Paris Mayoral Candidate Targeted by Russian Disinformation Operation

Pierre-Yves Bournazel, a candidate of the center-right coalition in the Paris mayoral election, has become the target of a sophisticated hybrid operation combining a cyberattack with a disinformation campaign. The incident was revealed three days before the first round of voting, scheduled for Sunday, March 8, 2026. The perpetrators hacked into the private email accounts of the candidate and his staff, then made public fabricated documents. These materials, widely distributed on social media, were meant to suggest financial irregularities in Bournazel's campaign and his unethical contacts with lobbyists. French services, in cooperation with the private firm Sekoia.io, point to the Russian group Doppelganger as the likely perpetrator. This group is linked to Russian services and has a record of numerous campaigns aimed at destabilizing the political situation in European Union countries. Russian disinformation operations and election interference have become a permanent feature of the geopolitical landscape since the annexation of Crimea in 2014. They intensified particularly after accusations of interference in the 2016 US presidential election, which led to increased vigilance by Western intelligence services. Bournazel's campaign team reacted immediately, reporting the matter to French law enforcement and the National Cybersecurity Agency of France (ANSSI). The candidate himself firmly denied the allegations, calling the published documents "fakes" and a "dirty game" aimed at discrediting him in the final days of the campaign. „C'est une manipulation évidente, une opération de désinformation qui vise à perturber le choix démocratique des Parisiens.” (This is an obvious manipulation, a disinformation operation aimed at disrupting the democratic choice of Parisians.) — Pierre-Yves Bournazel The attack has a clear electoral context. Bournazel, a former MP, is running for mayor of central Paris districts, competing with the incumbent socialist mayor, Anne Hidalgo, and other candidates. The disinformation operation was launched at a crucial moment, de facto during the pre-election silence period, when voters are making their final decisions. Digital security experts emphasize that such actions do not necessarily change voters' views but can effectively discourage them from voting or create a general sense of chaos and distrust towards the entire process. 3 dni — remained until the first round of elections at the time of the attack French authorities, while confirming the attack and launching an investigation, have not publicly commented on the technical details of the hack nor officially confirmed Russian authorship. However, the consistency of information from several independent sources, including analysis by Sekoia.io, strongly suggests the involvement of entities linked to Russia. This incident fits into a broader pattern of Russian 'hybrid warfare' tactics, also used against Ukraine, the Baltic states, and Germany. In a broader perspective, the attack on Bournazel constitutes a test for the resilience of French democratic institutions against external interference. It also raises questions about the adequacy of cybersecurity measures available to politicians and parties. This event coincided in time with other incidents, such as recent hacker attacks on French hospitals, prompting reflection on the overall state of the country's digital security. The government's response and the effectiveness of the investigation will now be closely watched, not only by the French public but also by allies in NATO and the European Union, who themselves are frequent targets of similar operations.

Perspektywy mediów: Liberal media emphasize the threat to democracy and the need for a firm EU response to Russian hybrid actions. Conservative media focus on weaknesses in the French cybersecurity system and criticize the government for failing to effectively protect candidates.