Ars Technica reports that Russian drones are striking Ukrainian data centres by slipping through gaps in air defences. Attacks on internet and phone services matter because they threaten an economy that relies on staying connected.
Key takeaways
- Ars Technica reports that Russian drone attacks on Ukraine’s data centres and communications networks threaten the country’s wartime economy.
- Data centres and telecommunications sites are large, fixed buildings that need a lot of power, which makes them hard to hide and hard to move.
- No air defence system can protect every civilian facility in a large country, so attackers can look for routes that are less well covered.
- The full extent of the damage, how long services were down and the economic cost of these strikes had not been published when the source report appeared.
Attacks on connectivity are attacks on the wartime economy
The argument of this article is straightforward. When drones hit data centres and the networks that carry internet and phone traffic, they do more than cause a technical inconvenience. They go after the systems that a modern economy needs in order to work. This applies most of all to a country at war, which has to keep paying wages, collecting taxes, moving goods and talking to its own people while under attack.
Ars Technica reports that Russian drones have been striking Ukrainian data centres by exploiting gaps in air defence coverage. It describes the attacks on internet and phone services as a threat to Ukraine’s wartime economy. The source material available for this article does not say which facilities were hit, how many strikes took place, how long services were disrupted or how much the damage cost. Those details are not known here and are not guessed at below.
What can be explained is why such targets matter and why they are hard to defend. It is also possible to set out the best reasons to doubt that these strikes will do lasting harm.
The basic point is that digital infrastructure is not a separate sector sitting beside the “real” economy. Card payments, banking apps, logistics software, government services, payroll systems and ordinary business email all depend on servers in a physical building and on cables, masts and switching equipment that link those servers to users. If those physical pieces are damaged, everything that depends on them slows down or stops. In wartime, much of that is also civilian life.
Data centres are large, fixed and difficult to conceal
The first piece of evidence for the argument is physical. A data centre is a building, often a large one, full of servers, storage, cooling equipment and power systems. It needs a dependable electricity supply and often backup generators and fuel. It also needs strong connections to the wider network, which usually come in through fibre-optic cables.
These needs make data centres hard to hide. They cannot easily move, and they are slow to rebuild. Replacing specialised equipment takes time even in peacetime, and supply chains in a country at war are under extra strain. A facility that loses its cooling or power can also fail even when the servers themselves survive a strike. Modern hardware has to be kept within a narrow temperature range to run safely.
Telecommunications infrastructure has similar weaknesses. Mobile networks rely on many base stations, and those base stations rely on backhaul links and on core network sites where traffic is routed and managed. Damage to a core site can affect far more users than damage to one mast. Ars Technica’s reporting points to attacks on both internet and phone services, which suggests the threat goes beyond any single building. The specific sites involved are not described in the material available here.
For cybersecurity and resilience, this matters because a lot of digital defence assumes the attacker comes over the network: ransomware, intrusions, denial-of-service attacks. A drone strike skips every firewall. It turns availability, which is one of the three classic aims of information security alongside confidentiality and integrity, into a matter of explosives and air defence rather than software.
Air defences cannot cover every civilian facility
The second piece of evidence concerns the way the strikes are carried out. The source headline says Russian drones are exploiting gaps in air defences. That fits a well-understood limit of air defence in a large country. Interceptor systems, radar coverage and mobile defence teams are limited resources. Commanders have to decide what to protect, and military sites, major cities and critical energy infrastructure usually come first.
Commercial data centres and telecommunications facilities may sit lower on that list, or in places where coverage is thinner. An attacker who can map where defences are concentrated can send drones along routes, or at targets, where interception is less likely. Drones are relatively cheap compared with the interceptors used to bring them down, so the attacker can afford to send many and accept that some will be shot down.
The available source material does not say exactly which gaps were exploited, whether they were in geography, timing, altitude or the type of defensive system. It also does not say how many drones got through compared with how many were intercepted. What the reporting does indicate is that the gaps were enough for strikes to reach data centres. That alone shows the protection of digital infrastructure has not kept up with the threat.
The consequence for planning is clear. If air defence cannot be stretched to cover every server hall and switching centre, then resilience has to come from elsewhere: redundancy, dispersal, hardening and the ability to fail over quickly to other sites.
