Russia hackers breached US voting software firm - report

The National Security Agency (NSA) campus in Fort Meade, Maryland. Photo / AP

Russian hackers attacked at least one US voting software supplier days before last year's presidential election.

That's according to a government intelligence report leaked today that suggests election-related hacking penetrated further into US voting systems than previously known.

The classified National Security Agency report, which was published online by the Intercept, does not say whether the hacking had any effect on election results.

But it says Russian military intelligence attacked a US voting software company and sent spear-phishing emails to more than 100 local election officials at the end of October or beginning of November.

US intelligence agencies declined to comment.

The document said Russian military intelligence "executed cyber espionage operations against a named US company in August 2016 evidently to obtain information on elections-related software and hardware solutions, according to information that became available in April 2017."

"Lastly, the actors send test emails to two non-existent accounts ostensibly associated with absentee balloting, presumably with the purpose of creating those accounts to mimic legitimate services."The hackers are believed to have then used data from that operation to create a new email account to launch a spear-phishing campaign targeting US local government organisations, the document said.

The document did not name any state.

The information in the leaked document seems to go further than the US intelligence agencies' January assessment of the hacking that occurred.

"Russian intelligence obtained and maintained access to elements of multiple US state or local electoral boards," the assessment said.

The Department of Homeland Security "assesses that the types of systems Russian actors targeted or compromised were not involved in vote tallying".

The Intercept contacted NSA and the national intelligence director's office about the document and both agencies asked that it not be published.

US intelligence officials then asked the Intercept to redact certain sections. The Intercept said some material was withheld at US intelligence agencies' request because it wasn't "clearly in the public interest".

Easy to view arrest of @theintercept's source as the first salvo in a Trump admin. war on leaks. I suspect Obama DOJ would've done it too.

— Brad Heath (@bradheath) June 5, 2017

AP could not confirm the authenticity of the May 5 NSA document, which the Intercept said it obtained anonymously.

But also today, the Justice Department announced it had charged a government contractor in Georgia with leaking a classified report containing "Top Secret level" information to an online news organisation. The report the contractor allegedly leaked is dated May 5, the same date as the document the Intercept posted online.

Reality Leigh Winner, 25, of Augusta, Georgia, was charged in US District Court with copying classified documents and mailing them to a reporter with an unnamed news organisation.

Prosecutors did not say which federal agency Winner worked for, but FBI agent Justin Garrick said in an affidavit filed with the court that she had previously served in the Air Force and held a top-secret security clearance.

Winner's lawyer, Titus Thomas Nichols, declined to confirm whether she is accused of leaking the NSA report received by the Intercept. He also declined to name the federal agency for which Winner worked.

What we know and don't know about the Russian government hacking effort days before the 2016 election. https://t.co/MeqLXphTxCpic.twitter.com/4BrisTmdeS

— The Intercept (@theintercept) June 5, 2017