AI data centers in the UAE and Saudi Arabia have become strategic military targets amid escalating Iran-Gulf hostilities, exposing regional infrastructure to geopolitical risk
Iran's strategy to counter military might with economic pain has exposed a vulnerability in one of the world's most vital interests: AI data centers. The nation has long aimed significant firepower at its neighbors' refineries, oil exports and tourist attractions, inflicting economic havoc on the Gulf states and countries conducting business with them. Now data centers—which power the technology most crucial to the global economy's future—are becoming targets. Iran has bombarded several regional facilities with missiles and drones, while the United States has retaliated by attacking Iranian infrastructure. This marks a significant escalation: while data centers have long been targets of cyberattacks, physical military assaults are unique to 2026.
Iran and the United States have attacked at least five data centers in the Gulf region. Most notably, Iran launched a second missile strike on an Amazon data center in Bahrain in late July 2026, following an initial attack on April 30. Amazon declined to comment, but its Amazon Web Services dashboard has shown a disruption in the region since the first attack, and satellite imagery revealed extensive damage to the facility.
In the war's early stages, Iran made its intentions explicit. The Islamic Revolutionary Guard Corps published a list of 29 regional tech targets it planned to strike, including sites owned by Amazon, Google, Microsoft, Nvidia and Palantir. In a Telegram post following the July 21 attack on the Amazon data center, the Iranian regime stated it struck the facility because Amazon is a cloud provider for US military intelligence efforts. Amazon holds numerous US government contracts, including part of the $9 billion Joint Warfighting Cloud Capability project. Google, Microsoft and Oracle are also participants in that initiative.
The Gulf region's data centers hold significance far beyond military applications. The region has positioned itself as a third global AI hub, alongside the United States and China. Saudi Arabia has allocated a substantial portion of its $1 trillion sovereign wealth fund to AI investments. The UAE signed a landmark deal with the Trump administration to build Stargate, a $500 billion AI data center—the largest such project outside the United States—with partnerships from OpenAI, Oracle, Nvidia and Cisco. Combined, Bahrain, Kuwait, Oman, Qatar, Saudi Arabia and the United Arab Emirates have pledged more than $2 trillion in AI-related investments with the United States, contingent on divesting from Chinese technology equivalents.
This alignment with the United States has come with a cost: it has exposed the region's AI infrastructure to Iranian attacks. "On their face, these attacks and broader threats work to undermine confidence in what stands to be an important region for AI innovation and investment," said Helima Croft, head of global strategy at RBC Capital Markets. "They also highlight the role that these companies play in warfare and diplomacy, as well as what lengths the US is willing to go to defend them."
Data centers are not new military targets—they have been sought-after objectives for decades as militaries rely on them for command and control operations away from the frontlines. What distinguishes 2026 is the shift from cyberattacks to physical assault. The strategy works on two levels: AI has become economically critical to the United States and the Gulf region, so Iran can inflict significant damage at relatively low cost using primarily drones. Additionally, Iran can legitimately claim data centers are military targets, since they may store both military-relevant and commercially sensitive data simultaneously.
"They don't carry a sticker that says, 'Military data here!'" said Andrew Reddie, professor of public policy at the University of California, Berkeley. "Data centers could be storing military-relevant data and be used for market-oriented purposes at the same time. If you're Iran and you're looking at Amazon, it might as well have an American flag painted all over it."
The vulnerability runs deeper than geopolitics. Data centers are, fundamentally, giant warehouses filled with expensive equipment—and there is little that can be done to harden them against bombs and drones, according to Philip Wray, head of property at insurer MSIG. This structural weakness explains why data centers are designed with redundancy, typically to protect against natural disasters and cable failures, but increasingly for military attacks. When one facility is destroyed, its stored data and computing power can usually be accessed from an alternative data center.
Despite ongoing conflict, Gulf states remain financially committed to AI development. However, foreign companies may reconsider building in the region if they believe their assets cannot be adequately protected. Insurance costs for data center operations are escalating—and coverage may be difficult to secure.
"Some clients are looking at recent events and they're thinking twice about whether they move forward, and some insurers aren't comfortable taking on certain risks," said Joe Macejak, US property digital infrastructure leader at insurance brokerage Marsh. Even when coverage is available, tech companies cannot transfer all risk to insurers. With chips, building supplies, labor and other associated costs already skyrocketing as data center demand surges, companies face substantial financial exposure—especially when their facilities have become military targets.