Attempted intrusion forces FEC to take web-facing services offline, disrupting campaign finance filings before midterms
The U.S. Federal Election Commission (FEC) shut down its web-facing services after what an FEC electronic filings officer described as a "bad actor attempting to breach FEC systems", per Reuters. The electronic filing service became unavailable around 10 p.m. ET on October 26, 2026, days before the November 3 midterms. The outage blocked 24-hour and 48-hour spending disclosures, while previously filed reports stayed searchable. Officials have not confirmed a successful breach or data theft, and no attacker, entry point or malware has been publicly identified.
Detalhes técnicos
- The evidence describes a protective shutdown after an attempted intrusion, not proof that attackers disabled the service.
- No exploited vulnerability, malware family, entry point or attribution has been published.
- The FEC status page logged several investigation updates; an October 27 notice (8:17 p.m. ET) said the issue was identified and a fix was being implemented. The incident was still listed as unresolved.
- The FEC oversees campaign finance, not election administration, so voting and ballot counting are not affected.
Remediação
- No official remediation guidance was published. The FEC IT staff were working to restore access.
- Campaign compliance firms were notified by email and should track the FEC status page for filing availability.
Linha do tempo
-
Attempted intrusion forces FEC to take web-facing services offline, disrupting campaign finance filings before midterms
ler a análise desta fonte ocultar
The U.S. Federal Election Commission (FEC) shut down its web-facing services after what an FEC electronic filings officer described as a "bad actor attempting to breach FEC systems", per Reuters. The electronic filing service became unavailable around 10 p.m. ET on October 26, 2026, days before the November 3 midterms. The outage blocked 24-hour and 48-hour spending disclosures, while previously filed reports stayed searchable. Officials have not confirmed a successful breach or data theft, and no attacker, entry point or malware has been publicly identified.
Technical Details
- The evidence describes a protective shutdown after an attempted intrusion, not proof that attackers disabled the service.
- No exploited vulnerability, malware family, entry point or attribution has been published.
- The FEC status page logged several investigation updates; an October 27 notice (8:17 p.m. ET) said the issue was identified and a fix was being implemented. The incident was still listed as unresolved.
- The FEC oversees campaign finance, not election administration, so voting and ballot counting are not affected.
Remediation
- No official remediation guidance was published. The FEC IT staff were working to restore access.
- Campaign compliance firms were notified by email and should track the FEC status page for filing availability.