Election Threats Target Campaign Systems, Not Voting Machines

Summary
Check Point’s report says election threats are focused on campaign email, fundraising platforms, and election-themed websites rather than voting systems. It cites email in 82% of malicious attacks and warns AI is making phishing and manipulated content more convincing.
Key points
- Check Point says campaign email accounts, communication tools, websites, and fundraising platforms are primary targets—not voting machines or ballot-counting systems.
- Email accounted for 82% of malicious attacks, according to the report.
- Check Point found about 9,500 stolen passwords associated with ActBlue and about 6,500 with WinRed; it says these could be used in opportunistic attempts to access other accounts.
- In January, about 1,300 new websites included “election” and about 4,010 included “vote”; researchers believe many may be used for malicious purposes, though not all will be.
- Check Point warns AI is making phishing, fake websites, and manipulated political content more convincing and harder to detect.
Article Details
- Publisher
- Check Point Software Technologies
- Report Period
- 2026 midterm election cycle
- Scope
- Election-related threats targeting campaign email accounts, websites, and fundraising platforms; voting machines and ballot-counting systems are not the main focus.
- Key Statistics
- Check Point reported that email accounted for 82% of malicious attacks.
- About 9,500 stolen passwords were found at ActBlue, according to the report.
- About 6,500 stolen passwords were found at WinRed, according to the report.
- In January, about 1,300 newly registered websites included the word “election”; researchers believed many such sites would be used maliciously, but the article says not every site would be malicious.
- In January, about 4,010 newly registered websites included the word “vote”; researchers believed many such sites would be used maliciously, but the article says not every site would be malicious.
