CNN
—
Iranian hackers accessed a US municipal website for reporting unofficial election results in 2020 but were kicked off the network by US military hackers and didn’t have any impact on voting, a top US general said Monday.
There was never a risk that vote counts could have been altered because such election night websites report preliminary data rather than certified ballot results. Instead, US officials were concerned that the hackers might use their access to the website to mislead the public by posting fake results.
“Our concern is always that some type of web defacement … on the night of the election could make it look like the vote had been tampered with when that’s absolutely not true,” Maj. Gen. William Hartman, head of US Cyber Command’s Cyber National Mission Force, said at the RSA cybersecurity conference in San Francisco.
Cyber Command – the military’s offensive and defensive hacking unit – discovered the Iranian intrusion during a mission in foreign cyberspace, Hartman said. The US military then executed its own cyber operation to kick the Iranians off of the network of the US city to ensure the Iranian hackers were “unable to come back into the network” in the runup to the 2020 election, Hartman said.
He did not name the US city network that was affected.
The episode illustrates how cyberspace has become a key frontier in various governments’ efforts to shape, influence and defend elections. Since 2016, when alleged Russian military intelligence agents hacked and leaked the emails of the Democratic National Committee in a bid to sow chaos in the US election, US military hackers have grown much more evolved in defending election infrastructure.
Hartman’s comments provide additional insight to what the US government has previously said about foreign interference efforts in the 2020 election.
Broad Russian and Iranian hacking campaigns against multiple sectors “did compromise the security of several networks that managed some election functions,” the departments of Homeland Security and Justice said in a 2021 report, “but they did not materially affect the integrity of voter data, the ability to vote, the tabulation of votes, or the timely transmission of election results.”
