Hackers Disrupt US Federal Election Commission's Reporting Systems

“We have a bad actor attempting to breach FEC systems. As a result, we’ve had to temporarily shut down our web facing services,” the Federal Election Commission told campaign compliance firms in emails this week, announcing an outage that has taken its public-facing website and filing portal offline.

What the outage shut down — and what it did not

The FEC’s decision to take web-facing services offline was described in emails to campaign compliance firms. The agency does not administer elections, and the outage “should not impact voters’ abilities to cast ballots,” a distinction the agency and outside experts emphasized. The immediate operational consequence is narrower but potentially consequential: organizations cannot use the FEC’s web systems to submit 24-hour and 48-hour campaign finance reports while services remain disabled.

How a reporting gap matters in the closing days

The shutdown removes a route for time-sensitive disclosures that show near-real-time spending by political groups. Reuters’ reporting cited that “Super PACs and dark money groups spent an average of more than $50 million each day” in the past week — a figure that underscores what the experts called a meaningful loss of timely public visibility when filings cannot be posted or processed.

Jon Baker, VP of Threat-Informed Defense at AttackIQ, put the operational impact bluntly: “Disrupting campaign finance filings a week before an election denies the public timely visibility into the money shaping those races, and the disclosure window those 24-hour and 48-hour reports cover doesn't come back once it passes.”

Ross Filipek: integrity checks before reopening filing services

Ross Filipek, CISO at Corsica Technologies, warned that restoring a website is only the visible first step. Before reopening filing services, responders must determine whether anyone gained unauthorized access and whether any records were altered. Filipek said affected records need to be checked for changes and that “campaigns need clear guidance on handling time-sensitive disclosures during the outage.”

He also noted a reputational dimension: “The FEC handles campaign finance disclosure rather than voting or ballot counting. Officials should make that distinction explicit in every update. An information vacuum is a lousy incident spokesperson.” Filipek recommended that the standard for recovery include evidence that restored services are trustworthy enough to support public scrutiny during the final days before an election, not merely a working webpage.

Jon Baker on threat-informed protection and calendar risk

Baker emphasized how the value of a public-facing system can change with the calendar. “This is why a threat-informed perspective on critical assets matters,” he said, arguing that defenders should identify the systems that carry the most weight in a given window and model how an attacker would operate against them. A filing system that is routine in July, Baker noted, “becomes a high-value target the week before an election,” and agencies that reassess priorities as dates approach are better positioned to respond.

Gabrielle Hempel: transparency systems are part of election security

Gabrielle Hempel, Security Operations Strategist at Exabeam, urged precision in describing incidents that touch the election ecosystem. “When we talk about election security, the conversation tends to start and end with voting machines. But the systems that support transparency matter as well,” she said, stressing that there is no indication the outage affected anyone’s ability to vote.

Hempel raised practical questions that follow from the outage: what backup processes exist, how will filings be received and disclosed while the system is down, and how quickly can the agency restore service without sacrificing data integrity? She added a broader civic concern: “Disruptions like these can have a massive impact on public trust without ever actually touching a ballot.”

What this means for campaign compliance firms, technologists, and the public

• Campaign compliance firms and campaigns: expect disrupted filing workflows and watch for FEC guidance about alternative submission methods and record-handling instructions during the outage.
• Technologists and security teams supporting disclosure systems: prioritize integrity checks and forensics to determine whether data were accessed or altered before resuming live filings, and treat calendar-driven windows as elevated risk periods.
• The public and media: an interruption to disclosure channels can temporarily obscure who is spending on races; the gap is procedural rather than a limitation on voting, but it can affect the information available to voters in the closing days.

The immediate factual questions rest with the FEC’s incident response: did the intruder gain access to data, how will time-sensitive disclosures be handled while systems are offline, and what evidence will the agency publish to show restored services are trustworthy? Until those answers arrive, the outage represents a disruption to transparency — not ballots — with consequences that experts say can be as consequential to public confidence as an attack on voting infrastructure.

https://www.securitymagazine.com/articles/102705-hackers-target-us-federal-election-commission