Russia-Ukraine War Update: Strikes, Infrastructure Damage and Business Risk from 26 September to 2 October 2026

What happened in the Russia-Ukraine war from 26 September to 2 October?

Across the week covered by this Russia-Ukraine war update, Russia reportedly launched drones and missiles at Ukraine every day, striking energy, telecommunications, railway, port, residential and civilian infrastructure in multiple regions. Overnight drone launches were reported at 173 on 26 September, 170 on 27 September, 152 on 29 September (alongside missiles), 107 on 1 October and 108 on 2 October, while about 285 drones and ballistic missiles were used in a single coordinated attack on 30 September. Ukraine reported destroying or suppressing 88 of the 108 drones launched overnight on 2 October, with impacts at 11 locations. Ukrainian forces meanwhile struck Russian oil, drone, logistics and military targets and reported gains near Lyman, including under Operation Vivaldi. The picture is one of sustained daily pressure rather than a single escalation.

Which parts of Ukraine’s infrastructure are being hit hardest?

Energy, telecommunications and transport networks took the most sustained damage. On 30 September, Russia reportedly used about 285 drones and ballistic missiles in one of its heaviest recent coordinated attacks on Ukraine’s energy infrastructure, causing seven casualties, widespread electricity and water disruptions and emergency restrictions in Kyiv; a drone also struck the Institute for Nuclear Research in Kyiv without damaging the reactor or causing abnormal radiation levels. On 29 September, a combined overnight attack of missiles and 152 drones, followed by 112 more drones during the day, damaged railway, energy, telecommunications and port infrastructure. On 28 September, strikes on Kyiv, Dnipro and other regions hit scientific, commercial, medical and communications sites, causing at least nine casualties and more than 80 injuries. On 27 September, facilities linked to Kyivstar and Ukrainian data centres were struck, and internet disruptions affected tens of thousands of households. Kyiv’s Southern Bridge was damaged on 1 October, and strikes continued to disrupt Dnipro River crossings in the capital on 2 October.

How are Ukrainian strikes on Russia affecting the conflict?

Ukrainian forces continued long-range strikes on Russian territory throughout the week. On 26 September they reportedly hit the Ilsky Oil Refinery in Krasnodar Krai along with fuel, railway, industrial and air defence sites, and the wider Krasnodar attack resulted in three civilian casualties and two injuries. On 29 September, strikes reportedly targeted drone control points, ammunition facilities, logistics sites, radar systems and naval assets in occupied Luhansk, Donetsk, Zaporizhzhia and Crimea. On 1 October, President Volodymyr Zelensky announced the first combat use of Ukraine’s domestically developed FP 07 tactical ballistic missile, while Ukrainian forces also struck oil, drone and logistics infrastructure in Samara, Oryol and Bryansk oblasts and the Black Sea. On 2 October, Ukrainian drones targeted industrial and oil infrastructure in Volgograd. These strikes could aggravate fuel shortages, disrupt military supply chains and reduce Russia’s operational capacity.

What are the business continuity risks?

The principal risk to organisations is loss of basic services and mobility rather than damage to any single site. Russian missile and drone attacks could cause further civilian casualties and disrupt electricity, water, telecommunications and transport services across Ukraine, as the Kyiv outages and internet disruptions of the past week show. Unforeseen airport closures or airspace restrictions cannot be ruled out. Heightened military activity near nuclear facilities could prompt precautionary restrictions and increase operational concerns, although a radiological incident remains unlikely. Additional civilian displacement from affected areas could add pressure on accommodation, transport and public services. Beyond Ukraine, Russian weapons entering Moldovan and Romanian territory raise the risk of cross-border damage and unintended escalation involving Moldova or the North Atlantic Treaty Organization, and Estonia has formally attributed an earlier arson attack on defence manufacturer Milrem Robotics to Russian-linked actors.

What should organisations and individuals do to prepare?

Organisations should monitor official platforms for real-time updates, namely the Government of Ukraine (kmu.gov.ua), the State Emergency Service of Ukraine (dsns.gov.ua), the Ministry of Foreign Affairs of the Russian Federation (mid.ru) and the Ministry of Emergency Situations of the Russian Federation (en.mchs.gov.ru). Staff should identify the nearest functioning shelter, move indoors immediately when air raid warnings activate, and avoid windows, exterior walls and open areas until authorities issue an all clear. Teams should allow additional travel time and maintain alternative routes, given checkpoints, emergency closures, unexploded ordnance, damaged infrastructure and sudden security restrictions. Non-essential movement should be restricted during active missile or drone attacks, and individuals should avoid photographing or publishing the locations of Ukrainian military units, air defence systems or strike sites.

Frequently asked questions

What was the largest Russian attack on Ukraine between 26 September and 2 October?

On 30 September, Russia reportedly used about 285 drones and ballistic missiles in one of its heaviest recent coordinated attacks on Ukraine’s energy infrastructure, causing seven casualties and widespread power and water disruption.

Is there a risk of nuclear or cross-border spillover?

A drone struck Kyiv’s Institute for Nuclear Research on 30 September without damaging the reactor or raising radiation levels, and a radiological incident remains unlikely. Russian weapons entering Moldova and Romania do raise cross-border risk.

What are the emergency contact numbers in Ukraine?

Unified emergency services: 112. Fire and rescue services: 101. Police: 102. For real-time updates, monitor the Government of Ukraine (kmu.gov.ua) and the State Emergency Service of Ukraine (dsns.gov.ua).

Download the full Risk Flash now

datasurfr’s Risk Flash carries the complete day-by-day log behind this Russia-Ukraine war update, the front-line map from Understanding War, the full impact assessment and the recommendations. Download the full Risk Flash now to brief your security and continuity teams.

Filed under: EMEARegional Risk Reviews

← Back to the listing

See why global leaders trust Datasurfr.

A walkthrough tailored to your industry and threat profile.