How do attacks on data centres disrupt internet services?
Attacks can knock data centres offline by cutting power, cooling or network links, and the effects can spread well beyond the facility.
Covers: This page explains the technical and operational ways that physical or cyber attacks on data centres can interrupt internet services, including power, cooling, network, and redundancy failures. It does not cover the geopolitics of specific conflicts or provide instructions for carrying out attacks.
Also answers: How do data centre attacks affect the internet? · Why do data centre outages disrupt internet services? · What happens when a data centre is attacked? · How can attacks on data centres cause internet outages?
- One page for this question6 other ways of asking lead here
- 4 independent sourcesEvery claim links to what supports it
- 4 connected pages4 changed this week
- Clean discussionScreened before anything appears
The short answer
Interpretation AI-prepared starting mapAttacks on data centres can interrupt internet services because a data centre is a facility whose whole purpose is to keep electronic equipment running under controlled conditions: it stores, manages and transmits digital information and uses environmental control equipment to maintain the proper conditions for that equipment. Disruption therefore does not require destroying data — it can come from knocking out the power, cooling, or network links that the equipment depends on, or from cyber operations that cause failures to propagate. Reported attacks have been enough to force a major operator to suspend its operations. Beyond the immediate outage, research on complex cyber-physical-social systems argues that cyber-attacks and network outages can cascade, with consequences percolating through connected systems and even social nodes, so a single failure can have effects well beyond the targeted facility.123
- Evidence 12
- Interpretation 7
Did this answer your question?
Be the first to voteIn brief
A data centre is defined by its function — processing, storing and transmitting digital information — and by the environmental control equipment that keeps that equipment operable, so power, cooling and the facility itself are part of the service.1
Evidence-backedA reported strike on a Yandex data centre was the third that week and forced the company to suspend its operations, showing an attack can halt service without any detail yet on duration or user impact.2
Evidence-backedCyber-attacks and network outages in complex cyber-physical-social systems can cascade, with consequences percolating from critical nodes through connected systems and social nodes.3
Evidence-backedInternational humanitarian law struggles to apply distinction, proportionality and precaution to cyber operations, and scholars argue "attack" should be reinterpreted to cover indirect civilian harm and civilian digital data.4
Evidence-backed
At a glance
What this page stands on
Live · updated just now
The evidence behind it
4 sources- Other studies and data2
- Background2
Published in 2025 and 2026
| Source | Kind | Year |
|---|---|---|
| Ukraine strikes Yandex data centre in third attack on Russian tech giant | Background | 2026 |
| Modelling Cascading Failure in Complex CPSS to Inform Resilient Mission Assurance: An Intelligent Transport System Case Study. | Other studies and data | 2025 |
| Cyber Military Operations under International Humanitarian Law: Interpreting the Concept of "Attack" and Challenges in Protecting Civilians. | Other studies and data | 2026 |
| Data center (Wikipedia) | Background | Unknown |
The community around it
No one has added to this page yet. Firsthand experience, a newer study or a different reading of the numbers would show up here, credited to you.
What it means for you
Which fits you?
Pick the situation closest to yours. Each answer says what it rests on.
If you want to understand why hitting a building can take a service offline
focus on the dependencies the definition names: the equipment that processes, stores and transmits data only operates under maintained environmental conditions, so power, cooling and the physical facility are part of the service.1
Evidence-backedIf you are assessing how far an outage could spread
consider cascading failure: research on complex cyber-physical-social systems points to critical nodes and the percolation of consequences during a cyber failure, and stresses that social nodes must be included for accurate simulation.3
Evidence-backedIf you are looking for a documented case of an attack halting a data centre operator
the reported strike on a Yandex data centre, the third that week, forced the company to suspend operations — but the report does not say which services failed or for how long.2
Evidence-backedIf you are thinking about the legal status of operations against data centres
the scholarship here argues "attack" needs reinterpretation to account for indirect civilian harm, that protection should extend to fundamental civilian digital data, and that a specialised framework or neutral fact-finding mechanism may be needed.4
Evidence-backedThe full story · 4 chapters
01
What a data centre is, and why it is a single point of failure
AI summary:A data centre is defined by its function and by the environmental control equipment that keeps its equipment running, so power, cooling and the building are part of the service.
