States Accuse DHS Of Giving Them Bad Information About Russian Hacking

DHS is standing by its initial assessment that 21 states were targeted.
|

Top election officials in two states say the Department of Homeland Security gave them faulty information last week when it said Russian hackers scanned their election systems last year.

The accusations underscore the persistent barriers in information sharing as the federal government and states try to respond to hacking in last year’s election. DHS informed election officials in 21 states on Friday that Russian hackers had tried to access voter information, the first time many states found out they had been targeted. DHS has faced criticism for being slow to share information with states.

Now election officials in Wisconsin and California say DHS has provided them with additional information showing that Russian hackers actually scanned networks at other state agencies unconnected to voter data. In Wisconsin, DHS told officials on Tuesday that hackers had scanned an IP address belonging to the Department of Workforce Development, not the Wisconsin Elections Commission.

California Secretary of State Alex Padilla (D) said in a statement Wednesday that DHS gave his office additional information saying hackers had attempted to target the network of the California Department of Technology’s statewide network and not the secretary of state’s office.

“Last Friday, my office was notified by the U.S. Department of Homeland Security (DHS) that Russian cyber actors ‘scanned’ California’s Internet-facing systems in 2016, including Secretary of State websites. Following our request for further information, it became clear that DHS’ conclusions were wrong,” Padilla said in a statement. “Our notification from DHS last Friday was not only a year late, it also turned out to be bad information. To make matters worse, the Associated Press similarly reported that DHS has reversed itself and ‘now says Russia didn’t target Wisconsin’s voter registration system,’ which is contrary to previous briefings.”

Scott McConnell, a DHS spokesman, said in a statement the agency stood by its assessment that 21 states were targeted by Russian hackers last year. He suggested hackers still could have targeted election records, even if they did not target the IP addresses of the state’s election body.

“This assessment was based on a variety of sources, including scanning detected from malicious IP addresses and intelligence information that cannot be publicly disclosed,” McConnell said in the statement. “While we defer to each state whether to disclose the circumstance surrounding their networks, it’s important to point out that discussions of specific IP addresses do not provide a complete picture of potential targeting activity. The Department stands by its assessment that Internet-connected networks in 21 states were the target of Russian government cyber actors seeking vulnerabilities and access to U.S. election infrastructure.”

“In the majority of the 21 states targeted, only preparatory activity like scanning was observed,” McConnell said in a follow-up statement on Thursday. “In some cases, this involved direct scanning of targeted systems.  In other cases, malicious actors scanned for vulnerabilities in networks that may be connected to those systems or have similar characteristics in order to gain information about how to later penetrate their target.”

Hackers can look broadly for a vulnerability to access the information they want, said Candice Hoke, the founding co-director of Center for Cybersecurity and Privacy Protection at the Cleveland-Marshall College of Law.

“The key point here is that hackers are quite knowledgeable about network configuration blunders that allow access to a sought system or resource — like election operations — via a less valuable asset that is internet facing or less well defended,” she wrote in an email. “Unquestionably, hackers will attempt to gain access to election and other mission critical governmental systems through systems having no connection to elections. They often are simply exploring to see what’s possible, what network architecture mistakes can be exploited.”

While 21 states were targeted last year, DHS has said almost all of the attempts were unsuccessful, and state election officials have compared the effort to a burglar checking the locks on doors. Only in Illinois did hackers access voter information.

DHS says there’s no evidence any votes were changed because of hacking.

President Donald Trump has downplayed Russia’s efforts to influence last year’s election, only saying that the country was “probably” behind those attempts. U.S. intelligence agencies have said they’re certain Russia was behind attempted breaches.

The 21 states DHS said were targeted last year are: Alabama, Alaska, Arizona, California, Colorado, Connecticut, Delaware, Florida, Illinois, Iowa, Maryland, Minnesota, North Dakota, Ohio, Oklahoma, Oregon, Pennsylvania, Texas, Virginia, Washington state and Wisconsin.

This story has been updated with a follow-up statement from Scott McConnell. 

Support HuffPost

At HuffPost, we believe that everyone needs high-quality journalism, but we understand that not everyone can afford to pay for expensive news subscriptions. That is why we are committed to providing deeply reported, carefully fact-checked news that is freely accessible to everyone.

