ZeroFox Intelligence Flash Report - Yandex Strikes in Russia Unlikely to Impact Threat Actors

ZeroFox Intelligence Flash Report - Yandex Strikes in Russia Unlikely to Impact Threat Actors

Product Serial: F-2026-10-19a

TLP:CLEAR

In this Flash Report, ZeroFox researchers discuss the impacts on threat actors from the recent strikes on Yandex data centers in Russia.

For the most up-to-date list of ZeroFox’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/intelligence/advisories/14956

Link to Download

View the full report here

Key Findings

• Overnight on October 7–8, 2026, drone strikes almost certainly launched by Ukrainian forces struck a Yandex data center in the Ryazan Oblast of Russia. On October 9, 2026, Yandex confirmed that several data center modules were completely disabled at its Kaluga facility, and on October 11, 2026, a strike on the company's data center near Vladimir caused what Yandex described as a complete shutdown. These three sites constitute half of Yandex’s six data centers.
• The data center losses caused a near-total collapse of Yandex services on October 11, 2026, with most systems still operating roughly 90 percent below baseline on October 13, 2026.
• The Yandex disruptions have likely had limited impact on ransomware and digital extortion (R&DE) threat actors. Threat actor traffic was disrupted but did not disappear; instead threat actors likely pivoted to other services to maintain their infrastructure.
• Although the strikes almost certainly caused significant disruptions to Yandex, its cloud services, and its large client base in Russia, the Ukrainian drone strikes are very unlikely to have major impacts on Russian threat actor infrastructure or activity.