Evidence-backed: A data centre is a physical room, building, or facility for storing, managing, and disseminating data and information, including computer systems and associated components, housing IT infrastructure, and training artificial intelligence. A US act of Congress, the Energy Independence and Security Act of 2007, defines it as "any facility that primarily contains electronic equipment used to process, store, and transmit digital information," including "a free-standing structure" or "a facility within a larger structure, that uses environmental control equipment to maintain the proper conditions for the operation of electronic equipment." Data centres date back to the 1940s, with the US military's ENIAC as an early example, and they come in different models depending on their workloads.1
Interpretation: The definition matters for understanding disruption: the equipment that processes, stores and transmits digital information only works if environmental control equipment keeps conditions right. That makes power, cooling and the physical facility itself part of the service, not just the computers inside it.1
02
Reported attacks and their immediate effect
AI summary:A reported strike on a Yandex data centre was the third that week and forced the company to suspend operations, though details on duration and user impact are missing.
Evidence-backed: A BBC News report dated 11 October 2026 says Ukraine struck a Yandex data centre, the third time that week that Ukraine had targeted the Russian tech giant, forcing the company to suspend its operations. The report confirms the strike, the repetition within the week, and the operational suspension; it does not state which services were affected, how long the suspension lasted, or how many users lost access.2
Interpretation: This is the clearest concrete example available here of an attack on a data centre producing a service interruption: the disruption was severe enough that the operator chose to suspend operations rather than continue degraded.2
03
Why one failure can spread: cascading and percolation
AI summary:Research on complex cyber-physical-social systems says cyber-attacks and outages can cascade, with consequences percolating through connected systems and social nodes.
Evidence-backed: Research on Complex Cyber-Physical-Social Systems (C-CPSSs) describes emergent behaviour caused by events such as cyber-attacks and network outages that "have the potential to have devastating effects to critical services across society." The authors argue the risk of cascading failure should be minimised by fortifying these systems of systems to achieve resilient mission assurance. Their programmatic model, tested against an intelligent transport system scenario, highlighted the value of identifying both critical nodes and the percolation of consequences during a cyber failure, and the importance of including social nodes in models for accurate simulation results. They conclude that understanding the relationships between cyber, physical, and social nodes is key to understanding failures that occur because of, or that involve, cyber systems.3
Interpretation: Applied to data centres, this suggests two distinct disruption mechanisms: taking out a critical node (a facility, a power feed, a network link) and letting the consequences percolate outward through everything that depends on it. It also suggests that purely technical models will understate the impact, because social nodes — the people and organisations relying on the service — are part of the failure path.3
04
How "attack" is framed in international law
Evidence-backed: A study in F1000Research (Hamdan et al.) examines cyber military operations under international humanitarian law and finds that challenges in interpreting the concept of "attack" impede the practical application of the principles of distinction, proportionality, and precaution. It concludes that "attack" needs to be reinterpreted in light of the indirect harm inflicted on civilians by cyber operations, that legal protection should be raised to encompass fundamental civilian digital data, and that a specialised international legal framework — an additional protocol or a treaty specific to such operations — is possible. It further affirms the need for a neutral international mechanism to conduct fact-finding, investigate violations, and assign liabilities.4
Interpretation: For readers trying to understand disruption, this matters because the harm from an operation against a data centre is not limited to the equipment hit: the study's focus on indirect harm to civilians and on protecting civilian digital data points to service loss and data exposure as part of the damage picture, even where the legal category of "attack" is contested.4
Your turn
Have your say
See where others stand. Join free to add your perspective. One answer per account.
How do you feel about this?
No votes yetQuick questions from connected pages
Before you go
What to remember
The few things worth keeping from this page.
A data centre is defined by its function — processing, storing and transmitting digital information — and by the environmental control equipment that keeps that equipment operable, so power, cooling and the facility itself are part of the service.
A reported strike on a Yandex data centre was the third that week and forced the company to suspend its operations, showing an attack can halt service without any detail yet on duration or user impact.
Cyber-attacks and network outages in complex cyber-physical-social systems can cascade, with consequences percolating from critical nodes through connected systems and social nodes.
Your reading
0 of 4 chaptersThis answer keeps changing
When new evidence or a better source comes in, this page is updated (it's on version 2, last changed 53 minutes ago). Follow it to be told when that happens.
Ask this Sylo
Still wondering about something?
Answers come only from this page's reviewed material, with citations, and say plainly when the page doesn't cover it yet.
Behind this page
Who's adding to it, where it comes from, how it changed and what would make it better. Always open to everyone.
