Bot Attack Knocks Colorado Election Results Offline
A distributed denial-of-service attack hit a shared vendor, limiting public access to results while county ballot reporting continued.
Updated on Nov. 4, 2026 in Cybersecurity
Live Poll
Do you trust that election results websites in your area are reliable?
A distributed denial-of-service attack temporarily took the Colorado Secretary of State's public election results webpage offline on Tuesday night, November 3, 2026. The attack targeted the website's vendor, and other states using the same vendor also appear to have been affected. The development is an active incident, not a product or research announcement.
Why it matters
The disruption hit the public-facing results page rather than back-end ballot reporting from counties, which the secretary's office says was not affected. Because other reporting platforms from other vendors may also have been targeted, the incident points to shared third-party infrastructure as a single point of pressure for election-night reporting in Colorado and beyond.
The incident is documented through the secretary's office's own timeline of access limits and recovery, not through a measured traffic figure or attack volume. The office says back-end ballot reporting from counties was not affected, but the extraction does not quantify how many users were blocked or for how long beyond the roughly 7 p.m. to 7:45 p.m. window.
The players
Colorado Secretary of State's office
The state office that runs Colorado's public election results website and is working with its vendor to fully resolve the attack's effects.
The details
A distributed denial-of-service attack floods a target with so much traffic from many sources that legitimate visitors cannot get through. In this case the flood was aimed at the vendor that runs the Colorado results website, so the damage reached the public page even though the counties' underlying reporting system was not the target. To restore access, the website began requiring a captcha, a test meant to distinguish human visitors from automated bots. The secretary's office has not said who is responsible.
Timeline
Tuesday night, November 3, 2026: the bot attack targets the Colorado election results webpage.
Shortly after 7 p.m. on November 3, 2026: results begin posting and access to the website is temporarily limited.
7:45 p.m. on November 3, 2026: the issue appears resolved and a captcha system is in place.
The Tech Race
Captcha challenges are a widely used, low-cost layer for filtering automated traffic, and this incident shows them deployed on a government results page during an active election night. The race in cybersecurity now centers on whether shared third-party vendors can absorb attacks that single state offices cannot withstand alone.
Colorado voters checking election results on the Secretary of State's website during the attack would have seen the page limited or unavailable, and the captcha step now required for access adds a verification click for human visitors. Back-end county ballot reporting was not affected, so the official count itself was not disrupted by the outage.
The takeaway
Watch for the secretary's office to confirm the vendor fix and for any statement on who carried out the attack. Election officials and vendors in other states should be checked for the same disruption pattern the office reports.
Further reading
For background on how attacks like this one are defended against, see Cybersecurity coverage on We are the Frontier.
Source note: This article includes information reported by The Denver Post.
Live Poll
Do you trust that election results websites in your area are reliable?
