CISA and the FBI released a Public Service Announcement on 16 October 2026 warning election and campaign officials about cyber threats during the 2026 U.S. midterm elections. Malicious cyber actors may use phishing and smishing techniques to steal login credentials and other sensitive information or to install malware on targeted devices.
Election officials, candidates, and political organisations may be particularly attractive targets because of their access to voter registration data, current government officials, and sensitive campaign information.
Cyber actors are increasingly employing sophisticated phishing and smishing campaigns that closely resemble legitimate communications. These efforts may include convincing emails, text messages, audio, and video content designed to manipulate recipients into disclosing sensitive information or interacting with malicious links and attachments.
CISA and the FBI urge election officials, campaign personnel, and the public to review the PSA, follow the recommended cybersecurity practices, and remain vigilant for suspicious emails and mobile messages.