France has officially accused Russia’s military intelligence agency (GRU) of orchestrating a series of cyberattacks over the past decade, including operations targeting the 2024 Paris Olympic Games and Emmanuel Macron’s 2017 presidential campaign.
According to the French Foreign Ministry, since 2021, a GRU division specializing in cyberwarfare has targeted dozens of French entities, especially in the defense, finance, and economic sectors. The attacks were allegedly carried out by APT28, also known as Fancy Bear, a group linked to the 2016 U.S. election interference.
“France strongly condemns the use of APT28 by Russian military intelligence to attack French interests,” the ministry said.
French Minister for Digital Transformation, Jean-Noël Barrot, confirmed for the first time on X (formerly Twitter) that APT28 was behind several major attacks, including the hack and leak operation against Macron’s 2017 campaign, which involved the theft and dissemination of thousands of documents just 24 hours before the vote. The aim, authorities say, was to sow public doubt and manipulate voter sentiment — though the attempt ultimately failed.
The video statement released by the government also revealed that public services, private enterprises, and a sports organization involved in the 2024 Olympic and Paralympic Games have been under cyber siege since 2021. Media outlets are also considered key targets.
The group’s past operations include the 2015 cyberattack on TV5 Monde, during which they posed as ISIS militants to incite public fear.
APT28’s activities extend beyond France. Intelligence agencies in Germany, Poland, and other NATO allies have issued warnings, especially as Poland approaches its May 18 presidential election, amid fears of Russian cyber interference and disinformation campaigns.
France and Poland are scheduled to sign a friendship treaty on May 9, the same day Russia marks its WWII Victory Day with a parade led by President Vladimir Putin.
“Together with our partners, France is committed to using all available tools to prevent, deter, and respond to Russia’s malicious behavior in cyberspace,” the ministry declared.
