Senator Alex Padilla and Representative Joseph Morelle sent a letter to Homeland Security Secretary Markwayne Mullin and CISA’s acting director demanding an explanation for why $39.6 million in congressionally mandated election security funds has not been released, according to NPR. The letter warns ‘time is running out’ with midterms approximately two months away.

THE IRAN CONNECTION  

The lawmakers explicitly tied the funding urgency to Iran in their letter: ‘this is particularly disturbing at a time when our nation is at war with the Islamic Republic of Iran, which has reportedly engaged in sophisticated cybersecurity attacks, including on water infrastructure in the United States.’

The specific Iran-election security connection they are making:

▸  Iran has demonstrated capability and willingness to attack US infrastructure (water systems in August 2026)

▸  CISA separately warned of ongoing Iranian-affiliated cyberattacks on water facilities before the attacks occurred

▸  If Iranian actors are willing and able to attack water infrastructure, their potential willingness to target election infrastructure is a specific, documented concern

▸  $39.6 million in election security funds mandated by Congress has not been released, reducing states’ ability to harden election systems before November 3

WHY THE $39.6 MILLION MATTERS  

Election security funds go to specific purposes: voter registration system security; electronic poll book protection; voting system auditing; and state and local election official cybersecurity training. The specific vulnerability without these funds:

▸  Voter registration systems: the primary target for foreign interference; manipulating voter rolls can disenfranchise eligible voters without altering vote counts

▸  Electronic poll books: used at polling places to verify voter registration; compromising them can create chaos on Election Day

▸  Voting system auditing: post-election audits require resources; underfunded audits reduce the ability to detect interference

▸  Training: state and local election officials are the first line of defense against phishing and social engineering attacks; training reduces vulnerability

THE WITHHELD FUNDS ACCOUNTABILITY QUESTION  

Congress mandated the $39.6 million. It has not been released. The specific accountability question: why has an executive branch agency not released funds that the legislative branch mandated? The possible explanations include: an executive branch decision to redirect or withhold the funds; administrative delay; or a dispute over the conditions of the grant. None of those explanations has been publicly provided by DHS or CISA as of this publication.

Congress said spend $39.6 million on election security. The money has not been spent. Iran is attacking water systems. Midterms are 60 days away. The lawmakers sending this letter are asking the administration to explain the gap between the mandate and the action.

WHAT HAPPENS NEXT  

▸  DHS / CISA response — whether Mullin or CISA’s acting director responds to the Padilla-Morelle letter

▸  Funds release — whether the $39.6 million is released before the midterms

▸  Iranian cyber activity — whether CISA issues additional warnings about election-specific Iranian cyber activity

▸  November 3 — 62 days away; the election security question has a hard deadline

CONFIDENCE: HIGH

Padilla-Morelle letter to Mullin and CISA demanding $39.6 million release, lawmakers’ Iran war quote, CISA prior warnings about Iranian water infrastructure attacks, and NPR reporting are from confirmed reporting.

⚖️  BIAS CHECK — WHO IS SAYING WHAT
Padilla and Morelle (Democrats)	Have partisan interest in election security framing that ties the Iran threat to a criticism of the administration; the specific policy claim (funds mandated but not released) is the factual accountability basis
DHS / Mullin / CISA	Has not publicly responded to the letter or explained why the funds have not been released as of this publication
CISA	Had accurately warned about Iranian water infrastructure attacks before they occurred; their election security warnings carry specific credibility given that track record
State Election Officials	Are the direct beneficiaries of the withheld funds; their security posture going into November 3 is directly affected by whether the money is released

SOURCES

▸  NPR — Padilla Morelle election security funding CISA Iran Mullin letter, September 4, 2026