Kaspersky Global Outage: VPN, My Kaspersky and Activation Failures—No Proven Yandex Link

What actually broke​

Kaspersky's support forum notice described technical issues affecting several services. Access to My Kaspersky and some features in Kaspersky VPN, Safe Kids and Password Manager could be limited or unavailable. License activation could be delayed for licenses bought on or after October 10. Kaspersky's Russian-language channel added PetKa to the list of affected services.

Kaspersky's official wording, as posted in its forum, drew a line between two categories:

• Local protection: Protection features continued to operate normally, antivirus databases were updated as usual, and user data was not affected.
• Cloud and account functions: VPN connections, activation of new purchases, My Kaspersky access, and device and password synchronization were impaired.

German outlet heise reported that affected users were seeing missing updates, and another forum post it cited said the same. That conflicts with Kaspersky's own statement. Kaspersky's Telegram channel repeated that installed Standard, Plus and Premium protection kept running and updating without interruption. That is the company's claim, and I have no independent test of it. If you saw an update problem, it was not the typical experience Kaspersky described.

Timeline of the outage and recovery​

• Sunday, October 11: A forum thread titled "VPN not working on any of my devices since October 11" was opened. The poster said they could not connect to the VPN on either their PC or their phone from early that Sunday morning. Complaints later came in from many countries, according to TechRadar. These are user reports, not a measured outage map.
• October 12: Kaspersky acknowledged the problem publicly. German outlet Computerhilfen reported that Kaspersky warned users against logging out of My Kaspersky in the app or deleting the app. Activation problems could leave users locked out of the apps, so this was sensible advice.
• October 13–14: Günter Born wrote that services appeared to be coming back on October 14. Kaspersky's October 14 update said new purchases were activating normally. It also said Password Manager, Who Calls and Secure Connection were working and My Kaspersky was back. Safe Kids was still being tuned and PetKa was under restoration.
• October 16: Kaspersky said all listed services were working and subscriptions were activating normally.

Compensation was promised. Kaspersky said subscriptions to the affected apps would be extended automatically once normal operation returned. Kaspersky said users did not need to open support tickets. Business users were pointed to separate B2B support, and the public notice covered consumer products.

Is Yandex the culprit?​

The Yandex side is well documented. Yandex's own statement said its Sasovo data center was seriously damaged in a drone attack on the night of October 7 to 8 and was completely shut down. A second site, in Kaluga, was hit on the morning of October 9, with part of its infrastructure out of service. TechRadar reported that Yandex's Vladimir facility went down overnight into October 11. That is secondary-source reporting, and the Habr power-failure timestamps it relies on are not independently confirmed.

The Kaspersky link is not documented. Three points argue for caution:

1. No confirmed dependency. WinFuture said a direct connection between the Yandex attacks and Kaspersky's server problems is not officially confirmed. Kaspersky blamed "technical issues" and named no cause.
2. Kaspersky's stated architecture points elsewhere. Kaspersky said in 2020 that it had moved processing of threat data from Europe, North America and some Asia-Pacific countries to Switzerland. That claim concerns threat-data processing. It does not show where the VPN, activation or account backends run.
3. Timing alone is weak evidence. Heise called the coincidence striking but had no confirmation. Born said he had no hard proof. Yandex's outage also took down many unrelated Russian services, so a coincidence is possible.

It would be easy to say this proves Kaspersky runs on Yandex Cloud. The evidence does not support that. The open question is reasonable, and I will not claim more than that.

Correcting the viral claims​

TechRadar reported that a commentator called the antivirus "practically dead" for European users. He said database updates were failing and that the password manager and its contents were gone. Kaspersky's statements contradict those points:

• Antivirus and updates: Kaspersky said installed protection kept running and updating. The heise report of missing updates is one dissenting user account, not an official finding.
• Password vault: Users reported they could not log into the password manager or the VPN service. However, Kaspersky's Russian-language post said passwords and other data are stored locally on users' devices. It said they would sync between devices once the service was fully restored. This is the difference between losing sync or sign-in and losing the vault. I could not verify this by independent testing.
• Europe-only framing: WinFuture described the disruptions as worldwide. That matches the spread of forum reports from several continents.

Practical takeaways for Windows users​

• Do not panic-uninstall. During an activation outage, removing or reinstalling an app can leave you unable to get it working again. Born's comment section included a reader who reinstalled on a support agent's advice and said it changed nothing.
• Keep an offline copy of critical credentials. If you rely on any synced password manager, make sure you have a recent local or exported backup, stored securely. A sign-in or sync failure should never leave you locked out of your own accounts.
• Do not make the VPN a single point of failure. If you depend on a VPN for work, have a second client or provider configured. The outage showed that a consumer VPN can disappear for days with no workaround.
• Separate endpoint protection from account services. A local antivirus engine can keep working through a cloud failure. Features that need sign-in, licensing or sync cannot.
• Admins: Check whether your deployment is consumer or business, since only consumer products were named. Also check whether any of your controls require a vendor-side backend to function.

The bottom line​

The outage was real, global and temporary. Kaspersky restored services in stages and said everything was working by October 16. The geopolitical story is a hypothesis built on timing. Until Kaspersky or a technical analysis explains the failure, call it a coincidence of dates and an open question about hosting. The lasting lesson for Windows users is to avoid putting every security function behind one vendor's cloud login.