Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

On November 3, 2020, U.S. officials reported no significant publicly reported cybersecurity incidents on Election Day. They continued monitoring as ballots were counted, with attention shifting toward election-results websites and disinformation as well as voting systems. That is the historical picture described in CyberScoop’s November 4, 2020 report—not a current threat assessment.

What officials said happened on Election Day

Officials told reporters there had been no significant publicly reported cybersecurity incidents during Election Day. That wording does not mean there was no cyber activity; it describes what had been publicly reported at the time. Election administrators and federal officials kept monitoring for malicious activity while votes were counted.

Eddie Perez, then global director of technology development and open standards at the Open Source Election Technology Institute, said: “It appears as if that high state of readiness paid off.” A senior CISA official speaking anonymously on background described the night as “another Tuesday on the internet.”

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Technical glitches were not described as cyberattacks

The report noted technical glitches in some counties in Georgia and Ohio. Officials characterized them as non-malicious technical errors, not malicious intrusions. Administrators reverted to paper backups so voting could continue.

This distinction matters: a system problem can disrupt operations without being evidence of an attack. The report does not say the glitches changed votes.

Why monitoring continued during vote counting

The Election Infrastructure Information Sharing and Analysis Center monitored activity and used sensors on state and local IT networks, according to the report. Officials and experts were also watching for disinformation and low-cost attacks against websites that published election results.

Reporting systems and voting systems pose different risks

A website that reports results is not the same thing as technology used to cast or count ballots. A disruption or compromise of a results website could confuse the public or make information unavailable; officials’ concern was that such activity could cast doubt on results. The report distinguished that risk to public confidence from an attack that changes vote integrity.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A senior CISA official summarized the shift in focus during a Tuesday-night briefing: “The [potential] attack surface is shifting from the actual voting technology into a different set, and that includes election-night reporting.”

What officials had alleged before Election Day

The November 4 report also recalled allegations U.S. officials had made about Iranian and Russian cyber activity roughly two weeks earlier. These were claims attributed to officials at the time, not findings independently established by the report as a present-day assessment.

  • Officials alleged that Iranian actors had conducted reconnaissance of election-related websites in 10 states and that a voter-registration database had been compromised in at least one case.
  • Officials said suspected Russian government-linked hackers had accessed some state or local IT networks, but that the activity did not appear directed at election infrastructure.
  • The report said officials had found no evidence in either case that voter data had been altered or the voting process affected.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

How to read the report today

The article is a snapshot published November 4, 2020, while votes were still being counted after Election Day on November 3. Its central point is the distinction between a lack of significant publicly reported incidents that day and the need to keep watching for threats to election reporting and confidence. Its attributed allegations and incident assessments should be understood in that specific 2020 context, rather than treated as a current account of election security.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.