Loading story…
Newly declassified U.S. intelligence records describe how Chinese intelligence services collected and analyzed data on more than 200 million U.S. voter records during the 2020 election period, adding detail to long-running concerns about Beijing’s election-related intelligence activity. The disclosures indicate internal disagreement within the U.S. intelligence community over how to characterize China’s actions, including whether some limited influence efforts were directed against Donald Trump.
The records do not overturn earlier U.S. assessments that China did not alter votes, manipulate ballots, or compromise election infrastructure. A declassified intelligence assessment and subsequent reporting show that while some officials argued Beijing took narrower influence-related steps, even dissenting views stopped short of concluding that China interfered with the technical administration of the election; Trump nevertheless cited the disclosures to renew broader claims about election vulnerabilities and to promote the SAVE Act.
TTPs, infrastructure, and targeting history in one profile.
4 events from the most recent confirmed update back to the earliest known activity.
In the wake of the declassified disclosures, President Donald Trump cited the records to argue that they showed weaknesses in U.S. election systems and to advocate for the SAVE Act. Critics said he was repackaging old allegations, while the records still did not show manipulation of ballots or election infrastructure.
Nextgov reported on July 17, 2026 that U.S. intelligence records concerning China's collection and analysis of U.S. voter data during the 2020 election period had been newly declassified. The disclosures also revealed internal intelligence community disagreements over how to characterize Beijing's actions.
During the 2020 election period, newly declassified U.S. intelligence records say Chinese intelligence collected and analyzed more than 200 million U.S. voter records. The records added detail about Beijing's intelligence activity but did not conclude that votes or ballots were altered.
A declassified intelligence community assessment dated March 16, 2021 concluded that Russian President Vladimir Putin authorized influence operations aimed at denigrating Joe Biden and supporting Donald Trump ahead of the 2020 U.S. election. The assessment also said Iran carried out influence efforts and that China considered but did not deploy interference efforts intended to change the election outcome.
See this adversary's TTPs, infrastructure, and targeting history, correlated against your exposure.
3 references tracked. Mallory keeps watching after this page renders.
malware.news
Open sourcenextgov.com
Open sourcedni.gov
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
State and local election officials, along with election security experts, sharply rejected President Donald Trump’s latest claims that U.S. elections were compromised, saying he presented no evidence that China altered the 2020 election or that the 2020, 2022, or 2024 contests were affected by widespread fraud. The criticism extended to Trump’s assertions that hundreds of thousands of noncitizens were registered to vote, with officials pointing to prior state audits that found only isolated cases and warning that DHS citizenship-verification data and commercial-data matching methods are unreliable. Newly declassified intelligence records cited in the dispute also failed to substantiate Trump’s allegations against China and instead indicated that Russia was the principal foreign actor seeking to influence the 2020 election in Trump’s favor. According to the released assessments, China largely avoided aggressive interference out of concern over exposure and retaliation, while only Russia was identified as targeting, accessing, or manipulating election-related systems; the clash has intensified amid court setbacks for federal efforts to obtain state voter data and criticism over the firing of all three Election Assistance Commission commissioners.
Jul 17, 2026
The FBI and CISA warned that foreign actors and cybercriminals could use online journals, pseudo-academic websites, spoofed domains, fraudulent email accounts, and **DDoS** attacks to spread false election information and erode confidence in the 2020 U.S. election. The agencies said attackers were likely to amplify claims about voter suppression, ballot fraud, cyberattacks on election infrastructure, and other narratives designed to portray the election as illegitimate, while lookalike websites and emails could also be used to steal credentials, harvest personally identifiable information, and deliver malware. U.S. officials said cyber threats to election infrastructure could cause localized delays or disrupt access to public-facing voting information, but were not assessed as capable of preventing voting or altering ballot integrity or vote tallies. They emphasized that safeguards such as provisional ballots, paper backups, backup pollbooks, and alternative communication channels limited the impact of incidents, while later reporting indicated Russia did not mount a major interference campaign on the scale of 2016, despite continued lower-level influence efforts and persistent concern that uncertainty around vote counting and result reporting could be exploited to fuel post-election confusion.
Aug 15, 2026
US Cyber Command secretly targeted at least two Russian companies involved in covert online influence activity ahead of the 2024 US election, according to reporting that said the operation was part of a wider federal effort with the FBI, DHS, and other agencies to expose and disrupt foreign meddling aimed at voters in key swing states. The campaign reportedly pushed anti-Ukraine and anti-politician narratives, and officials said the US action slowed the Russian operation even though propaganda content continued through Election Day. The activity fits a longer pattern of Russian interference in US politics, following earlier US government findings that Moscow targeted election systems in 2016 and subsequent Justice Department charges against Russian individuals and companies tied to interference operations. Officials and former officials warn that many of the structures built after the 2016 election to counter foreign influence have since been dismantled, reduced, or paused, including functions at ODNI, the FBI, the State Department, and CISA. The rollback comes despite continued threats from Russian, Chinese, and Iranian-linked actors using fake websites, AI-enabled propaganda, and cyber activity affecting election infrastructure, raising concerns that the United States has less visibility and fewer coordinated defenses in place for future elections.
Jun 29, 2026