Protecting Election Officials: How Digital Threats Become Real-World Risks

The recent revelation that Indian police are investigating over 500,000 fake Gmail accounts linked to bomb hoaxes underscores a troubling reality: mass-scale digital threats are becoming the new normal for public officials worldwide, and as our Bomb Threats Task Force research has shown, election officials are increasingly in the crosshairs.

How digital threats become physical risks

In November 2024, at least two separate threat actors launched coordinated waves of bomb threat hoaxes targeting U.S. election infrastructure across nine states, sending approximately 280 false threats that forced polling location evacuations and disrupted vote counting. These attacks returned in 2025, hitting New Jersey and New York with at least 30 additional coordinated threats.

What makes these incidents particularly alarming is how they mirror the pattern our Executive Shield team sees daily: physical violence against high-profile individuals increasingly begins with digital reconnaissance. An attacker studies patterns of life online, identifies vulnerabilities, and builds a picture of how to reach their target. For election officials, this threat landscape has become especially acute

Why election officials face heightened digital exposure

Election officials operate in a uniquely vulnerable position. Their contact information is publicly available by necessity. Their roles make them high-visibility targets, and as our Task Force documented, threat actors are becoming more sophisticated:

• Actors designated “Muted Umber” and “Sudden Vermillion” used privacy-focused email infrastructure (Mailum/CyberFear and Mail.ru) to limit attribution
• They adopted American-sounding ideological handles to appear domestic
• They sent threats timed to maximize disruption during critical election operations

The grievances that motivate violence are increasingly forming and escalating in digital spaces long before they manifest physically. For election officials facing heightened scrutiny and politically motivated threats, this digital-to-physical threat pathway is especially concerning.

Where traditional security leaves digital gaps

Traditional physical security doesn’t cover the digital attack surface, and as our research shows, when threat actors want to reach election officials or polling sites, they start online:

• Personal data scattered across hundreds of data broker sites provides targeting information
• Social media activity reveals patterns of life and movement
• Family members’ online presence creates additional vulnerabilities
• Publicly available polling site information makes easy targets for coordinated disruption campaigns

Lessons from the bomb threats task force

Our research through the Task Force reinforces four critical recommendations that apply equally to protecting election officials

1. Expect a Threat – Plan before incidents occur and make staff aware of response protocols
2. Share Quickly and Widely – Collaborate with law enforcement and partners when threats emerge
3. Educate Your Team – Leverage available resources to prepare for evolving threats
4. Proactively Engage – Ensure officials, staff, and stakeholders know the plan

Protecting election officials with executive digital protection

As threat actors continue to evolve their tactics, potentially incorporating AI, expanding from email to VoIP calls, and copying successful disruption campaigns, the need for comprehensive protection has never been greater.

Election officials deserve to do their jobs without fear. When a board or oversight body asks “what are we doing to protect our election officials?”, you need a good answer.

Executive Shield provides that answer: clear visibility into digital exposure, measurable risk reduction, early threat detection, and actionable intelligence — not just alerts, but guidance on what to do about threats before they become real-world harm.

Four steps to reduce exposure and address threats

Based on our work with the Bomb Threats Task Force and our Executive Shield solution, we recommend a multi-layered approach for protecting election officials:

1. Assess Digital Exposure from the Adversary’s Perspective

Executive Shield uncovers the digital vulnerabilities that put officials and their families at risk by modeling what an attacker sees. This includes:

• Personal data exposed across 200+ data broker sites
• Social media patterns that reveal scheduling and routines
• Family member information that creates additional attack vectors

2. Reduce the Exposed Footprint

Our analyst-confirmed PII identification and removal service provides measurable reduction in exposed personal data, going beyond automated tools to handle the takedowns that require human intervention. In one case, we found a client’s personal data exposed on 80 sites that their existing removal service had missed.

3. Monitor for Active Threats

Ongoing threat monitoring across social media, the deep web, and dark web provides early detection before threats escalate to real-world harm. As our Task Force research shows, threat actors often coordinate across platforms and escalate in predictable patterns.

4. Investigate and Attribute When Threats Emerge

When a threat surfaces, experienced analysts investigate who is behind it, tying digital personas to real humans so meaningful action can be taken. This attribution capability proved critical in identifying the infrastructure and tactics of the election bomb threat actors.