Ukrainian defense company Fire Point commented in a social media post on Wednesday morning, saying 'You didn’t think it would stop with just Yandex, did you?'
The claim that strikes on Russian tech giant Yandex thinned out social media bots finds no support in the networks tracked by Ukrainian disinformation-monitoring company LetsData, co-founder Ksenia Iliuk told Euromaidan Press on 13 October. She cautioned that the strikes may still have affected networks outside the company’s view.
At the Warsaw Security Forum, Lithuania’s prime minister suggested allies should ask Ukraine to strike more Russian data centers because that might help protect European elections from foreign interference. Bot networks are one tool of that interference, so whether the strikes mute them carries weight well beyond Ukraine.
No drop in the networks LetsData tracks
Drones hit Yandex data centers in Sasovo and Vladimir between 8 and 11 October. Ukrainian drone maker Fire Point said its FP-1 drones struck Yandex’s Kaluga site in between. On 12 October, Ukrainian President Volodymyr Zelenskyy told the Warsaw Security Forum that once Ukraine’s response reached Yandex, social media had fewer bots.
Explore further
More than 500 drones by Moscow’s count: Kh-101 fuel plant, second Yandex data center, and a far-north refinery hit
LetsData checked X and Facebook, where bot networks usually stand out clearly, Iliuk said. Its analysts looked at networks attributed to Russia’s influence ecosystem. Among them are groups of X accounts spreading domains from what she called a new wave of Doppelgänger, a Russian campaign that clones real news sites.
Those networks look unaffected, Iliuk said. None of them has stopped posting or broken its usual rhythm, she added. Some are slightly less active, but LetsData’s analysts say that is typical for them. The networks run on a weekly cycle, and the check fell in the part of the week when they post less.
A network that jumped from Germany to Ukraine
LetsData worked with two samples. One covers accounts that systematically target Ukraine, Moldova, and Armenia. The other covers bot networks the company has followed for some time that keep changing their target audience, so they have no fixed country.
Explore further
Ukrainian drones hit three of Russian tech giant Yandex’s data centers in four days. Ukraine’s president says the bots thinned out too
About two weeks ago, one network from that second sample wrote about elections in Germany and spread fake Die Welt sites, she said. It now posts about mobilization in Ukraine and shares a fake site of Ukrinform, Ukraine’s state news agency.
What the check can’t see
The company can compare only within networks whose usual behavior it knows, Iliuk said. Checking the whole internet is impossible because the scale is colossal, she said. A Cloudflare chart that circulated as evidence counted automated web requests from Yandex’s network, including its search crawlers, not social media posts, Cybernews reported.
So the networks LetsData follows show no impact, Iliuk said. That does not mean the strikes had no effect at all, she noted. They may have shown up in networks the company isn’t tracking now. LetsData will keep watching and report other signals if they appear.
Ukraine’s drone strikes on Russian tech giant Yandex thinned out social media bots, Ukrainian President Volodymyr Zelenskyy said on 12 October. Network data do show Yandex’s automated traffic collapsing after the strikes. Disinformation researchers say that traffic is search crawling, not trolls. A Ukrainian social media monitor told Euromaidan Press its own data show no clear drop in bot activity either.
Russian influence operations are a live threat to European votes. In August, the Matryoshka network fabricated news clips aimed at Sweden’s general election. German and French authorities flagged the same network targeting Germany’s local votes and French presidential hopeful Gabriel Attal. A way to switch such networks off would hand allies a new tool, which is why the claim needs testing.
The president’s claim
Addressing the Warsaw Security Forum by video link, Zelenskyy said that once Ukraine began answering Russia’s operation against Ukrainian data centers and its strikes reached Yandex, many social media platforms suddenly became a little easier to breathe on.
Many people noticed less hatred, discord, and provocation because there were fewer bots, he said. It was quite clear where those bots came from, he noted. Their disappearance once Yandex went down proves again that Europe is not the source of the problems, he added.
Lithuanian Prime Minister Mindaugas Sinkevičius said at the same forum that allies should ask Zelenskyy to strike more data centers in Russia, answering a question on how to protect their elections from interference.
Three data centers in four days
Drones first hit Yandex’s data center in Sasovo, Ryazan Oblast, on 8 October. Yandex said it shut the site down completely. The next day, a strike on its Kaluga site completely disabled several modules, the company said. Yandex calls Kaluga its largest data center, Russian science outlet T-Invariant noted.
Ukrainian drone maker Fire Point said its FP-1 long-range drones carried out that strike.
