Cybersecurity threats during US midterm elections

Cybersecurity experts and federal agencies have identified increasing threats targeting the 2026 US midterm elections. Initial reports from Check Point Software Technologies highlighted a convergence between legitimate political tactics and social engineering attacks. These scams utilize SMS, QR codes, and mass emails to mimic authentic campaigns, often using leaked personal data to increase credibility. Specific incidents included fraudulent voter profile verification in Pennsylvania, deceptive postal notices in Texas, and phishing attempts in Rhode Island and Connecticut involving threats of driver's license suspension.

Following these observations, the FBI and the Cybersecurity and Infrastructure Security Agency (CISA) issued a joint warning regarding the role of artificial intelligence in these threats. Officials warned that AI is being used to create sophisticated phishing scams, deceptive emails, and deepfake technology to impersonate election authorities or political figures. Beyond data theft, agencies identified fraudulent schemes such as fake Political Action Committees (PACs), campaign investment pool scams promising returns on donations, and scams involving political merchandise.