State election officials across the nation dismissed a federal cybersecurity plan released just 40 days before the November midterms, calling it inadequate and belated after the administration eliminated critical election security resources last year.
Plan Released After Officials Secured Private Help
The U.S. Cybersecurity and Infrastructure Security Agency released a 13-page election infrastructure security plan on Thursday, outlining potential threats and available services for election officials. The document warns of software vulnerabilities, voter registration database hacks, insider threats, and physical security incidents like bomb threats that targeted polling locations in 2024. However, state officials say they already paid for private security services after federal support vanished.
Nevada’s Democratic Secretary of State Cisco Aguilar questioned the timing. He said Nevada taxpayers had to fund cybersecurity measures that federal authorities should have provided. Homeland Security Secretary Markwayne Mullin initially promised the plan by mid-August but delivered it five weeks before voters head to the polls.
Agency Gutted After First Trump Term
CISA, established in 2018 to protect election systems from foreign threats, saw its election security role dismantled during the current administration. The agency lost approximately 1,000 employees and suffered a 10 million dollar cut to two cybersecurity programs, including one specifically designed to assist state and local election officials. The agency has operated throughout Trump’s second term without a Senate-confirmed director, cycling through acting leaders instead.
Multiple secretaries of state reported that services previously offered by CISA, including live tabletop exercises and penetration testing to evaluate system security, became unavailable before the 2026 midterms. Minnesota Secretary of State Scott Simon expects to spend roughly 250,000 dollars on private vendors for penetration testing. Maine Secretary of State Shenna Bellows described communications with CISA as sporadic and irregular, noting that trust with federal officials eroded after the agency cuts.
Critical Intelligence Gaps Remain
The newly released plan contains no specific information about 2026 threats from Russia, Iran, or China, despite these nations’ documented attempts to interfere in American elections through hacking and influence campaigns. Bellows emphasized the importance of restoring intelligence briefings about foreign adversary threats that election officials previously received. The plan claims the Department of Homeland Security has consistently supported CISA’s security services, a statement numerous election officials disputed as inaccurate based on their direct experience.
