Drone Strikes That Shut Down Russian AI Data Centers Spark US Policy Debate

Ukrainian drone strikes disrupted three major Russian data centers operated by Yandex, the company often described as “Russia’s Google,” over a four-day stretch in early October, raising questions in Washington about whether similar attacks could threaten American artificial intelligence infrastructure.

On October 8, a drone attack forced Yandex to suspend operations at its data center in Sasovo, located in Russia’s Ryazan region. The following day, a second strike knocked out several modules at the company’s Kaluga facility, which Yandex had previously called its most powerful data center in the country. On October 11, Yandex announced that its data center in the Vladimir region had shut down completely after another drone strike.

The Sasovo facility housed two of Yandex’s three supercomputers used to train its AI models, including YandexGPT. Yandex said it could not yet determine whether the damaged equipment could be restored.

A warning for US infrastructure

The strikes have prompted commentary arguing that the Trump administration should examine whether American data centers face comparable vulnerabilities. Loudoun County, Virginia, has the highest concentration of data centers in the world, with neighboring Prince William County also hosting significant computing infrastructure. These campuses are protected on the ground by fences, cameras and guards, but federal law reserves the authority to shoot down a drone for federal agencies and certified state and local police.

The Cybersecurity and Infrastructure Security Agency has described energy and communications systems as “fundamental to the operation of practically every other critical infrastructure sector.”

Existing federal policy

President Trump signed a national security memorandum on June 5 directing federal agencies to form partnerships with willing private companies to secure the nation’s most advanced AI technologies. The memorandum called for threat intelligence sharing, joint AI red-team exercises, and stronger physical and cybersecurity protections for data centers. Agencies were given 120 days to develop those partnerships, a deadline that passed on October 3.

Separately, the administration announced a Super Intelligence Task Force on October 4, led by Director of National Intelligence Jay Clayton. Reuters reported on October 8 that vice chair Scott Kupor expected the full committee to convene during the week of October 6 and issue a charter afterward.

Proposed steps

Commentary following the Yandex strikes has called for the administration to take several concrete actions:

• Identify which computing capabilities are essential to national defense and intelligence missions, and assess the cost of losing them.
• Assign clear responsibility between private operators, who would harden facilities, and government agencies, who would be responsible for airspace defense above critical sites.
• Establish enforceable security requirements in government contracts covering power, cooling and communications as well as computing equipment.
• Test recovery plans through drills similar to FEMA’s annual Eagle Horizon exercise, including scenarios involving the loss of more than one facility.

The civilian nuclear industry has been cited as a possible model, since the Nuclear Regulatory Commission requires privately owned nuclear power plants to maintain armed security, physical barriers and intrusion detection, tested through force-on-force exercises.

The broader concern raised is preparedness for a potential conflict with China, in which computing capacity that survives an initial attack could prove decisive. No official assessment of US data center vulnerability to drone attack has been publicly released.