Summary

  • The ITU’s 5 October interim report names attack-related telecom and ICT events in Bahrain and the UAE under a four-country mandate.
  • It records service disruption at AWS regions in both countries, data that could not be restored in Bahrain and part of the UAE region, and a 48-hour recovery for Abu Dhabi Commercial Bank’s online banking.

The report gives the four-country assignment a sharper edge: this is not an abstract warning about critical infrastructure. On 1 March, Amazon Web Services reported power and connectivity problems degrading one Availability Zone in its UAE region, ME-CENTRAL-1, and one in its Bahrain region, ME-SOUTH-1. On 3 March, AWS linked the impact to the regional conflict and said both regions had been hit by drones. By 30 April, AWS said all Availability Zones in both regions had been affected.

The later record is harder than a temporary outage. On 15 September, AWS reported that data hosted exclusively in Bahrain’s ME-SOUTH-1 could not be restored; the same applied to one of the UAE region’s three Availability Zones. The ITU report also cites Abu Dhabi Commercial Bank’s statement that restoring online banking took 48 hours. The operating bill therefore has two clocks: the interval before a service returns, and the point at which data cannot be recovered from its original region.

The ITU’s evidence is more cautious when it moves beyond the cloud regions. It notes media reports of attacks on the Thuraya Telecom office and a du telecommunications office, then says publicly accessible details were insufficient to validate the attacks or resulting damage. Those reports remain leads for further collection, not confirmed infrastructure findings in this interim document.

The same distinction applies under the sea. The report flags increased vulnerability risk for submarine cables in the Strait of Hormuz amid the conflict. It identifies a risk to investigate, not a damaged cable event. That distinction gives operators something practical to monitor: a disruption claim, a confirmed service impact and a physical asset loss are three different records, with different recovery and investment consequences.

Resolution 1436 asks the three ITU Bureau Directors to monitor and report regularly on effects across Bahrain, Kuwait, the UAE and Jordan. The October report is a desk review, and says primary-source work is still needed. The Council is asked to note it and leave the deadline question for the full report to the Plenipotentiary Conference, which may extend submission to a 2027 Council session. For Kuwait and Jordan, this interim report identifies no specific telecom or ICT event; a primary record establishing one would change that account.

Sources