After the first strike, on Sasovo, a source at Yandex summed up the mood for The Bell: “Things are rotten. We keep working.”
Overnight on 11 October, drones hit the third site, in Vladimir. Yandex said it fully halted that data center too. Vladimir Oblast Governor Aleksandr Avdeev acknowledged an attack on “infrastructure” near the city. It started a fire and cut power to two substations serving 5,000 residents, he claimed.
Automated web requests from Yandex’s network fell to 0.4% of their two-week peak after the third strike, Cloudflare Radar data showed, Cybernews reported. That chart counts automated requests to websites, mostly from Yandex’s own search crawlers. It does not count social media posts.
The chart “has nothing to do with social media,” the Russian opposition analysis group Antibot4navalny wrote.
To those implying that Kremlin-controlled social media bot/troll farms became silent after Ukraine hit a Yandex data center, posting this CloudFare chart ( radar.cloudflare.com/bots/as13238 ):Hate to disappoint you all
Russia’s overall bot traffic last week looked much like any other week. Yandex’s own figure began recovering on Sunday. Covert troll farms usually hide behind residential proxies, hacked devices, virtual private networks (VPNs), and Western cloud providers, the outlet added.
What Ukrainian social media shows so far
Yevhen Luzan tracks Ukrainian social media sentiment as an analyst at the Ukrainian nonprofit CAT-UA. Its daily reviews sample about 500 random posts. On 11 October, that sample showed an unusually small share of posts criticizing Ukraine’s authorities, he told Euromaidan Press. Accounts showing signs of bot activity made up only a few tenths of a percent of that criticism. That is within the margin of error.
The same day, though, US President Donald Trump’s deal for Russian diesel supplies dominated Ukrainian feeds. Luzan said a rally-around-the-flag effect could explain the shift, as outrage at Washington crowded out domestic stories.
“To state it definitively and draw a cause-and-effect link from this correlation would be too bold,” he said.
Across the wider pool of about 10,000 daily mentions, CAT-UA sees no significant drop in posting activity in recent days. The curve shows only the usual rises and dips around the start and end of the week, Luzan said.
“For now, even a hypothetical drop in bot farm activity dissolves entirely in the natural fluctuations of the information space,” he said.
How a crawler chart became a bot story
The claim that Russian social media bots fell by half is unproven and built on a misread chart, disinformation analyst Joohn Choe concluded in a fact-check. It traces back to an 8 October post by security researcher Jeremiah Fowler. That post said Russian bot traffic had dropped to 49%. On 11 October, radio reporter Jamie Dupree spread it on X. Tom’s Hardware then ran it under a headline calling the crawler traffic “Russian disinformation bot traffic,” wording it has since changed.
According to Cloudflare Data Explorer the amount of russian bot traffic has dropped to 49% after Ukraine struck a yandex data center. Could this disrupt the midterm elections in the US? pic.twitter.com/SRtMyjaV22
— Jeremiah Fowler Security Researcher (@yoda69) October 8, 2026
Ukrainian military analyst Tatarigami claimed that Texas separatist accounts with identical “Veteran, Christian, Father, MAGA” bios had gone quiet. He said Quebec separatists and Polish anti-EU accounts went quiet alongside them.
Polish military analyst Jarosław Wolski claimed that AfD’s online support fell 56%, posting a chart without naming its source. Another X user said “Polish” bots had vanished.
Zderusyfikowany internet (ukraińskie trafienia w centra Yandexa) nagle objawia cuda w socjalach: poparcie dla AfD w socjalmediach spadło o 56%. Mniej "polskich" kont szczujących na Ukraińców, mniej "ukraińskich" szczujących na Polaków, poparcie w sieci dla MAGA gwałtownie spadło… pic.twitter.com/zi4rwqNR9I
Drones struck a plant making fuel components for Russia's Kh-101 cruise missiles and a second Yandex data center overnight on 9 October, Russian officials and monitoring channels reported. The same night, fires were reported at a refinery in Russia's far north and an oil depot near Belgorod. Russia claimed it downed more than 500 drones, and Ukraine has not claimed any of the strikes.
Ukraine has spent months hitting refineries and arms suppliers deep inside Russia. Russia, meanwhile, keeps firing Kh-101 cruise missiles at Ukrainian cities, including the one that killed 22 people in Pryluky on 7 October.
The plant behind the Kh-101's fuel
The Redkino Experimental Plant in Tver Oblast came under attack overnight, Ukrainian monitoring channel Exilenova+ reported. It said the plant makes components of Decilin-M, a fuel for Kh-55 and Kh-101 cruise missiles, as well as additives for diesel and aviation kerosene.
