.svg)
At her own wedding reception in Goodfellas, Karen Hill receives envelopes of cash from wedding guests. Later during a dance, Karen says to her new husband, "The bag. The bag." Henry: "What bag?" Karen: "The bag with the envelopes in it, all the money." Henry isn't concerned. "Don't worry. Nobody's going to steal that here."
Every guest at the reception understood what would happen to anyone who touched it.
American commercial assets have been sitting on the table the same way for seventy years. The shield has been, in large part, the US intelligence and military complex. Our premise is that investors should evaluate whether that calculus still holds, and whether private and entirely commercial assets face heightened vulnerability due to the declining cost of conflict. This installment aims to provide a framework for pricing the exposure, for the benefit of sophisticated institutional investors and risk managers.
Perhaps the best place to start is with four points we treat as settled.
Wildberries accounts for about 45 percent of Russian online retail, ahead of Ozon at 32 percent, and in 2022 it was the largest taxpayer in the country. Ukraine's stated rationale for striking it is that its logistics centers move drone components, navigation equipment and other military hardware. Among many consumer products, the company lists drone components and body armor for sale on its own website.3
Between July 18 and August 4, 2026, drones struck at least sixteen Wildberries facilities across fourteen Russian regions, from Krasnodar in the south to Sarapul in Udmurtia. The published floor area comes to roughly 2.0 million square meters, about 21.5 million square feet, in eighteen days. Data Insight put lost merchandise alone at 170 billion rubles, near $2.2 billion, by July 24.4 Experts told Kommersant that restoring the Tambov and Elektrostal sites could run to 35.8 billion rubles, about $457 million, and that insurers would probably not cover it in full.5 The Elektrostal fire burned for four days.
A consumer retailer lost the equivalent of twenty-one large distribution centers in under three weeks. Appendix A lists the facilities.
Four responses are available to a state whose commercial base sits in range, and each of them has a ceiling.
For active hardening, the defender pays between twenty and six hundred times the attacker's unit cost.
The durable answer has usually been commercial. The Soviet Union failed primarily due to economics. Economic weight and the value of repeat business provide a unique type of protection, and that observation is the reason American commercial strength deserves more analytical weight.
On July 7, 2026, eleven days before the first strike, Wildberries revised its terms and conditions to disclaim liability for goods destroyed in force majeure events, drone strikes among them.4 Sellers whose inventory burned were compensated for none of it. A contract amendment moved the loss from the largest platform in Russian e-commerce onto thousands of small merchants with no capacity to absorb it. Insurance took a share and declined the balance.
The lending channel is where a credit analyst should look hardest. On July 27, Denys Shtilerman of the Ukrainian firm Fire Point described Wildberries' relationship with state-controlled VTB Bank as part of the strategic case for the target, called Wildberries the largest borrower in Russia, and argued that its failure would carry several banks down with it.6 Whatever one makes of that claim, the structure it describes is ordinary. A physical loss at a dispersed borrower resolves into a capital question at a lender whose own assets were never subject to attack.
Amazon's most recent Form 10-K reports 519.9 million square feet of fulfillment, data center and other space in North America alone.7 The Wildberries floor area burned in eighteen days equals about 4 percent of that single figure.
An institutional investor holding asset-heavy private positions should determine whether exposure to state-level risk was examined at all. Exhibit V outlines dimensions one can examine.
Mutually assured destruction has not failed for state actors. However, non-state and particularly solo actors aided by AI have exposed massive vulnerabilities in American assets. Losses can be inherited by those who were not struck directly. The world is changing rapidly. This installment aims to provide a framework of possible major shifts for the benefit of sophisticated institutional investors and risk managers, and here the framework is a short list of questions.
The sixteen facilities below are those with published floor area. Meduza's running count reached twenty facilities by August 4, 2026.8 The July 25 strike at Yekaterinburg is excluded, as footage indicated the adjacent parking area was hit and operations resumed within four hours.
Sources & Footnotes
.jpg){kind=avatar}