CISA Acting Director Tells State Officials Agency Writing Off 2026 Election Cycle for Direct Cyber Services

Analysis
CISA's acting director has told state officials some services may not resume until 2027, leaving states to enter the midterm cycle without federal vulnerability scanning, incident response, or classified threat briefings, a judgment held with moderate confidence given consistent participant accounts but no independent view into CISA's internal deliberations. Votebeat and PBS NewsHour offer independent primary corroboration, amplified by New Jersey Monitor and WRJN, with The Atlantic adding separately reported context. The position marks a hardening from an acknowledged capacity gap with interim liaisons to an explicit timeline extending past November, though the outreach itself, arranged less than 90 days out, may instead reflect a diminished agency beginning contact rather than deliberate abandonment. States have already begun substituting paid vendor contracts and in-house exercises for the federal baseline, arrangements that become the de facto standard they budget around if services do not resume before the midterms.