
The FEC cyberattack has knocked America's campaign-finance disclosure system offline at the worst possible moment. With just six days to go before the November 3 midterm elections, the Federal Election Commission's electronic filing system went dark on Monday night, October 26, 2026, after what Reuters reported was a targeting of the agency's website by a hacker or hackers. Political committees suddenly could not file the fast-turnaround spending reports that are supposed to show voters, in near real time, who is bankrolling the final blitz of attack ads in the most expensive midterm campaign in American history.
The commission confirmed the outage but has not publicly confirmed a breach. Its own statement was terse: "At this time, the FEC's electronic filing system is currently offline and our IT staff are actively working to restore service." Users can still search previously filed reports, the agency said, but new electronic filings cannot be submitted while the system is down. Its FEC Notify service, which alerts subscribers to new filings, was also offline.
The trouble began late on Monday, October 26. Campaign finance officers trying to file mandatory reports that evening found the system unavailable, and the FEC posted a notice to its website. A status message recorded the filing system as down since around 10 p.m. ET on Monday (0200 GMT Tuesday), and a later, more precise status entry put the start at 10:15 p.m. ET. Online filing forms, the electronic submission system and vendor tools were all listed as affected.
According to Reuters, an electronic filings officer at the FEC emailed campaign compliance firms on Monday night confirming that a bad actor was attempting to breach the agency's systems and that web-facing services had been temporarily shut down as a result. The Washington Sun, cited in early coverage of the outage, reported the same picture from an email sent to at least one political committee: "The Federal Election Commission's electronic filing system is currently offline. At this time, you cannot submit electronic reports to the FEC."
By Tuesday morning the commission was still investigating. A status update at 9:35 a.m. ET on October 27 said work was continuing, and a further update shortly before 3 p.m. that day said the investigation was ongoing. Then, at around 8 p.m. ET on Tuesday, a new status message said the issue "has been identified and a fix is being implemented." Even so, a notice on the FEC website said the filing system remained offline, and the agency did not immediately return messages seeking comment.
The Cybersecurity and Infrastructure Security Agency referred questions to the FEC, and the FBI did not immediately return messages seeking comment. No attacker has been identified, and no attribution has been established. A person familiar with the situation told Politico that cybersecurity staff "noticed attempted intrusions and were able to shut down" the targeted parts of the electronic filing system, describing the incident as "quite narrow and compartmentalized" and adding that the team "noticed it early, and it will hopefully be resolved shortly." The same person said "no one really knows" who was behind the attack and suggested it may have involved advanced artificial intelligence models with hacking capabilities — a suggestion that remains unconfirmed.
The Federal Election Commission is the independent agency that tracks the money in federal elections. Candidates, parties and political committees must disclose what they raise and spend, and the public database is the main window through which journalists, watchdogs and voters can see who is paying for the ads flooding their televisions and phones. The commission does not administer elections themselves — ballots, voter rolls and polling places are the states' responsibility — but its disclosure system is the transparency machinery that sits on top of the campaign.
That machinery runs fastest in the final weeks of a race. Under FEC rules, political committees and other filers must report independent expenditures — spending for or against a candidate that is not coordinated with that candidate's campaign — on an accelerated timetable. In the last 20 days before an election, independent expenditures aggregating $1,000 or more for a given race trigger a 24-hour report, due by 11:59 p.m. ET on the day after the spending is publicly distributed. Earlier in the cycle, expenditures of $10,000 or more trigger a 48-hour report. Separately, campaign committees must report contributions of $1,000 or more received between October 15 and October 31 within 48 hours. These are the reports now stuck in the queue: the very disclosures designed to catch last-minute money before voters cast their ballots.
The stakes are unusually high this cycle because the money is unusually large. According to political advertising tracker AdImpact, about $11.21 billion has been spent on advertising and future reservations for the November 3 midterms so far — already surpassing the $11.2 billion spent across all races in the 2024 elections, which included a presidential contest between Donald Trump and Kamala Harris. That a midterm, with no presidential race at the top of the ballot, has already eclipsed that total underlines how much is riding on control of Congress: the elections will determine whether President Donald Trump's Republicans keep their majorities for the next two years.
Super PACs, which can accept unlimited contributions from wealthy individuals and corporations, are driving much of the acceleration, alongside dark money groups that do not fully disclose their donors. An analysis of federal data by AFP found that just five outside groups, significantly funded by dark money, had poured more than $1 billion into the midterm campaigns as of October 25 — nearly a third of all non-party spending. Three of the five lean Republican, and about two-thirds of the billion dollars is expected to benefit Republicans. Billionaire Elon Musk alone has put almost $450 million into Republican groups, including the Senate Leadership Fund, the largest of the super PACs. Democrats, by contrast, hold a fundraising edge in direct donations to candidates and party committees, with Democratic candidates in competitive races consistently outraising their Republican rivals.
The FEC cyberattack, as reported, disrupted the filing side of the system rather than the archive. Past reports remain searchable on the FEC website, so journalists and researchers can still examine what was filed before Monday night. What they cannot do is see what has been spent since — and in the final week of a campaign, that is when the spending peaks. Brendan Glavin, research director at the nonpartisan watchdog OpenSecrets, said super PACs and dark money groups had spent an average of more than $50 million a day over the previous week, with more than $250 million in spending reported on October 20 alone.
"It's a big deal," Glavin said. "These are the key reports that tell us what is happening. In the last days of the election, this is the only way for us to keep track of where the money's being spent and who's spending it." Steven Mele, president and chief executive of political finance compliance firm MBA Consulting Group, put it more bluntly to Reuters: "I've never seen this in 26 years. The result is there will be less disclosure on the elections" until the system is fixed. Mele added that hacking attempts are unusual for the FEC, which has not previously faced a disruption of this kind in his experience.
