Protests drawing roughly 550,000 participants rolled through towns and cities across France on 17 October, with Interior Minister Laurent Nuñez providing that count, as grievances spanning school conditions, household costs, and public services coalesced into a broader challenge directed at the government. According to figures released by the CGT union, around 800,000 people took part.
What had begun as student walkouts over understaffed classrooms and ageing school facilities eventually expanded into broader public demonstrations. On 17 October, a broadcast outlet carried accounts of calls for reduced class sizes, additional teaching staff, upgraded facilities, and an end to the use of force by police. Workers with union ties, along with demonstrators voicing broader economic frustrations, added their weight to the student-led movement as it gathered momentum.
Allegations from the administration pointed at domestic political rivals, suggesting they had lent support to the movement. Broadcasting on 1 October, a television outlet described how an individual with ties to the prime minister's inner circle passed along notes from a crisis gathering, with those notes pointing to La France Insoumise — known as LFI — and affiliated left-wing political organisations as the source of the dispute. The party put forward no role in organising the demonstrations, with lawmaker Louis Boyard stating that peaceful protest remained its position.
Following unrest on 17 October, Prime Minister Sébastien Lecornu attributed the disorder to left-wing activists and individuals with criminal records. Macron drew a line between those carrying out the attacks and those taking part in peaceful demonstrations, voicing opposition to the violence.
Documented records point to a pattern of interference activity directed at France by Russia, spanning online accounts that amplified protest movements while circulating pro-Kremlin messaging, a student mobilisation that drew backing from left-leaning politicians, and a sustained track record of cyberattacks paired with broader influence-shaping efforts. Ties between nationalist movements on the right and Moscow have been recorded across historical periods.
Documentation tied to the "Bloquons tout" movement — a French-language name rendered in English as "Block Everything" — places the campaign's origins in September 2025, a timeline that does not align with certain other accounts. Reporters at Euronews traced the origin of an early claim to a Telegram post published by Les Essentiels France on 21 May. Among the positions the organisation promoted were opposition to EU membership and to arms assistance for Ukraine, alongside the circulation of remarks made by a Russian parliamentary figure touching on the prospect of global conflict. A portion of French commentators linked it to networks associated with conspiracy thinking and the political right wing.
Records tied to National Rally's funding arrangements point to a documented link with Russia. A €9.4 million loan from a Russian bank was extended to the party's forerunner, the National Front, during 2014. The party's records show the loan was cleared in full by September 2023, and Le Pen had previously held a meeting with Vladimir Putin at the Kremlin in 2017. Her denunciation of the full-scale military offensive against Ukraine came to public attention through coverage by a broadcast outlet with an established record of reliability, as part of that outlet's broader look at how Moscow responded to electoral outcomes across Europe.
A public disclosure of an influence operation with ties to Russia came from Catherine Colonna, who held the foreign minister portfolio at the time, on 13 June 2023. Beyond listing specific Russian individuals and organisations, the report pointed to embassies and cultural centres with ties to Russia as channels through which its contents had been distributed. Among the tactics used in the operation was an effort to pass off a fake version of the French Foreign Ministry's web presence as the genuine article.
French authorities formally assigned responsibility for a series of intrusions to APT28, a hacking collective linked to the GRU — Russia's military intelligence directorate — with the attribution announced on 29 April 2025. According to an official statement, roughly a dozen French entities — spanning public-sector bodies, private businesses, and a sports organisation connected to the Paris Olympics — had been either targeted or breached by the group at some point from 2021 onward.
Documentation released by the Foreign Ministry in May 2025 put the number of Storm-1516 influence operations at 77, with France, Ukraine, and various other Western nations listed among the targets of activity traced back to 2023. Among the grounds put forward were alleged meddling during France's 2024 parliamentary vote and ties to groups based on Russian soil. A communiqué issued by the EU that July catalogued the methods attributed to a Russian operation spanning the continent — among them acts of sabotage, disruption to key infrastructure, physical violence, and interference in electoral processes. Tracking of those activities was carried out at a continental scale, with no inference drawn that foreign involvement was behind every protest that surfaced on home soil.
