Russia likely targeted all 50 states in 2016, but has yet to try again, DHS cyber chief says

The chief cyber official at DHS, Jeanette Manfra, testified Tuesday to Congress.

Just last month, DHS Secretary Kirstjen Nielsen told lawmakers the threat to state election systems "remains high," with "potential vulnerabilities" embedded in voter databases and vote tabulation systems.

"We think vigilance is important, and we think there is a lot that we all need to do at all levels of government before we have the midterm elections," Nielsen told lawmakers.

"Has DHS detected any cyber activity targeting election infrastructure by Russia or any other actors during this election season?" Hassan asked Manfra.

"We have not at this time," Manfra responded.

Manfra was not asked whether the U.S. intelligence community has detected any of the other measures that Russia deployed during the 2016 presidential election, particularly the use of social media like Facebook to spread false information and inflame tensions across the United States.

Protecting state election systems from overseas hackers has become a focal point for lawmakers and U.S. officials looking to prevent foreign meddling in America’s elections – a cornerstone of American democracy.

Even before the 2016 presidential election, DHS began warning the public that Russian hackers had launched a broad cyber-campaign against U.S. states, looking for ways to break into their voter-related systems.

DHS officials have repeatedly said they detected "scanning" – when hackers scan a target for security gaps –- in 21 states.

But McCaskill noted that in the run-up the 2016 election, only about half of states had the tools needed to detect such scanning, and DHS was only publicly cited the number of states where that scanning was detected.

"The impression that was given at the time is that we had knowledge that 21 states were [targeted] and the assumption was that the remaining states were not," McCaskill said. "But in fact that is an incorrect assumption."

"We really don’t have an idea how many states that Russia tried to hack," McCaskill insisted.

In response, Manfra acknowledged Russian hackers likely tried to hack into all 50 states. "We can absolutely make the assumption that more would have been targeted," she said.

Manfra, however, disputed McCaskill's assertion that the public had been "misled."

"We only had the visibility that we had, and I believe I’ve been clear about that as I've discussed it," Manfra said. "How the media reports it I cannot control."

In fact, Manfra told the Senate Intelligence Committee last year, "As of right now, we have evidence of election-related systems in 21 states that were targeted." And last month, she told the same panel that authorities are "confident" the "21 number is accurate" based on "the visibility that we had at the time."

Hackers successfully breached voter-related systems tied to four states.

On Tuesday, Manfra said DHS is "increasing our visibility" for future elections.

DHS is now providing "voluntary assistance" to states and sharing certain U.S. intelligence with states about the threat facing their systems, Manfra said.