FEC Restores Filing System After 41-Hour Cyberattack Hides Donor Spending

The Federal Election Commission brought its electronic filing platform back online on Wednesday evening, ending a nearly 41-hour shutdown caused by a cyberattack. The disruption occurred during the final days of the midterm election cycle, a period when political spending is at its peak.

The outage prevented super PACs and other independent expenditure groups from submitting mandatory 24-hour and 48-hour reports. These documents detail how much money organizations spend to support or oppose candidates. Without access to the system, recent financial activity remained invisible to the public and campaign finance trackers.

Brendan Glavin, research director at OpenSecrets, noted that super PACs and dark money groups spent an average of more than $50 million per day in the week leading up to the outage. He added that reports filed on October 20 alone showed spending exceeding $250 million. The timing of the failure aligned with the fastest spending pace recorded in the two-year election cycle.

Molly White, a campaign finance watchdog who tracks spending by cryptocurrency and technology firms, described the lack of data as devastating. She stated that the final days before an election see a ramp-up in last-minute spending. White explained that without the filing system, observers had no visibility into how much money was being deployed in the immediate lead-up to the vote.

The FEC first notified users of the problem on Monday just after 10 p.m. Eastern Time. The agency posted a notice indicating it was investigating issues that caused major outages across its electronic filing systems. An FEC officer told campaign compliance firms late Monday that the services were taken offline after a bad actor attempted to breach the agency's networks. This information was shared via an email reviewed by Reuters.

Campaign finance managers were required to reset their passwords before they could log back into the system following the restoration. The FEC stated that most affected services had been restored by Wednesday night. However, the agency did not announce specific details regarding the cause of the outage or the identity of the attackers.

Hilary Braseth, executive director of the nonpartisan watchdog group OpenSecrets, issued a statement prior to the system's restoration. She argued that delayed disclosure effectively denied the public access to information. Braseth emphasized that when hundreds of millions of dollars in outside money air political advertisements in the final days before an election, transparency serves as a fundamental public safeguard.

The FEC did not return requests for comment on Wednesday. Both the Cybersecurity and Infrastructure Security Agency and the FBI referred questions regarding the incident to the FEC. Reuters could not establish the motive behind the hacking effort, noting that government networks are frequently targeted for espionage, financial gain, or political reasons.

Kyle Sandy, cybersecurity director at the IT security firm Logically, assessed the agency's decision to take the system offline as the correct response. He noted that the move indicated the FEC detected something it could not immediately scope. Sandy said choosing a known outage over an unknown risk allowed the agency time to ensure none of its data was altered by hackers before bringing the system back online.

The FEC does not administer US elections, so the outage did not affect voters' ability to cast ballots. The incident sparked discussion within the industry regarding the timing of the attack. Some observers suggested the downtime could have been used by unscrupulous actors to hide unpopular last-minute spending, though the FEC provided no confirmation of such intent.