FEC filing system down a week before the midterms: late money goes undisclosed
A cyberattack took the FEC's electronic filing system offline Monday night, blocking late spending disclosures a week before the midterms.
The Federal Election Commission's electronic filing system has been offline since around 10 p.m. ET Monday, after the agency's website was targeted by a hacker or hackers, according to an email seen by Reuters. The FEC said its IT staff are working to restore service. Users can still search the site for past reports, but organizations cannot file the 24-hour and 48-hour spending reports that show how much political groups are spending on specific races.
The timing is the story. Election Day is November 3, seven days out, and super PACs and dark money groups are spending record sums in the final stretch. The 24- and 48-hour reports exist precisely for this window: they are the mechanism that puts late money on the record before voters cast ballots. With the filing system down, that real-time disclosure stops. The spending does not.
The FEC does not administer US elections, and the outage should have no effect on voters' ability to cast ballots. That distinction matters and should not be blurred. This is not a ballot-access incident. It is a transparency incident, and the transparency function is the one the FEC actually owns.
Several things are not yet known. Who is behind the intrusion has not been established.
For security teams, the practical read is unglamorous. Availability attacks against public-facing filing and disclosure systems achieve disruption without touching a single ballot, and the political calendar supplies the amplification. The window between intrusion and public understanding is where the damage sits.
The disclosure gap will close when the system returns.
Sources

Editor & Founder
Peter OlaleruPeter is the founder and editor of Measured Take and a cybersecurity professional. He leads our news, fact checks, sport and guides from around the world, with a particular eye on cyber attacks, data breaches, scams, AI and misinformation.
More from Cybersecurity
October 27, 2026
PHP2Shell Exploitation Confirmed: CISA Gives Federal Agencies Three Days to Patch
October 27, 2026
What we know about the UNM Health System outage that closed 30 clinics and diverted ambulances
October 26, 2026
90 victims, 8.2 million records: what South Korea's first AI hacking case reveals
Conversation
Reader notes
Loading comments...