Trump appointees asked a federal cybersecurity agency to secretly hack a voting machine

DHS political appointees asked CISA to acquire a voting machine, examine it and hack it, then report the results to the White House. The request was unusual because CISA’s normal mission is defending critical systems from hackers, not secretly testing election equipment for political leaders.

The secrecy centered on the manufacturer. Appointees directed CISA not to notify the voting-machine company if staff discovered security flaws. That departed from the agency’s standard practice of working with vendors to address vulnerabilities. Career employees feared the information could later be used to challenge election results that the administration disliked.

CISA staff repeatedly said the operation was impossible. They noted that agents capable of such work had recently been laid off through Elon Musk’s Department of Government Efficiency initiative. The appointees eventually stopped pressing the agency, so the proposed operation was not carried out.

CISA stands for the Cybersecurity and Infrastructure Security Agency. It is part of the Department of Homeland Security and focuses on protecting the nation’s critical infrastructure from cyber threats. The article presents election security as one of its central responsibilities.

Since Congress created CISA through the CISA Act in 2018, the agency has worked with state authorities and voting-machine vendors. Its role included helping them identify risks, improve defenses and respond to possible attacks against election infrastructure. It typically worked to stop hackers rather than secretly attack election equipment.

That mission has weakened during Trump’s second term. More than 1,000 CISA employees were laid off or pushed out, shrinking the agency by about one-third. Several state election authorities said CISA offered no assistance during important midterm planning stages, raising concerns about whether it can still perform its intended protective role.

Cybersecurity agencies usually strengthen systems by finding weaknesses, informing the responsible vendor and helping fix the problem. CISA’s election-security work followed that cooperative model. Its goal was to reduce risks before attackers could exploit them, not to preserve vulnerabilities for possible political use.

The proposed operation broke with that practice. Political appointees wanted CISA to obtain and hack a voting machine, but they also directed staff not to alert the manufacturer if they found flaws. Without vendor notification, the company would lose the chance to investigate, issue fixes or warn customers. The article says this instruction shocked career employees.

The conflict mattered because voting systems affect public confidence as well as technical security. One former official feared the administration could keep discovered weaknesses “in their back pocket” and use them to invalidate results it disliked. The request was abandoned, but it deepened concerns that CISA was being diverted from its protective mission.

CISA has already lost more than 1,000 employees during Trump’s second term. Those departures reduced the agency’s workforce by about one-third. The losses affect an agency responsible for helping states and other partners defend critical infrastructure, including election systems.

The proposed 2027 budget would deepen the reduction. It would cut CISA funding by another $700 million, according to the article. That decrease could require approximately 900 additional layoffs. The figures show both a direct staffing loss and a wider reduction in the resources available for cybersecurity work.

The scale has prompted Democratic lawmakers to call for an investigation into CISA’s ability to do its job. They also demanded answers about why federal election-security funds are not being used as Congress directed. The article links the staffing and funding reductions to declining support for states preparing for upcoming elections.

CISA’s reduced support has left states filling gaps in election cybersecurity themselves. Several state election authorities said the agency provided no assistance or explanation during the most important planning stages for the upcoming midterm elections. An election-security expert described CISA as “literally nonexistent” through mid-September 2026.

States have responded by spending their own resources. State leaders said they paid for sensor technology that can detect unusual activity in election networks. These tools help officials notice possible intrusions or suspicious behavior, but the article presents them as replacements for support that CISA previously provided.

CISA eventually re-emerged in September with a last-minute security plan. That timing worried some state officials because much of the preparation normally would already have been completed. The resulting gaps could leave states less prepared, while distrust of the federal agency may make future cooperation and information-sharing harder.

Election defenders work across federal agencies, state offices and private voting-machine companies. Sharing information lets them compare threats, warn one another and fix weaknesses before attackers exploit them. The article says this relationship was a key reason CISA succeeded in past elections.

Trust is essential to that exchange. State authorities provided CISA with sensitive material, but the Trump administration later declassified troves of records while reviving debunked theories about the 2020 election. Some officials feared their information could be exposed or used for political purposes. That made them less willing to send material to the federal agency.

The damage could last beyond one election. A former senior cybersecurity official said states might never again give CISA such information. Without timely reports from states and vendors, federal officials may miss warning signs, while local governments must build defenses independently. That fragmentation can make coordinated protection more difficult.

The article describes election protection as a shared effort. CISA worked with state authorities and voting-machine vendors to identify risks and defend election infrastructure. States also use sensor technology to detect unusual activity in election networks. Vendors are important because they can investigate equipment flaws and develop fixes.

More broadly, election cybersecurity combines technical defenses with procedures that protect the accuracy and availability of voting. It must cover equipment, election networks and the connections among many local and state systems. It also requires coordination before, during and after voting. Unlike an ordinary private network, an election system must support a public process whose results need broad confidence.

The article shows what happens when that cooperation weakens. CISA’s staffing losses and reduced support have pushed states to spend their own money. Some officials also distrust federal information-handling. That combination can leave defenses uneven and make it harder to detect, explain and respond to cyber threats.