A series of Russian attacks on Kyiv between 23 and 25 September damaged data centres, communications hubs and network equipment belonging to more than ten Ukrainian internet and hosting providers. The infrastructure in the capital suffered the most damage, although the effects were felt by users in Vinnytsia, the Khmelnytskyi region and the Dnipropetrovsk region. Some operators have already resumed operations via backup routes and sites.
Briefly about the main points
- At least four data centres in Kyiv have been damaged.
- Problems have arisen for more than ten providers.
- Users outside Kyiv also experienced disruptions.
- Operators are moving services to backup sites.
At least four data centres and more than ten internet service providers have been damaged
The following were affected by the Russian strikes on 23–25 September at least four data centres in Kyiv and the infrastructure of more than ten operators and hosting companies. However, the number of affected providers does not necessarily correspond to the number of data centres destroyed: a single site may house equipment belonging to several companies at once.
Among those who reported damage or disruptions were:
- Data Group
- UTELS
- «The Web»
- Crazy Network
- KIEVNET
- FAUST/Fast.net
- Etherlink
- Cityhost
- MiroHost
- «Domonet»
- KyivLink
- FEX.NET.
In addition, the following sustained damage: «Parkovy» Exhibition Centre», within the territory of which operates data centre. Following the attack, the complex temporarily ceased operations.
Internet problems have spread beyond Kyiv
Users in other regions also felt the effects of the strikes on the capital’s infrastructure.
Following damage to the central traffic exchange node Crazy Network Internet and telephone service disruptions occurred not only in Kyiv, but also in Vinnytsia and the Khmelnytskyi region. The provider subsequently announced that the network had been restored.
An internet service provider in the Dnipropetrovsk region «Dnipronet» It also warned subscribers in Kam’yanske about possible service disruptions. The company explained that its core equipment was housed in one of the damaged data centres in Kyiv.
Consequently, physical damage to a single site in Kyiv could affect networks hundreds of kilometres away from the capital if backbone traffic passes through it or if it houses regional operators’ core equipment.
Around 100,000 households have already experienced power cuts
Following the attack on 23 September, the Ministry of Digital Transformation reported that connectivity issues had arisen in approximately 100,000 households in Kyiv and the surrounding region. Experts have begun assessing the damage and restoring the networks.
NetBlocks, an international internet monitoring group, also recorded partial connectivity losses across the networks of several Ukrainian operators following attacks on the capital’s telecommunications infrastructure.
MiroHost has lost its Ukrainian data centre, whilst Cityhost has lost some of its equipment
Hosting companies were among those that suffered the most serious damage.
У MiroHost reported on the destruction of a Ukrainian data centre, where the company’s facilities were located. At the same time, around 95% MiroHost customers are using overseas infrastructure, which has continued to operate.
Cityhost lost some of its server equipment at one of its data centres in Kyiv. The company began an emergency restoration of its services using backups stored on equipment abroad.
У Etherlink A key network component was damaged. The operator relocated the core to another site and, as of the morning of 25 September, reported that services had been restored.
On 25 September, the Data Group data centre was damaged
The series of attacks on telecommunications infrastructure continued on 25 September.
Company. Data Group, which is part of the DVL group alongside Volia and lifecell, has confirmed that its data centre was damaged following a Russian attack.
The company stated that no employees were harmed, customer data remains secure, and services have continued to operate from backup sites. Specialists are assessing the extent of the damage and restoring the infrastructure.
UTELS, «Pavutina», KIEVNET and FAUST were also restoring their networks
У UTELS Following one of the attacks, critical equipment was damaged and the power supply to the data centre was cut off. The company managed to restore most of its services within approximately two hours.
«Pavutina» reported damage to the data centre and switching equipment, and KIEVNET — regarding the damage to the site that provided part of the network in central Kyiv.
У FAUST/Fast.net Problems arose in the Solomyanskyi and Holosiivskyi districts. The provider was setting up backup lines due to a lack of access to part of the main infrastructure.
Why an attack on Kyiv could leave another city without internet access
The Ukrainian internet does not operate on the principle of «one provider per district».
Large data centres house the servers, routers, internet exchange points and data channels of many companies. Traffic from a regional internet service provider—which is physically based in Vinnytsia, Khmelnytskyi or the Dnipropetrovsk region—may pass through facilities in the capital. Therefore, damage to a central node does not necessarily mean just a local problem in Kyiv. This is precisely what happened with Crazy Network: an outage in the capital affected subscribers in several regions at once.
There is currently no question of Ukraine being completely cut off from the internet. Backup routes, redundant equipment and overseas sites have enabled many companies to resume or maintain operations even after the physical destruction of individual nodes.
