Russia is accelerating plans to move critical data infrastructure underground, according to a report from Ars Technica, prompted by Ukrainian drone strikes that have exposed the vulnerability of above-ground facilities. The development marks a significant and underreported dimension of the conflict: the extent to which the war is reshaping not just military strategy, but the physical architecture of information systems.
To understand why this matters, it helps to appreciate what data centers actually represent in modern statecraft. They are not merely server farms. They house the financial transaction systems, government communications, logistics networks, and military coordination platforms that keep a modern state functional. A country whose data infrastructure is degraded is a country whose administrative capacity is degraded. Ukraine appears to have understood this, and the drone campaign — which has evolved considerably since the early phases of the war into a sophisticated and long-range instrument — has found a new class of target.
Russia's data center landscape was already under considerable strain before any drone struck a facility. Western sanctions following the 2022 invasion choked off access to equipment from the dominant suppliers — the American and Taiwanese chipmakers, the major networking hardware vendors — leaving Russian operators scrambling for alternatives through parallel import schemes or domestic substitution programs that have struggled to meet demand. The country had been pushing a data localization agenda for years, requiring that Russian citizens' data be stored on Russian soil, which paradoxically concentrated risk. More infrastructure on Russian soil means more infrastructure exposed to what is now an active theater of war.
The move to underground facilities is not a novel idea in the history of computing. During the Cold War, both superpowers buried sensitive computing and communications infrastructure deep enough to survive nuclear exchange. Sweden famously converted a former nuclear bunker outside Stockholm into one of the most striking data centers in the world. What is different here is the driver: not the slow logic of deterrence planning, but the urgent reality of an adversary already demonstrating the capability and will to strike. The Russian response, by Ars Technica's account, is described as hasty, which is analytically significant. Hasty infrastructure projects typically carry cost overruns, security compromises of a different kind — physical construction shortcuts, inadequate cooling and power redundancy — and timelines that slip.
The consequences of this development ripple outward in several directions. For Russia, the most immediate effect is economic and logistical. Underground construction is substantially more expensive than surface construction, requires specialized engineering expertise, and takes considerably longer to complete. At a moment when the Russian state is already diverting enormous resources toward the military effort, redirecting capital toward infrastructure hardening represents a compounding pressure. The likely reading is that only the most politically and militarily critical facilities will receive this treatment, leaving a large portion of the country's data infrastructure exposed and creating a two-tier system of protected and unprotected assets.
For Ukraine, the strategic implication is that the drone campaign is forcing adversary behavior change — always a marker of effective pressure. If Ukrainian planners can demonstrate that surface data centers are genuinely vulnerable, they alter the cost calculus for Russian infrastructure investment for years beyond any ceasefire. This suggests that even without destroying a critical facility outright, the threat alone generates friction and resource expenditure on the Russian side.
For the broader technology and security community, this episode is a case study in a tension that has been building for years. The globalized, consolidated, and largely above-ground data infrastructure that the modern internet runs on was designed around economic efficiency, not wartime resilience. The assumption embedded in most data center siting decisions is that the host country is not a combatant. Russia's situation demonstrates what happens when that assumption fails. Other nations — particularly those with contested borders or active regional tensions — will be watching and drawing their own conclusions about how exposed their critical digital infrastructure actually is.
What to watch for next is several things. Whether Russian state communications or financial systems show any signs of disruption will be an indicator of how serious the actual damage to existing facilities has been, as opposed to the threat driving the underground plans. The pace at which construction moves, and whether independent reporting can verify that projects are genuinely underway rather than announced for deterrence or domestic signaling purposes, will matter. And perhaps most importantly, the Ukrainian side of this equation deserves attention: whether targeting of data infrastructure becomes more explicit and acknowledged as a strategic line of effort, or whether it remains a quieter dimension of a campaign that has consistently found new ways to impose costs well beyond the front line.
