Cybersecurity Threats Targeting 2026 U.S. Midterms Focus on Misinformation and Phishing

• •Over 5,000 election-themed domains were registered in early 2026, increasing phishing risks.
• •9,500 credentials from ActBlue and 6,500 from WinRed were leaked, heightening security concerns.
• •AI is being used to enhance misinformation campaigns, making them more effective and widespread.

As the 2026 U.S. midterm elections approach, cybersecurity threats are increasingly centered on misinformation campaigns and phishing rather than direct attacks on voting machines. A report by Check Point highlights that over 5,000 election-themed domains were registered between April and May 2026, with significant credential leaks from major fundraising platforms, including 9,500 from ActBlue and 6,500 from WinRed. The report indicates that attackers are leveraging AI to amplify misinformation and create convincing phishing schemes, targeting campaign accounts, fundraising platforms, and public information channels. This shift in tactics reflects a growing trend where the focus is on undermining voter trust and manipulating the information environment rather than altering vote counts directly. The threat landscape is compounded by activities from state-linked actors, particularly from Russia, China, and Iran, aiming to exploit the polarized political climate in the U.S.