France Accuses Russian Intelligence of Cyber-Attacks on Macron’s 2017 Campaign and Olympic Targets

France has officially accused Russian military intelligence of carrying out a large-scale cyber-attack on President Emmanuel Macron’s 2017 election campaign, as well as several other major cyber-attacks on French institutions.

In a statement released on Tuesday, the French foreign ministry blamed the cyber-attacks on APT28, also known as Fancy Bear, a group linked to Russia's military intelligence agency (GRU). The ministry said this is the first time France has formally identified Russia as the source of the hacking during the 2017 presidential campaign.

Just before the final round of the 2017 election, thousands of emails and documents from Macron’s campaign were leaked online. Some of the leaked content was reportedly fake. The French foreign ministry said the goal was to manipulate public opinion, but the attempt did not affect the election outcome. Macron defeated far-right candidate Marine Le Pen.

The foreign ministry also accused Russian hackers of being behind the 2015 cyber-attack on French television network TV5Monde. In that incident, the attackers pretended to be members of the Islamic State, aiming to spread fear and misinformation.

Since 2021, APT28 has reportedly targeted around a dozen French organizations, including public services, private companies, and a sports organization connected to the upcoming 2024 Olympic and Paralympic Games in Paris. The ministry said these cyber-attacks were meant to collect strategic information and disrupt daily life in France.

French Foreign Minister Jean-Noël Barrot said, “Russia’s military intelligence has carried out cyber-attacks against France for years using the APT28 method.”

A report by France's national cybersecurity agency, ANSSI, confirmed that APT28 had been collecting sensitive data from entities in France, Europe, Ukraine, and North America since 2021.

The French government strongly condemned the attacks and said it would work with international partners to prevent and respond to further cyber threats from Russia.

In September 2024, international intelligence agencies, including those from Germany, warned about increased cyber-attack risks from Fancy Bear against NATO member countries.

France has pledged to use all available resources to detect, deter, and respond to these cyber threats.