Ukrainian Drones Hit Sberbank Data Centre As Attacks Reach Russia’s Banking Infrastructure

Written By James Taylor
Russia’s Digital Infrastructure Comes Under Attack At Sberbank’s Balakovo Site

Drones Target Russia’s Banking Technology As Sberbank Confirms Strike

Russia’s Computing Ambitions Face War

The bank says its systems remain operational after a strike on the Balakovo complex, conceived as Russia’s biggest data centre.

Sberbank confirmed on 14 October 2026 that its data centre in Russia’s Saratov region had been attacked. First deputy chief executive Alexander Vedyakhin said the bank’s systems and services were operating normally. The bank’s press office said its employees had not been injured.

The Ukrainian drone strike targeted the Balakovo complex after attacks on three data centres belonging to Yandex. It brings the long-range campaign to infrastructure owned by Russia’s largest bank. The available evidence does not establish how much equipment was damaged.

What Sberbank Has Confirmed

Vedyakhin acknowledged the attack while speaking to journalists at Russian Energy Week. His statement establishes that the bank recognised an attack on its infrastructure, alongside its assurance that services continued to function.

That leaves an important gap. A statement about functioning banking services is not a detailed inspection of the buildings, electrical equipment or servers at the site. It cannot establish that everything inside the complex escaped damage.

Equally, an attack on a data centre does not by itself establish that customers lost access to their accounts, that records were erased or that money disappeared. Those would be separate claims requiring separate evidence. No confirmed nationwide Sberbank outage has been established in the evidence reviewed for this article.

Why Balakovo Was Presented As Russia’s Biggest

The description of the site as Russia’s largest data centre has a documented origin. A project record published by State Duma chairman Vyacheslav Volodin describes a December 2020 agreement to build the country’s biggest data processing centre in Balakovo.

The original plan envisaged around 120,000 servers and peak electricity consumption of up to 82 megawatts. Construction was planned in phases, with the third scheduled for the first quarter of 2027. A September 2023 update gave a building footprint of 55,103 square metres.

Those figures describe the development plan. They do not establish how many servers were installed and working when the drones struck. Nor does the ambition to build the largest centre provide an independently checked ranking of every operational Russian facility today.

The distinction matters because a planned campus can contain completed buildings, operating equipment and unfinished expansion at the same time. Without a current inventory and damage assessment, its advertised size cannot be converted into a measure of computing capacity lost.

The Attacks On Yandex Came First

On 8 October, Yandex said an attack on its Sasovo data centre caused a fire and forced operations there to stop. The following day, the company confirmed that its Kaluga facility had been struck and partly put out of action. A third Yandex site, in Vladimir, was attacked on 11 October.

Yandex said it was working to restore disrupted services and had arranged for cloud customers to move data and services to other providers. Cloud computing allows businesses to rent processing and storage instead of running all their own equipment. That means damage to a single provider can affect companies that have no physical presence at the attacked location.

President Volodymyr Zelenskyy described the Kaluga strike as a response to Russian attacks on Ukrainian data infrastructure. That is Ukraine’s stated explanation for the campaign. It does not establish the military role of every server or business using the targeted facilities.

The sequence extends a war already reaching industrial, transport and other infrastructure across Ukraine. The new targets are buildings whose most visible outputs are services delivered through phones and computers.

Online Services Depend On Physical Equipment

A data centre houses servers, storage and networking equipment. Keeping those machines available also requires electricity, cooling and reliable connections. The word “cloud” describes how customers access computing resources; the equipment still sits somewhere.

Backup systems can reduce disruption, but resilience depends on their design. Keeping another copy of information is different from having a second facility ready to run the same service. A usable backup must be accessible, and replacement equipment must have enough capacity to handle the workload.

Electricity is part of that dependence. Attacks on Ukraine’s energy grid show why protecting a building alone cannot guarantee that the systems inside it will keep running. Power supplies, communications links and alternative operating sites all matter.

For Balakovo, the remaining factual question is specific: what, if anything, was damaged inside the complex, and how much of its installed capacity remains available? A physical assessment would show whether Sberbank’s continued service reflects limited damage, successful backup arrangements or some combination of the two.

Sources

Next Reads

James Taylor
Next

DeepMind Chief Warns AI Hacks Are ‘Early Warning Shots’ Before More Serious Incidents