Paris prosecutors open probe into Russian-linked disinformation targeting 2027 presidential hopefuls

The Paris prosecutor's office has opened a judicial investigation into coordinated disinformation campaigns aimed at two of the most prominent contenders for France's 2027 presidential election. The move follows the detection this summer of fabricated video clips and false health claims targeting Edouard Philippe and Gabriel Attal, both former prime ministers, which French technical analysts have attributed to influence networks with established links to Russian military intelligence.

Fabricated health claims spread on X and TikTok

The disinformation operation against Philippe centred on a manufactured video posted on X that mimicked the branding of major French news outlets. The clip falsely asserted that Philippe, who has publicly lived with alopecia for years, had been diagnosed with a neurodegenerative disease. In Attal's case, fabricated reports circulated on both X and TikTok alleging that he suffered from Parkinson's disease and was using illicit substances. Attal denounced the material as fake and filed a formal complaint with prosecutors; Philippe has not addressed the posts publicly, though senior figures around him have characterised the episode as a likely Russian interference attempt.

Two distinct networks identified by Viginum

According to a French official familiar with the technical investigation led by Viginum, the national agency tasked with detecting and countering digital interference, two separate influence networks were responsible. Storm-1516, which Western intelligence services and the French government assess is tied to the GRU, Russia's military intelligence directorate, operated the campaign against Philippe. Matriochka, another network with documented Russian affiliations, ran the operation targeting Attal. Viginum alerted both candidates privately and recommended they avoid publicising the attacks to deny the operators additional visibility.

Storm-1516's previous activity in France

Storm-1516 is not new to French political space. Earlier this month, the prosecutor's office announced a separate investigation into a disinformation operation that targeted Raphaël Glucksmann, a centre-left member of the European Parliament and co-president of the Place Publique movement, who is also widely seen as a potential presidential candidate. That case, like the current one, involved fabricated narratives designed to damage Glucksmann's credibility ahead of the 2027 contest. The recurrence of the same network across multiple high-profile targets suggests a sustained effort rather than an opportunistic one-off.

Viginum's evolving mandate and operational constraints

Viginum was created in 2021 as part of a broader French strategy to counter foreign digital interference, operating under the authority of the Secretary General for National Defence and Security. Its mandate covers detection, analysis and attribution of influence operations, but it does not possess prosecutorial powers. The agency's practice of advising targets against public disclosure reflects a tactical judgement: amplification can serve the operators' goal of polluting the information environment, even when the content is debunked. That approach, however, sits uneasily with political pressures for transparency, particularly when the targets are elected officials or declared candidates.

The 2027 field takes shape under pressure

Philippe and Attal represent two distinct poles of the French centre-right and centre respectively. Philippe, who served as prime minister under Emmanuel Macron from 2017 to 2020, leads the Horizons party and has consistently polled as the strongest potential candidate from the Macron-compatible spectrum. Attal, who became France's youngest prime minister in January 2024 before resigning after the European Parliament elections that June, remains a leading figure in the Renaissance party. Both men have yet to declare formally, but their positioning is widely understood as pre-campaign manoeuvring. Glucksmann, for his part, has built a profile on foreign policy and rule-of-law issues, making him a natural target for narratives that seek to undermine pro-European voices.

Russian interference playbook adapts to platform changes

The use of fabricated video clips that ape legitimate news branding marks an evolution from the text-heavy, bot-amplified operations observed during the 2017 and 2022 French presidential cycles. The shift toward short-form video on X and TikTok exploits algorithmic distribution mechanics that prioritise engagement over verification. TikTok, in particular, has become a primary vector for political content among voters under 35, a demographic both Philippe and Attal need to mobilise. The platform's Chinese ownership adds a further layer of complexity for French regulators, who must coordinate with EU-level enforcement under the Digital Services Act while navigating bilateral sensitivities.

The European Commission has designated both X and TikTok as very large online platforms under the DSA, imposing obligations to assess and mitigate systemic risks including election interference. In April 2024, the Commission opened formal proceedings against X over suspected failures in content moderation and transparency, while TikTok faces scrutiny over its risk assessment for the European Parliament elections. The French cases will likely feed into those investigations as concrete examples of harm the DSA is designed to prevent. The Commission's DSA enforcement page outlines the regulatory framework now being tested in real time.

Attribution and the limits of public evidence

French authorities have not released the technical indicators, infrastructure overlaps, linguistic markers, persona networks, that underpin the attribution to Storm-1516 and Matriochka. That restraint is standard: publishing indicators burns intelligence sources and allows operators to rotate infrastructure. However, it also means the public case rests on institutional trust. The GRU link to Storm-1516 has been asserted by multiple Western governments, including the United States and the United Kingdom, and was referenced in the EU's 2023 report on foreign information manipulation. The European Parliament's press service has documented the institution's own work on election integrity and foreign interference, providing context for the French investigation.

Legal and political consequences remain uncertain

A judicial investigation in France does not guarantee a trial, let alone convictions. Identifying individual perpetrators behind pseudonymous network accounts is notoriously difficult, and Russian state actors operate with diplomatic immunity or from territory beyond French jurisdiction. The practical outcome may be limited to platform takedowns, DSA enforcement actions, and the deterrent effect of public attribution. Politically, the episodes hand Philippe and Attal a narrative of resilience, or vulnerability, depending on how they manage the fallout. Attal's decision to file a complaint contrasts with Philippe's silence; each calculation will be scrutinised for what it signals about their campaign readiness.