Attacks on Russian Data Centers Expose the Vulnerability of the Kremlin’s Information Operations Infrastructure

Attacks on Russian Data Centers Expose the Vulnerability of the Kremlin’s Information Operations Infrastructure
Share

Ukrainian long-range drone strikes on Yandex data centers in Sasovo, Kaluga, and Vladimir have demonstrated one of the most effective ways to disrupt Russian information and psychological operations. Efforts to counter Russian propaganda have traditionally focused on the digital domain, including identifying bot networks, blocking accounts, and debunking disinformation. The recent destruction of server capacity has highlighted a fundamental reality. Modern cognitive operations depend on physical infrastructure that remains vulnerable to kinetic strikes.

In recent years, Russian disinformation has evolved from manually operated bot farms to automated systems powered by artificial intelligence. Large language models (LLMs) enable operators to generate multilingual content, adapt messages to local contexts, and sustain activity at scale. Mass production of context-specific messages in foreign languages, coordination of social media networks, including support for radical movements, and algorithmic data scraping all require substantial computing resources. However, concentrating these resources at a limited number of facilities creates a structural vulnerability.

To reduce the cost of scaling modern automated disinformation campaigns, which require enormous computing resources to run large language models, the Kremlin has opted for a highly centralized infrastructure. Russia has invested in advanced supercomputers such as Chervonenkis and Lyapunov and made Yandex Cloud its primary technological backend. As a result, tens of megawatts of server capacity are concentrated at a handful of large facilities within the range of Ukrainian drones, approximately 500–800 km from the Ukrainian border.

This strategy initially created synergies between AI-driven content generation and efforts to influence public opinion. However, it also created a classic single point of failure, turning hubs critical to hybrid warfare into vulnerable, fixed targets. Damage to or loss of these facilities can sharply reduce the scale of cross-border information operations. Cloudflare data reportedly showed a 99% drop in automated traffic from Yandex networks, while tens of thousands of bots across Europe disappeared at the same time. These developments demonstrated a direct link between physical computing infrastructure and Russia’s information presence abroad.

The strikes also reportedly caused significant damage to domestic digital services, some of which supported communications and information management during military operations. The Information Resistance group points to their role in providing the Russian military with mapping data and target guidance. Russia is unlikely to restore the damaged capacity quickly because technology sanctions restrict access to advanced processors, specialized equipment, and manufacturing components. A shift to less powerful systems could therefore reduce the speed and scale of automation, while reliance on manual labor or templated content would raise operating costs and potentially make coordinated activity easier to detect.

Just as strikes against Russia’s Black Sea Fleet in Crimea forced it to relocate ships to Novorossiysk and attacks on oil refineries prompted changes to fuel logistics, pressure on digital infrastructure is forcing the Kremlin to reconsider how it distributes computing capacity. Relocating its largest data centers deeper into Russia could improve their physical security, but would entail substantial costs. Russia may instead decentralize its infrastructure, distributing workloads across smaller data centers, rented servers abroad, and compromised user devices organized into botnets. This approach would make the system more resilient to individual strikes, but would complicate the management of information operations and reduce centralized control.

Physical infrastructure is an important, but not the only, factor behind the effectiveness of Russian influence operations. Strikes against computing facilities can disrupt the scaling and coordination of information campaigns, but they do not eliminate the organizational networks, personnel, or alternative channels used to distribute content. The strategic impact will depend on how long Russia’s ability to restore computing capacity remains constrained and how effectively further attempts to decentralize its information operations can be countered.

Related publications

Institutionalization of the Military Personnel Reserve Through the “Time of Heroes” Programme
Analytics

Institutionalization of the Military Personnel Reserve Through the “Time of Heroes” Programme

The transformation of public administration in the Russian Federation is increasingly subordinated to the goals of the systemic militarization of civilian apparatus and the formation of a closed caste of managers whose legitimacy rests on shared participation in the military aggression against Ukraine. Launched on Vladimir Putin’s direct instructions in spring 2024, the Time of…

Institutionalization of the Military Personnel Reserve Through the “Time of Heroes” Programme
Russia Rebuilds the State for a Protracted War and Lays Its Costs onto Europe
Analytics

Russia Rebuilds the State for a Protracted War and Lays Its Costs onto Europe

Russia is expanding its hybrid activity beyond Ukraine and adapting mechanisms for financing covert operations. On the one hand, Moscow is stepping up pressure on European states – the primary donors to Ukraine’s defense. On the other, it is restructuring its domestic budgetary, social, and regional policies to ensure that high wartime expenditures can be…

Russia Rebuilds the State for a Protracted War and Lays Its Costs onto Europe
Digital Assets as a Tool for Financing Russian Sabotage and Covert Operations in Europe
Analytics

Digital Assets as a Tool for Financing Russian Sabotage and Covert Operations in Europe

The financing of hybrid and sabotage activity in Europe increasingly relies on mechanisms that obscure the links between Russian state structures, intermediaries, and direct operatives. Traditional channels based on diplomatic and intelligence cover are being supplemented by a more fragmented system of remote coordination, in which funds can be transferred through virtual assets and different…

Digital Assets as a Tool for Financing Russian Sabotage and Covert Operations in Europe
Architecture of Russian Unmanned Expansion
Analytics

Architecture of Russian Unmanned Expansion

This analytical assessment documents the systemic transformation of Russian Federation unmanned aerial incursions over NATO and EU sovereign airspace between 2022 and 2026. Empirical evidence demonstrates that these unmanned aerial vehicle (UAV) sorties can no longer be characterized as sporadic anomalies or unintentional navigational deviations. Instead, they represent an integrated, state-directed military intelligence doctrine that…

Architecture of Russian Unmanned Expansion