Macron Hacking Attack: What We Know and Don’t Know

https://www.nytimes.com/2017/05/06/world/europe/emmanuel-macron-hacking-attack-what-we-know-and-dont-know.html

Version 0 of 1.

The campaign of the French presidential candidate Emmanuel Macron was hit on Friday by a large dump of leaked emails and other documents on a file-sharing website.

Far-right groups in the United States were promoting the leaked information — said to contain both real and fake documents — to cast doubt on the election, pivotal for France and the European Union at large.

Mr. Macron has a roughly 20-point lead over his opponent, Marine Le Pen of the far-right National Front, in the polls.

The data related to Mr. Macron’s movement, En Marche!, that was leaked on the internet Friday night was dumped hours before a legal prohibition on campaign communications went into effect.

Links to nine gigabytes of zip and torrent files were published under the profile of someone called EMLEAKS on Pastebin, an anonymous publishing website. The archive was shared on the popular forum 4chan and promoted on Twitter by far-right activists, before WikiLeaks gave it extensive exposure online.

So far, the leak appears to mostly include documents that show the mundane inner workings of a presidential campaign, including professional and private emails, memos, contracts and accounting documents.

Mr. Macron’s campaign said in a statement shortly before the blackout went into effect that the professional and personal email accounts of some of its staff members had been hacked “some weeks ago.”

The campaign said that all of the stolen documents were “legal” and “authentic” but that fake ones had been added to “sow doubt and disinformation.” It denounced the breach as an attempt to destabilize democracy.

The National Commission for Control of the Electoral Campaign, a French regulatory body, warned on Saturday that publishing the documents might qualify as a crime. It called on the news media and French citizens to “show a spirit of responsibility” before the election.

En Marche! has been the target of hackers since last year. Last month, Trend Micro, a cybersecurity firm, said that a hacking group believed to be a Russian intelligence unit had attacked Mr. Macron’s campaign, sending emails to campaign officials and others with links to fake websites designed to bait them into turning over passwords.

• What is genuine and what isn’t. It will presumably take experts weeks to sift through and assess all the leaked documents.

• Whether different individuals or groups were behind the thefts and the leaks, who they are and what their motives were.

Experts suspect a Russian-linked espionage operation known as A.P.T. 28, or Fancy Bear, may be involved, although there is no firm evidence that the operation was behind the thefts. European and American analysts have determined that the group was responsible for hacking the Democratic National Committee last year.

• Whether the leaks, emerging less than 48 hours before the French go to the polls, will affect the election’s outcome. Because of a blackout legally imposed on TV and radio, news of the leaks is not likely to reach as large an audience as it would usually have.