The blind spot falls hardest on the most competitive races, where outside spending is heaviest. In Texas, Democrat James Talarico has faced more than $200 million in opposition spending from outside groups as he tries to become the first Democrat to win a Senate race there since 1988. Ohio's special Senate election ranks second in expenditure, with Democrat Sherrod Brown facing nearly $170 million in outside spending against him. Attack ads, rather than positive messaging, dominate that spending, according to researchers — super PACs, in the words of one sociologist, tend to do the "dirty work" of attacking opponents.
The FEC's public language has been deliberately limited. Spokesman Myles Martin was quoted as saying: "At this time, we can point to the status update posted to the FEC's website that the electronic filing system is currently offline and our IT staff are actively working to restore service." The commission declined further comment on the outage beyond that statement and its status page.
Democratic FEC Commissioner Dara Lindenbaum moved quickly to draw a line between the disclosure outage and the act of voting itself. "To be absolutely clear: This has NOTHING to do with voter files or voter registration," she wrote on X. "Those are maintained by the states. The FEC only handles federal campaign finance filings." Her point was echoed in the Reuters reporting: the FEC does not play a role in administering US elections, and the outage should have no effect on voters' ability to cast ballots.
Compliance professionals, who live inside the filing system every cycle, were less restrained. "I've never seen this in 26 years," Mele said, warning of "less disclosure on the elections" until service resumes. Glavin's assessment was equally direct: in the last days of an election, the accelerated reports are "the only way for us to keep track of where the money's being spent and who's spending it." Neither man suggested the outage would change votes — their concern was that voters would cast them with less information than the law intends them to have.
Disclosure delayed is, in the final week of an election, disclosure denied in practical terms. A 24-hour report exists precisely so that a multimillion-dollar ad blitz launched on a Thursday cannot stay hidden until after Tuesday's vote. If the filing system remains down through the weekend, a wave of late spending could reach voters before it ever reaches the public record — and by the time the reports are eventually filed, the ballots will already be counted. That is why watchdogs treat the accelerated reports as the load-bearing wall of campaign finance transparency, and why an outage now matters far more than the same outage would have mattered in, say, March.
The incident also lands in a longer argument about the rules themselves. Super PACs and hybrid PACs did not exist before 2010; they grew out of the Supreme Court's Citizens United ruling, which held that the government cannot limit independent political spending by corporations and unions. Direct contributions remain capped — $3,500 to a candidate's campaign and $44,300 to a national party committee, per individual — but independent spending is unlimited. The result is a system in which a handful of groups can move more than a billion dollars, much of it from donors the public never sees, and in which the disclosure of that spending is the only check voters get. When the disclosure system itself goes dark, that check blinks out at the moment it is needed most.
There is also a cybersecurity question that will outlast this election. If, as reported, an outside actor could force the FEC to shut down its web-facing services days before a national vote, other election-adjacent systems will face the same scrutiny. Officials have been careful to separate the FEC's disclosure platform from the systems that actually run elections, and nothing reported so far suggests voter rolls or ballots were touched. But the episode is a reminder that transparency infrastructure is itself a target — and that its resilience matters as much as its rules.
The immediate question is when the filing system comes back. The FEC's Tuesday evening status message said a fix was being implemented, but the system was still listed as offline afterwards, and the commission has given no restoration time. Compliance firms are expected to file a backlog of 24-hour and 48-hour reports as soon as the portal reopens, which should produce a sudden flood of disclosures — potentially revealing, all at once, days of spending that voters never saw itemised before polling day.
Watch, too, for what the FEC says about the cause. Its public notices so far confirm an outage, not a breach; the hacking account comes from an internal email seen by Reuters and from a person familiar with the situation speaking to Politico. Whether the commission confirms an intrusion, identifies an attacker, or reports any data exposure will shape the political fallout — and the cybersecurity response — in the days after the election. Congress, which oversees the FEC, is also likely to ask why a system carrying the most consequential disclosures of the cycle had no fallback that kept filings flowing.
For voters, the practical advice is unchanged: the outage does not affect ballots, polling places or registration. But for anyone trying to follow the money in the final days of the 2026 midterms, the window is, for now, shut — and what emerges when it reopens may be the fullest picture of the most expensive election in American history, arriving just too late to inform it.
No. The FEC does not administer elections, run polling places or maintain voter rolls — those are state responsibilities. Commissioner Dara Lindenbaum has stressed that the outage has nothing to do with voter files or voter registration, and it should have no effect on voters' ability to cast ballots.
The electronic filing system and the FEC Notify alert service. Political committees cannot currently submit electronic reports, including the 24-hour and 48-hour spending reports. Previously filed reports remain searchable on the FEC website.
Reuters reported, citing an internal email, that the agency's website was targeted by a hacker or hackers and that web-facing services were shut down after an attempted breach. The FEC's public notices confirm the outage but have not confirmed a breach or identified an attacker, and no attribution has been established.
They are the accelerated disclosures for late spending: in the final 20 days before an election, independent expenditures of $1,000 or more must be reported within 24 hours. With outside groups spending more than $50 million a day in the final week, these reports are the main way the public tracks last-minute money before voting day.
They are expected to be filed as a backlog once the system is restored, producing a sudden release of disclosures. The concern raised by watchdogs is that much of that spending will only become public after voters have already cast their ballots on November 3.
Related coverage on US News Pulse: Ohio Senate race deadlocked as Brown leads Husted 47-44 in new poll, Maine Marist poll: governor tied 44-44, Jackson leads Collins 49-47, and Trump heads to Ohio for final midterm push in Chillicothe.