Page:Report of the Select Committee on Intelligence United States Senate on Russian Active Measures Campaigns and Interference in the 2016 U.S. Election Volume 1.pdf/20

   
COMMITTEE SENSITIVE—RUSSIA INVESTIGATION ONLY

	DHS reported indications of GRU scanning activity on two separate State 19 government domains.[1]
State 20	(U) According to State 20 officials, cyber actors using infrastructure identified in October by MS-ISAC were "knocking" on the state's network, but no successful intrusion occurred.[2]   DHS reported GRU scanning activity on the Secretary of State domain.[3]
State 21	(U) State 21 officials received indicators from MS-ISAC in October 2016. They said they were not aware the state was among those targeted until notified.[4]   DHS reported GRU scanning activity on an election-related domain as well as at least one other government system connected to the voter registration system.[5]

  Neither DHS nor the Committee can ascertain a pattern to the states targeted, lending credence to DHS's later assessment that all 50 states probably were scanned. DHS representatives told the Committee that "there wasn't a clear red state-blue state-purple state, more electoral votes, less electoral votes" pattern to the attacks. DHS acknowledged that the U.S. Government does not have perfect insight, and it is possible the IC missed some activity or that states did not notice intrusion attempts or report them.^[6]  

 ^{[7]  [8]}

---

1. (U) DHS briefing for Committee staff on March 5, 2018.
2. (U) Memorandum for the Record, SSCI Staff, Conference Call with [State 20], November 17, 2017.
3. (U) DHS briefing for Committee staff on March 5, 2018.
4. (U) Memorandum for the Record, SSCI Staff, Conference Call with [State 21], November 17, 2017.
5. (U) DHS briefing for Committee staff on March 5, 2018.
6. (U) SSCI interview with DHS and CTIIC, February 27, 2018, p. 25.
7.  
8. (U) SSCI interview with DHS and CTIIC, February 27, 2018, p. 21.

20
COMMITTEE SENSITIVE—RUSSIA INVESTIGATION ONLY