Tver Oblast Governor Vitaly Korolev claimed a plant in Redkino caught fire as a drone attack was being repelled. He did not name the plant. No workers were hurt, he said.
The plant also makes ferrocene derivatives, which serve as burn catalysts in solid-fuel rocket motors, Militarnyi reported. The UK sanctioned it in September 2025. Drones attacked it in September 2023 and twice in one night in June 2024, the outlet said.
In February, drones of the Security Service of Ukraine's (SBU) Alpha unit struck the plant, sparking a large fire, SBU sources told Kyiv Post. The Kh-101 is the missile Russia used against Pryluky on 7 October, Ukrainian President Volodymyr Zelenskyy said.
Yandex loses a second data center
Part of Yandex's data center in Kaluga was damaged in the drone attack, and several modules were completely knocked out, the company's press service told Interfax, Russian newspaper Kommersant reported. Some Yandex services may run with interruptions, no one was hurt, and the company is still assessing the damage, Yandex said.
Kaluga Oblast Governor Vladislav Shapsha claimed nine people were injured in the overnight attack on the region. A day earlier, a drone attack forced Yandex to fully shut its data center in Sasovo, Ryazan Oblast.
A refinery in the north, a depot near Belgorod
Locals reported an attack on the Ukhta refinery in the Komi Republic, followed by a fire, Exilenova+ said. The Lukoil-owned plant can process about 4.2 million metric tons of oil a year, making gasoline, diesel, fuel oil, and vacuum gasoil. The extent of the damage is unclear.
An oil depot north of Belgorod was also burning after the night's attack, the channel posted. Belgorod's regional headquarters claimed two people were killed and four injured, including a child, in the Belgorod district.
A large fire also broke out in Pushkino near Moscow, likely at a truck parking lot, Astra reported. The cause is unknown.
Repeated strikes on Redkino target a specialty fuel that Russia's cruise missiles depend on, while two Yandex data centers hit in two nights bring the war to services ordinary Russians use every day.
A drone attack overnight on 8 October caused a fire that hit part of Yandex's data center in Sasovo, Ryazan Oblast, about 580 km from Ukraine, and the site is fully stopped, the Russian tech company told Russian media. The data center sits on the grounds of Sasta, a sanctioned machine-tool plant, Russian outlet Astra said, citing Wikimapia data. Astra's OSINT analyst found from eyewitness footage that the fire hit the plant.
Since late September, Russia has been striking data centers in Kyiv that keep Ukraine's internet and online services running. Now a drone attack has stopped one of the data centers that Russia's largest tech company relies on.
Fires reported at a refinery in Salavat and a machine-tool plant in Sasovo after overnight attacks on 8 October 2026. Map: Euromaidan Press
Yandex counts the damage
Yandex warned that some services may be unavailable, while its core services kept running and no one was hurt. Ryazan Oblast Governor Pavel Malkov claimed two drones were downed, a roof caught fire at an enterprise in the Sasovo district, and windows were blown out in several homes.
The power failure took down a wide range of Yandex Cloud infrastructure, including computing capacity, networks, data storage, databases, Kubernetes, cloud services, AI, and security and monitoring systems, Ukrainian outlet ZN.ua reported, citing Exilenova+.
Ukrainian monitoring channel Exilenova+ reported that the plant was hit, without naming an attacker. The channel said Sasta, which claims a place on Russia's register of defense-industry companies, makes computer-controlled machine tools, including five-axis machining centers, and previously supplied the Tactical Missiles Corporation (KTRV) and Roscosmos. The plant's value to the arms industry lies in machines that cut precision parts, not in finished weapons, the channel said.
Citing Exilenova+, Militarnyi reported that Ukraine's Defense Forces hit the plant. It also linked Sasta to Iskander missile supply chains. No source has said whether the plant or the data center was the target, and no Ukrainian official has claimed the Sasovo strike. Sasta has been under US sanctions since November 2023, UK sanctions since February 2024, and Ukrainian sanctions since April 2025, a sanctions database shows.
Salavat: Kyiv reports a hit
Ukrainian forces hit the Gazprom Neftekhim Salavat complex in Bashkortostan, about 1,380 km from the front line, causing a fire, Ukraine's General Staff said. It said the complex processes up to 10 million metric tons of hydrocarbons a year and serves Russia's armed forces. Its key unit, the ELOU-AVT-6 primary oil refining unit launched in 2012, can process 6 million metric tons a year, Militarnyi reported. Astra's analyst placed the fire a few kilometers outside Salavat, possibly near the refinery.
