The Cybersecurity and Infrastructure Security Agency, the federal body tasked with defending U.S. elections, has become the subject of alarm after internal records and former officials revealed that political appointees sought to turn its capabilities toward political ends.
The Secret Request to Hack a Voting Machine
According to two former administration officials, a few months into Donald Trump’s second term, political appointees at the Department of Homeland Security quietly asked CISA to secretly acquire a voting machine, examine it, and report the findings back to the White House. The proposition stunned CISA’s career staff, who are trained to thwart hackers, not to conduct them. One former official said the intent, in their view, was to retain the acquired data to invalidate election results the administration disliked. The request also carried an unusual condition: if CISA discovered flaws in the machine, it was directed not to alert the voting machine company, departing from the agency’s standard disclosure practices. Though the political appointees eventually ceased pressing the issue, the episode exposed how the agency’s mandate could be repurposed while its operational capacity was being dismantled.
Layoffs Enabled the Exploit Attempt
The feasibility of the request was undercut by the agency’s depleted ranks. The same former officials noted that CISA employees repeatedly told appointees the operation was impossible, in part because the specialized agents capable of penetrating voting machine hardware had just been laid off. Elon Musk’s Department of Government Efficiency initiative had already removed more than 1,000 CISA staff, shrinking the agency by roughly one-third. With the technical workforce gone, the request became unworkable. The layoffs were not an isolated adjustment; the president’s 2027 budget proposal would cut another $700 million from CISA’s funding, a reduction that could force a further 900 employees out the door.
The CISA Act Legacy and Mission Erosion
CISA was established under the Cybersecurity and Infrastructure Security Act of 2018, legislation that codified the agency’s role in coordinating with state authorities and voting machine vendors to shore up election infrastructure against cyber threats. Since that law took effect, CISA had been a steady presence at state capitols, offering assessments and guidance as election cycles approached. But during Trump’s second term, that presence evaporated. Several state election authorities reported that CISA provided no assistance — and offered no explanation for its absence — during the most critical planning stages for the upcoming midterms. Ryan Macias, a cybersecurity consultant who has worked with CISA, described the agency’s state as “literally nonexistent” through much of 2025 and into mid-September 2026, the period when election preparations typically would have been finalized.
State Authorities Left Without Support
The gap left by CISA’s withdrawal has been felt on the ground. State election officials, accustomed to federal coordination, found themselves without the technical support they had come to expect. The silence from Washington was notable not just for what was missing, but for the lack of communication accompanying it. Democratic lawmakers have since called for an investigation into CISA’s diminished capacity, demanding to know why federal funds earmarked for election security are not being deployed as Congress intended. The contrast is stark: a agency once tasked with fortifying the nation’s voting systems now faces budget cuts, mass layoffs, and a political leadership that, according to former staff, sought to weaponize its tools.
Third-Party Risk Management Under Siege
The warning issued by the Financial Services Agency on October 9, 2026, highlights a broader vulnerability facing government agencies: reliance on outsourced vendors with weak defenses. The National Center of Incident Readiness and Strategy for Cybersecurity noted that attackers frequently use these third parties as footholds to intrude into critical systems. For CISA, whose operational capacity was already diminished by mass layoffs, this external threat landscape became even more perilous.
The Financial Minister Katayama described the current situation as one where cyber incidents involving the leakage of customer information, including images of identification documents, are occurring frequently. This trend suggests that if a federal agency like CISA depends on contractors for specific technical tasks, those contractors could serve as the entry point for malicious actors. The Comprehensive Guidelines for Supervision of Insurance Companies require companies to monitor outsourced vendors and ensure leakage incidents are promptly reported. However, with CISA’s workforce shrinking by roughly one-third due to Elon Musk’s Department of Government Efficiency initiative, the agency may lack the internal resources to effectively vet or manage these external partners.
Democratic lawmakers have demanded answers regarding why federal funds earmarked for election security are not being deployed as Congress intended. If a portion of CISA’s budget is diverted to third-party vendors rather than direct hiring or infrastructure hardening, the agency’s ability to respond to successive cases of unauthorized access across various industries would be compromised. The silence from Washington during critical planning stages for the upcoming midterms left state election authorities without the technical support they had come to expect, a gap that could be exacerbated if vendor management protocols are also neglected.
The fear among CISA staff was that the agency was being asked to take part in political interference while simultaneously stripped of the personnel needed to defend against real threats. As the president’s 2027 budget proposal would cut another $700 million from CISA’s funding, forcing potentially 900 more employees out, the agency faces a dual crisis: internal sabotage and external exploitation through weak third-party links. Without robust oversight of outsourced companies, the very entities meant to protect U.S. elections could become the weakest link in the national defense chain.
Sources
- This cybersecurity agency is supposed to protect U.S. elections. Officials fear it’s been compromised by Trump
- Trump appointees asked federal cybersecurity agency to secretly acquire a voting machine and hack it
- Financial Minister Issues Warning Following Successive Unauthorized Access Incidents: To What Extent Are Agencies Accountable for Customer Identification Documents and Outsourced Vendor Management?｜日本一相談の多いFP富山俊太郎
Photo: DHSgov (Public domain)
