Russian data center operators are reportedly preparing to invest more in physical defenses as Moscow tightens security requirements for critical infrastructure amid ongoing Ukrainian drone attacks. A new decree signed by President Vladimir Putin in late August allows the government to temporarily take control of critical infrastructure if operators fail to adequately protect their facilities from such threats, according to a report by Russian newspaper Kommersant.
The decree encompasses a wide range of critical infrastructure sectors, including energy, telecommunications, transportation, and utilities. Reports indicate that the new regulations are particularly impacting data centers, especially those that host systems for government agencies, banks, and major service providers. Nikita Tsaplin, CEO of Russian hosting provider RUVDS, noted that some data centers have already begun enhancing defenses around external engineering equipment.
This new security requirement poses challenges, as much of Russia’s data center capacity is concentrated in areas increasingly vulnerable to Ukrainian drone operations, particularly around Moscow and St. Petersburg. As of February, Russia had 181 data centers, according to data from Russian brokerage BCS. Traditionally, data centers were not designed to withstand aerial attacks, but the growing capabilities of drones have raised significant concerns among local industry experts.
Since early 2023, some companies have considered relocating data from facilities near Moscow to areas east of the Ural Mountains due to the heightened risk of drone attacks. Ukraine has significantly expanded its long-range drone operations, targeting airports, oil refineries, and industrial facilities deep within Russia. Ukrainian President Volodymyr Zelensky recently stated that Kyiv aims to increase pressure on Russia, asserting that the goal is to “close” Russian airspace.
In response to these threats, Russian data center operators are also planning to bolster their cybersecurity measures, including establishing backup communications, enhancing protection against DDoS attacks, and improving software vulnerability management. However, these investments in both physical and digital security are expected to increase operational costs, which may ultimately be passed on to customers. Tsaplin remarked that this will likely lead to a significant rise in capital expenditures, affecting the cost of IT infrastructure for end users.
Russia has been exploring various methods to protect critical infrastructure from Ukrainian drones, such as anti-drone nets and metal barriers. Authorities have begun installing metal frameworks for anti-drone netting around electrical infrastructure in Moscow. However, a leaked document from Russian oil giant Rosneft acknowledged the limitations of these defenses, stating they cannot guarantee safety from explosions or debris.
As the conflict continues, both Russian and Ukrainian data centers remain under threat, with ongoing cyberattacks and physical strikes impacting operations on both sides.
Follow Cyber Warriors Middle East for further global cybersecurity developments.
