Reports: Russian Strike Knocks Major Kyiv Data Center Offline, Hitting Ukraine’s Digital Backbone
Severity: WARNING
Detected: 2026-09-26T16:07:26.561Z
Summary
Around 15:20–15:25 UTC, Ukrainian officials reported a renewed Russian strike on the Cosmonova data center in Kyiv, forcing a full shutdown and disrupting internet services for multiple providers. The attack widens Russia’s targeting to core digital infrastructure in the capital, raising risks for Ukraine’s communications, financial connectivity, and outsourced IT operations.
Details
Russian forces have, according to Ukrainian regional authorities and operators, again struck the Cosmonova data center in Kyiv, with the facility reported fully offline as of shortly after 15:20 UTC on 26 September. The hit damaged backbone network infrastructure and equipment of at least two internet providers, including Kolo.TV, creating outages and service instability for a portion of users in and around the capital.
The reports, carried on Ukrainian channels citing the regional administration (OVA) and company statements, describe this as a repeat strike on the same data-center target. Initial messaging noted that the supporting network was damaged, leading to potential internet disruptions for some clients; a subsequent update stated plainly that the Cosmonova data center had ceased operations following the attack. No casualty figures are yet attached to this specific strike, but it coincides temporally with a broader Russian air threat over Kyiv, including an air-raid alert for drone activity at 15:30 UTC.
For civilians and businesses in Kyiv, the immediate stakes are digital: degraded connectivity can affect hospitals, emergency responders, media, small businesses, and households that rely on stable broadband and hosting services. Any customers whose websites, cloud applications, or streaming services are hosted at Cosmonova will see downtime. For media outlets and independent information channels hosted there, interruption could narrow the flow of real-time reporting from Ukraine’s capital.
From a military and security standpoint, the strike points to a systematic Russian effort to erode Ukraine’s digital and information infrastructure in addition to energy and physical logistics. Data centers are critical nodes for command-and-control support, data storage, and secure communications, even when front-line systems are hardened or distributed. Repeatedly targeting the same facility indicates either that Russia judges earlier damage insufficient or is signaling that core IT infrastructure in urban centers is now a standing target class, not collateral.
Economically, the direct effect is localized, but the signaling value is broad. Kyiv is a regional hub for software development, back-office processing, and remote services to European and North American clients. Recurrent kinetic attacks on data centers will factor into risk assessments for firms that maintain development teams or host services in Ukraine, potentially pushing more workloads to cloud providers with multi-region redundancy. For global markets, this reinforces the theme that physical disruption to digital infrastructure is a live war risk, supportive of cybersecurity, cloud redundancy, and hardened telecom investments.
In the next 24–48 hours, key indicators to watch are: (1) time to partial and full restoration of services at Cosmonova or via failover to alternate sites; (2) whether other Kyiv or regional data centers and major ISPs report increased targeting or outages, suggesting a broader campaign; (3) any Ukrainian announcements about emergency rerouting of government or financial-sector traffic; and (4) Russian media or military commentary that frames data-center attacks as a deliberate strategy. A cluster of similar strikes would materially raise the conflict’s impact on Ukraine’s digital economy and could begin to affect international partners more visibly.
MARKET IMPACT ASSESSMENT: Limited immediate global market move, but increased focus on cyber and physical vulnerability of data centers and telecom hubs in active warzones; marginally supportive for cybersecurity, cloud, and defense names; reinforces perceived operational risk premium for Ukrainian-connected IT and back-office services.
Sources
- OSINT