Cybersecurity expert Jeremiah Fowler recently uncovered a concerning data breach involving over 4.6 million voter records and election-related documents. These sensitive files were discovered in 13 unprotected databases managed by a technology contractor based in Illinois.
Company Behind the Exposure
The databases were traced back to Platinum Technology Resource, a firm providing election technology and services to various counties across Illinois. Fowler revealed that by altering county names in the database URLs, he could access additional exposed databases, some of which had minimal security protections.
The exposed records included critical personal information such as voter names, addresses, dates of birth, Social Security numbers, and driver’s licence numbers. Additionally, the databases contained documents with candidate information, including contact details and voter petitions with signatures.
Although Fowler did not find any immediate misuse of the data, the potential risks are substantial. Malicious individuals could exploit this information for identity theft, voter intimidation, or spreading disinformation. Fowler noted that having access to such personal information could allow bad actors to send misleading information about voting procedures or use past voting history to harass voters.
Long-term Service of the Company
Platinum Technology Resource has been providing election services in Illinois for over three decades. Their services include voter registration, election-day support, ballot management, tabulation, and election management software. This long-standing service highlights the importance of ensuring robust security measures to protect sensitive election data.
We need strong cybersecurity protocols to protect the integrity of the electoral process. Since 2017, the Department of Homeland Security has recognised election infrastructure as critical, acknowledging the severe impact that potential attacks could have.
Fowler recommends that organisations managing sensitive election data implement a combination of access controls and encryption to secure their databases. This includes using unique, time-limited access tokens for authorised users instead of relying solely on passwords, which can be easily compromised.
Preserving Public Trust in Elections
With the 2024 election season approaching, safeguarding the electoral process in the United States is more urgent than ever. Fowler emphasised the importance of maintaining public trust in the electoral system, especially in light of the controversies surrounding the 2020 election.
By implementing robust cybersecurity measures, election officials can ensure that voter data remains secure, thereby preserving the integrity of democratic processes. This incident serves as a stark reminder of the importance of vigilant data protection practices in the digital age.
The exposure of millions of voter records highlights pressing vulnerabilities in our election systems. As technology continues to play a crucial role in elections, ensuring the security of sensitive data must be a top priority for all involved parties. Robust cybersecurity measures are essential to protect the integrity of our democratic institutions and maintain public trust in the electoral process.
The Pueblo Police Department has caught a suspect in association with a suspected case of voter machine tampering that happened at Pueblo Country election headquarters around one hour prior to the polls closing on June 28, 2022.
31-year-old Richard Patton from Pueblo was arrested Thursday morning on account of election tampering and cybercrimes.
As per state records, Patton is a registered Democrat. Pueblo Police Department has assured the community that all voter security measures were followed to protect the voting process and make it successful.
No information has been compromised, and the investigation is ongoing.
"Colorado law requires that tamper-evident seals are affixed to voting equipment under strict security requirements, including a chain of custody of election officials. Nobody else used the machine after Patton. The voting machine was taken into evidence, as well as security camera footage from that evening," said Pueblo Chieftain.
Pueblo PD and the Pueblo County Sheriff's Office reports suggest that at 6 pm on election night, Patten went to the downtown office of the elections department to vote in person.
All the registered Colorado voters are sent ballots in the mail however, one can also put a vote on in-person machines at registered sites.
Election workers informed the police department that Patten asked them about the security situation before casting a ballot.
Patton dropped off his ballot before he left the office, but the records prove that his ballot was cast.
Soon after he left, an election worker went to clean the machine as per the covid protocols.
The worker found an error code on the display of the machine that Patton used and informed supervisors.
An error code was displayed on the screen. The Pueblo Chieftain reports:
"Drake Rambke, the election supervisor dispatched to Pueblo County after thousands of incorrect primary ballots were mailed to some Pueblo voters, told law enforcement that evening that he wasn’t sure if a USB device had been plugged into the machine, but multiple election workers said the seals on the voting machines had been tampered with."
Facebook Inc is much better than it was in 2016 at tackling election interference but cannot guarantee the site will not be used to undermine European Parliament elections in May, Chief Executive Officer Mark Zuckerberg said on Tuesday.
Chastened since suspected Russian operatives used Facebook and other social media to influence an election that surprisingly brought Donald Trump to power in the United States, Facebook has said it has ploughed resources and staff into safeguarding the May 26 EU vote.
Zuckerberg said there had been a lot of important elections since 2016 that have been relatively clean and demonstrated the defenses it has built up to protect their integrity.
“We’ve certainly made a lot of progress ... But no, I don’t think anyone can guarantee in a world where you have nation states that are trying to interfere in elections, there’s no single thing we can do and say okay we’ve now solved the issue,” Zuckerberg told Irish national broadcaster RTE in an interview.
“This is an ongoing arms race where we’re constantly building up our defenses and these sophisticated governments are also evolving their tactics.”
U.S. intelligence agencies concluded that Russia ran a disinformation and hacking operation to undermine the American democratic process and help Republican Trump’s 2016 campaign. Moscow denies interfering in the election.
Under pressure from EU regulators to do more to guard against foreign meddling in the bloc’s upcoming legislative election, Facebook toughened its rules on political advertising in Europe last week.
It also announced plans to ramp up efforts to fight misinformation ahead of the vote and will partner with German news agency DPA to boost its fact checking.