Kyiv Data Center Strike: 16 Ballistic Missiles, Three Waves, and the War on the Cloud Goes Official

In brief: Russia fired 16 ballistic missiles at Kyiv and its suburbs in waves overnight on October 18 and 19, killing a 21-year-old woman, cutting power to at least 550,000 households, and destroying the Datagroup data center beyond repair. With Gerasimov confirming data centers are on Russia's official target list and Kyiv's missile warnings arriving late again, the war on the cloud is now policy on both sides.

Part of our Ukraine War Analysis coverage.

The sirens were still winding up when the first explosions rolled across Kyiv. Just before 11 p.m. on Sunday, October 18, the opening volley of ballistic missiles beat the alert meant to precede it: phone warnings buzzed as windows were already shaking. Two more waves followed, at around 3 a.m. and near 7 a.m. on Monday, by the count of Kyiv Independent reporters on the ground.

By Monday afternoon the Kyiv data center strike had a toll: a 21-year-old woman killed in Desnianskyi district, at least eight people injured in the capital, two metro stations closed, and Datagroup, one of Ukraine's biggest fixed-line and data operators, declaring its Kyiv data center destroyed beyond repair. President Volodymyr Zelensky said Russia fired 16 ballistic missiles at Kyiv and the surrounding region, plus more than 200 drones across the country. And once again, he said, there was no warning from Ukraine's partners.

Three Waves on Kyiv: What the 16 Ballistic Missiles Hit

Ukraine's Air Force logged Iskander-M and S-400 ballistic missiles fired from Russia's Smolensk, Bryansk, and Kursk regions, Iskander-K cruise missiles launched from the air over Kursk, and 269 attack drones, 59 of them jet-powered Shaheds. By the 9 a.m. preliminary count, air defenses downed or suppressed 247 targets: 243 drones and four Iskander-K cruise missiles. No ballistic interceptions appeared in the report, and strikes were recorded at 25 locations. Air Force spokesman Yurii Ihnat described two ballistic waves; reporters in the city counted a third round of explosions near 7 a.m.

A Russian jet-powered drone in the sights of a Ukrainian interceptor, in a still from 78th Air Assault Brigade footage published October 19. Photo: 78th Air Assault Brigade via ArmyInform, CC BY 4.0

In Desnianskyi district a non-residential building burned and the metro took damage: the above-ground Chernihivska and Lisova stations closed for repairs after a hit damaged tracks and the contact rail. In Solomianskyi, a 25-story residential block, the Cosmo Multimall, and a medical center that lost more than 200 windows were all hit. In Irpin, 17 people were injured, eight of them children, and three remained missing by afternoon, with around 70 houses and four apartment buildings damaged, according to Kyiv Oblast administration head Tymur Tkachenko.

The night was not only about Kyiv. Zelensky said Russia damaged more than 10 energy facilities and attacked energy infrastructure in 11 oblasts, leaving at least 550,000 households without electricity. In Dnipro, a morning strike damaged private houses and put an 84-year-old woman in the hospital, according to regional governor Oleksandr Hanzha. Nationwide, officials counted three killed and 53 injured over the past day, per the Kyiv Independent.

Aftermath of the October 19 morning strike on Dnipro, from ArmyInform's report on the damaged houses. Photo: ArmyInform, CC BY 4.0

The Datagroup Strike: A Data Center Gone for Good

Somewhere in those waves, a ballistic missile found the Datagroup data center. The company, which says it serves customers in more than 90 settlements, announced that the facility's equipment and infrastructure were damaged beyond recovery: "The restoration and further operation are impossible." No employees were hurt, and services are running through backup facilities.

That finality is new for a sector that had mostly reported repairable damage. The hit itself is not. In late September, Russian strikes damaged Datagroup and other Kyiv data and telecom facilities, briefly cutting internet access to roughly 100,000 households, according to Ukraine's Digital Transformation Ministry. Kyivstar's headquarters took damage in August, and the Parkovyi data center in Kyiv shut down on October 1. The government has since allocated 518.3 million hryvnias to harden backup systems for state agencies, and Zelensky pledged stronger protection for facilities critical to communications.

The Data Center War Is Now Official Policy on Both Sides

If there was any doubt about intent, Russia's own chief of the General Staff removed it. Briefing Vladimir Putin at a command post on Friday, October 16, Valery Gerasimov said strikes are being carried out on "bridges of strategic importance, railway transport facilities, and data centers used to support the needs of the Armed Forces of Ukraine," per Interfax-Russia. Russia's Defense Ministry has been cruder about it, calling its strikes on Ukrainian data centers "a forced digital detox," as Meduza reported in early October.

