Russia got in, Congress hears
Officials tell of intrusion into election
WASHINGTON — A portrait of Russia’s cyberattacks on the U.S. emerged Wednesday as current and former U.S. officials told Congress that Russia stockpiled stolen information and selectively disseminated it during the 2016 presidential campaign to undermine the U.S. political process.
The Russians “used fake news and propaganda and they also used online amplifiers to spread the information to as many people as possible,” Bill Priestap, the FBI’s top counterintelligence official, told the Senate Intelligence Committee.
While the Russians had conducted covert operations targeting past U.S. elections, he said, the Internet “has allowed Russia to do so much more” than before. He said the “scale and aggressiveness” was different this time, with the primary goal being to sow discord and aid the candidacy of Republican Donald
Trump, the eventual winner.
Russia’s actions did not change the final election count, those testifying said, but they warned that Russia’s efforts will likely continue.
“I believe the Russians will absolutely try to continue to conduct influence operations in the U.S.,” which will include cyberattacks, Priestap said.
Jeanette Manfra, homeland security undersecretary for cybersecurity, said there is evidence that 21 state election systems were targeted, but she told the Senate Intelligence Committee she couldn’t disclose the identities of the states because that was up to the states. Last September, the Homeland Security Department said hackers believed to be Russian agents had targeted voter registration systems in more than 20 states.
The top Democrat on the committee criticized the FBI for withholding that information.
“I do not believe our country is made safer by holding this information back from the American public,” said Sen. Mark Warner of Virginia, the ranking Democrat.
Former Homeland Security Secretary Jeh Johnson from former President Barack Obama’s administration told the House Intelligence Committee that Russia’s high-tech intrusion did not change ballots, the final count or the reporting of election results.
Johnson described the steps he took once he learned of the hacking of the Democratic National Committee, his fears about an attack on the election itself and his rationale for designating U.S. election systems, including polling places and voter registration databases, as critical infrastructure in early January, two weeks before Donald Trump’s inauguration.
“In 2016 the Russian government, at the direction of [President] Vladimir Putin himself, orchestrated cyberattacks on our nation for the purpose of influencing our election — plain and simple,” Johnson said.
Johnson described his discussions with state election officials about ensuring the integrity of the voting process. He said 33 states and 36 cities and counties used his department’s tools to scan for potential vulnerabilities.
He also said he contacted The Associated Press, which counts votes, and its CEO, Gary Pruitt.
“Prior to Election Day, I also personally reviewed with the CEO of The Associated Press its long-standing Election Day reporting process, including the redundancies and safeguards in its systems,” Johnson said.
And while Johnson said Russia did not “through any cyber intrusion alter ballots, ballot counts or reporting of election results,” he said he was “not in a position to know whether the successful Russian government-directed hacks of the DNC and elsewhere did in fact alter public opinion and thereby alter the outcome of the presidential election.”
DNC COMPUTER HACKING
Johnson also said he was not happy that he learned well after the fact that the DNC’s computer systems had been hacked. He said he became aware of the compromise “sometime in 2016” and that when he pressed his staff on whether the Homeland Security Department had been sufficiently proactive to help identify the intruders and patch vulnerabilities, the answer wasn’t reassuring.
“The FBI and the DNC had been in contact with each other months before about the intrusion, and the DNC did not feel it needed” the Homeland Security Department’s assistance at that time.
“Hindsight is 20/20,” Johnson said at one point in the hearing. “In retrospect, it would be easy for me to say that I should have bought a sleeping bag and camped out in front of the DNC in late summer.”
Rep. Peter King, R-N.Y., asked whether the DNC accepted his department’s help after they knew about the hack.
“To my disappointment, not to my knowledge, sir,” he answered. “The response I got was, the FBI had spoken to them, they don’t want our help, they have CrowdStrike, the cybersecurity firm.”
Johnson explained that the Homeland Security Department had actually helped other departments with suspected hacks, and had been able to stem the damage — but the DNC just wasn’t interested.
“I recall very clearly that I was not pleased that we were not in there helping them patch this vulnerability,” Johnson added.
He also said he wasn’t aware that the FBI had opened a counterintelligence investigation into possible collusion between the Trump campaign and Russian officials. But he said former FBI Director James Comey would not have undertaken such a probe lightly and without a basis for doing so.
Johnson was homeland security chief for Obama from December 2013 to January 2017.
The Senate committee was hearing from officials at the Homeland Security Department and the FBI’s counterintelligence division. Special counsel Robert Mueller is conducting an inquiry into possible collusion between the Trump campaign and Russian officials.
During the presidential campaign, Trump said he hoped Russia would be able to uncover missing emails from Hillary Clinton.
Sen. Martin Heinrich, D-N.M., asked Priestap if he thought Trump had become an “unwitting agent” of Russian interests.
Priestap remained silent. “I don’t blame you for not answering that question,” Heinrich said.
Trump has decried the investigations as witch hunts and has rejected the assessment by U.S. intelligence agencies that Russia’s hacking and disinformation campaign was intended to aid his candidacy.
Johnson’s designation of U.S. election systems as critical infrastructure was aimed at providing more federal cybersecurity assistance to state and local governments.
Johnson announced the shift on the same day as the release of a declassified U.S. intelligence report that said Putin “ordered” an influence campaign in 2016 aimed at the U.S. presidential election. That report said Russian intelligence services had “obtained and maintained access to elements of multiple U.S. state or local electoral boards.”
None of the systems targeted or compromised was involved in vote tallying, the report said, and there was no indication Russia’s prying changed vote counts in key states.
But Johnson’s decision triggered an outcry from state and federal election organization officials. They complained that Johnson’s department failed to respond to questions and concerns they had about the designation before the change was made.
U.S. elections are highly decentralized. Voters cast ballots in roughly 185,000 precincts spread over 9,000 jurisdictions during the 2016 presidential election. Elections are also subject to rigorous and elaborate rules that govern how and what equipment is used.