US Federal Election Commission shuts down its e-filing system after attempted intrusion a week before the midterms
US Federal Election Commission electronic filing system
The US Federal Election Commission took its electronic filing system and other web-facing services offline on the night of Oct 26 2026 (around 10 p.m. ET) after what an FEC filings officer called "a bad actor attempting to breach FEC systems", according to an email seen by Reuters. Campaigns and PACs can't file the 24- and 48-hour spending reports due in the final weeks before the Nov 3 midterms, while searching past reports still works. A person familiar with the investigation told POLITICO the attempted intrusions were noticed and the targeted parts were shut down, calling it narrow and compartmentalized. The FEC hasn't said whether any data was accessed. It doesn't run elections, so voting isn't affected.
Why this severity: Attempted intrusion on a US federal agency; no confirmed data access so far, but campaign finance disclosures are blocked days before an election
- Started
- Oct 26, 2026
Affected
Not published yet
Fixed in
No fixed release yet
Timeline3
The FEC says the e-filing system is still offline and its IT staff are working to restore service; searching past reports still works. CISA refers questions to the FEC.
A person familiar with the investigation tells POLITICO FEC security staff noticed attempted intrusions and shut down the parts of the filing system being attacked.
The FEC's electronic filing system goes offline around 10 p.m. ET. An FEC filings officer tells compliance firms a bad actor is attempting to breach FEC systems and web-facing services have been shut down.
News & write-ups3
- Hackers target FEC system, disrupting campaign finance disclosures (Reuters)Reuters via NBC News · Oct 27, 2026
- Hackers attempted to access national campaign finance systems 1 week before midtermsPOLITICO · Oct 27, 2026
- FEC electronic filing system faces outage before midterm electionsThe Hill · Oct 27, 2026
Get an email when a new major security incident drops. No spam, unsubscribe any time.