Organized cybercriminal networks have begun using swatting alongside doxxing and sextortion to coerce victims, according to the FBI.
Why does it matter for elections?
The entry of criminal networks into swatting increases the likelihood that election officials may be targeted by these organizations. It also provides a potential partner for foreign or political actors who might benefit from intimidating election officials but don’t want it to be traced back to them.
Details:
The investigation of a swatting incident in Minnesota found a link to online harassment of a child. The trail led to the arrest of a suspect in the United Kingdom. Local officials in Minnesota subsequently received death threats believed to come from associates in the network.
The threat in the Minnesota case aligns with the dangers described in two FBI public service announcements (PSAs) regarding similar networks. These bulletins were released on March 6, 2025, and July 23, 2025.
Attack Method:
The point of entry for the attackers was learning personal details about the child, like their home address. They also attempted to leverage other personal information, including things a child might not want parents to know.
Defensive Actions You Can Take:
- Limit online availability of your personal information and that of staff.
- Discuss support options with staff to minimize their vulnerability to leaked personal information or online activity. Coordinate with 911 to flag your personal and official addresses (ballot counting, polling locations, etc.), and discuss procedures for recognizing hoax calls using masked caller IDs, synthetic voices, and other cues.
- Report suspicious calls, emails, and breaches of personal information or security to local law enforcement and the FBI Elections Crime Coordinator.
- Review these Steps to Combat Swatting from the Committee for Safe and Secure Elections.
The Situation Room focuses on real security incidents and threats in the news relevant to election security. To review previous issues, see the newsletter archive.