Russian attempts to infiltrate U.S. election systems found in 21 states: officials

Former homeland security secretary Jeh Johnson and those officials from the FBI told congressional committees Wednesday that 21 state election systems were targeted by Russian hackers, although there was no evidence vote tallies were altered.

Official recommends paper trail, vote tallying and voting machines not connected to internet

Jeh Johnson arrives to testify before the House intelligence committee task force on Capitol Hill in Washington on Wednesday as part of the investigation into Russian interference in the 2016 presidential election. (Andrew Harnik/Associated Press)

A sinister portrait of Russia's cyberattacks on the U.S. emerged Wednesday as current and former U.S. officials told Congress Moscow stockpiled stolen information and selectively disseminated it during the 2016 presidential campaign to undermine the American political process.

The Russians "used fake news and propaganda and they also used online amplifiers to spread the information to as many people as possible," Bill Priestap, the FBI's top counterintelligence official, told the Senate intelligence committee.

While he said the Russians had conducted covert operations targeting past American elections, the "scale and aggressiveness" was different this time, with the primary goal being to sow discord and aid the candidacy of Republican Donald Trump, the eventual winner.

"I believe the Russians will absolutely try to continue to conduct influence operations in the U.S.," which will include cyberattacks, Priestap said.

Jeanette Manfra, Homeland Security undersecretary for cybersecurity, said there is evidence that 21 state election systems were targeted, but she told the Senate intelligence committee she couldn't disclose the identities of the states.

Mark Warner of Virginia, a Democratic member of the Senate committee, said Homeland Security and the FBI have confirmed intrusions into voter registration databases in Arizona and Illinois. He said it's not acceptable for the government to keep the full scope of the attacks secret.

Bill Priestap, senior official for the FBI in counterintelligence, said the scale and aggressiveness of Russia's interference attempts were greater than his agency had previously seen. (Joshua Roberts/Reuters)

Priestap told the senators there was no doubt the attempts came from Russia and that their efforts at electoral disruption "will absolutely continue" in the future.

Meanwhile, former Homeland Security secretary Jeh Johnson from the Obama administration told the House intelligence committee that Moscow's high-tech intrusion did not change ballots, the final count or the reporting of election results.

Putin 'orchestrated cyberattacks,' House hears

Johnson described the steps he took once he learned of the hacking of the Democratic National Committee, his fears about an attack on the election itself and his rationale for designating U.S. election systems, including polling places and voter registration databases, as critical infrastructure in early January, two weeks before Donald Trump's inauguration.

"In 2016 the Russian government, at the direction of [President] Vladimir Putin himself, orchestrated cyberattacks on our nation for the purpose of influencing our election — plain and simple," Johnson said.

Johnson described his discussions with state election officials about ensuring the integrity of the voting process. He said 33 states and 36 cities and counties used his department's tools to scan for potential vulnerabilities.

And while Johnson said Russia did not "through any cyber intrusion alter ballots, ballot counts or reporting of election results," he said he was "not in a position to know whether the successful Russian government-directed hacks of the DNC and elsewhere did in fact alter public opinion and thereby alter the outcome of the presidential election."

Johnson also said he was not happy that he learned well after the fact that the DNC's computer systems had been hacked. He said he became aware of the compromise "sometime in 2016," and that when he pressed his staff on whether the DHS had been sufficiently proactive to help identify the intruders and patch vulnerabilities, the answer wasn't reassuring.

"The FBI and the DNC had been in contact with each other months before about the intrusion, and the DNC did not feel it needed" Homeland Security's assistance at that time.

He also said he wasn't aware that the FBI had opened a counterintelligence investigation into possible collusion between the Trump campaign and Russian officials. But he said former FBI director James Comey would not have undertaken such a probe lightly and without a basis for doing so.

Johnson was Homeland Security chief from December 2013 to January 2017.

Johnson's designation of U.S. election systems as critical infrastructure was aimed at providing more federal cybersecurity assistance to state and local governments.

Johnson announced the shift on the same day as the release of a declassified U.S. intelligence report that said Putin "ordered" an influence campaign in 2016 aimed at the U.S. presidential election. That report said Russian intelligence services had "obtained and maintained access to elements of multiple U.S. state or local electoral boards."

Friction between federal, local officials

Some state and federal election organization officials complained that Johnson's department failed to respond to questions and concerns they had about the designation before the change was made.

Trump has decried the probes as witch hunts, and he's rejected the U.S. intelligence community's assessment that Russia's hacking and disinformation campaign was intended to aid his candidacy.

When asked this week if Trump believes Russia government interfered in the 2016 elections, White House spokesperson Sean Spicer said he hadn't discussed the matter with the president.

For his part, the top U.S. law enforcement official, attorney general Jeff Sessions, testified on June 2 to the Senate that he hadn't been briefed on the matter of interference in the election in the month before he was forced to recuse himself from all matters Russia-related, stating he had "no knowledge about this investigation beyond what has been publicly reported."

U.S. elections are highly decentralized. Voters cast ballots in roughly 185,000 precincts spread over 9,000 jurisdictions during the 2016 presidential election. Elections are also subject to rigorous and elaborate rules that govern how and what equipment is used.

Jeanette Manfra, cybersecurity official at the Department of Homeland Security, wouldn't publicly disclose which states were targeted, citing their privacy. (Joshua Roberts/Reuters)

Manfra said it would be her recommendation not to have vote tallying and voting machines connected to the internet, but also to consider a paper trail as a backup as advisable.

In addition to the congressional probes, special counsel Robert Mueller is conducting an inquiry into possible collusion between the Trump campaign and Russian officials.

Putin has denied Russia "at the state level" was involved in attempts to meddle in the U.S. election.

With files from CBC News