Strikes on civilian infrastructure fit a wider pattern
The third piece of evidence is context. Throughout the full-scale war, Russian strikes on Ukrainian civilian infrastructure, especially the electricity grid, have been widely documented by international organisations and the press. Attacks on power generation and distribution have led to repeated blackouts. Ukrainian businesses and households have adapted with generators, batteries and planned power cuts.
Data centres and telecoms networks depend heavily on electricity, so they have already been exposed to these campaigns indirectly. Striking them directly can be seen as the next step in the same logic. Attacks on the energy system put pressure on the economy by cutting power. Attacks on digital infrastructure put pressure on it by cutting the connections and computing that economic activity runs on.
Ars Technica’s framing, that the attacks threaten Ukraine’s wartime economy, fits that reading. An economy under strain needs tax revenue, export income and working domestic trade. Each of those relies more and more on digital systems. Disrupting them can weaken a state’s ability to fund its defence, without any front-line fighting.
The strongest case against: Ukraine’s digital systems have proved resilient
There is a serious argument that these strikes, however damaging locally, are unlikely to cripple Ukraine’s digital economy. It should be set out fairly.
First, Ukraine has spent the war building redundancy into its digital systems. Early in the full-scale invasion, the government moved to allow important state data and services to be hosted in cloud infrastructure outside the country. That reduced the risk that a strike on a single domestic facility could wipe out key records or shut down public services. Many private companies have taken similar steps, spreading workloads across several sites and providers.
Second, networks are built to route around damage. The internet was designed so that traffic can find other paths when one link fails. Mobile operators can reroute traffic, set up temporary equipment and share infrastructure in an emergency. Satellite internet terminals have also been widely used in Ukraine as a backup when ground networks are down.
Third, Ukrainian operators and businesses have been adapting under fire for a long time. Repeated power cuts have already forced investment in generators, batteries and procedures for running with intermittent electricity. A data centre that has survived long blackouts is likely to be better prepared for disruption than one in a peaceful country.
Fourth, the economic effect of any strike depends on how long the disruption lasts, not only on how severe it is at first. If services come back within hours or days, the lasting cost may be modest compared with other pressures of the war. The source material available here gives no figures on outage length or economic loss. Without those figures, claims of serious economic harm remain partly inference.
Taken together, these points suggest the strikes may be painful and expensive without threatening the digital economy as a whole. On this view, the right conclusion is that Ukraine’s digital infrastructure is under pressure but has shown it can absorb that pressure.
Evidence that would change the conclusion
Several kinds of evidence would strengthen or weaken the argument made here.
Detailed outage data would be the most useful. Measurements of how many users lost internet or phone service, for how long and in which regions would show whether the strikes cause brief local disruption or prolonged widespread failure. Independent internet measurement organisations sometimes publish this kind of information.
Economic indicators would also count. If figures from Ukraine’s central bank, finance ministry or statistical services showed falls in card payment volumes, tax receipts or business activity that clearly followed attacks on digital infrastructure, the case for real economic harm would be much stronger. If those figures stayed stable, the resilience argument would gain weight.
Information about the targets would help as well. If strikes are concentrated on facilities that host critical services with limited backup, the threat is greater. If they mostly hit sites whose workloads can easily move elsewhere, it is smaller.
Finally, changes in air defence would affect the picture. If Ukraine can close the gaps that the source says are being exploited, through new systems, redeployments or better early warning, the number of successful strikes should fall. If the gaps persist or grow, the pressure on digital infrastructure is likely to continue.
Until such evidence is published, the safest conclusion is that physical attacks on data centres and networks are a real and growing risk to Ukraine’s wartime economy, and that how severe the risk is remains uncertain.
Sources and further reading
- Ars Technica: reporting on Russian drone strikes against Ukrainian data centres and on the threat to internet and phone services.
- International organisations monitoring civilian infrastructure damage in Ukraine: general background on attacks against energy and other civilian systems.
- Internet measurement and network monitoring organisations: general background on how outages are detected and measured.
- Information security reference material on the confidentiality, integrity and availability model: background on availability as a security goal.
Surfaced from the rss:arstechnica signal “drone strikes on data centres”. AI-assisted draft, editorially reviewed.
