How the Iran war could impact hyperscalers' massive AI buildout in the Middle East

Hyperscalers and AI infrastructure developers face fresh uncertainty in the Middle East after a wave of retaliatory attacks by Iran targeted cloud and data centre facilities in the region, hitting AWS infrastructure in the UAE and Bahrain and causing outages across banking, payments, enterprise and consumer services. The incidents come as companies and regional partners have already poured billions into AI projects — including OpenAI’s Stargate campus in the UAE (a G42 collaboration involving Oracle, Nvidia and Cisco that spans roughly 10 square miles and includes a planned 5‑gigawatt capacity) and Microsoft’s pledged $15 billion investment in the UAE by 2029 — raising questions about the future of new builds and the security of existing capacity.

"The region remains attractive to companies in terms of capital from sovereign wealth funds, government buy‑in, available energy and its role as a gateway to markets in the global south," Tess deBlanc‑Knowles, senior director at the Atlantic Council, told CNBC.

Context and immediate implications

• Security reappraisal: Aalok Mehta, director at the Center for Strategic and International Studies, warned that recent strikes signal data centres may now be "considered legitimate targets for attack in modern armed conflicts." He added that "this will significantly change how companies think about data center security going forward," and said firms will be considering contingency measures "either by considering shifting to less vulnerable regions or by hardening current and future data centers with missile defense and counter‑drone technology."
• Potential geographic shifts: Patrick J. Murphy, executive director of the geopolitical unit at Hilco Global, told CNBC there could be "a shift in where the next wave of capacity gets built" if Gulf geopolitical risk rises, naming Northern Europe, India and Southeast Asia as alternative options with more predictable power supply, regulatory frameworks and security conditions.
• Operational inertia vs. new builds: Tancrede Fulop, senior equity analyst at Morningstar, noted the practical constraints on relocating operational capacity: "Data centers typically need to be located close to their customers to ensure low latency and reliable service," and "relocating or closing facilities could therefore lead to service‑level agreement breaches and reputational risk."
• Developers signal caution: Gary Wojtaszek, chairman and interim CEO of Pure Data Centre Group, which operates in Riyadh and Abu Dhabi and is planning further expansion, said the company may "slow down" regional activity: "Up until the prior week, I would have been like, 'Hey this is awesome, right?' And now it's like, okay, well, maybe we'll slow down here." He added: "But I do think that eventually the hostilities are going to settle down" and predicted renewed focus on development once risks ease.
• Major projects and investment: Beyond Stargate and Microsoft’s $15 billion commitment, Saudi AI investor Humain is reported to be pouring billions into infrastructure buildouts in the kingdom. Despite the attacks, the scale of capital, energy availability and government support remain strong draws.

Outlook

Industry sources say hyperscalers are unlikely to abandon already commissioned capacity because of sunk costs, power contracts, land agreements and latency requirements. Instead, boards and investment committees are expected to weigh scenario planning: some firms may slow new capital deployments or pause planned partnerships as a hedge, while others will evaluate alternative hubs to reduce exposure to sustained disruptions. Mehta framed the calculus precisely: companies will ask, "How long might this war last? How much will new hardening measures cost? Are there any viable alternative sites for data center buildouts? How much delay would shifting to an alternative location cause?"

Google and Microsoft declined to comment to CNBC on how the Iran war was affecting their regional projects; AWS, G42, Humain and OpenAI did not respond to requests for comment by the time of publication.