House Republican campaign arm hacked during 2018 election

The breach exposed thousands of NRCC emails to the attacker and appears to be the work of a sophisticated actor, a source familiar with the matter told CyberScoop.

The National Republican Congressional Committee — the House GOP’s campaign organization — suffered a cyber-intrusion during the 2018 election, a committee spokesman said Tuesday.

“The NRCC can confirm that it was the victim of a cyber intrusion by an unknown entity,” NRCC spokesman Ian Prior said in a statement.

“The cybersecurity of the committee’s data is paramount, and upon learning of the intrusion, the NRCC immediately launched an internal investigation and notified the FBI, which is now investigating the matter,” said Prior, a vice president at Mercury Public Affairs, a firm helping the NRCC respond to the breach.

The NRCC had no further details beyond the statement.

The hack compromised thousands of NRCC emails and appears to be the work of a sophisticated actor, a source familiar with the matter told CyberScoop.

Politico was first to report on the NRCC breach, citing three senior party officials. Those officials would not say who was behind the hack, but “they privately believe it was a foreign agent” due to the nature of the breach, Politico reported. The email accounts of four senior NRCC officials were compromised in the hack, the report said.

In a statement, cybersecurity firm CrowdStrike said that the NRCC had asked the firm to investigate the breach in April. “Prior to the incident, CrowdStrike was helping to protect NRCC’s internal corporate network, which was not compromised in this incident,” added CrowdStrike, which also helped the Democratic National Committee respond to its 2016 breach.

The 2016 hack of the DNC and the Democratic Congressional Campaign Committee by Russian agents was a key moment in the presidential campaign. Through proxies like Wikileaks, the Russians released thousands of DNC emails in an effort to undermine the Democrats and the candidacy of Hillary Clinton.

President Donald Trump has publicly taunted the DNC for the 2016 breach and claimed that the Republicans had stronger cybersecurity. In July, Trump told CBS News that the DNC “should be ashamed of themselves” for the 2016 hack.

“I heard they were trying to hack the Republicans, too,” Trump added. “But, and this may be wrong, but they had much stronger defenses.”

In the aftermath of the 2016 election and in preparation for the 2018 midterms, Democrats and Republicans ramped up cyberdefenses for their campaign infrastructure. While U.S. election officials hailed progress in security, it ultimately wasn’t enough to come away from the election season unscathed.

Update, 6:01 p.m. ET: This story has been updated with a statement from CrowdStrike.

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure