Amazon Confirms Irrecoverable Data Loss in UAE and Bahrain Data Centers After Drone Attacks
Amazon Web Services has confirmed the permanent loss of customer data following physical attacks on its data centers in the United Arab Emirates and Bahrain. The incidents, attributed to Iranian drone strikes, began on March 1 and extended into April and July, affecting facilities involved in artificial intelligence projects.
After six months of recovery efforts, AWS issued an official statement on September 15, 2026, acknowledging that data in certain availability zones could not be restored. The company had previously released only interim technical reports without confirming total loss.
Impact on UAE Region mec1
The UAE region consists of three zones: mec1-az1, mec1-az2, and mec1-az3. According to the AWS Health Dashboard:
- mec1-az1 sustained no physical damage and operates normally, though it faces overload issues.
- mec1-az2 was completely destroyed with no possibility of data recovery, as it lacked backups outside the zone. All customer data stored exclusively on disks in this zone is irretrievably lost.
- mec1-az3 suffered serious damage, but engineers continue attempts to recover infrastructure and surviving data.
The affected UAE project, linked to an OpenAI lease, had its contract suspended following the attacks.
Bahrain Region me-south-1 Status
In Bahrain, the situation proved more severe. All three zones — mes1-az1, mes1-az2, and mes1-az3 — that form the me-south-1 region were completely taken offline with no recovery options reported.
AWS has recommended that customers relocate workloads to other unaffected regions to mitigate further risks.
Related articles
Neuromorphic Processors Lag Behind GPUs for Large AI Models Despite Energy Advantages
Neuromorphic chips such as Intel Loihi promise major energy savings by activating only when events occur, yet data centers remain dominated by GPUs optimized for dense matrix operations in generative AI. The mismatch arises because modern large language models rely on high-precision linear algebra, massive memory bandwidth, and mature software stacks that neuromorphic architectures currently lack. Researchers are exploring spiking transformers and on-chip plasticity via mechanisms like STDP, but scaling to billions of parameters remains challenging. Companies including BrainChip, SynSense, and SpiNNaker2 have released commercial neuromorphic hardware, yet the absence of standardized tools and clear performance gains for mainstream workloads slows adoption. Hybrid approaches combining neuromorphic blocks with in-memory computing, analog circuits, and photonic accelerators may define future heterogeneous systems rather than outright replacement of GPUs.
Russia Expands Digital Birth Certificates via MAX App for Transport, Healthcare and Public Services
The Russian government has broadened the list of situations where parents can use the electronic version of a child’s birth certificate stored in the Digital ID section of the MAX service. The digital document can now be presented when buying transport tickets, claiming free or discounted travel, boarding public transport, receiving medical care under OMS, visiting MFC offices, museums, cultural and sports events, and purchasing discounted tickets. The measure also covers any other services requiring proof of a minor’s identity. Use of the QR code remains voluntary, and the paper certificate continues to be valid. The service activates gradually as organizations connect their systems, with more than 3,000 hotels already integrated.
PT AF Cloud Uses Machine Learning to Detect Shifts in Web Attack Patterns from Millions of WAF Events
Positive Technologies has detailed how its PT AF Cloud service applies anomaly detection to WAF events, turning tens of millions of daily security events into actionable weekly alerts for SOC teams. The system builds traffic profiles based on the distribution of triggered protection rules for each tenant and compares current hourly or daily profiles against a weighted historical baseline using Jensen-Shannon distance. This approach identifies meaningful changes in attack composition even when overall event volume remains stable, catching the start of scans, exploitation of newly published vulnerabilities, or post-release application changes that trigger new rules. Two detection modes operate in parallel: an hourly mode for rapid spikes and a daily mode for gradual shifts distributed across multiple hours. Alerts include comparative tables of top rules, unique attack vectors, and direct links to the relevant events in the PT AF interface. Over four weeks the detector surfaced roughly 1,100 anomalies across the cloud, with expert review confirming that 69 percent indicated either an attack or a protection misconfiguration.
How to Prepare Your Website for Data Center Outages: Business Resilience Checklist
Following strikes on Yandex data centers, many businesses discovered that their sites and all backups were stored in a single location, leading to complete outages. The article provides a detailed checklist to mitigate such risks by separating critical components across different providers. Key recommendations include moving DNS to an independent provider, lowering TTL values, maintaining a live mirror site on separate hosting, and isolating corporate email. Additional steps cover local backups, monitoring, access management, and CDN usage. The guidance differentiates between virtual hosting, VPS or dedicated servers, and website builders like Tilda, while emphasizing compliance with Russian data localization laws such as 152-FZ.