US Federal Election Commission shuts down its e-filing system after attempted intrusion a week before the midterms
Teaser from the source
The US Federal Election Commission took its electronic filing system and other web-facing services offline on the night of Oct 26 2026 (around 10 p.m. ET) after what an FEC filings officer called "a bad actor attempting to breach FEC systems", according to an email seen by Reuters. Campaigns and PACs couldn't file the 24- and 48-hour spending reports due in the final weeks before the Nov 3 midterms, while searching past reports still works. A person familiar with the investigation told POLITICO the attempted intrusions were noticed and the targeted parts were shut down, calling it narrow and compartmentalized. The FEC hasn't said whether any data was accessed. It doesn't run elections, so voting isn't affected. E-filing came back on Oct 28 after nearly 41 hours offline, with search and notifications still being restored and filers required to reset passwords.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchMore on Commission
Other advisories
- MediumCVE-2026-40134Aufgrund unzureichender Autorisierungsprüfungen in der SAP Incentive und Commission Management-Anwendung könnten authentifizierte Benutzer e...
- MediumCVE-2026-40134Aufgrund unzureichender Autorisierungsprüfungen in der SAP Incentive and Commission Management-Anwendung konnten authentifizierte Benutzer e...
- MediumCVE-2026-40134Due to insufficient authorization checks in the SAP Incentive and Commission Management application, authenticated users could invoke a remote-enabled functi…
- Not ratedosv:MAL-2026-2202Malicious code in @emilgroup/commission-sdk (npm)
- Not ratedosv:MAL-2026-2043Malicious code in @emilgroup/commission-sdk-node (npm)
- MediumCVE-2024-13424Anzia Ni Sales Commission For WooCommerce: fehlende Autorisierung
- MediumCVE-2024-13424Anzia Ni Sales Commission For WooCommerce: fehlende Autorisierung
- Highosv:MAL-2024-6840Malicious code in commission-junction_stats (RubyGems)
Other news entries
- Technical University of Munich (TUM) IT security incident: myTUM passwords stolen, TUMonline taken offlineBreachpwn.watch
- Ireland's Employment Permits Portal breach: stolen data for general customers limited to namesBreachpwn.watch
- Bithumb internal groupware hacked, ID numbers and ID copies of 844 customers leakedBreachpwn.watch
- Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on FacebookNewsSecurityWeek
- EU wants Booking.com to check out of its scam problemNewsThe Register — Security
- Pizza Hut Japan: attackers accessed the online-ordering payment API, up to about 4.48M records exposedBreachpwn.watch
- OpenCode Console breach exposes users' saved OpenAI / Anthropic / Google API keysBreachpwn.watch
- Nikkei breach: stolen credentials expose 1.83M personal-information records from a development cloudBreachpwn.watch
Source: https://pwn.watch/i/fec-electronic-filing-attack-oct-2026