Americans filed more than a million cybercrime complaints with the FBI in 2025 and reported $20.9 billion in losses. Election offices, courts, state agencies, counties and schools in every region have been breached, extorted or knocked offline. This briefing maps the exposure in all 51 jurisdictions, documents what has already happened, and lays out the plan to harden the public record.
Civic technology · Election integrity
Every state and D.C., shaded by FBI Internet Crime Complaint Center data for 2025 and scaled to Census 2025 population. Red markers show states where election systems have been hit. Gold outlines mark the priority region: Nebraska, Iowa, South Dakota, Kansas and Wyoming.
Rank 1 is the highest complaint rate per resident. Select a column to re-sort, or filter by region.
Documented cyber incidents against election offices, courts, state agencies, counties, schools and public health systems, newest first. Every entry links to its source.
Each profile pairs 2025 FBI cybercrime figures with the documented public-sector incidents in that state.
Ten frames for presentations, each built around one part of the resilience story. Select a frame to view it full size.
How an intrusion travels from entry point to public impact, mapped to the CISA and EAC election-security framework, with the controls that stop it at each stage.
| Threat pathway | Consequence | Evidence to request or test | Resilience response |
|---|---|---|---|
| Compromised identity | Unauthorized access or record changes | Role list, MFA coverage, privileged-access logs, revocation timing | Least privilege, independent approval, monitored account lifecycle |
| Vendor dependency | Service interruption or data exposure | System inventory, contract controls, subcontractors, incident terms | Bounded vendor access, continuity plan, exit and recovery procedure |
| Ransomware | Delay, degraded service, loss of access | Offline backup evidence, restoration results, outage procedures | Offline recovery, paper fallback, timed recovery exercises |
| Insider or process error | Unreviewed action or custody gap | Separation of duties, custody logs, exception records | Dual control, tamper-evident seals, independent reconciliation |
| False information | Voter confusion, reduced confidence | Communication roles, correction speed, official-source links | Pre-approved response path, accessible public updates |
A phased readiness program that starts in the priority region and scales to every jurisdiction that opts in.
Authorize a scoping session to set the evidence, owners, safeguards and success measures for a readiness assessment.