "There will be outages, there will be problems. It won't work as smoothly or as quickly, things may glitch, and operators may go down for a couple of hours because the infrastructure is being physically destroyed."
That caveat — "it won't work as smoothly or as quickly" — is where the campaign finds its leverage. Redundancy is not free. Duplicating equipment, leasing cross-border capacity, and maintaining overseas failover sites require capital that many Ukrainian providers do not have. The providers most exposed are the smaller domestic operators whose customers cannot absorb repeated outages or the cost of migration.
The market is already moving toward the resilient model. GigaCloud, a Ukrainian cloud service provider founded in 2016 that says it serves more than 1,500 companies and 20 million users, announced a partnership in July with distributed-storage provider Cubbit to deploy geo-distributed object storage across five data centres spanning three availability zones in Ukraine — Kyiv and Lviv — and Poland. Sovereign, cross-border, geo-distributed infrastructure is ceasing to be a commercial preference and becoming a wartime requirement.
The Second-Order Effect: A Structural Shift, Not a Cyclical Spike
Here is the call that matters for investors and policymakers: this is a structural shift in how digital infrastructure is valued, not a cyclical spike that will mean-revert when the fighting stops. A cyclical shock — a storm, a seasonal bombing run, a temporary outage — leaves investment criteria unchanged once service is restored. What is happening in Ukraine is different. The war is adding a fourth decision variable to data-centre siting and procurement, alongside power cost, latency and regulation: physical survivability under fire.
That variable will not disappear when the war ends, because the lesson it teaches is permanent. Governments that watched a capital's internet blink out after a single strike will not return to single-site hosting for critical services. Enterprises that saw their providers relocate core networks overnight will not forget the cost of concentrated risk. The history that applied before 2022 — that data centres are commercially sited assets, optimized for cost and latency — no longer applies to anything governments classify as critical infrastructure.
Beyond Ukraine, the strikes reinforce a re-pricing of digital infrastructure to include physical survivability. For years, data-centre investment decisions were dominated by power cost, latency and regulatory environment. The war in Ukraine adds survivability — the ability to keep serving customers when the building next door is on fire. The Europe hyperscale data centre market was valued at roughly $52 billion in 2025 and is projected to reach about $140 billion by 2031, according to industry research. Growth of that magnitude is driven primarily by artificial-intelligence demand, not the war. But the conflict is directing a portion of that investment toward redundancy, geographic dispersion and cross-border failover — features that carry a premium and that governments are increasingly willing to subsidize when they are framed as critical national infrastructure.
The same logic applies to cybersecurity. Cybersecurity leaders gained roughly 60% to 103% year-to-date through the end of July 2026, compared with about 7% for the S&P 500 over the same period. CrowdStrike Holdings, for example, saw revenue rise from about $3.06 billion in fiscal 2024 to $4.81 billion in fiscal 2026; Palo Alto Networks grew from $8.03 billion to $11.48 billion over the same span. A war that systematically targets digital infrastructure reinforces the case for spending on both protection and resilience — even as stretched valuations leave those stocks vulnerable to any slowdown in growth.
The investable thesis is not that a single drone strike moves a listed data-centre stock. It is that the conflict is accelerating a multi-year shift in how governments and enterprises think about where their data lives — and that shift favours operators with cross-border redundancy, sovereign-cloud credentials and the capital to build it.
The Counter-Thesis: Attrition Without Decisive Effect
The strongest case against reading these strikes as a strategic shift is that they may simply repeat the record of the energy campaign: intense, destructive, and ultimately indecisive. Ukraine's internet architecture is distributed by design and by necessity. Providers that have survived four years of war have already learned to duplicate, disperse and fail over. So far, the strikes have caused significant but scattered outages rather than a nationwide internet blackout.
There is also a cost asymmetry that cuts against the attacker. Geran-5 drones are comparatively cheap, but Ukraine's air-defence interceptors are expensive and in short supply — a constraint that has been documented throughout the war. If Russia can force Ukraine to burn through scarce interceptors protecting data centres, the campaign may extract a defensive cost even when the strikes themselves fail.
Yet even a campaign that fails to achieve a blackout can still succeed as a war of attrition. Every destroyed data centre forces Ukraine to spend capital on redundancy instead of reconstruction, every outage degrades the speed and reliability of the alerts that save lives, and every provider forced to relocate its core network loses time and customers. The measure of success here is not territory gained or a grid split in two; it is the cumulative tax that insecurity imposes on a functioning state. That is a lower bar than decisive victory — and a more achievable one.
What Comes Next
The short-term outlook is for continued scattered outages and emergency relocations. Providers whose equipment was destroyed or left without power must assess damage and restore service once safe access to facilities is possible, and no company has provided a full restoration timeline. The disruption that began on September 23 continued into September 24, suggesting repairs will take days rather than hours.
The medium-term test arrives with winter. If Russia launches the coordinated energy-and-digital infrastructure campaign that analysts have anticipated, the real question will be whether Ukraine's redundancies hold under simultaneous pressure on power and connectivity. Ukraine's Energy Minister Denys Shmyhal said on September 17 that the country is planning to restore and build more than 10 gigawatts of power capacity and is modernizing and integrating its energy system with the European one in anticipation of Russia's anticipated winter strike campaign. The digital equivalent — cross-border hosting, geo-distributed storage, duplicated backbone routes — is now on the same urgent timetable.
Three scenarios frame the path ahead. In the base case, Russia continues periodic strikes on data centres and telecom nodes, Ukraine's internet remains functional but degraded, and providers accelerate migration to overseas and geo-distributed hosting. In the upside scenario for the resilience thesis, a major coordinated winter strike causes multi-day outages, triggering emergency Ukrainian and European funding for distributed infrastructure — a painful catalyst that permanently hardens the network. In the downside scenario for the campaign thesis, Ukrainian providers complete hardening faster than Russia can strike, outages become brief and rare, and the September escalation proves to be a tactical spike rather than a strategic phase.
The falsifying signal is specific: if Russian strikes on Ukrainian data and telecom facilities fall back to their pre-September frequency — fewer than one facility-scale strike per month — through the fourth quarter of 2026, with no follow-on coordinated winter campaign, the call that this is a systematic new phase is wrong. Equally, if every facility hit in September restores full service within 72 hours with no recurring degradation, the resilience thesis dominates and the campaign's strategic value collapses.
The strikes will not silence Ukraine's internet, but they are rewriting the economics of where that internet lives — and the bill for redundancy is now part of the war.
Explore more exclusive insights at nextfin.ai.
