How War Is Damaging the Middle East's Data Centre Ambitions
7 min read
For the past several years, the Gulf Cooperation Council had been building one of the most ambitious digital infrastructure programmes on the planet. Sovereign wealth, cheap and abundant energy, strategic geography, and a pipeline of hyperscaler commitments had together produced a growth trajectory that was the envy of every data centre market in the world. The GCC data centre market was valued at approximately US$3.5 billion in 2024 and projected to nearly triple to US$9.5 billion by 2030. The UAE alone hosted roughly 35 operational data centres, with more than 40% classed as large-scale facilities housing up to 5,000 servers — many purpose-built to support enterprise-grade AI and cloud workloads from OpenAI, Microsoft, and Amazon. Then, on 28 February 2026, everything changed.
The Strikes That Changed the Calculus
In early March 2026, coordinated drone strikes — claimed by Iran's Islamic Revolutionary Guard Corps as retaliation for US-Israeli military action — hit three Amazon Web Services data centres across the UAE and Bahrain. Two hyperscale facilities in the UAE suffered direct hits; a third in Bahrain sustained heavy collateral damage from a nearby blast. Power was cut to multiple availability zones. Fires broke out. Water damage followed. Engineers described the recovery work as "prolonged." AWS confirmed the incidents. Availability zones helped limit service disruption by allowing workloads to shift to other sites — but could not fully cushion the impact when multiple facilities were simultaneously disabled.
The IRGC stated that the attacks were aimed at identifying the role of these sites in "supporting the enemy's military and intelligence activities" — a framing that recast hyperscale commercial cloud infrastructure not as neutral civilian digital utility, but as a node in military and intelligence operations. Analysts described the strikes as potentially among the first known direct physical attacks on commercial data centres in modern conflict — a threshold event that the industry and policymakers had long theorised about but never previously confronted in practice.
"Iran and proxies have targeted oil fields in the past, but their attacks this week on UAE data centres shows they are now considered critical infrastructure."
— Patrick J. Murphy, Executive Director, Geopolitical Unit, Hilco Global
Soft Targets: The Structural Vulnerability of Hyperscale Infrastructure
The attacks exposed a fundamental tension in how hyperscale data centres have historically been secured. Physical security measures at most facilities — high fencing, controlled access points, perimeter cameras — have been calibrated against ground-level threats: espionage, sabotage, unauthorised access. They were never designed for aerial attack. Data centres are sprawling, highly visible complexes with exposed critical dependencies — cooling units, diesel generators, gas turbines — that can be disabled without a direct hit on the server halls themselves. As one analyst noted, disabling the chillers alone is sufficient to take a facility fully offline.
Hardened alternatives exist — underground, nuclear-hardened bunkers — but at a significant cost premium. Building such a facility in the US runs at more than $2,000 per square foot, roughly twice the cost of constructing a standard above-ground facility. At the average scale of a hyperscale data centre — the footprint of a Manhattan city block — a properly hardened underground shelter could cost upwards of $200 million before energy, cooling, and server infrastructure are factored in. Constructing in the Middle East, depending on terrain, can be materially more expensive. The economics of hardening at that scale are simply not compatible with the margins and timelines on which commercial data centre investment is underwritten.
"If we're going to have large-scale data centres built out in the Middle East, we're going to have to get pretty serious about how we protect them."
— James Shires, Co-Director, Virtual Routes (UK think tank)
The Energy Threat: A Second Front for Gulf AI Ambitions
The drone strikes on data centres were not the only blow to the Gulf's digital infrastructure calculus. The Iran-US-Israel conflict simultaneously disrupted shipping lanes through the Strait of Hormuz and damaged critical energy assets across the region, forcing producers to suspend exports and threatening approximately 20% of global crude oil and gas flows. Brent crude prices surged as fears of extended instability mounted.
This matters acutely for data centre economics in the Gulf. The region's competitive advantage in attracting hyperscaler investment has always rested on a specific assumption: that electricity costs would remain near US$0.05 per kWh — a rate that gave Gulf operators a decisive edge over Western counterparts. Hydrocarbon-driven revenues have historically sustained that cost base, enabling the ambitious AI campus programmes that made the UAE and Saudi Arabia the most attractive data centre markets outside the United States and Europe. With geopolitical pressure now threatening both energy stability and investor confidence, that foundational assumption is significantly weakened. The proposed 5GW AI campus on the outskirts of Abu Dhabi — touted as potentially the world's largest dedicated AI complex and a cornerstone of Gulf sovereign compute ambitions — now sits under a geopolitical cloud it was not designed to weather.
Investment Pause: Who Is Reconsidering and Who Is Holding
The investment response to the strikes has been differentiated. Some operators have signalled a definitive pause. Gary Wojtaszek, chairman and interim CEO of Pure Data Centre Group — which holds operational data centres in Riyadh and Abu Dhabi and had been planning further Middle East expansion — described the situation plainly: until the prior week, the Middle East had been an enthusiastic "yes" in every site selection conversation. After the strikes, the answer became "maybe we'll slow down here." Other major commitments are now under formal reassessment:
- AWS Saudi Arabia commitment ($5.3 billion) — A major investment commitment to build a new data centre region in Saudi Arabia, originally planned for delivery in 2026, now faces significant uncertainty and a mandatory security reassessment.
