Shooting at the Cloud: When the Islamic Republic Mistakes a Data Center for a Billboard

The Islamic Revolutionary Guard Corps (IRGC) has published another list of enemies. This time, it includes Google, Apple, Microsoft, Nvidia, Meta, Oracle, and several other American companies. The threat follows a familiar script: if the Islamic Republic’s leaders are targeted, these companies’ infrastructure in the Middle East will become “legitimate targets,” the IRGC warned.

Several military officials and institutions have repeated the threats. Ebrahim Zolfaghari, spokesperson for the Khatam al-Anbiya military headquarters, singled out the Stargate project in Abu Dhabi in a televised statement. Mohsen Rezaei also spoke of destroying the region’s data centers, AI facilities, and communications cables.

The division of labor in the Islamic Republic is familiar enough: one official makes the threat, another justifies it, and the diplomatic corps later tries to dress it up in a tie and enough legal language to make it marketable.

There is a real danger behind the bluster. Data centers are physical buildings, and they can be attacked. The sleight of hand comes when damage to a building is presented as the destruction of a technology company’s global network.

There Are Data Centers in the Gulf. Not Every Corporate Office Is One.

Major technology companies operate infrastructure across the Gulf. Microsoft provides cloud services in Dubai and Abu Dhabi. Google Cloud has cloud regions in Doha and Dammam and operates network connection points in Dubai and Fujairah. Amazon and Oracle also operate in the region. The Stargate project in Abu Dhabi is intended to add substantial AI computing capacity.

These facilities serve different purposes. A sales office, a network connection point, and a cluster of data centers do not perform the same function. Damaging each would have different consequences.

That makes Apple’s inclusion in such a list look rather like sticking a famous brand on a war poster. Apple has a commercial presence in the region, but publicly available information does not establish that it operates a large data center in the UAE comparable to Microsoft’s or Amazon’s cloud infrastructure.

Such distinctions apparently carry little weight in the IRGC’s propaganda machinery. If the logo is American, it is enough for a threatening Telegram post.

A Missile Can Reach a Data Center

The ability to attack should not be dismissed. The UAE, Bahrain, and Qatar are within range of the Islamic Republic’s missiles and drones. The vulnerability of data centers is more than a theoretical concern.

In March 2026, Amazon confirmed that two AWS facilities in the UAE had been directly struck, while another facility in Bahrain was damaged by a nearby drone impact. The attacks caused physical damage, power outages, and service disruptions.

A government capable of flying a drone into a building across the Gulf can damage a data center. That does not establish that it can destroy American technology companies’ digital infrastructure.

Large cloud services do not depend on a single building. A cloud region can contain several separate availability zones, each with its own physical infrastructure. Depending on how a service is designed, data and computing workloads can also be distributed across multiple facilities, cities, or countries.

This architecture does not make cloud services invulnerable. Backups and the ability to move services elsewhere also depend on the customer’s choices and preparation. Buying cloud services does not automatically activate every safeguard. An attack on one facility can cause prolonged outages, substantial financial losses, and even the loss of data that has not been backed up.

Serious as those consequences are, they remain different from destroying a global company’s entire network. Following the AWS attacks, the Associated Press reported that, despite physical damage, the disruptions remained largely regional.

The IRGC can wound a data center. Destroying “Google” or “Microsoft” belongs alongside the slogans whose political shelf life has long exceeded the range of its missiles.

The Missile Lands on a Neighbor’s Territory

Suppose the IRGC has the coordinates of a data center in the UAE, gets through air defenses, and hits the building precisely. What happens next?

The building stands on Emirati territory. Its electricity, land, workforce, and some of its investment belong to that country. Its customers are not exclusively American companies or institutions. Local banks, hospitals, airlines, retailers, and public bodies also use its services.

An American logo on the building does not keep the consequences of an attack within American borders. Disrupting that facility can interrupt everyday services in the very country with which the Islamic Republic says it wants better relations.

An attack could encourage Gulf governments to buy more air-defense systems and expand security cooperation with the United States and Israel. For a country whose infrastructure has been struck, the threat is no longer a distant dispute between the Islamic Republic and Washington. It is a matter of its own security.

This is the Islamic Republic’s particular brand of strategic genius: trying to frighten the United States by giving Iran’s neighbors more reasons to seek American protection.

Cables and Networks Are Also at Risk

The threats extend beyond data-center buildings. Submarine cables and the networks connecting these facilities can also be targeted through sabotage or cyberattacks. Depending on the availability of alternative routes and the scale of an attack, damage could disrupt communications across several countries.

Important communications cables pass through the Strait of Hormuz, and experts have warned about the possibility of sabotage along these routes. Cyberattacks can also take services offline without destroying a building. Their cost, impact, and the attacker’s ability to conceal responsibility depend on the operation.

Assessing these risks requires understanding network dependencies and backup routes. It takes more than displaying a building’s coordinates on Google Maps.

Whatever method is used, the damage will not stop at an American company. Banking, trade, and communications across the region could suffer, including in countries that remain Iran’s partners.

That is burning down the neighborhood to destroy the sign above an American shop.

A Credible Threat, a Foolish Strategy

The IRGC’s threats cannot all be dismissed as bluff. The Islamic Republic can damage some of the region’s data centers, and the consequences can be serious. What disappears in the propaganda is the scale of that capability and the cost of using it.

Finding a building’s coordinates is not difficult. The military value of an attack has to be judged by the damage it causes, the response it provokes, and the position it leaves the attacker in. Punching a hole in a data center’s roof does not, by itself, explain what the Islamic Republic would gain.

Its officials have yet to explain why such a demonstration would justify turning the UAE and other Gulf states into direct enemies, damaging the region’s civilian economy, and then paying the military and political price.

These gentlemen have yet to secure their own officials’ movements in Tehran. Yet they speak confidently of destroying cloud networks whose data and infrastructure are spread across multiple countries and continents.

The distance between the Islamic Republic’s actual capabilities and its claims is roughly the distance between an explosive drone and a global technology empire: the former may hit its target, but the latter will not collapse under the weight of a slogan.