Political appointees at the Department of Homeland Security asked CISA to buy a voting machine, examine it and send the results to the White House, according to a ProPublica investigation published October 19. Security Boulevard summarized the reporting, which places the request in the first months of Trump's second term. The CISA voting machine hack request was never carried out.

What ProPublica reported about the CISA voting machine request

The most unusual detail is the instruction about disclosure. Yahoo News reported that the request told career staff not to disclose vulnerabilities to the machine's manufacturer. Staff objected strongly, and CISA never did the work.

The account rests on two former administration officials who spoke to ProPublica. The coverage I reviewed does not name the machine's vendor, the individual appointees or the official who received the request. That gap matters, because it means the public has a description of the request but no documented chain of command behind it.

Why CISA's disclosure rule made the request a problem

CISA publishes vulnerability advisories and coordinates fixes with vendors. Its standard practice is to tell manufacturers about the flaws it finds. Forbes noted that independent testing of voting machines is not unusual in itself. The disclosure norm is what separates routine security research from something that looks like leverage.

The difference is practical. A vendor that learns about a flaw can patch it, and election officials and the public benefit from the fix. An agency that keeps a flaw in reserve holds a different kind of power. One former administration official told ProPublica, as reproduced in coverage: "My thought was they could keep it in their back pocket to invalidate any results they don't like," Another official said: "This goes against everything CISA represents."

The concern is not abstract. A vulnerability that is held back rather than disclosed could later be cited to challenge an election result, and that is the scenario the former officials described. Staff who resisted the request were, in effect, protecting the agency's credibility with both vendors and voters. Anyone who wants to challenge results in November would gain from a story like this one, regardless of whether the work ever happened. Election officials and the agency's technical staff would bear the cost.

The episode also fits a longer pattern. IBTimes UK reported that CISA's election defense role has been a political flashpoint since the 2020 firing of Chris Krebs, who was leading the agency at the time. Each new controversy over the agency's election work tends to be read through that earlier fight.

What the White House and DHS have said

A White House spokesperson, Lauren Bis, defended the administration's record. In ProPublica's reporting, she said: "President Trump has done more than any other President to ensure we have free and fair elections." That statement addresses the administration's overall record but does not directly answer the specific request that former officials described.

DHS and CISA did not respond to ProPublica's detailed questions, according to Raw Story. The silence leaves several basic questions open. The coverage does not identify who the appointees were, and it does not say whether the request reached a decision-maker.

The dispute also turns on how the request should be characterized. The White House disputes the criticism, while reporting says staff resisted the idea. No flaw in any voting machine has been established, because the reporting says the operation never happened.

How CISA cuts and the 2027 budget fight affect midterm help

ProPublica reported that CISA lost more than 1,000 employees, which the investigation described as about one-third of its workforce. The reporting says those cuts left the agency short of the resources a test like this would have required, and some officials cited that shortfall as a reason it did not proceed.

The budget picture points in the same direction. Forbes reported a proposed 2027 budget cut of more than $700 million, which could mean about 900 more job losses. Whether that cut passes remains unresolved.

CISA published its election security plan on September 24. Some state officials told ProPublica it came too late, and some said the agency did not provide its usual help ahead of the midterms. Those complaints are the practical test of whether federal cyber support will be available in November.

Vulnerability work matters most when attackers move quickly. USA 24 has covered a Citrix NetScaler zero-day still planting web shells on US VPN gateways, the kind of active threat that depends on advisories and coordinated fixes. A thinner federal team makes that coordination harder, and the people who feel it first are the administrators running the affected systems.

What it means for state and county election offices

Election offices in states that rely on CISA for vulnerability assessments and threat sharing have the most to lose if that help shrinks. Metacurity reported that some officials have privately prepared contingency plans with machine vendors in case federal agencies seize or disable voting equipment. That is a striking sign of how little officials trust the federal relationship to hold.

The winners in a scenario like this are harder to name. Vendors that already work closely with local offices may gain influence, while smaller counties may have fewer options. States with their own cybersecurity staff will be better placed than those that depend on federal advisories alone.

For now, the practical question for election officials is simple: who do they call, and what do they do, if a federal partner cannot help on a given day? Written plans with vendor contacts, documented equipment inventories and clear rules for outside testing are the most useful answers available.

What voters and officials can do before November

  • Check your county or state election office website for voting equipment and poll worker information.
  • Follow certified election results from your local officials rather than social posts that claim a machine was "hacked."
  • Before sharing a claim about voting machines, look for a named official source and a date.
  • If you run an election office, confirm your vendor contacts and your written plan for handling outside security testing.

These steps are general guidance, not recommendations drawn from the reporting.

What to watch next

The first thing to watch is whether DHS or CISA answers ProPublica's detailed questions, which the reporting says they have not yet done. Identifying the appointees and the decision-maker, if one exists, would turn a story about staff advice into a question about how the department operates in an election year. Congressional oversight of the request is another possible development.

The second thing to watch is the 2027 budget fight and whether CISA's midterm support stabilizes before ballots are cast. Watch for any further reporting on how many employees have left and which states still have direct federal contacts. The answers will show whether the agency can meet the demands placed on it in the weeks before the election.