DDoS Attacks Could hinder access to Voting Information, Would not Prevent Voting

US ELECTIONS – Cybersecurity Updates

The Federal Bureau of Investigation (FBI) and Cybersecurity and Infrastructure Security Agency (CISA) are issuing this announcement to raise awareness that Distributed Denial of Service (DDoS) attacks on election infrastructure can hinder access to voting information but would not prevent voting.

Distributed Denial of Service (DDoS) attacks are common cyber-attacks that can slow or render election-related public-facing websites inaccessible, which could hinder voters’ ability to access voting information or voting results. A DDoS attack occurs when attackers flood a public-facing, Internet-accessible server with requests, rendering the targeted server slow or inaccessible. This prevents users from accessing online resources, such as web pages and online accounts, and may disrupt business activities for a period of time.

The public should be aware that if foreign actors or cybercriminals were able to successfully conduct DDoS attacks against election infrastructure, the underlying data and internal systems would remain uncompromised, and anyone eligible to vote would still be able to cast a ballot. In the past, cyber actors have falsely claimed DDoS attacks have compromised the integrity of voting systems in an effort to mislead the public that their attack would prevent a voter from casting a ballot or change votes already cast. The FBI and CISA have no reporting to suggest a DDoS attack has ever prevented a registered voter from casting a ballot or compromised the integrity of any ballots cast.

The FBI and CISA have worked closely with election officials across the country to identify alternative channels to disseminate information to voters, such as verified social media accounts, traditional media, and other backup resources. Election officials have multiple safeguards and plans in place to limit the impact and recover from a DDoS incident with minimal disruption to the voting process.

RECOMMENDATIONS

• Seek out information about how to vote and polling place information prior to Election Day.
• Seek out information from trustworthy sources, verify who produced the content, and consider their intent.
• Rely on state and local government election officials for information about registering to vote, polling locations, voting by mail, and final election results.
• Determine where to vote before Election Day.
• Verify the web address of legitimate websites and manually type the address into your browser.
• Do a quick search for other reliable sources before sharing a controversial or emotionally charged article, post, tweet, or meme you read. Studies show that being well informed requires getting information from many places. If it isn’t from a credible source or if you can’t find a second reliable source, don’t share it.

The FBI is responsible for investigating and prosecuting election crimes, malign foreign influence operations, and malicious cyber activity targeting election infrastructure and other U.S. democratic institutions. CISA helps critical infrastructure owners and operators, including those in the election community, remain resilient against physical and cyber threats. The FBI and CISA provide services and information to uphold the security, integrity, and resiliency of the U.S. electoral processes.