With elections increasingly dependent on modern technology, cybersecurity has become a vital shield against election violence and manipulation. Cyberattacks present a growing threat to both nascent and mature democracies, as they can shape the election process, erode citizen trust and trigger other forms of election violence. The 2019 elections in Indonesia and Ukraine illustrate the threat cyberattacks pose, even in relatively consolidated and stable democracies.

An overhead view of electronic voting machines in Miami, FL. (Vincent Laforet/The New York Times)
An overhead view of electronic voting machines in Miami, FL. (Vincent Laforet/The New York Times)

Cyberattacks are increasingly used by government-linked groups and private individuals to target corporate, financial, and, more recently, democratic institutions. The perpetrators and their motivations often remain unclear, but cyberattacks qualify as election violence given their ability to undermine election authorities and shape results. Common tactics include distributed denial-of-service (DDOS), phishing, and malware attacks against critical infrastructure and networks. Election officials around the world have embraced advanced technologies for voter registration and results management systems. But those new technologies create new vulnerabilities, especially if there is a lack of technical expertise, modern equipment, and necessary cyber hygiene.

While the threat that cyberattacks pose to elections are recognized, international and domestic legal frameworks are insufficiently developed to ensure robust prevention and enforcement efforts. As technology rapidly transforms, prevention strategies must look forward, securing the next election rather than repairing vulnerabilities exposed in the previous election. Election management bodies (EMBs) will also face a difficult balancing act to secure their processes while preserving transparency.

In Ukraine, the Central Election Commission (CEC) has long suffered from technological vulnerabilities and a lack of technical training for staff, compounded by legal and procedural hurdles. In 2014, a cyberattack disabled CEC network nodes and erased numerous components of the election system, including the Results Management System, using advanced cyberespionage malware. In 2015, Ukraine suffered from a successful attack on its power grids, and a malware attack—known as (Not)Petya—infiltrated Ukrainian banks, government agencies and electricity firms in 2017.

With presidential elections this spring, and parliamentary elections in October, Ukraine has taken important steps to protect its election infrastructure, mostly through trainings by international specialists, improving its ability to withstand the surge in attacks on electoral servers and the personal computers of election staff.

With legislative and presidential elections scheduled on April 17, Indonesia has similarly suffered from cyberattacks targeting its electoral infrastructure. The head of the National Election Commission (KPU), Arief Budiman, remained confident that the increase in attacks against Indonesia’s voter database will not disrupt the voting process. Despite this, the threat posed by cyberattacks in the form of targeting candidates’ private data remains a concern.

The Impact of Cyberattacks on Democracy and Political Stability

While cybersecurity measures can strengthen institutions and electoral processes, they also shape the tactical considerations of would-be perpetrators of election violence. Cyberattacks could provide an alternative to more traditional forms of election violence as a method to shape election results, delegitimize the vote, or create general distrust in institutions.

As cyberattacks generally have a lower cost and provide the advantage of anonymity, an increase in the use of cyberattacks could perversely lower the risk of violence in the streets, at least in the short-term. The subsequent loss of legitimacy in the electoral process can also increase the risk of post-election violence, for instance as delayed results announcements create the suspicion of fraud.

Cyberattacks erode public trust in the electoral process and offer losing parties or candidates another reason to question and challenge the results. Preventing cyberattacks requires not only the adequate funding for EMBs to secure their digital infrastructure, but also educating the public and election staff on the complexities of hybrid warfare and its associated risks.

Related Publications

Nigeria’s Vote Signals Risks: How Its Partners Can Support Democracy

Nigeria’s Vote Signals Risks: How Its Partners Can Support Democracy

Thursday, March 9, 2023

By: James Rupert

Nigeria’s disputed election 12 days ago is raising protest at home and concern abroad over its implications for the strength of democracy in that country and across Africa. Yesterday’s new wrinkle was the postponement of this week’s planned election for Nigerian state governors. Nigeria’s electoral commission is working to fix problems in a vote management system that failed to transparently process and report a result on February 25. An erosion of democracy’s credibility in Africa’s most populous nation would be catastrophic.

Type: Analysis and Commentary

Democracy & GovernanceElectoral Violence

Amid Nigeria’s Turmoil, an Election Could Alter its Democracy

Amid Nigeria’s Turmoil, an Election Could Alter its Democracy

Thursday, July 28, 2022

By: Oge Onubogu

In mid-summer 2022, Nigeria is just seven months away from elections that could strengthen, or set back, its democracy. Good news includes a surge in voter registrations and a wave of civic engagement among young Nigerians who in recent years have often despaired of better governance through elections. Yet dangers loom: risks of electoral violence or disputed election results in a country where political and criminal violence has reached new levels. To help Africa’s most populous nation pivot toward stability — and to indirectly bolster democratization across the continent — the United States and other international partners should provide diplomatic, political and technical support for Nigeria’s electoral authority.

Type: Analysis and Commentary

Democracy & GovernanceElectoral Violence

Why Ethiopia’s 2021 Elections Matter

Why Ethiopia’s 2021 Elections Matter

Thursday, June 17, 2021

By: Aly Verjee;  Terrence Lyons

Facing numerous technical difficulties, the National Election Board of Ethiopia (NEBE) delayed parliamentary elections from June 5 to June 21, postponing the vote for the second time. Some major opposition parties are boycotting, and no voting will take place in civil war hit Tigray or in several other areas facing insecurity. Elsewhere, deficiencies in election administration have meant voting has already been postponed in many constituencies, and some of the logistical arrangements to underpin the vote are still to be implemented. Although there are risks of electoral violence, any incidents are unlikely to be especially significant in a context of high levels of ongoing political violence.

Type: Analysis and Commentary

Democracy & GovernanceElectoral Violence

Ethiopia: Contemplating Elections and the Prospects for Peaceful Reform

Ethiopia: Contemplating Elections and the Prospects for Peaceful Reform

Thursday, April 29, 2021

By: Lidet Tadesse Shiferaw;  Terrence Lyons;  Aly Verjee

Ethiopia is approaching parliamentary elections on June 5. This will be the first vote since the process of reform launched in 2018 by Prime Minister Abiy Ahmed, and the stakes are extremely high. Elections to the next national parliament, the House of People's Representatives, may determine future decisions about the structure of the country and consolidate the ruling party’s power. While the short-term outlook for the vote is unlikely to change, the election may offer opportunities to support political dialogue which could sustain important reforms and decrease polarization.

Type: Analysis and Commentary

Democracy & GovernanceElectoral Violence

View All Publications