Hackers Targeted Election Systems Across America. What Happened on Election Day?

A newly released election security report reveals that hackers attempted to penetrate election-related computer systems, suspicious network activity was detected across multiple election offices, and an online ballot drop box locator experienced unusual traffic spikes.

In Washington state, officials confirmed that a cyberattack temporarily knocked an election information webpage offline.

The incidents did not establish that any votes were changed or voting machines compromised. But they demonstrate that America’s election infrastructure remained a target for malicious activity even as millions of citizens exercised their right to vote.

And with control of Congress changing hands, the security of the systems used to administer elections deserves scrutiny regardless of which party won.

Hackers Attempted to Breach Election Systems

According to a report published late Tuesday by Nextgov/FCW, an election office detected attempts to identify vulnerabilities in its online services and gain unauthorized access.

Another election-related agency reported repeated attempts to guess login credentials.

Investigators traced some of the suspicious activity to a single internet address. After the address was shared with other election offices, several reported observing malicious traffic from the same source.

The findings were detailed in an Election Day update from the Elections Infrastructure Information Sharing and Analysis Center, an organization that monitors threats against election infrastructure.

A person familiar with the incidents told Nextgov/FCW that the reported intrusion attempts had failed.

Nevertheless, the activity demonstrates how election offices can face coordinated cybersecurity threats while simultaneously managing the enormous logistical demands of a national election.

Washington Confirms Cyberattack on Ballot Drop Box Website

Washington Secretary of State Steve Hobbs confirmed Tuesday that his office had recently stopped a cyberattack targeting an online map showing ballot drop box locations.

The attack generated a surge of traffic that temporarily took the webpage offline.

The website was subsequently restored.

Hobbs credited the state’s cybersecurity defenses with limiting the damage.

The incident is significant because election interference does not necessarily require access to voting machines.

A cyberattack against a website providing ballot drop box locations could prevent voters from obtaining important information, particularly when they are attempting to return ballots before a deadline.

Washington officials have not reported evidence that the incident affected vote totals.

But the disruption illustrates a vulnerability that election administrators cannot afford to ignore.

Five Suspicious Traffic Spikes Reported on Election Day

The national election security report also documented five unusual traffic spikes affecting a state election office’s ballot drop box locator.

The suspicious activity reportedly began around 11 a.m. Eastern on Tuesday.

Officials responded by introducing a CAPTCHA system, requiring visitors to complete a verification process intended to distinguish legitimate users from automated traffic.

The unusual activity subsequently decreased.

The report did not establish whether voters were unable to access the service.

The episode nevertheless raises questions about how election offices protect public-facing websites against automated attacks during periods of exceptionally high demand.

Bomb Threats and False Voting Information Disrupted Election Day

Cybersecurity was not the only concern facing election administrators Tuesday.

In Toledo, Ohio, a bomb threat forced election workers at Beverly Elementary School to relocate voting operations outdoors while authorities searched the building.

The location was eventually cleared, and a court authorized affected voters to cast provisional ballots until 9:15 p.m.

Three schools serving as polling places in another state also received threatening telephone calls, including shooting and bomb threats.

Meanwhile, voters in Georgia’s Fulton County received misleading text messages claiming their polling places had changed.

County officials denied sending the messages and directed voters to official election resources.

In Westchester County, New York, ballot scanners experienced technical problems after election equipment had not been properly updated following a change to a local race.

Officials established procedures to preserve affected ballots for later processing.

The incidents varied considerably in their causes and consequences. Some involved threats, others technical failures, and still others false information.

None should automatically be interpreted as evidence of manipulated election results.

But each demonstrates the operational challenges involved in protecting the voting process.

Where Was Federal Election Security Oversight?

The incidents also raise questions about federal coordination and transparency.

The Cybersecurity and Infrastructure Security Agency, known as CISA, announced Monday that it would not conduct election security briefings with the media.

The agency has historically played an important role in helping state and local election officials identify cybersecurity vulnerabilities and respond to emerging threats.

CISA continues to offer voluntary technical assistance, including vulnerability assessments and cybersecurity support.

But the absence of public briefings during a national election raises a legitimate question: How should Americans receive timely, authoritative information when election-related security incidents occur?

State and local officials remain responsible for administering elections, but cyber threats frequently cross jurisdictional boundaries.

The reported activity involving the same suspicious internet address at multiple election offices illustrates why coordination matters.

What Officials Have and Have Not Confirmed

As of Tuesday evening, election security analysts had received no reports of foreign influence operations.

The reported attempts to access election-related computer systems were unsuccessful.

There is also no verified evidence from these incidents that hackers manipulated vote totals or compromised ballot-counting equipment.

Those facts are important.

But so is the distinction between an unsuccessful attack and the absence of a threat.

Election offices were targeted. Suspicious activity was detected. A voter information website was temporarily disrupted. Polling places received threats, and misleading information circulated among voters.

These were documented incidents, not hypothetical vulnerabilities.

The appropriate response is neither to declare the election compromised without evidence nor to dismiss security concerns because the reported defenses held.

Instead, officials should explain what happened, identify the vulnerabilities involved, and disclose what corrective measures are necessary.

The Election Is Over. The Security Questions Are Not.

With Tuesday’s voting concluded, election officials now face the responsibility of completing vote counts, investigating reported incidents, and demonstrating that election systems operated as intended.

The attempted intrusions and disruptions reported during the midterms provide a timely reminder that election security is not a problem that disappears when polling places close.

Americans deserve to know whether the attacks were isolated or connected, whether sensitive information was exposed, and whether election offices have sufficient resources to defend against future threats.

They also deserve clear distinctions between confirmed security incidents, technical malfunctions, and unsupported allegations of fraud.

Election integrity should not depend on whether Republicans or Democrats emerge victorious.

The responsibility to protect voting systems belongs to every administration, every state, and every election official entrusted with the democratic process.

Election Day may be over, but the questions about who targeted America’s election systems, and how those systems were protected, are only beginning.

Sources

• Nextgov/FCW, November 3, 2026: Election Office Reports Failed Attempts to Hack Its Online Services
• KIRO 7, November 3, 2026: Washington Officials Stopped Cyberattack Targeting Ballot Box Map
• Nextgov/FCW, November 3, 2026: Election Security Center Reports Limited Threats as Voting Glitches Fuel Fraud Claims