With elections increasingly dependent on modern technology, cybersecurity has become a vital shield against election violence and manipulation. Cyberattacks present a growing threat to both nascent and mature democracies, as they can shape the election process, erode citizen trust and trigger other forms of election violence. The 2019 elections in Indonesia and Ukraine illustrate the threat cyberattacks pose, even in relatively consolidated and stable democracies.

An overhead view of electronic voting machines in Miami, FL. (Vincent Laforet/The New York Times)
An overhead view of electronic voting machines in Miami, FL. (Vincent Laforet/The New York Times)

Cyberattacks are increasingly used by government-linked groups and private individuals to target corporate, financial, and, more recently, democratic institutions. The perpetrators and their motivations often remain unclear, but cyberattacks qualify as election violence given their ability to undermine election authorities and shape results. Common tactics include distributed denial-of-service (DDOS), phishing, and malware attacks against critical infrastructure and networks. Election officials around the world have embraced advanced technologies for voter registration and results management systems. But those new technologies create new vulnerabilities, especially if there is a lack of technical expertise, modern equipment, and necessary cyber hygiene.

While the threat that cyberattacks pose to elections are recognized, international and domestic legal frameworks are insufficiently developed to ensure robust prevention and enforcement efforts. As technology rapidly transforms, prevention strategies must look forward, securing the next election rather than repairing vulnerabilities exposed in the previous election. Election management bodies (EMBs) will also face a difficult balancing act to secure their processes while preserving transparency.

In Ukraine, the Central Election Commission (CEC) has long suffered from technological vulnerabilities and a lack of technical training for staff, compounded by legal and procedural hurdles. In 2014, a cyberattack disabled CEC network nodes and erased numerous components of the election system, including the Results Management System, using advanced cyberespionage malware. In 2015, Ukraine suffered from a successful attack on its power grids, and a malware attack—known as (Not)Petya—infiltrated Ukrainian banks, government agencies and electricity firms in 2017.

With presidential elections this spring, and parliamentary elections in October, Ukraine has taken important steps to protect its election infrastructure, mostly through trainings by international specialists, improving its ability to withstand the surge in attacks on electoral servers and the personal computers of election staff.

With legislative and presidential elections scheduled on April 17, Indonesia has similarly suffered from cyberattacks targeting its electoral infrastructure. The head of the National Election Commission (KPU), Arief Budiman, remained confident that the increase in attacks against Indonesia’s voter database will not disrupt the voting process. Despite this, the threat posed by cyberattacks in the form of targeting candidates’ private data remains a concern.

The Impact of Cyberattacks on Democracy and Political Stability

While cybersecurity measures can strengthen institutions and electoral processes, they also shape the tactical considerations of would-be perpetrators of election violence. Cyberattacks could provide an alternative to more traditional forms of election violence as a method to shape election results, delegitimize the vote, or create general distrust in institutions.

As cyberattacks generally have a lower cost and provide the advantage of anonymity, an increase in the use of cyberattacks could perversely lower the risk of violence in the streets, at least in the short-term. The subsequent loss of legitimacy in the electoral process can also increase the risk of post-election violence, for instance as delayed results announcements create the suspicion of fraud.

Cyberattacks erode public trust in the electoral process and offer losing parties or candidates another reason to question and challenge the results. Preventing cyberattacks requires not only the adequate funding for EMBs to secure their digital infrastructure, but also educating the public and election staff on the complexities of hybrid warfare and its associated risks.

Related Research & Analysis

Philippines: Former Combatants Help Keep the Peace During Recent Polls

Philippines: Former Combatants Help Keep the Peace During Recent Polls

Wednesday, June 25, 2025

By: Haroro Ingram, Country Director, Philippines, USIP

For decades, the struggle for peace in the Philippines’ southernmost island of Mindanao has been characterized by armed conflict between the Philippines government and Moro separatist groups, like the Moro Islamic Liberation Front (MILF), and cycles of failed peace processes. The historic 2014 peace agreement between the Philippines government and MILF led to the granting of greater self-governance with the creation of the Bangsamoro Autonomous Region in Muslim Mindanao (BARMM) five years later. What has followed since is an unprecedented, yet very fragile, period of peace and stability.

Type: Analysis

Cómo Puede Contribuir EE.UU. a la Resolución del Conflicto en Venezuela

Cómo Puede Contribuir EE.UU. a la Resolución del Conflicto en Venezuela

Tuesday, July 23, 2024

El reciente anuncio de negociaciones directas entre Venezuela y Estados Unidos fue recibido con agrado por muchos venezolanos como una oportunidad para aumentar las posibilidades de que las elecciones del 28 de julio se desarrollen pacíficamente y conduzcan a un futuro de coexistencia democrática. Sin embargo, la clave de este resultado dependerá menos de las cuestiones tácticas electorales —como los incentivos para no anular la candidatura de la oposición— y más de la cuestión más amplia de asegurar que no habrá persecución del perdedor y que ambas partes puedan volver a la alternancia del poder en lugar de un régimen de partido único. EE.UU. está en una posición clave tanto para influir en el ambiente general de las elecciones como para tomar acciones específicas que faciliten un resultado democrático, que se desarrollará a lo largo de un período post-electoral extendido.

Type: Analysis

How the U.S. Can Contribute to Resolving the Venezuelan Conflict

How the U.S. Can Contribute to Resolving the Venezuelan Conflict

Tuesday, July 23, 2024

The recent announcement of direct negotiations between Venezuela and the United States was welcomed by many Venezuelans as an opportunity to bolster the chances of the July 28 election playing out peacefully and leading to a future of democratic co-existence. The key to this outcome, however, will hinge less on the tactical electoral questions — such as incentives for not annulling the opposition’s electoral ticket — and more on the larger question of ensuring there will be no persecution of the loser and that the two sides can return to the alternation of power rather than single party rule. The U.S. is in key a position to both influence the general ambiance of the election and to take specific actions that will facilitate a democratic outcome, which will play out over an extended post-electoral period.

Type: Analysis

View All Research & Analysis