Threat Intelligence · Incident Response
Hackers disrupt US campaign finance system ahead of midterms
Hackers targeted the US Federal Election Commission’s electronic filing system, taking it offline just before the midterm elections. The outage blocks the disclosure of new campaign spending reports.
Ross Grant2 min read
The short version
Hackers attacked the US agency that tracks political spending, taking its online filing system offline just before the midterm elections. This means new reports on campaign spending cannot be filed or viewed for now. The FEC says it is working to fix the problem. There is no sign that voting itself is affected.
By the numbers
- $11.21 billionspent on US midterm election advertising and reservations so farNBC News
- $11.2 billionspent on all races in the 2024 US electionsNBC News
- $3.2 billionspent on the 2024 US presidential raceNBC News
What happened?
Hackers targeted the US Federal Election Commission’s electronic filing system, taking it offline a week before the midterm elections. The outage prevents political groups from filing mandatory campaign spending reports. The FEC says its IT staff are working to restore service. There is no evidence that voter systems are affected.
Who is affected
The US Federal Election Commission (FEC) is responsible for tracking the spending of candidates and political committees. Its electronic filing system is used by these groups to submit mandatory reports on campaign spending. The outage means political organisations and compliance officers cannot file required 24-hour and 48-hour spending disclosures. According to Steven Mele, president of a political finance compliance firm, this is the first time in 26 years he has seen such a disruption, and it will delay public access to information on election spending [NBC News] (opens in a new tab).
What was taken
There is no evidence that data was stolen or exposed. The main impact is that the FEC’s system for submitting new campaign finance reports is offline. Users can still search for past reports, but new disclosures cannot be filed or viewed until the system is restored.
How the attack worked
The FEC reported that a “bad actor” attempted to breach its systems. In response, the agency shut down its web-facing services, including the electronic filing system, to prevent further risk. The exact method used by the attacker has not been disclosed, and it is not clear whether the attack was successful in breaching any internal systems. The FEC’s IT staff are working to restore service.
The response
The FEC confirmed the outage and stated that their IT staff are actively working to bring the system back online. The agency declined to provide further details about the incident or the nature of the attack. The Cybersecurity and Infrastructure Security Agency (CISA) referred questions to the FEC, and the FBI did not respond to requests for comment. The FEC posted a notice about the outage after campaign finance officers were unable to file reports late on Monday night.
What you should do
For campaign compliance officers and political committees, it is important to monitor the FEC’s status updates and prepare to submit any delayed reports as soon as the system is restored. For the public, be aware that there may be a temporary gap in campaign finance transparency until the system is back online.
So far, only NBC News has reported this incident, citing an email seen by Reuters and statements from the FEC. There is no confirmation from other sources, and details about the attacker or the specific technique used are not available.
Why it matters
The outage delays public access to information about who is spending money on political campaigns during a critical period. Transparency in campaign finance helps voters understand who is funding election activity. This incident highlights the risk of cyberattacks disrupting public oversight, even if voting systems are not directly targeted.
Key points
- Hackers took down the FEC’s campaign finance filing system.
- No new spending reports can be filed or viewed until the system is restored.
- There is no evidence that voter systems or past data were affected.
- The FEC is working to bring the system back online.
- Only one news outlet has reported the incident so far.
Sources
NBC News
Reference
