Summary
- UCloud confirmed that its Kyiv data centre was affected during Russia's 15 September drone attack.
- Ukraine's National Paralympic Committee reported temporary website unavailability while restoration work was carried out.
- The extent of damage was not disclosed, and UCloud expected affected websites to return within several hours.
A Russian drone attack on Kyiv has affected the BeMobile data centre used by UCloud, temporarily disrupting websites hosted through the Ukrainian provider as attacks on the capital again reached civilian infrastructure.
The Kyiv Independent reported on 15 September that Ukraine’s National Paralympic Committee said the BeMobile facility had been affected during the morning attack. Its website became temporarily unavailable, with emergency restoration work under way while the organisation awaited the return of services from UCloud.
UCloud subsequently confirmed to the publication that its Kyiv data centre had been affected. The company did not disclose the nature or extent of the damage but said affected websites were expected to resume operation within several hours.
The incident occurred during a wider Russian drone attack on Kyiv in which petrol stations, warehouses, and other non-residential property were struck. At least one person was killed and at least 12 people were injured in the capital, according to local authorities cited in reporting during the day.
The available evidence does not establish that the data centre itself was the intended target, and the incident should not be described as a cyberattack. It is a physical infrastructure disruption arising from a military attack on the city.
That distinction does not reduce its operational relevance. Data centres depend on layers of physical resilience that are normally designed around utility failures, equipment faults, fires, maintenance events, and other foreseeable facility incidents. Operating in an active war zone adds a different class of risk in which the building, grid, fuel supply, fibre routes, and surrounding transport infrastructure may all be exposed simultaneously.
UCloud advertises colocation services at the BeMobile data park and describes the facility as providing high availability and information-security controls. The operator’s public material references Tier III-level availability, TIA-942, and ISO 27001 certification.
Those standards address important aspects of facility and operational resilience, but no conventional redundancy architecture can make a data centre immune from direct physical damage. Multiple generators provide limited protection if fuel logistics are interrupted; diverse network routes remain exposed if urban infrastructure is damaged; and redundant plant still occupies the same physical campus.
Ukraine’s digital infrastructure has operated under those conditions since Russia’s full-scale invasion in 2022. Operators have had to manage grid instability, attacks on energy infrastructure, staff safety, fuel availability, telecommunications damage, and the need to restore services while military operations continue.
The Kyiv incident also follows damage to a Kyivstar engineering office during a separate drone attack earlier in September. The mobile operator said its network continued operating normally after that event and that no employees were injured.
For data centre resilience planning, the comparison reinforces the value of geographic as well as equipment redundancy. Replication between physically separate sites can preserve services when a particular building becomes unavailable, but only if customers have configured applications and data to use that redundancy and if network connectivity between sites remains available.
The National Paralympic Committee’s temporary outage provides a small but concrete example of that dependency. A public-facing service can be disrupted even when the underlying incident occurs several layers below the application itself — at the building where the servers or supporting systems operate.
UCloud’s expectation that affected websites would return within hours suggests restoration activity was possible after the incident, although the company had not disclosed enough information by the end of 15 September to assess the technical damage, whether customer equipment was affected, or which facility systems had failed.
Those details will determine whether the event was primarily an interruption around the data centre or a more significant facility incident. What is already clear is that Ukraine’s operators continue to run critical digital infrastructure while the threat extends beyond cyber security and into the physical integrity of the sites themselves.
