Phishing · Identity · Threat Intelligence
CISA warns US election officials about phishing and smishing threats ahead of 2026 vote
CISA and the FBI have warned that cybercriminals are targeting US election and campaign officials with phishing and smishing attacks during the 2026 midterms.
Ross GrantUpdated 2 min read
The short version
US election officials and campaign staff are being warned about cybercriminals trying to trick them with fake emails and texts. These attacks, called phishing and smishing, aim to steal passwords or install harmful software. The warning comes ahead of the 2026 US midterm elections. No specific breaches have been reported, but officials are urged to stay alert and follow security advice.
What happened?
CISA and the FBI have issued a public warning that cybercriminals are targeting US election and campaign officials with phishing and smishing attacks during the 2026 midterm elections. The agencies say attackers are trying to steal credentials and sensitive information or install malware. The warning is proactive, and no specific incidents have been confirmed.
Who is being targeted and why
The Cybersecurity and Infrastructure Security Agency (CISA) and the FBI have issued a public warning to election and campaign officials in the United States. According to their announcement (opens in a new tab), cybercriminals are actively targeting people involved in the 2026 US midterm elections. The main targets include election officials, candidates, and political organisations. These groups are attractive because they have access to sensitive data, such as voter registration records and confidential campaign information.
How attackers are operating
CISA and the FBI say that attackers are using phishing and smishing techniques. Phishing is when someone sends a fake email that looks real, hoping the recipient will click a link or open an attachment. This can lead to stolen passwords or malware on the victim’s device. Smishing is similar but uses text messages instead of email. The messages may look like they come from trusted sources and can include links or files that, if opened, compromise the device or steal information.
The agencies note that these attacks are becoming more sophisticated. Attackers are creating emails, texts, and even audio or video messages that closely mimic legitimate communications. The goal is to trick recipients into giving up sensitive information or installing malicious software.
What has been recommended
CISA and the FBI urge all election officials, campaign staff, and the public to review their guidance. They recommend being cautious with unexpected emails or texts, especially those that ask for login details or contain links and attachments. Officials should follow best practices for cybersecurity, such as using strong passwords, enabling multi-factor authentication (MFA), and reporting suspicious messages to their IT teams.
What is not yet clear
So far, the warning is based on observed techniques and increased activity, but CISA has not reported any specific incidents or breaches related to these threats during the 2026 election cycle. The advisory is a proactive step rather than a response to a known compromise. Only CISA and the FBI have reported on this issue so far.
What you should do
If you work in elections or campaigns, be extra careful with emails and texts, especially if they seem urgent or ask for sensitive information. Always verify the sender before clicking links or downloading attachments. For everyone, staying alert to phishing and smishing is important, as these techniques are used in many sectors, not just elections.
Claimed vs confirmed
- Confirmed
Cybercriminals are targeting US election and campaign officials with phishing and smishing during the 2026 midterms.
CISA and the FBI issued a public warning about these threats.
- Unconfirmed
Specific incidents or breaches have occurred as a result of these attacks.
CISA has not reported any specific incidents or breaches in its announcement.
The impact
- Money
- If a breach occurred and sensitive data was exposed, US law may require notification and could result in fines. The maximum penalty under US law varies by state, but can be significant for government-related data breaches.
- Reputation
- A successful attack could damage public trust in the election process and harm the reputation of officials or organisations involved.
- Customers
- Election officials, campaign staff, and political organisations are at risk of credential theft and malware. The public could be affected if voter data or sensitive information is exposed.
Why it matters
Election and campaign officials handle sensitive information that could affect the outcome or integrity of elections. Attacks on these groups could lead to stolen data, disrupted operations, or loss of public trust. Even if you do not work in elections, phishing and smishing are common threats that can affect anyone.
How does it work?
Phishing is when attackers send fake emails that look real, trying to trick people into clicking links or opening attachments that steal information or install malware. Smishing is the same technique but uses text messages instead of email. Both rely on social engineering, which means manipulating people into taking risky actions.
Key points
- CISA and the FBI warn of phishing and smishing threats to US election officials.
- Attackers use emails and texts to steal credentials or install malware.
- No specific breaches have been reported yet for the 2026 midterms.
- Officials are urged to follow cybersecurity best practices.
- Phishing and smishing can affect anyone, not just election staff.
