Cyberattack slows down primary of the French left

The primary of the French social democratic left, tasked with selecting the candidate for the 2027 presidential election, suffered an unexpected slowdown. The digital platform on which the vote is taking place was hit by a cyberattack starting on October 9th, forcing organisers to move the closing of the polls from 8pm on October 10th to 6pm on October 11th.

According to Le Parisien, the platform had been sized to handle ten thousand simultaneous connections, but the action of automated bots pushed traffic up to twenty thousand connections, overloading the system and preventing some voters from casting their ballot within the scheduled time.

Despite the technical blockage, turnout recorded before the interruption remains significant: Le Monde reported, at 10pm on October 10th, nearly one hundred and eight thousand voters out of one hundred and forty thousand eligible to vote. Five candidates are competing for the leadership of the coalition.

The primary’s organisers stated that the integrity of the votes already recorded does not appear to have been compromised. The twenty-two-hour extension aims to ensure that all registered members actually have the opportunity to express their preference, after the technical malfunction prevented regular access to the system during the crucial hours of election day.

The episode comes at a delicate moment for the French left, grappling with the choice of its candidate ahead of an appointment, the 2027 presidential election, that promises to be decisive for the country’s political balance. A cyberattack on an internal party vote raises broader questions about the security of digital infrastructure used for electoral processes, even when dealing with primaries rather than actual national elections: the vulnerability of systems sized for a certain volume of traffic, as the French case demonstrates, can be exploited with relative ease to block or slow down voting.

It remains to be seen what impact the extension will have on final turnout and whether the number of additional voters in the twenty-two supplementary hours will prove significant compared to the one hundred and eight thousand already recorded. Organisers have not, at this time, provided an estimate of how many voters were excluded from voting due to the technical malfunction during the hours when the platform remained overloaded.

The affair is set against a backdrop of growing attention, at European level, to the cybersecurity of digital voting processes, whether party primaries or local referendum consultations. Le Monde and Le Parisien consistently report the chronology of the attack and the organising committee’s statement on the system’s resilience regarding the integrity of the data already acquired, while both also flag the access problem encountered by voters.