Security found less than 20 percent of 10,000 state and local election administrations had advanced anti-phishing controls in place. About 666 of the election officials were relying on personal email addresses for election-related matters.

Security experts told the journal it was unlikely that weak email security would lead to vote hacking. The email systems are n’t connected to systems that count votes.

Gru registered web domains that appeared to spoof government web addresses. Microsoft seized the domains before officials believe any damage was done.