DHS: Hackers tested soft spots

WASHINGTON» The Department of Homeland Security on Thursday sought to clear up confusion over its assessment that Colorado and 20 states had their election systems targeted by Russian government hackers, saying just because the hackers in some states didn’t directly scan election systems, it doesn’t mean they weren’t looking to break into them.

DHS spokesman Scott McConnell said that hackers in an unspecified number of states looked for vulnerabilities to exploit in other government computer systems as a way to get into the election systems. The other networks were usually connected to the election systems or shared similarities. He declined to discuss specific states.

The release of additional information came after state officials in Wisconsin and California said they had received conflicting reports from DHS about which of their computer systems were targeted by hackers during the 2016 presidential campaign. And late Thursday, Texas denied that it was among the states that had been targeted.

Texas Secretary of State Rolando Pablos sent DHS a letter saying federal investigators got it wrong and there was no attempted hack on his agency’s website. Pablos wrote that his office “has determined conclusively that its agency website was not targeted and, furthermore, that DHS had relied on incorrect information.”

Last week, the department informed 21 states that their election systems had been targeted by “Russian government cyber actors,” and officials in those states released that information publicly. DHS has said that most systems weren’t breached, and there was no evidence that vote tallies or registration databases were altered.

Earlier this week, officials in Wisconsin and California said the Homeland Security Department provided additional information that they believed contradicted the department’s earlier notification.

In California, the targeted system was the state’s Department of Technology, which the secretary of state says it does not use for its IT services. The secretary of state declined further comment on Thursday.

In Wisconsin, it was the state’s Department of Workforce Development, which oversees job training and unemployment benefits.

In the majority of the 21 states, DHS has said it only observed hackers scanning networks in preparation for breaking into the networks, not actual penetrations.

The Associated Press reported the targeted states were: Alabama, Alaska, Arizona, California, Colorado, Connecticut, Delaware, Florida, Illinois, Iowa, Maryland, Minnesota, North Dakota, Ohio, Oklahoma, Oregon, Pennsylvania, Texas, Virginia, Washington and Wisconsin.