VULNpocalypse
MediumEcosystem changeOngoing

FEC e-filing system offline after reported attempt to breach, Reuters reports

Reuters reports the US FEC took its e-filing system offline after a bad actor attempted to breach it, so filers should watch FEC status notices.

Published
Exploitation
Not confirmed, an FEC email seen by Reuters describes a bad actor attempting to breach systems, and no successful breach or data access is confirmed

What happened

According to a Reuters report published by Indian Express, the US Federal Election Commission’s website was targeted by a hacker or hackers. Reuters bases this on an email it saw. The report says this disrupted the agency’s electronic filings system a week before the November 3 elections.

Reuters reports that an FEC electronic filings officer wrote to several campaign compliance firms: “We have a bad actor attempting to breach FEC systems. As a result, we’ve had to temporarily shut down our web facing services.” In a statement quoted in the same report, the FEC said its “electronic filing system is currently offline and our IT staff are actively working to restore service” (Indian Express).

The report says the following about the timeline and the agency’s response (Indian Express):

  • An FEC status message said the filing system had been down since around 10 p.m. ET on Monday.
  • A later status message, around 8 p.m. ET on Tuesday, said the issue “has been identified and a fix is being implemented.”
  • An FEC website notice still said the filing system remained offline at the time of the report.
  • The Cybersecurity and Infrastructure Security Agency and the FBI both referred questions to the FEC.

The source does not confirm the following:

  • Whether any breach succeeded.
  • How the attempt was made.
  • Who was behind it.
  • Whether any data was accessed.

The FEC had not returned a request for comment at the time of the report. No independent verification beyond this single report is available.

Am I affected?

  • Political committees and compliance staff: Indian Express reports that the outage prevents organizations from filing the FEC’s 24-hour and 48-hour spending reports. Campaign finance officers could not file mandatory reports late on Monday (Indian Express).
  • People researching filings: The FEC said users could still search the website for past reports (Indian Express).
  • Voters: The report states that the FEC does not administer US elections. It says the outage should have no effect on voters’ ability to cast ballots (Indian Express).
  • Filer accounts or data: Any impact on filer accounts or submitted data is not confirmed.

What to do now

  1. If you are a filer, check the FEC website status notice before attempting to submit 24-hour or 48-hour reports. The source reports the system was offline and a fix was being implemented.
  2. Follow official FEC communications for restoration status and any filing guidance. The source does not describe any FEC guidance on deadlines during the outage.
  3. Treat any further details about the attacker, entry point or data exposure as not confirmed until the FEC publishes them.

Sources