Fired CISA Director Refutes Election Fraud Allegations

Critical Infrastructure Security , Cyberwarfare / Nation-State Attacks , Endpoint Security

In 60 Minutes Interview, Christopher Krebs Says Paper Ballots Secured Election

Fired CISA Director Refutes Election Fraud Allegations Christopher Krebs, former director of CISA, refuted claims the presidential election was corrupt on his first interview since his dismissal on Nov. 18.

Former Cybersecurity Infrastructure and Security Agency director Christopher Krebs revealed in his first post-firing TV interview exactly what made officials confident the presidential election results were accurate: paper ballots.

See Also: Live Webinar | Securing Mobile Endpoints to Protect IP in the Pharma Industry

Krebs gave an exclusive interview on Sunday to Scott Pelley of the news program 60 Minutes. Krebs didn’t mention President Donald Trump by name, but refuted claims by his administration and personal lawyer, Rudy Giuliani, that the election was corrupt.

Election day “was quiet,” says Krebs, whom 60 Minutes identified as a lifelong Republican. “And there was no indication or evidence that there was any sort of hacking or compromise of election systems on, before or after November 3rd.”

Paper ballots were key, Krebs says. Ninety-five percent of the ballots casts in the presidential election had a paper record, which meant that it was possible to recount and prove no malicious computer software interfered, Krebs says. That’s compared to 82 percent in 2016.

Paper ballots “give you the ability to prove that there was no malicious algorithm or hacked software that adjusted the tally of the vote, and just look at what happened in Georgia,” Krebs says. “Georgia has machines that tabulate the vote. They then held a hand recount, and the outcome was consistent with the machine vote.”

Georgia’s recount resulted in about 1,400 more votes for Trump, but Biden maintained his lead to win the state. Wisconsin’s recount led to 132 more votes for Biden, who also won the state.

Krebs continued: “That tells you that there was no manipulation of the vote on the machine count side. And so that pretty thoroughly, in my opinion, debunks some of these sensational claims out there – that I’ve called nonsense and a hoax – that there is some hacking of these election vendors and their software and their systems across the country. It’s – it’s just – it’s nonsense.”

Voting experts have long warned against a type of voting machine called DRE, short for Direct Recording Electronic. Some types of those machines do not create a paper trail, and researchers have found some models have inaccurately tallied votes. Georgia is one state that has replaced DRE machines without a paper trail.

Many other states still use DRE machines, but ones that also create what’s called a Voter-Verified Paper Audit Trail, which can be relied on for auditing. A full list of the different voting equipment in place in various states can be found at Ballotpedia.

CISA: Helping States

Trump fired Krebs by tweet on Nov. 16, a move that was expected as senior Department of Homeland Security (DHS) officials suddenly resigned (see Trump Fires Christopher Krebs, Head of CISA).

The National Protection and Programs Directorate became CISA in November 2018 after Trump approved its creation. Trump also nominated Krebs to head it. The agency, which falls under the DHS, is charged with protecting government networks, and a key mission is reducing cybersecurity election risks.

CISA created meticulous guidelines and checklists for local governments and campaigns designed to reduce risk. The agency worked with states to ensure their voter registration systems – which were targeted by Russia in 2016 – were secure. It also provided advice for local governments on how to respond to incidents and assistance.

The DHS warned in the month leading up to the election that Russia posed the most serious threat to the election. Also, U.S. officials blamed Iran for a ham-fisted email campaign that threatened Democratic voters, a campaign that drew on public voter registration data (see US Alleges Iran Sent Threatening Emails to Democrats). There were also fears that ransomware may be deployed, hampering computer systems integral to vote tallying.

To battle misinformation, CISA also created a feature on its website called Rumor Control . It addressed some of the more egregious examples of circulating misinformation, such as if election results change over time as votes are counted, it may be a sign of hacking or compromise.

Rising Tension

Trump secured early leads in some states, but fell behind in the count as election officials caught up on mail-in ballots, which are more labor-intensive to count. Trump went on the offensive with a variety of claims, including that dead people voted, ballots were thrown out, poll workers committed fraud and tabulation errors.

When Trump tweeted that machines made by Dominion Voting Systems deleted millions of votes, the Election Infrastructure Government Coordinating Council, which includes CISA, the National Association of Secretaries of State and the U.S. Election Assistance Commission, sought to repel the accusation.

“There is no evidence that any voting system deleted or lost votes, changed votes, or was in any way compromised,” the group said in a Nov. 12 statement.

Although some states have uncovered minor tabulation errors, no evidence of fraud has emerged, and electoral results have been unchanged. The Trump administration has filed at least two dozen lawsuits, which have been roundly rejected by judges.

But the tension between CISA and the Trump administration, both asserting polar opposite stories about the security of the election, put the two on a collision course.

Krebs resumed tweeting under his personal Twitter account shortly after he was fired by Trump two weeks ago. He became more pointed in his comments about the election, warning people to ignore misinformation and advocating that paper ballots and diligent recounts have affirmed the results.

One of Krebs’ sharpest tweets after he was fired came on Nov. 19. That day, Trump’s personal lawyer, Giuliani, made a variety of claims in a 105-minute press conference. One of those claims is that ballots from 28 states were sent to be counted in Germany and Spain.

When asked by 60 Minutes about Giuliani’s press conference, Krebs says “it was upsetting because what I saw was an apparent attempt to undermine confidence in the election, to confuse people, to scare people.”

“It’s not me, it’s not just CISA,” Krebs continued. “It’s the tens of thousands of election workers out there that had been working nonstop, 18- hour days, for months. They’re getting death threats for trying to carry out one of our core democratic institutions, an election. And that was, again, to me, a press conference that I just – it didn’t make sense. What it was actively doing was undermining democracy. And that’s dangerous.”

When Trump fired him by tweet, Trump claimed Krebs made “highly inaccurate” statements. Asked about his dismissal, Krebs didn’t address Trump directly.

“I think…the thing that upsets me the most about that is I didn’t get a chance to say goodbye to my team,” Krebs says. “And I’d worked with them for three and a half years, in the trenches. Building an agency, putting CISA on the national stage. And I love that team. And I didn’t get a chance to say goodbye, so that’s what I’m most upset about.”

Share this post

Share on facebook
Share on linkedin
Share on print
Share on email

Subscribe to our Monthly Cyber Security Digest

Get monthly content to keep you up to date on the latest news and tips