Skip to content

New Jersey ELEC virtual-meeting cyberattack

Summary

New Jersey Election Law Enforcement Commission logo

Malicious interference forced the New Jersey Election Law Enforcement Commission to end its July 24, 2025, Zoom meeting. The commission scheduled a replacement session and resumed public business; the evidence does not establish compromise of voting systems or campaign-finance records.

Key facts

Timeline

  • Incident start:
    ? Earliest known or assessed start of malicious activity or incident activity.
  • First public signal:
    ? Earliest public indication of an outage, disruption, closure or other observable incident impact. The signal does not need to mention cybersecurity.
  • First public cyber evidence:
    ? Earliest credible public information connecting the incident or disruption to malicious cyber activity.
  • Official cyber disclosure:
    ? First official acknowledgment by the affected organization or an authoritative public body that the incident was cyber-related.
  • Last impact seen:
    ? Latest public indication that disruption, degraded operations, recovery work or unresolved impact was still ongoing.

Critical infrastructure sector

Incident characteristics

Assessments

Attack mechanisms

  • Unknown cyber mechanism

    The incident is confirmed to be cyber-related, but the specific attack mechanism is unknown.

Data impacts

  • Unknown data impact

    The incident is cyber-related, but available evidence does not establish whether or how data was affected.

Operational impacts

Extortion indicators

  • Unknown extortion indicators

    The incident may involve extortion, but available evidence does not establish which extortion indicators were present.

Incident narrative

The New Jersey Election Law Enforcement Commission ended its July 24, 2025, Zoom meeting after deliberate interference disrupted the proceedings.

Analyst assessment

In its original incident release, ELEC described a hacking incident and said it ended the meeting as quickly as possible. It contacted the governor’s office and attorney general’s office and requested an investigation. Sen. Anthony Bucco’s same-day statement also condemned the interference.

The July 24 minutes describe outsiders taking control of the meeting’s audio and video. They record that the interrupters claimed Ku Klux Klan membership; that self-identification has not been independently verified. AP’s report describes racist and sexually explicit content.

This establishes deliberate interference with the virtual proceedings. The reviewed accounts do not establish website defacement, compromised credentials or intrusion into the commission’s internal network.

Operational significance

Ending the meeting interrupted the commission’s public business. The July 25 replacement agenda rescheduled the monthly session for July 29 and provided advance registration and public-comment instructions. A July 29 release records a 4-0 vote selecting gubernatorial debate sponsors, demonstrating that commission business resumed.

The replacement-session minutes also record presentations and public comments, confirming that the interrupted type of proceeding resumed. Discussion of IT security occurred in a closed executive session, which provides no public account of its findings.

This was an interruption to the work of the state’s campaign-finance regulator. The reviewed documents do not establish disruption to voting equipment, voter registration or election administration systems. They also do not establish a citywide or statewide technical outage.

Confidence and uncertainty

Confidence in deliberate interference and the meeting interruption is high. The original releases support the existing resolved operational status through documented resumed business, without identifying a precise technical remediation time. A future meeting announcement alone would not establish recovery; the recorded vote provides stronger evidence.

The reviewed sources do not independently establish the interrupters’ identity or report ransomware, a ransom demand or data theft. The detailed method and any broader data or systems findings remain undisclosed.

Analytic gaps

The investigation’s final findings, method of meeting access and specific security changes remain unresolved. Political statements about an attack on democracy should not be treated as evidence that voting infrastructure was compromised.

Organizations involved

Impacted locations

  • Mercer County, New Jersey

    Mercer County contains ELEC’s Trenton office. The reported interruption affected the commission’s virtual meeting; this link does not establish a countywide technical outage.

  • New Jersey

    ELEC’s statewide commission meeting was interrupted and ended early. The commission subsequently rescheduled the session and recorded a public vote on gubernatorial debate sponsors.

  • Trenton, New Jersey

    Trenton is the location of ELEC’s office identified in its incident release. The reported disruption affected its virtual public meeting.

Sources

ELEC Connect: July 2025 official updates

July updates document the interrupted meeting, its rescheduling and the later debate-sponsor vote.

Senator Bucco's Statement on ELEC Cyberattack

Bucco condemned the interruption of ELEC’s meeting and sought an investigation.

ELEC requests investigation into hacking incident

ELEC ended the disrupted Zoom meeting and requested a full investigation.

ELEC reschedules monthly meeting for July 29, 2025

The commission rescheduled its monthly meeting for July 29 and required advance registration.

ELEC selects general-election debate sponsors in 4-0 vote

ELEC selected debate sponsors in a 4-0 vote at its replacement meeting.

ELEC public session minutes: July 24, 2025 interruption

Outsiders interrupted a debate-sponsor presentation through the meeting’s audio and video, prompting ELEC to end the session.

ELEC public session minutes: July 29, 2025 resumed proceedings

The replacement meeting heard sponsor presentations and public comments, selected debate sponsors and adjourned at 12:44 p.m.

See something that needs correction?

Signed-in members can report an error, update, or missing source.