The machinery of American democracy is currently undergoing a quiet, surgical dismantling. While the headlines focus on the high-decibel rhetoric of "nationalized elections" and "voter rolls," a more consequential transformation is happening in the windowless rooms of the Cybersecurity and Infrastructure Security Agency (CISA).
For nearly a decade, CISA served as the connective tissue between the federal government’s intelligence apparatus and the thousands of local county clerks who actually run elections. That tissue is being dissolved. In a series of aggressive budget maneuvers and personnel purges, the current administration has initiated a nearly 17% reduction in CISA’s total funding—approximately $495 million—targeted specifically at the programs that once shielded the vote from digital sabotage.
This is not a mere bureaucratic reshuffling. It is a fundamental shift in the American security posture. The 2026 midterms are the first major test of a new, leaner, and arguably more vulnerable electoral infrastructure. By eliminating 1,083 positions and slashing $36.7 million from the agency's election security mission, the federal government is effectively telling state and local officials that they are on their own.
The Disconnect at the Local Level
Elections in the United States are famously decentralized. They are run by more than 8,000 different jurisdictions, many of which are small counties with IT budgets that barely cover basic server maintenance. In previous cycles, these offices relied on the Elections Infrastructure Information Sharing and Analysis Center (EI-ISAC). This nonprofit hub, funded by CISA, provided free threat monitoring, intrusion analysis, and a direct line to federal intelligence.
That funding is gone. The Department of Homeland Security recently "partially terminated" its cooperative agreement with the Center for Internet Security, the home of the EI-ISAC. The result is a tiered security system where only the wealthiest states can afford the subscriptions required to maintain the same level of protection they previously received for free.
The administration’s logic is that CISA should focus on "core missions" like federal network defense rather than what it calls "external engagement." This assumes that the security of a federal agency is more vital than the security of a ballot box in rural Georgia or Pennsylvania. It is a gamble that ignores the reality of modern conflict: adversaries rarely attack the front door when the side windows are left unlatched.
The Brain Drain Problem
Buildings and servers are easier to replace than people. Since January 2025, a "Workforce Transition Program" and a series of high-level leadership purges have gutted the agency’s expertise. Nearly 1,000 staffers have left, including many of the veterans who built the election security protocols after the 2016 interference.
When a critical threat emerges—like the Russian-linked bomb threats that targeted polling places in 2024—the response depends on relationships. Those relationships take years to build and seconds to destroy. Career officials at CISA once spent their days holding "tabletop" exercises with secretaries of state, simulating ransomware attacks and power outages. Today, many of those positions are vacant or have been repurposed to focus on domestic fraud investigations rather than foreign cyber defense.
The Disinformation Vacuum
The most contentious part of this overhaul involves the agency’s role in "misinformation" and "disinformation." The administration has labeled these efforts the "Censorship Industrial Complex," moving quickly to shutter any office or program dedicated to flagging false information about the voting process.
There is a kernel of valid concern here regarding the First Amendment and the line between government guidance and coercion. However, the total withdrawal from this space leaves a vacuum. In 2024, CISA operated a "Rumor Control" site that dispelled technical falsehoods—for instance, clarifying that a specific software glitch did not actually change vote totals.
Without a central, non-partisan authority to clarify the technical realities of election day, the narrative is now controlled entirely by partisans and foreign actors. Intelligence reports indicate that Russia and China have professionalized their influence operations, moving away from crude bots toward AI-generated deepfakes and the "hiring" of domestic influencers to spread Kremlin talking points.
The threat is no longer just about hacking a voting machine; it is about hacking the voter’s perception of the machine's integrity. By removing the federal government’s ability to even provide technical "rumor control," the administration has cleared the path for these narratives to thrive.
The SAVE Act and the New Federalism
While the defensive shield is being lowered, the administration is simultaneously pushing for more central control over the mechanics of voting. The "SAVE America Act" represents a paradoxical shift. On one hand, the administration is cutting the cyber-support states rely on. On the other, it is demanding that states turn over their voter rolls to the federal government for "verification" and threatening to nationalize certain election procedures.
This creates a pincer movement for state election officials. They are losing the resources to protect their systems from foreign hackers while being pressured to implement massive, un-funded mandates like universal proof-of-citizenship requirements in the middle of a primary season.
In states like Illinois and New Mexico, officials have expressed "scrambling" to preserve their security posture. Some are refusing federal grants because of new strings attached that prohibit the money from being used for certain information-sharing groups. It is a fractured landscape where the strength of your vote depends entirely on the zip code you live in.
A System Under Pressure
The true risk of the 2026 midterms isn't necessarily a massive, nationwide cyberattack that flips a switch. It is a "death by a thousand cuts" scenario. A ransomware attack on a small county’s voter registration database here. A deepfake video of a ballot box being burned there. A lack of intelligence-sharing that prevents a coordinated response to foreign probes.
Confidence in the fairness of elections has already dropped to its lowest point in years, according to recent Marist polls. When the federal government retreats from its role as a neutral security provider, it doesn't just leave a technical gap; it leaves a psychological one.
The midterms will proceed. The ballots will be cast. But the infrastructure supporting them is now more opaque, less collaborative, and more susceptible to the very interference the country spent a decade trying to prevent.
Would you like me to analyze the specific budget breakdowns for the 2027 fiscal year to see if these security cuts are projected to become permanent?