Ukraine answered in kind weeks ago. "They've been hitting our data centers and they still are. We hit back," Zelensky told journalists on October 8, launching the campaign that became the Yandex data center attacks: three facilities hit in four days, two forced offline. During Saturday night's thousand-drone raid on the St. Petersburg area, a VK data center and an Ozon logistics hub were hit as well. The cloud, on both sides, is now a front.

The asymmetry matters. Ukraine's providers learned distribution the hard way: Datagroup lost a building but kept its services alive on backups. Russia's tech giants concentrated capacity in flagship campuses, which is why single strikes on Yandex sites rippled through services in four other countries. But Ukraine's digital layer sits under ballistic missiles that mostly are not being intercepted, and that is a harder problem than drones.

No Warning, Few Patriots: Why the Missiles Got Through

Ihnat confirmed that no advance information was provided before the first wave, "for certain reasons," though it did come before the 3 a.m. wave. A senior Ukrainian official was blunter, telling reporters the ballistic warning "came through only after the strike had already happened." US Secretary of State Marco Rubio said he "did not know exactly" what happened and pointed to a recent software problem in Ukraine's early-warning system. The Kyiv Independent notes it is the third such gap in about a week, after October 12 and October 14, and it lands in the middle of the standoff over Ukraine's Starlink restrictions and US intelligence support.

The interceptor side is no better. In a Bloomberg interview on Sunday, Zelensky accused Washington of delaying Patriot interceptors Ukraine has already paid for through NATO's PURL mechanism: "The American side approved the delivery of only some of them, but not the rest. And this is not a technical issue." He put current supply at 12 interceptors a month, roughly a quarter of the Biden-era rate, and floated a trade: Ukraine stops hitting Russian diesel infrastructure, the United States releases the missiles. After last week's look at Ukraine's Patriot missile shortage, a 16-missile night with no reported interceptions reads less like a lapse and more like the new normal.

One number did move the right way: air defenses took down 43 of the 59 jet-powered drones overnight, a rate Ihnat called a large percentage compared with previous months. He credited "mainly weather conditions" for Russia leaning back on slower piston-engine drones this week, as rain and fog cut into jet tactics.

Air Force spokesperson Yurii Ihnat, file photo. Photo: ArmyInform, CC BY 4.0

Why It Matters

Winter 2026-27, the fifth of the full-scale war, is opening with Russia explicitly targeting two overlapping systems: the grid and the network. The playbook that produced the Kyiv blackout earlier this month now openly includes the digital layer that banking, logistics, and air-raid alerts run on. And the missiles are arriving through a seam: warning gaps on the launch side, a quarter-rate Patriot pipeline on the interception side. Those two facts, more than any single night's damage, are what Moscow is testing.

What to Watch

Whether Washington releases the held PURL interceptors, and whether launch warnings arrive before the next ballistic night. Whether Datagroup's backup capacity holds as Russia works down Gerasimov's named list of bridges, railways, and data centers. And whether Kyiv's next answer lands on another Russian cloud campus: the pattern since October 8 says it will.

The channel will be watching the next volley, in both directions. For the live feed between morning briefs, follow t.me/TheLeaflet.

Read next: Yandex Data Center Attacks: Three Strikes in Four Days Took Russia's Cloud Offline and Ukraine Patriot Missile Shortage: The Night the Ballistic Shield Ran Empty.

Want this level of analysis in your inbox? Drop your email in the subscribe box at the bottom of this page and the channel will send you the Sitrep Digest: the best of these briefs in a five minute read.

A question for the room: now that Moscow has named data centers as official military objectives, should Ukraine treat Russian civilian cloud infrastructure, Yandex, VK, Ozon, as fair-game dual-use targets, or does that trade away more than it gains? Drop your take in the comments, or tell the channel what to cover next.

Sources

Kyiv Independent (Oct 19, 2026), Kyiv Post (Oct 19, 2026, and Oct 16, 2026), Mezha, citing hromadske (Oct 19, 2026), Ukrainian Air Force via ArmyInform (Oct 19, 2026), Meduza (Oct 8, 2026), Interfax-Russia via Kyiv Post (Oct 16, 2026), Bloomberg via Kyiv Independent (Oct 19, 2026). Photos: ArmyInform and 78th Air Assault Brigade via ArmyInform, CC BY 4.0.