In the modern age, the line of fire no longer runs only through trenches, artillery ranges, or contested front lines. It also runs through unassuming buildings on the outskirts of cities, buildings filled with humming servers, blinking lights, and endless racks of data. These are data centres, and for a long time they seemed like unlikely military targets. After all, they are not ammo depots or tank factories. But that is changing, and changing quickly, because data centres have become the invisible backbone of nearly everything we rely on: military communications, logistics, intelligence, banking, health care, public services, social media, even the simple act of texting a friend. In a war, hitting a data centre can cause chaos on the battlefield and in everyday life at the same time. It can slow down an army’s command and control, but it can also stop people from paying their bills, booking a medical appointment, or checking whether their relatives are safe. In Russia, the damage from such attacks may not be immediately visible in the first days or weeks, but over time it can grind away at the economy, erode public trust, and make it far harder for the country to continue a long and costly war. That is exactly why Ukraine’s recent strikes against Russian data centres matter. They represent a new kind of warfare, one where digital infrastructure is placed squarely in the line of fire, and where the “cloud” turns out to be a physical building that can be damaged, degraded, or destroyed.
Ukraine’s decision to strike Russian data centres did not come out of nowhere. For years, Russian forces had targeted Ukrainian data centres and internet service providers, trying to sever the digital lifelines that kept Ukrainian society functioning. These attacks were not just about disrupting military communications; they were about breaking the will of a nation. When a hospital loses its patient records, when a family cannot reach a loved one in another city, when a local government cannot coordinate emergency supplies, the cost is deeply human. Russia’s assaults on Ukraine’s digital infrastructure were suffered day after day, in ways that rarely made global headlines but were felt by millions. So when Ukraine began hitting back at Russian data centres, it was partly retaliation and partly strategy. In a war of attrition, every blow matters. A Russian data centre might host military logistics or financial systems, but it also supports everyday services used by ordinary citizens. Interrupting those services creates friction: payment systems go down, government portals become unreachable, businesses lose revenue, and ordinary people begin to feel the war in their daily routines. The goal is not simply to destroy a building but to create a long-term problem for the enemy’s economy and society. If Russia has to spend more money repairing digital infrastructure, if foreign investment becomes even riskier, if businesses cannot function reliably, then the entire war effort is weakened. Ukraine understands that a modern war is fought not only with missiles and drones but also with data, and that the server rooms behind the front lines are just as important as the trenches.
There is a precedent for this kind of attack, and it is worth remembering. Earlier this year, Iran targeted data centres in the United Arab Emirates and Bahrain, reportedly in response to American actions in the region. Those data centres were run by Amazon Web Services, the largest cloud computing company in the world, with facilities spread across the globe. The choice of target was striking. AWS is not a military contractor in the traditional sense; it is a commercial giant that hosts services for governments, businesses, and millions of ordinary users. Yet Iran’s strikes demonstrated that even the most advanced cloud infrastructure is not untouchable. The damage was not total destruction, but it was meaningful: services were degraded for a long time, and some data was lost forever. This matters because we tend to think of the cloud as something ethereal, a vague place somewhere above us where our photos, documents, and applications live. In reality, the cloud is a collection of physical buildings full of servers, connected by cables and dependent on electricity and cooling. A missile or a drone can interrupt that physical reality. The Iranian attacks were a wake-up call, showing that data centres are not immune to conflict. If the world’s biggest cloud provider can suffer long-term degradation, then smaller providers, national systems, and less redundant networks are even more vulnerable. The digital world is not made of magic; it is made of machines, and machines can be broken.
Data centres are designed with resilience in mind. They have backup power supplies, redundant cooling systems, multiple network connections, and copies of data spread across different locations. The idea is that losing a single facility should not cause a permanent catastrophe. Traffic can be rerouted, systems can failover, and data can be restored from backups. This is a sound principle, and it has saved many companies and governments from disaster. But the Iranian example shows that redundancy has limits. If backups are not up to date, if data replication is asynchronous, if the failure is widespread, then some information will be lost. The longer a system is down, the harder it is to recover. And when data centres are attacked repeatedly or in combination, even the best-designed resilience can be overwhelmed. There is also a deeper human cost: people wait anxiously for a bank to process a payment, doctors cannot access a patient’s medical history, families cannot reach relatives, and businesses watch as their digital storefronts go dark. In wartime, these disruptions can create cascading failures that affect food distribution, energy supply, transportation, and public safety. The resilience of a data centre is not just a technical question; it is a question of how well a society can keep functioning under extreme pressure. And resilience depends not only on technology but also on geography, politics, and access to global resources.
For Russia, the problem is especially serious. Over the past decade, Moscow has promoted a vision of “digital sovereignty” that emphasizes national control over data and digital infrastructure. In many ways, this idea is not unreasonable. Every country has a right to protect its citizens’ data and its critical systems. But Russia’s version of digital sovereignty has also meant isolation, censorship, and state surveillance. Since 2015, Russian laws have required certain types of data to be stored on servers physically located inside the country. This was meant to give the government greater control, but it also concentrated sensitive information within Russia’s borders. International sanctions that followed Russia’s full-scale invasion of Ukraine in 2022 made things worse by cutting off access to foreign technology, global cloud services, and backup infrastructure. The result is that Russian data centres have far fewer options for redundancy abroad than major international providers. A company that can spread its data across Europe, Asia, and the Americas can survive the loss of one facility. A Russian company that is forced to keep everything inside Russia cannot easily do that. If a Russian data centre is damaged, there may be no distant mirror to take over. This does not mean every Russian data centre will collapse at the first strike, but it does mean the effects are likely to be deeper, longer-lasting, and more difficult to repair. Digital sovereignty, pursued in this way, becomes a double-edged sword: it gives the state more control over information, but it also makes the country more vulnerable to physical attacks on its digital core.
The broader lesson is that in modern conflict, the distinction between military and civilian infrastructure has become dangerously blurred. Data centres are not neutral machines; they are the nervous system of our economies, our governments, and our daily lives. That makes them strategically attractive targets, but it also makes them deeply troubling targets. When a data centre is attacked, the consequences ripple far beyond the battlefield. Hospitals, schools, banks, and families all feel the impact. This reality should push every nation to rethink what resilience really means. True digital sovereignty is not just about control; it is also about redundancy, diversity, and the ability to survive disruption. It means not putting all your data in one country, or in one building, or under one government’s exclusive control. It means building systems that can fail safely and recover quickly. The war in Ukraine, and the earlier attacks in the Middle East, show that no one is immune. As data centres become more important, they will also become more tempting targets. We need to treat them like the critical infrastructure they are, protecting them with the same seriousness we once reserved for dams, bridges, and power plants. And we need to remember that behind every online service, every cloud backup, every streaming video, and every digital transaction, there is a physical place full of servers. In the twenty-first century, that place is in the line of fire.