Yandex reports data loss after Ukraine drone strikes

Tier C · Keep an eye on it – Check if you’re affected

Who’s exposed: Yandex Cloud customers whose data was stored in damaged data centers

Tier C because: Hits tech teams

Reach

Attack

Damage

Fix

Popular tool

What to do

Verify that your own backups exist independently of the provider's infrastructure, especially for data stored in Yandex Cloud

The Brief

Yandex says it restored access to more than 97% of customer cloud data after drone strikes damaged its data centers.
Nearly 3% of customer data was lost, according to the reporting, and Yandex Cloud blames the lack of user backups.
Yandex Cloud now applies backup rules by default and has opened previously secret availability zones.

Losing customer data after physical damage to data centers shows that single-region storage without backups is a real risk, even for large providers.

Checklist · 2 of 10 yes

Yes	Hits tech teams	Judgment: Yandex Cloud is a cloud service that developers and ops teams build on and run.
No	Core infrastructure	Judgment: Yandex Cloud is a major regional cloud, not software nearly every team worldwide runs.
Yes	Popular tool	Judgment: Yandex Cloud is a widely used cloud platform in Russia, so mainstream for its market.
No	Exploited in the wild	Tom's Hardware: data was lost to physical drone strikes on data centers, not an attack using a software flaw.
No	Public exploit	Tom's Hardware: no exploit code or proof-of-concept is mentioned; the incident is physical damage.
No	Remote, no login	Tom's Hardware: damage came from drone strikes; no network attack without credentials is described.
No	Full takeover	Tom's Hardware: sources describe data loss from strikes, with no code execution or admin takeover.
No	Secrets exposed	Tom's Hardware: about 3% of customer data was lost, not stolen or exposed.
No	Supply chain	Tom's Hardware: no compromised package, update, build pipeline or signing key is mentioned.
No	No fix yet	Tom's Hardware: Yandex says it restored access to over 97% of customer data and now applies backup rules; this is not a vulnerability.

First seen 48 min ago · 1 source · Full story page · How tiers are decided