All Sectors Bulletin – CISA Resource
Virginia Fusion Center |Shield Program
All Sectors Bulletin
Dispelling Election Related Rumors
-DHS CISA-
,
Please see the below resource from the Department of Homeland Security -Cybersecurity and Infrastructure Security Agency.
To view this mailing as a webpage click here to be taken to CISA’s Rumor Control Website.
—–
From CISA
#PROTECT2020 RUMOR VS. REALITY
Mis- and Disinformationcan undermine public confidence in the electoral process, as well as in our democracy.
A message from the CISA Director.
This resource is for people with questions about the security of their vote and preemptively debunks potential areas for disinformation. You canlearn more about mis- and disinformationfrom CISA’sCountering Foreign Influence Task Force.
Rumors vs Reality
❌Rumor: I received an election-related email that looks like it came from a certain organization, so the organization must have sent it.
✔️Reality:Cyber actors can forge emails to look like they came from someone else. This common tactic is called email spoofing, where attackers send an email pretending to be from a specific domain or organization in an attempt to harvest personal data or spread malware. Such spoofed emails can also be used to disseminate false or inflammatory information. To send realistic-looking emails, cyber actors may forge the sender address to hide the origin of an email or set up spoofed domains that have a slightly different name from the real domain. Always be wary of out of the ordinary emails and look to trusted sources, such as the organization’s official website, in order to verify. Never provide personal information or download files from suspicious emails. If you receive a suspicious election-related email, consider reporting it to your local election official or local FBI field office.
Useful Resources
- FBI-CISA Public Service Announcement: Spoofed Internet Domains and Email Accounts Pose Cyber and Disinformation Risks to Voters
- Actions to Counter Email-based Attacks on Election-Related Entities, CISA
- Enhanced Email and Web Security, CISA
❌Rumor: A malicious actor can easily defraud an election using the Federal Write-In Absentee Ballot (FWAB).
✔️Reality:This is false. Changing an election using fraudulently submitted FWABs would be highly difficult to do. This is because election offices have security measures in place to detect such activity.
The FWAB is primarily used as a backup ballot for military and overseas voters who requested but did not yet receive their absentee ballot. FWAB users must provide their signature and meet varying state voter registration and absentee ballot request requirements, which can include provision of full or partial social security number, state identification number, proof of identification, and/or witness signature.
Since only military and overseas voters are eligible to use the FWAB, relatively few of them are submitted each election. In 2016, states reported that only 23,291 total FWABs were submitted nationwide, with all but six states receiving less than 1,000 FWABs statewide. Since use is relatively rare, spikes in FWAB usage would be detected as anomalous.
Useful Resources
- 52 U.S.C. § 20303
- Voting Assistance Guide, FVAP
- Election Forms and Tools for Sending, FVAP
- 2016 Election Administration and Voting Survey Comprehensive Report, EAC
PRE-ELECTION
❌Rumor: Someone possessing or posting voter registration data means voter registration databaseshave been hacked.
✔️Reality:Voter registration information is public information and is available to political campaigns, researchers, and often members of the public, frequently for purchase. According to a recent FBI andCISA public alert, cyber actors may make false claims of “hacked” voter information to undermine confidence in U.S. democratic institutions.
Useful Resources
- FBI-CISA Public Service Announcement: False Claims of Hacked Voter Information Likely Intended to Cast Doubt on Legitimacy of U.S. Elections
- Access To and Use Of Voter Registration Lists, NCSL
❌Rumor: An online voter registration website experiences an outage and claims are made the election has been compromised.
✔️Reality:Outages in online voter registration systems occur for a variety of reasons, including configuration errors, hardware issues, natural disasters, communications infrastructure issues, and distributed denial of service (DDoS) attacks. As CISA and FBI warned in arecent public alert, a system outage does not necessarily mean the integrity of voter registration information or any other election system has been impacted. When an outage occurs, election officials work to verify the integrity of voter registration information.
Useful Resources
- FBI-CISA Public Service Announcement: False Claims of Hacked Voter Information Likely Intended to Cast Doubt on Legitimacy of U.S. Elections
- Securing Voter Registration Data, CISA
- Your local or state election officialsEAC state-by-state directory
❌Rumor: If state or local jurisdiction information technology (IT) has been compromised, the election results cannot be trusted.
✔️Reality:Hacks of state and local IT systems should not be minimized; however, a compromise of state or local IT systems does notmean those systems are election-related. Even if an election-related system is compromised, a compromise of a system does not necessarily mean the integrity of the vote has been affected. Election officials have multiple safeguards and contingencies in place, including provisional ballots or backup paper poll books that limit the impactfrom a cyber incident with minimal disruption to voting. Additionally, having an auditable paper record ensures that the vote count can be verified and validated.
Useful Resources
- FBI-CISA Public Service Announcement: Cyber Threats to Voting Processes Could Slow But Not Prevent Voting
- Election Infrastructure Cyber Risk Assessment, CISA
❌Rumor: Videos, imagesor emails suggesting voter registration information is being manipulated means voters will not be able to vote.
