Ukrainian drones hit Sberbank’s Balakovo data centre in Russia

Summary

• Data centre attacked: Sberbank confirmed that drones attacked its data processing centre in Balakovo, Saratov Oblast, on October 14, 2026. The bank said its systems and services continued operating normally.
• Strategic computing site: The 55,000-square-metre facility has been identified in Russian reporting as a future home for the country’s planned largest supercomputer, which is scheduled to enter operation in 2027.
• Wider infrastructure campaign: The attack followed three reported drone strikes on data centres operated by Russian technology company Yandex during the preceding week, highlighting growing risks to Russia’s digital infrastructure.
• Damage remains unclear: Sberbank confirmed the attack but did not publicly detail the extent of physical damage or establish whether computing equipment was affected.

MOSCOW, October 14, 2026 — Ukrainian drones struck a data centre owned by Sberbank in Balakovo, in Russia’s Saratov region, on Wednesday, according to reporting by Reuters and statements from the bank. Sberbank said the incident had not disrupted its systems or services.

Alexander Vedyakhin, Sberbank’s first deputy chief executive, confirmed the attack and said the bank’s systems continued operating normally. The statement indicates that banking services remained available, but it does not independently establish the extent of damage to the facility or whether individual computing systems were affected.

The attack follows a series of strikes against data centres operated by Yandex, one of Russia’s largest technology companies. Yandex reported serious damage at its Sasovo facility, damage to infrastructure in Kaluga and a subsequent attack affecting its data centre in Vladimir. Those incidents caused service disruptions, demonstrating how damage to physical computing infrastructure can affect services well beyond the sites themselves.

The Balakovo incident adds a major financial-sector and technology company to the list of operators whose data infrastructure has been targeted during the war. The available reporting does not, however, establish the precise military objective of the attack or confirm that the facility’s AI computing equipment was damaged.

Balakovo’s planned role in Russia’s AI infrastructure

The Balakovo facility covers approximately 55,000 square metres, according to Russian reporting cited by Reuters. The site is located near the Balakovo Nuclear Power Plant and the Saratov Hydroelectric Power Station.

Russian state media reported in 2024 that the data centre was intended to host Russia’s largest supercomputer, with operations scheduled to begin in 2027. The project is part of the country’s wider investment in domestic computing infrastructure, including systems used for scientific computing, financial analysis and artificial intelligence development.

Sberbank is a major participant in Russia’s AI market through its GigaChat model and related services. Yandex develops its own AI products, including YandexGPT. Both companies have invested in domestic AI capabilities as access to advanced foreign technology has become more difficult.

However, the available reporting does not confirm that the Balakovo supercomputer is already operational, that it was running GigaChat workloads when the attack occurred, or that the planned 2027 launch has been delayed. Nor does the reported proximity of the site to power-generation facilities establish that it receives dedicated power directly from either plant.

Banking continuity and the limits of digital resilience

Sberbank’s statement that its systems and services remained operational suggests that the attack did not cause a reported bank-wide outage. Distributed infrastructure, backup systems and workload redundancy can help organisations maintain services when individual facilities become unavailable.

Nevertheless, the bank has not publicly disclosed enough technical detail to attribute service continuity specifically to automated failover, multi-region replication or any other particular mechanism. It is therefore premature to treat the incident as proof of a specific resilience architecture.

The distinction between service continuity and physical damage is important. A company may keep customer-facing systems running while a damaged facility undergoes inspection or repair. Conversely, a lack of immediate service disruption does not establish that all equipment escaped damage.

As of the available reporting, neither Sberbank nor independent sources had provided a detailed public assessment of damage to server halls, cooling equipment, power systems or computing hardware at Balakovo.

Sanctions and the challenge of replacing advanced hardware

The attack also draws attention to the physical dependencies of large-scale AI infrastructure. Modern data centres rely on servers, accelerators, networking equipment, power-management systems and cooling infrastructure. Significant damage to any of these components can require specialised repairs or replacement parts.

Russia faces restrictions on access to certain advanced computing technologies under US, European and allied export-control regimes. These restrictions can complicate procurement of some high-performance processors and other specialised equipment, although the effects depend on the product, supplier, applicable controls and available alternatives.

It would be premature to conclude that equipment damaged at Balakovo cannot be replaced or to estimate repair costs and delays without an assessment of the damage and details of the affected hardware. The incident nevertheless illustrates how physical attacks and technology supply constraints can compound infrastructure risks.

The recent Yandex strikes offer a clearer example of reported service impact: the company said its Sasovo data centre was seriously damaged and shut down, while parts of its Kaluga infrastructure were disabled. The extent of any comparable disruption at Balakovo remains unconfirmed.

Why this matters

• Digital infrastructure is exposed to physical attacks: Data centres underpin banking, cloud computing and AI services, making physical damage a potential source of wider disruption.
• Service continuity does not prove a facility is undamaged: Sberbank reported normal operations, but the full extent of physical damage at Balakovo remains unknown.
• Russia’s AI ambitions depend on computing infrastructure: The planned 2027 supercomputer highlights the strategic importance of the site, although no delay to the project has been confirmed.
• Technology restrictions may complicate repairs: Export controls can limit access to certain advanced computing components, but the actual effect on Balakovo depends on the equipment damaged and the availability of replacements.
• The Yandex attacks show the wider risk: Recent strikes on three Yandex data centres caused reported outages, underlining the potential consequences of attacks on concentrated digital infrastructure.

FAQs

Q1: What happened at Sberbank’s Balakovo data centre?

Sberbank confirmed that drones attacked its data processing centre in Balakovo, Saratov Oblast, on October 14, 2026. The bank said its systems and services continued operating normally.

Q2: How large is the Balakovo facility?

Russian reporting cited by Reuters puts the facility’s area at approximately 55,000 square metres. Claims that it contains more than 3,000 server racks or represents a $1 billion investment have not been substantiated by the sources reviewed.

Q3: Was Sberbank’s GigaChat AI service disrupted?

Sberbank said its systems and services were operating normally. However, the available reporting does not provide a separate technical assessment of GigaChat or confirm which AI workloads, if any, were running at the facility during the attack.

Q4: Why is the Balakovo site strategically significant?

Russian reporting has identified it as the planned location for a major supercomputer expected to enter operation in 2027. Its role in that project makes the site relevant to Russia’s broader AI and high-performance computing ambitions.

Q5: Were the data centre’s servers or cooling systems damaged?

The full extent of physical damage has not been publicly established in the reporting reviewed. Neither Sberbank nor independent sources have confirmed damage to specific server halls, cooling equipment or power systems.

Q6: How is the incident connected to the Yandex attacks?

The Sberbank strike followed three reported drone attacks on Yandex data centres in Sasovo, Kaluga and Vladimir. Those incidents caused damage and service disruptions, but no evidence reviewed establishes that the separate attacks were coordinated as a single operation.