US election security official highlights email threat

SANTA FE, N.M. (AP) — Beware the phishing attempts.

An election security official with the U.S. Department of Homeland Security today warned top state election officials nationwide to safeguard against fraudulent emails targeting state and local election workers.

The emails appear as if they come from a legitimate source and contain links that, if clicked, can open up election data systems to manipulation or attacks.

Geoff Hale, director of the department's Election Security Initiative, told a gathering of secretaries of state that the nation's decentralized voting systems remain especially vulnerable to emails that can trick unsuspecting workers into providing access to elections databases.

"We know that phishing is how a significant number of state and local government networks become exploited," Hale told scores of secretaries of state gathered in the New Mexico capital city. "Understanding your organization's susceptibility to phishing is one of the biggest things you can do."

Email phishing schemes haunted the electoral landscape in 2016. Hillary Clinton's 2016 campaign chairman, John Podesta, fell for trick emails on his personal account, allowing Russians to steal thousands of messages about the inner workings of the campaign.

Targeted phishing emails also allowed Russians to gain access to the Democratic Congressional Campaign Committee's networks and eventually exploited that to gain entry to the Democratic National Committee.

In the run-up to the 2020 vote, Iowa Secretary of State Paul Pate, a Republican, is calling phishing the No. 1 concern when it comes to securing election-related computer systems in his state.

Iowa's 100 county political subdivisions make the threat especially challenging. He said his fear is that phishing emails may target overlooked public employees who don't have adequate training.

"If they get into the courthouse, they can then get into the county auditor, which is our elections folks – and that's not a good thing," Pate said.