Mostransavto Shuts Down Online Ticket Sales After Attack on Yandex Data Center

On 8 October 2026, Moscow Oblast carrier Mostransavto announced that its online ticket sales services were temporarily unavailable. The company named an outage at a Yandex data center as the cause. According to TAdviser, the outage is linked to an attack by Ukraine. The carrier is under the authority of the Ministry of Transport and Road Infrastructure of Moscow Oblast. While the problems are being fixed, passengers pay for travel in person at boarding.

What is known so far

The company's statement indicates that the online services failed, meaning the digital channel for buying tickets. The transport service itself has not been halted. Passengers were offered two ways to pay: fixed validators in the vehicles and mobile terminals. In the carrier's wording, the issue is an outage at a data center. The attack version rests on TAdviser's headline and framing; in the available portion of Mostransavto's statement, the details of the incident are not disclosed.

The publicly available part of the material leaves out several important points: how long the outage lasted, what share of sales went through online channels, whether one data center or several were affected, and what recovery time Yandex and the carrier have given.

• Date of the announcement: 8 October 2026.
• Affected service: Mostransavto online ticket sales.
• Service owner: a body under the Moscow Oblast Ministry of Transport.
• Stated cause: an outage at a Yandex data center.
• Temporary measure: payment at boarding via validators in the vehicles and mobile terminals.
• Not disclosed: duration, scale, recovery time.

Why a single data center halted sales

The mechanism is straightforward. Selling a ticket online depends on a chain: a website or app, a payment gateway, an order database, a verification service. If that chain sits in a single external data center, its failure takes down the entire digital channel at once. Mostransavto's statement suggests that is exactly what happened.

Notably, the offline layer held up. Validators in the vehicles and terminals carried by staff kept accepting payment, and the carrier quickly switched passengers over to them. It is a sound fallback, but not a replacement for the primary channel. Paying in person lengthens boarding time, and passengers lose the convenience of buying online.

For the market, a different point matters. The data centers of large Russian IT companies host both commercial services and regional transport infrastructure. When a data center falls into a zone of physical or cyber risk, the consequences hit not only the facility's owner but also every customer that has no backup site.

What operators of city services should check

The incident yields a short checklist for any organization that sells online or takes payment for services:

1. Map your dependencies: which services physically run in which data center, and with which provider. 2. Set a recovery time objective for each service in advance, and test it with drills. 3. Spread critical components across independent sites, not just across racks within a single building. 4. Document an offline mode: who accepts payment, how the data is reconciled afterward, and what the passenger sees. 5. Prepare a template for urgent passenger notifications so that the outage message goes out within the first minutes.

It is not yet known how quickly Mostransavto's services will come back online. The answer will show whether the carrier had a full redundancy plan or only an offline safety net.