Attacks on Russian technology company Yandex’s data centres have disrupted taxi-booking services in Belgrade, exposing Serbia’s reliance on foreign digital infrastructure and highlighting the operational risks associated with concentrated technology providers.
Yandex Go, one of the capital’s leading taxi-booking platforms, confirmed that services in Serbia were being gradually restored following technical problems linked to attacks on its Russian infrastructure. Passengers reported failed bookings, inaccurate vehicle locations, unexpected route changes and extended waiting times. Some users were unable to arrange transport despite receiving initial booking confirmations.
The disruption affected a platform connecting approximately 4,000 vehicles and accounting for more than 80% of Belgrade’s taxi-booking market, according to estimates from Serbian taxi associations. These figures are industry estimates rather than independently verified market data.
Russian Infrastructure Damage Disrupts Serbian Operations
Yandex confirmed that its Sasovo data centre suffered severe damage in an attack and was subsequently shut down. Another facility in Kaluga was damaged, while further attacks affected computing infrastructure in the Vladimir region. The incidents disrupted several Yandex services, including transportation platforms, cloud computing, payments and applications used by commercial customers.
Although the attacks occurred in Russia, their effects extended to markets where Yandex provides digital services supported by computing resources distributed across multiple countries. The company explained that complex applications rely on processing systems in different locations. When one facility becomes unavailable, workloads must be redirected to alternative servers, potentially interrupting application functions even when the service remains accessible.
Geographical distribution alone does not guarantee operational resilience. Applications may depend on shared databases, authentication services, routing systems or other components that cannot be replaced immediately. The precise architecture of Yandex Go’s Serbian operations has not been publicly disclosed, so the disruption does not establish whether the company lacked adequate redundancy or which specific systems caused the failures.
Taxi Market Concentration Amplifies Business Risks
Belgrade’s taxi sector illustrates how a technology outage can affect a wider commercial network. According to the Serbian taxi associations’ alliance, Yandex has become the dominant application connecting passengers with taxi operators in the capital.
The platform’s reported network of 4,000 vehicles represents a substantial share of local transport capacity. When booking systems become unreliable, passengers and drivers can simultaneously lose access to an established channel for matching available vehicles with demand. For taxi operators, potential consequences include lost journeys, lower vehicle utilisation, longer empty trips and reduced daily revenue. Passengers face additional waiting times, while businesses dependent on scheduled transport may encounter delays.
The overall economic impact remains unquantified because verified figures on cancelled journeys, affected transactions and lost operator income have not been published.
Alternative applications and telephone bookings provide other ways to arrange transport, reducing the likelihood of a complete shutdown. However, the disruption highlights the risks of channelling a large proportion of commercial demand through a single digital intermediary. The issue also has implications for EXPO 2027, as passenger transport, hospitality, logistics and digital-service reliability will be important to Belgrade’s capacity to accommodate international visitors.
Banks and Companies Face Third-Party Technology Risks
The incident raises broader questions about how Serbian businesses manage outsourced digital infrastructure. Banks, payment providers, telecommunications operators, logistics companies and industrial businesses increasingly rely on external platforms for cloud computing, enterprise software, customer management, authentication, payment processing, data storage and industrial monitoring. A failure at a major technology provider can affect multiple customers simultaneously, even when those businesses maintain their own cybersecurity controls.
For financial institutions, key considerations include service availability, supplier concentration, third-party access controls, data recovery and business continuity. The Yandex disruption does not establish that Serbian banking systems were directly affected, but it illustrates the risks associated with essential outsourced services. Conventional IT risk assessments often focus on cyberattacks, unauthorised access and data theft. Physical destruction of computing infrastructure presents a different threat: even when customer data remain intact, inaccessible applications, databases or transaction-processing systems can cause substantial business losses.
Continuity planning therefore needs to address not only information security but also the availability of infrastructure required to operate essential services. The exposure may also be relevant to corporate credit assessments. Manufacturers dependent on cloud-based operating systems and logistics companies reliant on individual digital platforms can face significant interruption risks that may not be readily apparent in their financial statements.
Data-Centre Capacity and Redundancy Gain Importance
The disruption highlights the commercial relevance of resilient digital infrastructure, including Serbian data-centre capacity, alternative cloud providers and geographically independent backup systems. Establishing servers in Serbia would not, by itself, eliminate these risks. Resilience depends on whether critical applications can continue operating if an entire facility, cloud region or technology provider becomes unavailable.
Businesses need to evaluate geographical redundancy, independent connectivity, backup integrity, recovery procedures and the ability to transfer workloads between providers. For data-centre developers and telecommunications operators, these requirements could create opportunities in disaster-recovery facilities, secure hosting, dedicated corporate infrastructure and managed business-continuity services. Financial institutions may also encounter growing demand for investment financing related to digital redundancy and operational resilience.
No Serbian data-centre investment has been confirmed as a direct response to the Yandex disruption. For individual companies, the financial decision involves weighing the recurring cost of additional protection against potential business-interruption losses. Enterprises with high transaction volumes, critical industrial systems or contractual service obligations may have a commercial justification for maintaining alternative infrastructure.
Cross-Border Digital Infrastructure Becomes a Security Concern
Serbia’s exposure to international infrastructure disruptions extends beyond imported energy and physical transport corridors. Digital platforms and computing services have become another source of cross-border dependency, often operating beyond the immediate visibility of their domestic customers. Businesses may use locally accessible applications without knowing where the underlying processing systems are located or how operations would continue if those systems became unavailable.
For regulators, banks and corporate investors, the challenge is to identify essential digital services, assess the concentration of technology suppliers and determine whether credible alternatives are available. The disruption highlights the importance of ensuring that critical digital services can withstand major failures beyond Serbia’s borders without exposing domestic companies to disproportionate operational and financial losses.