Speaking at a December 2025 address, NATO Secretary-General Mark Rutte put forward an assessment that Russia could be positioned to deploy military force against the alliance within a five-year timeframe, and pointed to what he characterised as a broadening covert operation directed at European societies. A security briefing drew together French political leaders at Macron's invitation during September 2026. Broadcasting outlet coverage noted that he chose not to link the newly raised incidents of a suspicious nature to Russia on a case-by-case basis.
Who bears responsibility for the violence tied to ongoing protests remains an open question, one that dedicated inquiries will need to resolve — nothing in the evidence reported publicly points to an operation orchestrated from Moscow. Those monitoring influence operations have noted that content about France circulating among overseas audiences tends to blend documented episodes of civil unrest, historically contested comparisons, and wholly invented news items — all arranged to raise questions about whether Macron retains a firm grip on power.
Vesti, the state-run broadcaster, tied the domestic unrest to Macron's foreign policy positions, minimised concerns about any threat posed by Russia in the security arena, and floated the possibility of far-reaching political change. A doctored video bearing Le Figaro's branding came under scrutiny from StopFake's analysts on 15 October. The content in question falsely attributed to 89 percent of French citizens a preference for Putin as a presidential pick, along with a view that he would manage the school demonstrations more capably than domestic contenders. The video contained no trace of the polling fundamentals a viewer would need to evaluate the data — who ran the survey, the timeframe of the fieldwork, the sample size, or the methodology employed.
On 9 October, Detector Media published a standalone inquiry into online posts claiming that Ukrainians in Paris had been rounding up and reselling fuel they had siphoned from vehicles. A piece drawing on political analyst Dmitry Yegorchenkov's historical parallel with 1968 ran in Vesti on 6 October. The publication ran his claim that the demonstrations had grown to match the magnitude of that earlier crisis. Across education, housing, and energy, the piece argued that Europe's difficulties in each area stem from a single set of interlocking structural conditions rather than separate, unrelated failures.
On the day that followed, Vesti brought Moreau into a recorded conversation in which he drew a parallel between the unfolding situation and the French Revolution of 1789. His position held that involvement in an overseas war unconnected to French national interests had left the country carrying both mounting public debt and a deepening erosion of trust in its institutions.
A conversation between Pierre de Gaulle and Vladimir Solovyov ran on Vesti dated the thirteenth of October. Presenting himself as a grandson of the former French president, De Gaulle contended that the school protests had evolved into an organised political movement and called on Macron to step down from office. He further contended that French authorities had been sustaining their standing by fostering what he characterised as a fabricated narrative around the threat posed by Russia. The outlet drew attention to his familial ties.
The matter drew a public response from Maria Zakharova, who holds the spokeswoman role at Russia's Foreign Ministry. A 7 October piece in Vedomosti, drawing on Zakharova's appearance on Sputnik radio, reported that she directed criticism at both the Élysée Palace and EU foreign policy chief Kaja Kallas over what she described as their failure to speak out about how police had treated schoolchildren. In her account, the incidents amounted to attacks on young people and students who were not carrying weapons. Within the same document, space was given to the protesters' demands around education and to a separate gathering Macron held with ministers to address the unfolding situation. Zakharova wove those assertions into a wider pattern of official criticism aimed at French and European leadership, though the statement offered no evidence pointing to those responsible for organising the protests.
Headline placement went to property destruction in that wire service's account, yet the report still identified the domestic coalition behind the demonstrations, relayed the organisers' public pledge to keep the action peaceful, and included Macron's condemnation of the attacks. Attendance tallies drawn from both the government's records and the organisers' own calculations were incorporated into the published report. Covering similar ground, the Vedomosti piece wove together teacher shortages, school infrastructure, and the cost of living, drawing on statements from government officials alongside positions put forward by National Rally leaders.
NewsGuard's findings, as relayed by one broadcaster's coverage, pointed to around 20 pieces of fabricated content that the Russian Matryoshka operation had put into circulation across a 48-hour window. Among the items cited were what appeared to be Deutsche Welle dispatches stating that 54 teachers had lost their lives, alongside Le Monde material asserting that Gabriel Attal had provided funding for the disturbances. Audience figures for those fabrications turned out to be modest, according to NewsGuard's findings.
