Reports circulating on social media tied strikes on Yandex infrastructure to claims — none of them independently confirmed — that online accounts linked to Donald Trump had gone dormant during the period those Russian data centres were offline. No verified link has been drawn between those accounts and the attacks, even as the label "Operation Quiet Piggy" has travelled alongside the theory.
The visual evidence cited to support those claims actually measures automated web traffic connected to Yandex's server infrastructure — a distinction that separates the two sets of claims. Neither the posting volume of those accounts nor the identities behind them are tracked, and no link to Russian influence operations has been established.
Online content mixing fire footage with commentary drew a connection between Russian infrastructure and efforts to amplify pro-Trump activity across digital platforms. Pointing to a noticeable drop in political content, a portion of platform members concluded that certain accounts were either running on automation or being controlled from Russia. The designation "Operation Quiet Piggy" circulated through the public conversation taking shape around the case.
The designation does not correspond to any name formally announced in connection with the strikes on Ukraine. Those posts reflect the personal viewpoints and individual readings of the people who wrote them — no independently verified count of dormant accounts supports what they describe.
Proving that such a shift took place would depend on data tied to individual accounts, measured against patterns of activity from both before and after the attacks. Reduced activity on a single platform's network does not, by itself, establish that politically aligned voices across other services were absent or suppressed. Matching political vocabulary between two accounts does not, on its own, identify who controls either one.
At the Warsaw Security Forum, Ukrainian President Volodymyr Zelensky introduced the wider theory into the political conversation through a formal address. The official English transcript records him stating that once Ukrainian strikes hit Yandex's data centres, breathing room across numerous social media platforms opened up noticeably. His contention was that a drop in bot activity had left the platform with noticeably less hostility and fewer attempts to provoke users. The shift in those bots' behaviour, he added, pointed toward their point of origin.
The passage attributed to Zelensky contained no references to MAGA, Elon Musk, or the US midterm elections. His remarks covered a reported decline in automated hostile activity — a narrower claim than any confirmed change in how American political accounts were actually operating.
Those findings have drawn scrutiny from researchers who study the spread of false information, with the supporting evidence for the wider assertion remaining a point of contention. Damage to Yandex's infrastructure has been documented, yet whether that damage translated into any disruption of clandestine social-media activity remains unverified.
A drone attack on 8 October brought work at Yandex's Sasovo site in Ryazan Oblast to a standstill, according to a statement from the company. One strike that followed left the installation in the Kaluga region only partially operational. Overnight on 11 October, a further drone strike left the facility inoperable, forcing a full halt to operations at the Vladimir region data centre. Taken together, those events document interruptions to Yandex's network operations and service availability.
No indication is given of which outside accounts, if any, relied on the compromised infrastructure. Coverage of the strikes and coverage of the alleged disappearance of political bots address two distinct sets of questions. The matter rests on two separate foundations: one involving harm the company has already accepted responsibility for, and another that hinges on documentary evidence about how particular digital operations were structured and managed.
Cloudflare Radar figures, referenced in those circulating posts, pointed to a drop in bot-generated traffic originating from Yandex infrastructure. Figures from one source placed visitor numbers at roughly 0.4% of the fortnight-high watermark, while a separate assessment put the drop against late-September volumes at around 94%. Each figure draws on a distinct baseline, making direct comparisons between them unreliable. Across both studies, no matching drop in activity from political accounts was found.
Among the automated requests a website receives, those originating from search-engine crawlers scanning and indexing pages represent a recognised and purposeful form of non-human traffic. In this context, the phrase "bot traffic" refers to something broader than accounts spreading propaganda, engaging with politicians, or boosting partisan content.
Antibot4navalny, an organisation that monitors automated online accounts, raised a methodological point about the Cloudflare chart: its data reflected website traffic flows rather than behaviour on social-media networks. Analysts in that community cautioned against treating the data as proof that influence operations tied to the Kremlin had tapered off.
Yevhen Luzan, an analyst at the Ukrainian nonprofit CAT-UA, drew on a broader dataset of around 10,000 daily mentions to argue that posting volumes had held steady over recent days, adding that any hypothetical fall in bot farm activity would be absorbed entirely by the natural fluctuations already present in the information environment.
Worries about interference in elections were among the topics that delegates brought to the table at the Warsaw Security Forum. Lithuania's prime minister put forward the notion of requesting Ukrainian forces to target additional Russian data infrastructure as part of broader talks among allies on safeguarding their electoral processes.
Among the infrastructure available to hidden influence networks are home-based internet connections, hijacked end-user devices, virtual private networks, and hosting services operated by Western technology firms. Reduced activity across Yandex's network does not, on its own, amount to proof that those operations had ceased. No evidence has emerged to support the assertion that accounts backing Trump went quiet as a direct result of the strikes.