Discussion
Sources
Numbers match the citations in the article. A working link isn't proof that a page supports a claim; check the quoted passage and date.
- 1Data center (Wikipedia)WikipediaPublished Oct 8, 2026Checked Oct 11, 2026
“A data center is a physical room, building, or facility for storing, managing, and disseminating data and information, including computer systems and associated components, housing IT infrastructure, and training artificial intelligence. The United States' act of Congress, the Energy Independence and Security Act of 2007, defines a data center as "any facility that primarily contains electronic equipment used to process, store, and transmit digital information." This includes "a free-standing structure" or "a facility within a larger structure, that uses environmental control equipment to maintain the proper conditions for the operation of electronic equipment." According to IBM, data centers date back to the 1940s, with the U.S. military's Electrical Numerical Integrator and Computer (ENIAC) as an early example. Data centers have different models depending on their workloads.”
- 2Ukraine strikes Yandex data centre in third attack on Russian tech giantBBC NewsPublished Oct 11, 2026Checked Oct 11, 2026
“It is the third time this week that Ukraine has targeted Russian tech giant Yandex, forcing the company to suspend its operations.”
- 3Modelling Cascading Failure in Complex CPSS to Inform Resilient Mission Assurance: An Intelligent Transport System Case Study.Entropy (Basel, Switzerland) (Sobb & Turnbull)Published Jul 25, 2025Checked Oct 11, 2026
“They represent unique opportunities but also have potential threats to system operation and correctness. The emergent behaviour in Complex Cyber-Physical-Social Systems (C-CPSSs), caused by events such as cyber-attacks and network outages, have the potential to have devastating effects to critical services across society. It is therefore imperative that the risk of cascading failure is minimised through the fortifying of these systems of systems to achieve resilient mission assurance. This work designs and implements a programmatic model to validate the value of cascading failure simulation and analysis, which is then tested against a C-CPSS intelligent transport system scenario. Results from the model and its implementations highlight the value in identifying both critical nodes and percolation of consequences during a cyber failure, in addition to the importance of including social nodes in models for accurate simulation results. Understanding the relationships between cyber, physical, and social nodes is key to understanding systems' failures that occur because of or that involve cyber systems, in order to achieve cyber and system resilience.”
- 4Cyber Military Operations under International Humanitarian Law: Interpreting the Concept of "Attack" and Challenges in Protecting Civilians.F1000Research (Hamdan et al.)Published Jul 9, 2026Checked Oct 11, 2026
“These challenges impede the practical application of the principles of distinction, proportionality, and precaution.ConclusionsThe study concludes that the concept of "attack" needs to be reinterpreted considering the indirect harm inflicted on civilians resulting from cyber operations. It also manifests the need to raise the scope of legal protection encompassing fundamental civilian digital data and confirms the possibility of developing a specialized international legal framework that governs cyber operations whether through the creation of an additional protocol or a treaty specific for such operations. Finally, the study further affirms the necessity to establish a neutral international mechanism that can conduct fact-finding tasks, investigate violations, and assign liabilities so as to promote better adherence to humanitarian principles in contemporary armed conflicts.”
How it changed
Published 1 time since Oct 11, 2026.
- Version 2Oct 11, 2026Live now
AI-prepared Starting Map from live research.
- First published version.
Help improve it
The brief is open about what's uncertain. These are the specific gaps that new material would fill.
“What a data centre is, and why it is a single point of failure” rests on one independent source
A second, independent source that confirms or challenges it would make this part more reliable.
“Reported attacks and their immediate effect” rests on one independent source
A second, independent source that confirms or challenges it would make this part more reliable.
“Why one failure can spread: cascading and percolation” rests on one independent source
A second, independent source that confirms or challenges it would make this part more reliable.
“How "attack" is framed in international law” rests on one independent source
A second, independent source that confirms or challenges it would make this part more reliable.
Open questions
When a data centre is attacked, which layer fails first in practice — power, cooling, network connectivity, or the computing equipment itself — and how does that order change the length of the outage?
No answers yet
How much do redundancy, failover and geographic distribution actually reduce service interruption after an attack, and at what point do they stop helping?
No answers yet
How many users and which critical services depend on a single data centre, and how far do consequences percolate beyond the directly affected operator?
No answers yet
Do cyber operations against data centres produce different disruption patterns from physical strikes, and are the recovery paths different?
No answers yet
Around this topic
Sylos connect: narrower topics report up to broader ones, so what's learned in one place shows up where it matters.