Geranium-5 and 100,000 outages — how Russia is turning Ukraine's data centers into a battlefield

Strike on invisible infrastructure

About 100,000 households in Kyiv and the surrounding region temporarily lost internet access this week. For a war, this is not a record number. But it is significant for another reason: the Russian campaign is deliberately targeting not only power plants, railways, and warehouses, but also the digital fabric of the Ukrainian economy for the first time in a long time. On Friday, a Russian drone struck a business center in Kyiv that housed the data center of the telecommunications company Datagroup; according to Western media, four people were killed. Moscow confirmed the strike, stating that the facility was used by Ukrainian military intelligence (BBC, September 26, 2026).

The Ukrainian side describes a broader set of targets. This includes data centers and internet operators New-Telco, United DC, Kyivstar, and Parkovyi. Even if the Russian claim about the military use of certain facilities is true, the scale of the series indicates an operational task broader than the destruction of a single intelligence node. The goal becomes the state's ability to maintain normal life under fire — payments, banks, electronic government services, air threat alerts, and industrial management.

Why the data center became a military target

In Soviet military logic, communication was always considered part of the command and control system, not a neutral civilian service. However, modern Ukraine has expanded this concept to the level of national resilience. State structures, businesses, and the population use the same networks, cloud services, and data transmission channels. Therefore, a strike on a telecommunications node has a dual effect: it can complicate military command operations while simultaneously creating uncertainty in the everyday economy.

This does not mean that a single destroyed server room can "disconnect Ukraine." On the contrary, the Ukrainian network is relatively decentralized. Datagroup stated that it continues to provide services through backup sites, and some companies are already moving data abroad. This architecture is a direct lesson from the first months of the full-scale war when centralized systems became too vulnerable. But decentralization increases the cost of protection: backup sites require generators, fuel, secure channels, spare facilities, and constant data synchronization.

The Russian side is essentially trying to turn this cost into a strategic burden. Repeated strikes do not have to completely destroy the network. It is enough to force operators to constantly spend resources on repairs and backups, increase access costs, and create delays where automatic processes used to operate. In this case, the war is not fought for a switch, but for the resilience of the system.

Connection to Moscow's new air campaign

Attacks on digital infrastructure coincided with an increase in strikes on the Ukrainian economy and the emergence of jet variants of the "Geranium" family. According to the Institute for the Study of War, Moscow is betting on the jet "Geranium-4" and "Geranium-5," which develop higher speeds than drones with piston engines, thus complicating interception. Volodymyr Zelensky stated that Russia intends to allocate about $12 billion for the production of jet drones and loitering munitions; this estimate should be considered the official Ukrainian assessment, not an independent audit.

The military significance of this combination is evident. Ballistic missiles are expensive, complex to produce, and limited in stock. A jet drone is potentially cheaper and can be used in larger batches, forcing Ukrainian air defense to expend costly interceptors. If power supply, data centers, and communication nodes are simultaneously hit, the enemy hopes to achieve an effect that exceeds the physical damage from each individual hit.

But the Russian theory of victory has a weak point. Jet speed does not eliminate the requirements for intelligence, navigation, and the reliability of control channels. Ukraine is already developing interceptor drones and other countermeasures. The more Moscow relies on mass launches of identical devices, the more important distributed sensors, electronic warfare, and rapid analysis of interception results become. In this technological race, the advantage is determined not by the impressive index of "Geranium-5," but by which side can more quickly restructure the cycle of detection — decision — strike.

Infrastructure war and winter calculations

The timing of the campaign is also not accidental. There are weeks left until winter, and Russia is once again trying to synchronize strikes on energy, railways, industry, and communications. The British newspaper The Guardian reported that alongside attacks on data centers, internet providers, warehouses, and other commercial facilities were also affected; the Ukrainian steel industry did not produce a single ton of steel in September for the first time in a century, according to an industry representative. This data requires further verification, but the direction of pressure is clear: Moscow aims to worsen not only the supply to the front but also the ability of the Ukrainian economy to recover.

Particularly indicative is the fire at the Starlink station in central Poland, which also services the Ukrainian direction. Polish prosecutors reported suspicions of sabotage on behalf of Russian special services; final responsibility has not yet been established. If the arson and strikes on Ukrainian data centers are indeed linked in one campaign, Moscow is employing a multi-layered model: missiles and drones within Ukraine are complemented by covert actions against external communication channels. If there is no communication, the coincidence still shows how critical satellite infrastructure has become.

What to expect next

Ukrainian decentralization, backup sites, and Starlink do not give Russia an easy victory. But they do not make the system invulnerable. The most likely scenario is a prolonged regime of partial disruptions: local outages, rising tariffs, data transfers, overloading reserves, and periodic failures in urban services. For the population, this appears as a technical inconvenience; for the state, it is daily expenditure of a limited reserve of resilience.

This is the main conclusion from the latest strikes. Russia does not necessarily expect to destroy Ukraine's digital economy in one blow. It is more beneficial for it to force Kyiv to constantly prove that it can operate after the next strike. This strategy resembles the Soviet belief that systematic pressure would inevitably break the opponent, but the modern network leaves more room for adaptation than the centralized infrastructure of late USSR.

Moscow will be able to sustain this campaign if it simultaneously ensures the production of jet drones, reconnaissance accuracy, and a sufficient stock of missiles for the most protected targets. Kyiv will maintain digital connectivity if it can scale up backup and inexpensive interception means faster than Russia increases the pace of strikes. In winter, the crucial question will not be whether a single data center can be destroyed, but which system can recover faster after its loss.