In our June 3 newsletter, we discussed the May 2026 Canvas breach of the education infrastructure through an election security lens, noting its far-reaching implications. The attackers exploited a shared Software-as-a-Service (SaaS) environment and used extortion tactics timed for maximum disruption. SaaS is a common software delivery model where applications are hosted by a service provider (vendor) and made available to customers over the internet.
Election officials often depend on such vendor-hosted software solutions shared across the election community and other government sectors whose systems may be interwoven with day-to-day election operations. Dependencies on systems such as email, payroll, VoIP, motor vehicle technologies, GIS or mapping, and court or death records suggest that the attack surface extends beyond election equipment and voting systems. A breach in any of these could have wide-ranging consequences for critical election infrastructure, just as the Canvas breach had for the education sector.
For details on defending your ecosystem, review the election parallels highlighted below in the Resource Library section of this newsletter.
The Situation Room focuses on real security incidents and threats in the news relevant to election security. To review previous issues, see the newsletter archive.