2024 General Election Incident Reporting Wrap-up

CIS CTI’s review of activity from Oct 21–Nov 6, 2024, including Election Day, found no successful compromises of election infrastructure; member reports were dominated by network-based activity (scanning, password spraying, brute force), phishing was lower than typical, DDoS claims caused minimal impact, and the most notable change from 2020 was a surge of emailed bomb threats—including a second wave Nov 8–9—assessed as non-credible though causing limited, temporary disruptions.