Yandex Cloud Outages Follow Drone Strike on Sasovo Data Center
A drone attack on a Yandex facility in Russia caused massive fires and service disruptions, threatening AI supercomputers and cloud customer operations.
Key points
- Ukrainian drones struck a Yandex data center in Sasovo, causing a massive fire and forcing a shutdown.
- The facility housed two Nvidia A100-based supercomputers critical for training Russian AI models like YandexGPT.
- Widespread outages affected Yandex services and third-party clients including banks, retailers, and transport operators.
Ukrainian drones struck a major Yandex data center in Sasovo, Russia, triggering a massive fire that forced the company to shut down the facility, according to Reuters and Meduza. The attack caused significant disruptions to Yandex Cloud services, leaving the status of critical AI infrastructure uncertain. Many customers experienced immediate service failures as the company attempted to manage the incident.
The risk
The Sasovo facility is one of Yandex’s five major data centers and accommodates tens of thousands of servers. It houses two of the company’s three supercomputers, named Chervonenkis and Lyapunov, which are powered by Nvidia A100 GPUs. These systems are essential for training artificial intelligence models, including YandexGPT, which is considered Russia’s leading large language model. The physical destruction of such specialized hardware poses a severe operational risk to ongoing AI development projects.
Who is exposed
Yandex Cloud infrastructure disruptions forced the company to recommend that customers migrate to alternative zones. While Yandex stated that key consumer services remained operational, users reported significant issues with Yandex Mail, Disk, Documents, Pay, and Market. Third-party services also experienced outages, including Cian, Litmarket, Russian Railways, Spartak Moscow, and cryptocurrency exchange Rapira. Corporate systems for T-Bank, Ozon, and Wildberries were reportedly affected, alongside the 1C business solutions platform.
Cost and compliance
Chervonenkis was ranked as the world’s 19th most powerful supercomputer in 2021, though it currently ranks 101st with 21.53 FP64 PFLOPS. Due to Western sanctions, Yandex can no longer upgrade this system or acquire similar advanced hardware. If the machines are destroyed, Russia’s AI industry, already constrained by export restrictions on accelerators, may lose critical capabilities permanently. The company might be forced to rely on Chinese infrastructure for future model training, altering its technological supply chain.
What to watch
Monitor official status pages for any cloud providers hosting mission-critical workloads in regions with active geopolitical conflict. Verify the geographic distribution of your data and compute resources to ensure redundancy is not concentrated in a single physical location. Review business continuity plans to address scenarios involving sudden, large-scale infrastructure loss due to physical attacks or natural disasters.
Background: Supply chain attacks
Protect your organization by verifying software signatures, isolating third-party access, and monitoring dependencies. This checklist provides specific actions to reduce risk from compromised vendors, ensuring your security posture remains intact even when external partners fail.
Read the full guide: Supply Chain Attack Prevention Checklist for Secure Operations
What to do and how to stay safe: Yandex
- Audit current cloud service agreements to understand geographic data residency and disaster recovery provisions.
- Ensure critical business applications have failover mechanisms that operate independently of a single provider’s region.
- Verify that backup data is stored in a physically separate location from primary production systems.
- Establish clear internal communication protocols for responding to vendor-wide service outages.
Step-by-step guide: Implement SIEM: A Step-by-Step Plan for Small Teams
General security guidance from the SecOps Signal newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Which specific Yandex services were affected by the Sasovo data center attack?
Users reported problems with Yandex Mail, Disk, Documents, Pay, and Market, while third-party services like Cian and Russian Railways also experienced disruptions.
Are the Nvidia A100 supercomputers at the Sasovo facility still operational?
It remains unclear whether the systems sustained damage, as their fate is currently unknown following the massive fire caused by the drone strike.
How many data centers does Yandex operate, and how many house supercomputers?
Sasovo is one of Yandex’s five major data centers; it houses two supercomputers, while the third, Galushkin, is located in Vladimir.
