Cybersecurity & Elections
Federal Cyber Guide Warns Election and Campaign Staff About Phishing and Smishing
The advisory focuses on attempts to steal credentials or compromise devices, while the EAC directs officials to incident-response contacts.
A people-centered cyber risk
The FBI and Cybersecurity and Infrastructure Security Agency warned election and campaign officials that malicious actors may use phishing emails, text-message lures known as smishing and other social-engineering techniques. The October 16 advisory remains operationally relevant on Election Day because attackers often exploit urgency, unfamiliar senders and pressure to open a link or attachment before a recipient verifies it.
What an attempted intrusion means
A malicious message or attempted account takeover does not establish that voting equipment, tabulation or registration systems were altered. Election infrastructure includes many networks and public-facing services, and incidents differ in consequence. Officials and the public should describe the affected system, observed behavior and confirmed impact rather than turning the word cyberattack into an unsupported claim about votes.
Basic defensive actions
Strong multifactor authentication, unique credentials, software updates, restricted administrative access and out-of-band verification can reduce risk. Staff should avoid approving unexpected login prompts and confirm urgent requests through a known number or contact. Campaigns and election offices have different legal and technical roles, but both can be targeted for information, disruption or reputational damage.
Incident communication
The Election Assistance Commission's security-preparedness resources link officials to federal incident contacts and a joint CISA-EAC communication guide. A prepared plan should identify who verifies facts, who contacts technical responders and how updates reach voters without amplifying an adversary's narrative. Silence can create a vacuum, but premature attribution can be equally damaging when an investigation is incomplete.
A standard for public claims
Readers should look for statements from the election office responsible for the affected system and for corroboration from incident responders. Screenshots and anonymous posts rarely establish scope or impact. Officials should correct false claims quickly while preserving evidence for investigators. The central distinction is between an attempted compromise, a successful intrusion and a demonstrated effect on election administration; those are not interchangeable events.
Primary evidence
Reporting note: This independently composed article is based on the linked primary records. Publication and event dates are stated separately. Agency claims are identified as such; an allegation, charge or scheduled event is not presented as a finding, conviction or completed event. Readers should consult the official record for amendments and later action.