Salavat Mayor Marat Zagidullin claimed that debris from several drones fell in the industrial zone that morning and started a fire.
"The enterprise continues to work," he said.
Astra noted earlier hits on the complex on 24 September 2025, on 14 July 2026, when refining fully stopped, and on 13 August 2026.
Russia's strikes on Ukraine's data centers
Russia has repeatedly hit data centers in Kyiv since 23 September. Strikes hit the COSMONOVA data center twice, the second time knocking it out, and the Parkovyi data center stopped working completely on 1 October after a series of strikes. In early October, Russia destroyed the dline.ua data center in Kyiv.
A reported Ukrainian drone strike has interrupted operations at a Yandex data centre in Russia’s Ryazan region, while another attack was reported at a Gazprom-owned refinery.
A Ukrainian drone attack has reportedly forced the closure of a Yandex data centre in Russia’s Ryazan region, causing a fire and disrupting part of the company’s infrastructure. Shares in the Russian technology group fell by more than three per cent in early Moscow trading on Thursday, 8 October.
The installation in Sasovo was affected during overnight strikes on Russian territory. Yandex said it was working to restore affected infrastructure, while its principal consumer services remained operational. The incident has raised questions about the vulnerability of Russia’s digital economy to Ukraine’s long-range strike campaign.
Fire at Sasovo technology facility
The affected data centre began operating in 2014 in buildings formerly occupied by the Sasta machine-tool manufacturing plant. Yandex subsequently connected the installation to Moscow by fibre-optic communications links as part of its wider computing infrastructure.
Ryazan regional governor Pavel Malkov said Russian air defences intercepted two drones over the region. He reported a fire on the roof of an industrial building in the Sasovo district and damage to windows in nearby private homes. No casualties were reported.
According to a statement on the incident, the situation had been brought under control while work to restore infrastructure continued. Yandex said its main consumer services remained operational.
The company’s cloud division also reported an electricity supply problem affecting an availability zone known as ru-central1-b. Clients were advised to use alternative zones where necessary to maintain service continuity.
Yandex shares decline
Yandex shares dropped by approximately 3.4 per cent to 3,568.5 roubles in early trading on the Moscow Exchange. The decline followed news of the fire, although a single trading session cannot establish the long-term financial cost of the disruption.
Yandex operates search, advertising, navigation, artificial intelligence and cloud computing services. Its infrastructure therefore supports commercial users as well as the company’s own applications. The duration of the interruption, the extent of physical damage and the cost of repairs will determine the wider impact.
In a separate development, explosions and a fire were reported on Thursday near the Gazprom Neftekhim Salavat refining and petrochemical complex in Russia’s Republic of Bashkortostan, around 1,400 kilometres from the Ukrainian border. The precise location of the fire and the extent of damage had not been independently established.
The Gazprom-owned complex processes hydrocarbon feedstock and produces petrol, diesel, fuel oil and petrochemicals. It has previously been targeted by Ukrainian drones. The latest reported incident comes amid repeated attacks on Russian refining and fuel infrastructure.
Russia’s technology sector faces new risks
Ukraine’s long-range economic campaign has focused heavily on oil refineries, fuel stores, military production plants and transport infrastructure. A strike affecting a major data centre introduces another category of vulnerability: the computing equipment and supporting utilities used by the digital economy.
Such sites serve businesses, financial institutions and industrial enterprises, and can also support defence-related activities. However, no publicly verified evidence establishes that the Sasovo data centre was directly involved in Russian military operations.
Damage to power supplies, cooling systems and network connections can interrupt services without necessarily destroying servers. Operators with geographically distributed facilities may be able to shift workloads to unaffected locations. The suspension of one centre therefore does not mean that Russia’s internet infrastructure has ceased functioning.
Economic pressure on Moscow
The attacks coincide with Russia’s plans for substantial military expenditure in 2027. The draft federal budget envisages considerable government spending and borrowing as Moscow continues its war against Ukraine.
Ukraine’s strikes on economic infrastructure are intended to increase the cost of maintaining Russia’s invasion. Disruption to energy facilities can affect fuel production and revenue, while attacks on technology and industrial sites may interrupt wider commercial and logistical operations.
The cumulative effect depends on the severity and duration of the damage. Neither the reported temporary closure of the Yandex facility nor preliminary accounts of the Salavat fire establish the scale of lasting losses.
The incidents nonetheless illustrate the exposure of Russian industrial and technology assets far beyond the Ukrainian border, as Kyiv increasingly targets infrastructure that supports the country’s economy.
Login
