August 25th, 2024

4.6M Voter and Election Documents Exposed Online by Technology Contractor

A cybersecurity researcher found 4.6 million exposed voter documents due to misconfigured databases by Platinum Technology Resource, raising concerns about election integrity and the need for better data protection measures.

Read original articleLink Icon
4.6M Voter and Election Documents Exposed Online by Technology Contractor

A cybersecurity researcher discovered that 4.6 million voter and election documents were exposed online due to misconfigured databases managed by Platinum Technology Resource, a contractor for several Illinois counties. The databases, which were not password-protected, contained sensitive information such as voter records, ballots, and personal details including names, addresses, Social Security numbers, and voting history. The researcher identified 13 publicly accessible databases and 15 additional ones that were not publicly accessible. After notifying Platinum Technology Resource and its technical support partner, Magenium, the databases were secured. The exposure raises concerns about the integrity of the electoral process, especially in light of past allegations of election tampering. While the researcher found no evidence of fraudulent activity in the exposed documents, the incident highlights the critical need for robust data protection measures to maintain public trust in elections. The U.S. Department of Homeland Security classifies election infrastructure as critical, emphasizing the importance of safeguarding voter data against cyber threats and misinformation campaigns.

- 4.6 million voter documents were exposed online due to misconfigured databases.

- The databases contained sensitive personal information, including Social Security numbers and voting records.

- The contractor responsible for the databases is Platinum Technology Resource, which serves multiple Illinois counties.

- The databases were secured after responsible disclosure to the managing companies.

- The incident underscores the importance of protecting election data to maintain public trust in the electoral process.

Link Icon 5 comments
By @yonaguska - 8 months
Requiring photo id to vote would at least remove the risk of voter fraud with this data breach.

I'm also surprised that the company responded accordingly to the breach with only a day turn around time.

By @altairprime - 8 months
Did the researcher notify any of the state attorneys general?
By @readthenotes1 - 8 months
What a shame! This may stain Illinois otherwise spotless record of voting integrity through the decades.
By @firesteelrain - 8 months
Why does it seem that voting cybersecurity is so poor?