Whether you come to HuffPost for updates on the 2024 presidential race, hard-hitting investigations into critical issues facing our country today, or trending stories that make you laugh, we appreciate you. The truth is, news costs money to produce, and we are proud that we have never put our stories behind an expensive paywall.

Would you join us to help keep our stories free for all? Your contribution of as little as $2 will go a long way.

Support HuffPost

Before You Go

Best Scenes From Asheville On HuffPost's Listen To America Tour
(01 of23)
Open Image Modal
HuffPost visits Asheville, North Carolina, on Sept. 25, 2017, as part of "Listen to America: A HuffPost Road Trip." (credit:Damon Dahlen/HuffPost)
(02 of23)
Open Image Modal
HuffPost staffer Meredith Melnick (left) speak to panelists Jacqueline Sitton, Steve Heatherly, Lucretia Stargell, Dr. Beth Buys and Frank Taylor during the "Women's Health & Rural Hospitals" event at Lenoir-Rhyne University's Center for Graduate Studies in Asheville. (credit:Damon Dahlen/HuffPost)
(03 of23)
Open Image Modal
Jacqueline Sitton speaks to the audience. (credit:Damon Dahlen/HuffPost)
(04 of23)
Open Image Modal
Dr. Brie Folkner cries while speaking to the panelists about one of her patients. (credit:Damon Dahlen/HuffPost)
(05 of23)
Open Image Modal
The audience filled most of the room during the event. (credit:Damon Dahlen/HuffPost)
(06 of23)
Open Image Modal
Dr. Beth Buys speaks to the audience. (credit:Damon Dahlen/HuffPost)
(07 of23)
Open Image Modal
North Carolina state Sen. Terry Van Duyn speaks with audience members during a question and answer session. (credit:Damon Dahlen/HuffPost)
(08 of23)
Open Image Modal
A person wearing a jacket decorated with a Confederate flag passes by on a moped in Asheville. (credit:Damon Dahlen/HuffPost)
(09 of23)
Open Image Modal
People wait to be interviewed during HuffPost's visit to Asheville. (credit:Damon Dahlen/HuffPost)
(10 of23)
Open Image Modal
North Carolina state Sen. Terry Van Duyn is interviewed by HuffPost staffer Meredith Melnick during the visit to Asheville. (credit:Damon Dahlen/HuffPost)
(11 of23)
Open Image Modal
A Listen to America sign sits outside a video station. (credit:Damon Dahlen/HuffPost)
(12 of23)
Open Image Modal
People wait to be interviewed by HuffPost at the 12 Bones restaurant. (credit:Damon Dahlen/HuffPost)
(13 of23)
Open Image Modal
Ashlee Lafferty is interviewed by Michael Pace and Marina Fang during HuffPost's visit. (credit:Damon Dahlen/HuffPost)
(14 of23)
Open Image Modal
Murals and graffiti cover the walls of many buildings in the River Arts District of Asheville. (credit:Damon Dahlen/HuffPost)
(15 of23)
Open Image Modal
Sarah Grossman (center) interviews Elena Monsour on the bus. (credit:Damon Dahlen/HuffPost)
(16 of23)
Open Image Modal
Murals and graffiti cover the walls of many buildings. (credit:Damon Dahlen/HuffPost)
(17 of23)
Open Image Modal
A sign for 12 Bones Smokehouse appears across from the HuffPost video activation site in Asheville. (credit:Damon Dahlen/HuffPost)
(18 of23)
Open Image Modal
Interns from Mission Health take photos of the HuffPost bus. (credit:Damon Dahlen/HuffPost)
(19 of23)
Open Image Modal
Zach Voigt, an intern at Mission Health, escorts Robert Haskins to the bus. (credit:Damon Dahlen/HuffPost)
(20 of23)
Open Image Modal
Local TV station WLOS takes video during HuffPost's visit to Asheville. (credit:Damon Dahlen/HuffPost)
(21 of23)
Open Image Modal
Marc Janks speaks to fellow HuffPost staffers Sarah Grossman (left) and Robyn Malcolm. (credit:Damon Dahlen/HuffPost)
(22 of23)
Open Image Modal
Murals and graffiti appear on many buildings in the River Arts District. (credit:Damon Dahlen/HuffPost)
(23 of23)
Open Image Modal
A street scene in Asheville, North Carolina. (credit:Damon Dahlen/HuffPost)