Russian hackers targeted 21 states before 2016 election, FBI still investigating

The disclosure was made for the first time during a hearing held by the Senate Select Committee on Intelligence Wednesday.

Government officials from the Department of Homeland Security and Federal Bureau of Investigations said Wednesday that election officials and systems in a total of 21 states were targeted by Russian hackers in the months preceding the 2016 presidential election.

“We have evidence of election-related systems in 21 states that were targeted,” said Jeanette Manfra, acting deputy undersecretary for cybersecurity and communications at the DHS’s National Protection and Programs Directorate.

The disclosure was made for the first time during a hearing held by the Senate Select Committee on Intelligence focused on Russian interference in the U.S. election.

Manfra did not name the individual states which were targeted, nor did she explain what “targeted” meant in this context. She also did not say how many of the targeted states were ultimately hacked and if, for example, any data was exfiltrated in these select incidents.

The “owners” of targeted systems were notified about the malicious activity, said Manfra, but that did not necessarily include widespread disclosure or communication with state secretary offices or other state officials.

“I prefer not to go into those details in this forum,” Manfra said.

Assistant Director of the FBI’s Counterintelligence Division Bill Priestap, who testified alongside Manfra, also declined to provide further specifics because of the existence of open investigations into some of these incidents.

In response to Manfra’s statement, Sen. Mark Warner, D-Va., the top Democrat on the Senate panel, expressed frustration that DHS and the FBI could not be more transparent about which individual states were targeted.

Recent report from Bloomberg and Politico have revealed new details about a series of previously unreported intrusions into election systems and other digital processes tied to the voting process, which can include both software vendors and state-owned computers.

Bloomberg reported last week that a total of 39 states were impacted by Russia’s efforts to probe related systems; a figure higher than that disclosed by DHS in Wednesday’s open hearing.

Although Trump administration officials say that voting results were not affected by these precursory cyberattacks, DHS has not conducted a comprehensive audit to see if tallies were changed, according to The Daily Beast.

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

• Jail time for Maine child in 764 marks turning point in federal law enforcement

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure