Analysts Dispute Claims That Yandex Outage Disrupted Russian Propaganda Bots

A series of Ukrainian drone strikes against data centres belonging to Russian technology company Yandex has triggered widespread service disruptions and sparked debate over the impact on Russia’s online influence operations. On October 12, 2026, Ukrainian President Volodymyr Zelensky claimed that the attacks had reduced the activity of internet bots associated with pro-Kremlin messaging. However, cybersecurity researchers and technology analysts have challenged that interpretation, arguing that the available data does not demonstrate that propaganda networks have been significantly disrupted. The controversy began after charts showing a steep decline in automated internet traffic circulated online following the attacks. Experts say the figures need to be interpreted carefully because automated traffic includes many legitimate technical activities that have nothing to do with political influence campaigns.

The attacks targeted several Yandex data centres in Russia, including facilities in the Sasovo, Kaluga and Vladimir regions. Yandex confirmed that its Sasovo facility was seriously damaged during a drone attack on the night of October 7–8, while another strike on October 9 disrupted part of its Kaluga infrastructure. A further attack affected the company’s Vladimir data centre on October 11. These facilities support a range of services, including cloud computing, online payments and other digital products. The company said no employees were injured in the initial attacks and that technical teams were working to restore affected systems. However, Yandex warned that it could not provide a reliable timetable for the full restoration of its infrastructure.

The main disagreement concerns what the reported decline in automated traffic actually measures. Researchers examining the figures said they appear to reflect a reduction in requests from Yandex’s automated web crawlers, which regularly visit websites to collect information for search indexing and other technical services. These crawlers are fundamentally different from social media bots that publish political messages, manipulate engagement or spread disinformation. When a major search engine’s infrastructure becomes unavailable, its crawlers may stop visiting websites, causing automated traffic statistics to fall even if political bot networks continue operating through other infrastructure. According to experts cited by The Verge, the circulating chart therefore does not provide sufficient evidence to conclude that the attacks crippled Russia’s online propaganda operations.

The disruptions nevertheless demonstrate how dependent modern digital services are on physical infrastructure. Data centres house the servers, networking equipment and computing systems required to operate cloud platforms, artificial intelligence services and online applications. Damage to even a limited number of facilities can affect services far beyond the immediate location, particularly when those facilities support widely used platforms. Yandex’s disruptions have affected several products, while internet monitoring reports have indicated that connectivity to parts of its cloud infrastructure fell substantially below normal levels. The company has continued restoration work, but the incidents highlight the potential economic and operational consequences of attacks on technology infrastructure during an armed conflict.

The dispute also underscores the importance of verifying claims about online information operations before drawing conclusions from traffic statistics. Automated internet activity includes search crawlers, customer-service systems, monitoring tools, commercial bots and malicious networks. A decline in one category does not automatically establish a corresponding decline in another. Although the attacks have demonstrably disrupted Yandex’s infrastructure, independent evidence linking those disruptions to a significant reduction in Russian propaganda activity remains insufficient. Researchers say stronger conclusions would require more detailed data identifying the affected traffic sources and distinguishing legitimate automated services from coordinated influence campaigns. For now, the incident illustrates both the vulnerability of centralised digital infrastructure and the difficulty of measuring the impact of cyber-related and physical attacks on online propaganda networks.