- Stargate UAE ($500 billion, G42-Microsoft-OpenAI) — The landmark Abu Dhabi AI campus, generated from US President Trump's regional tour last May which produced more than $2 trillion in investment pledges, is under review. Given the huge sunk costs already committed — power contracts, land agreements, fibre connectivity — full relocation of built capacity is considered economically irrational. But future phases face a materially different risk calculation.
- Brookfield Asset Management ($20 billion, Qatar) — In contrast to the pause elsewhere, Brookfield confirmed its $20 billion data centre partnership with the Qatar Investment Authority will proceed — signalling that long-term institutional capital may be willing to tolerate the new risk environment, particularly in Qatar which sits outside the immediate conflict geography, though with significantly revised calculations.
The news of the AWS strikes in March 2026 contributed to a measurable market reaction, with the Dow and Nasdaq falling by 2% as investors reacted to the direct impact on major US technology assets — a signal that the conflict's implications for digital infrastructure are no longer a regional concern but a systemic one for global technology markets.
"Investment in data centres is designed with a very long time frame, and any event like this increases the risk of that investment. It really puts into jeopardy the cloud and AI strategies of the Gulf economy in a really worrying way."
— James Shires, Co-Director, Virtual Routes
Policy Response: From Site Security to National Defence Frameworks
The policy implications of the strikes are being processed rapidly — and they extend well beyond the Middle East. James Shires has proposed that governments consider extending dome-style missile defence systems to cover major data centres, mirroring Israel's Iron Dome model for protecting critical national assets. The US is already exploring the possibility of a national shield — dubbed the "Golden Dome" by President Trump — intended to intercept drones and advanced missiles at national scale, though no major contracts have yet been awarded.
Analysts have also highlighted an acute legal gap. Under the century-old Cuba Submarine precedent, private sector claims against state belligerents for infrastructure damage in conflict zones are highly unlikely to succeed. Standard commercial property and business interruption insurance policies frequently exclude acts of war, meaning operators hit by state-sponsored drone strikes may find themselves with no legal recourse and no insurance protection. The cloud has become, in the words of one legal analyst, the modern telegraph cable — critical infrastructure that sits outside both the protections and the compensation frameworks that govern conflict damage to conventional assets. More broadly, the attacks are expected to drive the formal reclassification of major data centres as critical national infrastructure — putting them alongside energy facilities, telecoms networks, water treatment plants, and transportation hubs in national security planning frameworks.
Where Does the Workload Go? India's Moment — and Its Limitations
The question of alternative geographies is gaining momentum. India has emerged as the most-discussed candidate for workload diversification — particularly for hyperscalers and enterprises with a strong Asia-Pacific footprint. The country's data centre market has genuine structural advantages: a large domestic technology talent pool, rapidly expanding capacity with projections of 4–5GW by 2030, recent regulatory progress, and a geopolitical risk profile materially different from the Gulf. The India AI Impact Summit 2026 drew significant international attention and underscored the country's rising stature in the global AI infrastructure conversation.
But India's candidacy for large-scale workload migration is constrained by real structural challenges. Power grid reliability at hyperscale remains the central concern — India's grid is improving but still unreliable in ways that matter acutely for facilities that require five-nines uptime. Diesel backup at the required scale is expensive, polluting, and increasingly incompatible with ESG commitments. Regulatory unpredictability — a draft National Data Centre Policy that remains exactly that, a draft — adds further complexity. And while India's geopolitical risk profile is lower than the Gulf's current exposure, it is not zero: the India-Pakistan dynamic and unresolved India-China border tensions are permanent features that underwrite-level scenario planning must account for.
The broader industry consensus is that the Gulf is not finished as a digital infrastructure market — sovereign capital and sovereign ambition will ensure it is not. But the calculus of where to place workloads has permanently changed. Cloud infrastructure that hosts government data, military contractor workloads, or critical national services is now demonstrably at the mercy of armed conflict — regardless of whether its operators intended it to be. Physical attacks on data centres, analysts warn, are not a one-off event. They are a harbinger of what is to come as AI becomes increasingly significant to military and intelligence operations — and will not be limited to the Middle East.
Key Takeaways
- IRGC drone strikes on 28 February 2026 hit three AWS data centres in the UAE and Bahrain — potentially the first known direct physical attacks on commercial hyperscale facilities in modern conflict — triggering fires, power outages, and prolonged recovery work.
- The UAE's data centre market, projected to grow from $3.29 billion to $7.7 billion by 2031, and the broader GCC market on track for nearly triple growth to $9.5 billion by 2030, now face a materially altered risk and investment environment.
- Energy cost stability — the Gulf's primary competitive advantage at ~US$0.05/kWh — is under threat as the conflict disrupts Strait of Hormuz shipping lanes and damages critical energy assets, threatening approximately 20% of global crude and gas flows.
- AWS's $5.3 billion Saudi Arabia commitment faces security reassessment; Pure Data Centre Group is slowing regional expansion; Brookfield's $20 billion Qatar partnership is proceeding — but all future Gulf data centre investment now operates under a fundamentally different risk model.
- Policy responses under discussion include dome-style missile defence coverage for major data centres, formal reclassification as critical national infrastructure, and the urgent need for specialised war risk insurance and explicit military disruption clauses in cloud service contracts.