US House Hit by 3 Billion Cyber Attacks in 2025, Officials Demand Funding

The US House of Representatives faced an overwhelming 3 billion malicious cyber attacks in 2025, with staff receiving 178 million harmful emails. Senior officials urgently requested increased funding during a budget hearing to bolster defenses against state-backed adversaries. Key initiatives include expanding multi-factor authentication across 55,000 devices and creating a secure cloud environment for testing AI tools. Officials also highlighted risks from "shadow IT" and emphasized modernizing systems with AI-based transcription to improve efficiency and security.

Key Points: US House Hit by 3B Cyber Attacks in 2025, Seeks Funds

  • 3 billion malicious attacks on House websites
  • 178 million harmful emails to staff
  • $253M funding request for cyber defense
  • Expansion of multi-factor authentication
  • Secure cloud for AI tools testing
3 min read

US House of Representatives was hit by three billion malicious attacks in 2025

US House officials report 3 billion malicious attacks in 2025, urging increased cybersecurity funding for multi-factor authentication and AI tools.

"Congress is a target in every sense. It's certainly a top target for the most sophisticated state-backed cyber adversaries. - Anne Dressendorfer Binsted"

Washington, March 18

The US House of Representatives faced a surge in cyber threats in 2025, with officials saying its websites were hit by 3 billion malicious attacks and staff received 178 million potentially harmful emails.

The scale of the threat was outlined during a House Appropriations Subcommittee hearing on the fiscal year 2027 budget request for the legislative branch, where senior House officers pressed for increased funding to strengthen cybersecurity and modernise internal systems.

Acting Chief Administrative Officer Anne Dressendorfer Binsted said the volume of attacks underscored the urgency of investment in cyber defence. "That's almost 30,000 intrusion attempts during this brief statement alone," she told lawmakers.

She warned that Congress remains a high-value target. "Congress is a target in every sense. It's certainly a top target for the most sophisticated state-backed cyber adversaries," Binsted said.

The Chief Administrative Officer's office has requested $253 million for fiscal 2027, an increase of 8.5 per cent over the previous year. Binsted said 80 per cent of the increase would go towards sustaining operations, including personnel, hardware, software and licences, while 20 per cent would fund new high-priority projects.

Among the key initiatives is the expansion of multi-factor authentication across devices used by members and staff. The House currently operates about 55,000 desktops, laptops and mobile devices, many of them used outside Washington, creating what Binsted described as "an endpoint vulnerability".

She said the House was already installing multi-factor authentication on mobile devices and would extend it to all computers. Once deployed, users would rely on more secure systems such as facial recognition, touch ID and push notifications.

Another proposal involves building a secure cloud environment where customised artificial intelligence tools can be tested using House data without exposing it to external risks. Binsted said the House needed tailored solutions rather than relying solely on "off the shelf products".

She also flagged "shadow IT" - the use of unauthorised applications by staff - as a major vulnerability. "That's one of the greatest risks in my opinion," she said, adding that better awareness and compliance were essential to reduce exposure.

House Sergeant at Arms William McFarland said cybersecurity now sits at the top of his office's priorities as well. "Cybersecurity is definitely at the top of the list," he told the panel, while calling for broader participation by members in existing security programmes.

His office is seeking $147.28 million for fiscal 2027, a 4.75 per cent increase, to support initiatives including the Member Personal Security Program, mobile duress applications and expanded cybersecurity protections for lawmakers and their families.

Meanwhile, House Clerk Kevin McCumber highlighted ongoing efforts to modernise legislative operations and improve efficiency. His office has requested $51.79 million, a 5.71 per cent increase over the current budget.

McCumber pointed to the rollout of an AI-based speech-to-text system for floor proceedings, which he said demonstrated "high accuracy while saving approximately $500,000 per year", including improvements such as closed captioning and Spanish language support.

- IANS

Share this article:

Reader Comments

S
Sarah B
The numbers are staggering. 30,000 intrusion attempts during a single statement? It shows how critical infrastructure is under constant siege. The push for multi-factor authentication and secure AI testing is the right move. Hope they get the funding.
P
Priya S
While the threat is real, requesting a $253 million budget increase seems excessive. There must be more transparency on how every dollar is spent. "Shadow IT" by staff is a huge issue – proper training is as important as new software.
R
Rohit P
State-backed adversaries are the real concern here. This isn't just hacking; it's digital warfare. India's National Cyber Security Strategy needs to be accelerated. Our MPs and officials use personal devices too – we need similar endpoint security protocols.
M
Michael C
Interesting to see the AI speech-to-text system saving $500k yearly. That's a smart use of tech for efficiency. The secure cloud for testing AI tools with internal data is crucial. You can't just buy a solution off the shelf for something this sensitive.
K
Kavya N
The human element is the weakest link – "shadow IT" proves it. No amount of money can fix carelessness. They need mandatory cybersecurity drills for all staff, like we have fire drills. Awareness is key. Also, good they are thinking of lawmakers' family security.

We welcome thoughtful discussions from our readers. Please keep comments respectful and on-topic.

Leave a Comment

Minimum 50 characters 0/50