Major internet outage hits Russia after drone attack on Sberbank data center, media report

The reported outage spread across many parts of Russia’s digital economy. Sberbank services, its GigaChat neural network, and Samokat grocery delivery were affected. Samokat users could not place orders. The breadth mattered because customers rely on these services for banking, communication, shopping, business, and public services.

Complaints also involved Rostelecom, MTS, MegaFon, T2, Reg.ru, and Kontur. Tochka Bank’s online banking and Business Online services became unavailable. Mail.ru cloud services, VK services, Rosselkhozbank, Alfa-Bank, VTB, Ozon, Avito, and Gosuslugi also experienced disruptions.

The article links the disruption to a drone attack on Sberbank’s data center. Sberbank executive Alexander Vedyakhin confirmed the attack but said systems were operating normally. The incident shows how one infrastructure problem can coincide with interruptions across many digital services, even when official statements report normal operations.

A data center is a facility containing computer servers, storage systems, networking equipment, and supporting power and cooling systems. It runs software and holds data for online services. Banks use data centers to process accounts and payments. Cloud services use them to store and retrieve files. Digital platforms depend on them to handle user requests.

For example, Sberbank’s facility was already partially operational when it was attacked. The article links the incident with disruptions affecting Sberbank services and GigaChat. Samokat users could not place orders, showing how a service can fail from the customer’s perspective even when the company’s wider systems may still be functioning.

Data centers matter because they provide the machinery behind services people access through phones and computers. Their importance also creates concentration risk. If equipment, connections, or supporting systems fail, users may lose access to essential services until operations are restored or redirected.

The article describes Sberbank’s facility as intended to become one of Russia’s largest data centers. It does not provide a floor area, server count, storage capacity, or exact ranking. The available description therefore indicates major planned scale, but not a precise physical size.

The project was valued at 122.2 billion rubles. The data center was still under construction when the incident occurred, although it was already partially operational. That combination is important. A facility can be unfinished yet still host active systems and services, making construction progress and operational security relevant at the same time.

The article also says the center was expected to host services for the government’s GosTech digital platform. Its planned role extended beyond Sberbank’s own operations. The attack therefore drew attention to a facility designed as a major part of Russia’s future digital infrastructure, even though the article gives no later completion date or revised cost.

Simultaneous outages can turn separate inconveniences into a broad disruption of daily life and business. Customers may be unable to check accounts, complete payments, order food, contact services, access cloud files, or use government portals. Companies may also struggle to serve customers or process digital transactions while systems are unavailable.

The article gives concrete examples. Samokat users could no longer place orders. Tochka Bank’s online banking and Business Online services became unavailable. Disruptions also affected Sberbank, telecommunications companies, Mail.ru cloud services, Ozon, Avito, and Gosuslugi. These examples show the range of activities affected, from shopping and banking to communication and public administration.

The immediate result is dependence on restoration, alternative channels, or service providers that remain available. The article does not quantify financial losses or the outage duration. It does report that Sberbank’s shares fell by nearly 0.7%, while an executive said the bank’s systems and services were operating normally.

A data center may support more than one organisation directly or indirectly. Companies can share servers, network links, cloud platforms, hosting providers, authentication systems, or other technical services. A failure in one important dependency can therefore interrupt several businesses, even if their brands and customer products are different.

The article lists a wide range of affected services. Complaints involved Sberbank, GigaChat, Samokat, Rostelecom, MTS, MegaFon, T2, Reg.ru, Kontur, several banks, Mail.ru, VK, Ozon, Avito, and Gosuslugi. This pattern demonstrates the practical reach of a shared digital ecosystem, although the article does not identify the precise technical link between each service and the attacked facility.

The result is concentration risk. A company may operate its own application but still depend on outside hosting, networks, or shared infrastructure. Resilience requires backup capacity and alternative routes, but the article does not state which affected organisations had such arrangements or whether they were activated.

Sberbank is both a major bank and a digital-services operator in the article. Its services include GigaChat, while affiliated Samokat provides grocery delivery. Telecommunications companies such as Rostelecom, MTS, MegaFon, and T2 provide network access that helps users and organisations connect to online services.

Cloud and hosting providers supply computing, storage, and website infrastructure. The article names Mail.ru cloud services and Reg.ru, a hosting provider. Kontur provides digital business services. Banks, marketplaces, and platforms such as Ozon, Avito, VK, and Gosuslugi use digital systems to deliver services to customers, businesses, and the public.

Together, these roles form an interconnected digital infrastructure. A disruption can be visible in many products at once, even when companies have different owners and purposes. The article reports complaints across these sectors, but it does not specify the exact operational relationship among every named organisation or confirm that all were affected through Sberbank’s facility.

When a user opens an app or website, a request travels through local access networks, telecommunications providers, internet routing systems, and connections to servers. Those servers may sit in a data center. The service processes the request, retrieves data, and sends a response back through the network to the user’s device.

For example, a banking app may need network connectivity, application servers, databases, authentication, and external hosting or cloud services. If one essential part cannot communicate or operate, the app may show an error or become unavailable. The article reports this kind of user-facing effect for Samokat and online banking, alongside complaints involving telecoms, hosting, cloud, and other platforms.

Failures can spread when services share a facility, provider, route, or supporting system. The article does not establish the exact technical chain behind every reported disruption. It does show that the incident coincided with problems across many connected services, highlighting the importance of redundancy and recovery planning.