✔️Reality: Claims are easy tofake and can be used for disinformation purposes. If voter registration data were to be manipulated, states have several safeguards in place to enable voters to vote, including offline backups of registration data, provisional ballots, and in several states, same-day registration.
Useful Resources
- FBI-CISA Public Service Announcement: False Claims of Hacked Voter Information Likely Intended to Cast Doubt on Legitimacy of U.S. Elections
- Securing Voter Registration Data, CISA
- Securing Voter Registration Systems, NCSL
❌Rumor: A malicious actor can easily defraud an election by printing and sending in extra mail-in ballots.
✔️Reality:This is false. Committing fraud through photocopied or home-printed ballots would be highly difficult to do successfully. This is because each local election office has security measures in place to detect such malicious activity. While the specific measures vary, in accordance with state and local election laws and practices, such security measures include signature matching, information checks, barcodes, watermarks, and precise paper weights.
Useful Resource
ELECTION DAY
❌Rumor: Someone is claiming to know who I voted for.
✔️Reality:Ballot secrecy is guaranteed by law in all states.Election officials implementvarioussafeguardsto protect voters’ choices from beingviewableor knowableby others, including the election officials themselves.With few exceptions, these security measuresensure that individual ballots, once cast,cannot be traced back to the voters who cast them. For in-person voting,privacymeasuresinclude dividers between voting stations and requirements that poll workers maintain distance from voters while they are casting their ballots.For mail-in and provisional voting, election officials follow strict procedures to ensureballot secrecy when ballots are retrieved from mail-in and provisional ballot envelopes.
Ballot secrecy rights may bevoluntarilywaived by voters incertaincircumstances,and waiver may be required in some of these,such asmilitary and overseas votersthatvote by fax or e-mail.
While ballot choices are secret in almost all circumstances, a voter’s party affiliation and history of voting generallyarenot.Information containedin voter registrationrecords, such as name, address, phone number,andpolitical party affiliation (in states with party-basedvoterregistration),isgenerally available to political parties and others. This dataalso regularlycontainsinformation on whethera votervotedin aparticular election,but nottheir ballot choices.
Useful Resources
- Voting Outside the Polling Place: Absentee, All-Mail and other Voting at Home Options, NCSL
- Secrecy of the Ballot and Ballot Selfies, NCSL
- States that are Required to Provide Secrecy Sleeves for Absentee/Mail Ballots, NCSL
- Access To and Use of Voter Registration Lists, NCSL
❌Rumor: If polling place lookup sites experience an outage, election infrastructure must have been compromised.
✔️Reality:Polling place lookup sites, like all websites, may experience outages for a variety of reasons, impacting their availability to voters. Polling place lookup sites are not connected to infrastructure that counts votes and are typically segmented from infrastructure that enables voting, such as the voter registration database. Election officials will point potential voters to alternate tools and resources for this information in the event of an issue.
Useful Resources
- Election Infrastructure Cyber Risk Assessment, CISA
- Election Infrastructure Cyber Risk Infographic, CISA
- Your local or state election officialsEAC state-by-state directory
POST-ELECTION
❌Rumor: If election night reporting sites experience an outage, vote counts will be lost or manipulated.
✔️Reality: Election night results are not official results. These sites may experienceoutages due to a variety of issues including too many people trying to view the site or cyberattacks. Such disruptions do not impact the integrity of votes or the official certified results. Election results made available on election night are always unofficial. Official results are rigorously canvassed (reviewed), and certified by local and state election officials. Most states have requirements for post-election audits as well.
Useful Resources
- FBI-CISA Public Service Announcement: Foreign Actors and Cybercriminals Likely to Spread Disinformation Regarding 2020 Election Results
- FBI-CISA Public Service Announcement: Cyber Threats to Voting Processes Could Slow But Not Prevent Voting
- Post-Election Process Mapping Infographic, CISA
❌Rumor: If the election night reporting webpage is defaced or displays incorrect results, the integrity of the election is compromised.
✔️Reality: If a webpage has been defaced or is displaying incorrect results, it would not impact the integrity of votes or the official certified results. Election results made available on election night are always unofficial.
Useful Resources
- FBI-CISA Public Service Announcement: Foreign Actors and Cybercriminals Likely to Spread Disinformation Regarding 2020 Election Results
- FBI-CISA Public Service Announcement: Cyber Threats to Voting Processes Could Slow But Not Prevent Voting
- Post-Election Process Mapping Infographic, CISA
This document is an OPENSOURCE alert product. Redistribution is encouraged.
Was this product helpful/relevant?
👍—-😐—-👎
Report Suspicious Activity
Click on the link below to submit a suspicious activity report directly to the Virginia Fusion Center,
Report Online
Not a SHIELD Member?
Sign up today.
Sign up
Virginia Fusion Center
© Virginia Fusion Center All rights reserved.
—-
You have received this email because our records indicate that is subscribed to “All Sector Bulletins.” Should you wish to unsubscribe please click the link below.
