Voter Data Breach in Maricopa County Under Scrutiny After Declassified Documents Released
More than 600,000 voter files in Maricopa County, Arizona, were compromised in a hacking incident that occurred prior to the 2020 elections. Despite a thorough investigation by the FBI and a confession from the suspect, prosecutors ultimately declined to pursue charges, according to declassified documents that surfaced Thursday.
The breach involved the exploitation of Maricopa County’s voter registration site, where a suspected hacker illegally extracted 633,000 records. Among these, 930 records contained sensitive personal information.
Following the incident, the FBI initiated an investigation and shared its findings with multiple prosecutorial offices, including the U.S. Attorney’s Office for the District of Arizona, the Arizona Attorney General’s Office, the Maricopa County Attorney’s Office, and the Pinal County Attorney’s Office. However, all entities declined to prosecute, leading to the closure of the case in 2023.
Suspect’s Confession and Method of Exploitation
Authorities reported that the suspect confessed to the act. He claimed to have discovered a vulnerability on Maricopa County’s voter registration record servers. Utilizing a PowerShell script, the suspect was able to extract the data and store it at his residence. However, he reportedly destroyed the files before federal agents could execute a raid.
A White House official, speaking to The Center Square, indicated that the suspect expressed remorse for his actions. Investigators did not find evidence that the suspect was collaborating with any foreign agents. Crucially, officials stated that no ballots or voter registrations were altered as a result of the breach.
According to the declassified documents, the suspect “first discovered a vulnerability” on the county recorder’s office website “after entering his own voter registration information.” He observed that his “voter ID appeared in the URL.” He then tested this vulnerability by systematically altering seven-digit numbers in the URL path, which granted him access to different registration records.
The suspect continued this activity, running the PowerShell script “up until around November 2, 2020,” when the county “fixed their firewall.” The suspect admitted that he “probably would have continued the activity” had the vulnerability not been addressed.
“[The suspect] knew Maricopa County was aware of his activity because his script provided an error message and could no longer generate requests,” the documents state. “Between 1,000,000 and 2,000,000 voter registration records were extracted to text files stored on [the suspect’s] personal hard drives, which he estimated to be four gigabytes of data. Records were also saved to [the suspect’s] Google Cloud account.”
Broader Context of Election Security Concerns
This revelation emerges amid a broader push by the Trump administration to declassify documents related to election vulnerabilities, including hacking and foreign interference. Former President Donald Trump has been vocal about perceived threats to election integrity, particularly from foreign adversaries like China and Iran.
During a previous address, President Trump accused China of “illicit acquisition of 220 million U.S. voter files.” He asserted that this data, encompassing names, addresses, phone numbers, and political party preferences, could be used for nefarious purposes, including voter registration manipulation. He characterized the incident as an “unprecedented election security nightmare,” claiming that China had dedicated a data exploitation unit to this effort.
Trump further alleged that China engaged in election meddling, compromising “tens of millions of voters’ data in 18 states” that were allegedly “bought, stolen, or hacked by China.” He claimed that the CIA had obtained information pointing to Chinese interference in U.S. elections, stating that Americans had been “blatantly lied to about the security of our election infrastructure.” He also accused elements within the federal government of suppressing this evidence.
Additionally, Trump cited a Department of Homeland Security finding that approximately 278,000 non-citizens were registered to vote in federal elections. He suggested the actual number was higher due to a lack of data sharing among states.
These concerns were part of a larger warning from Trump that “hundreds of millions of U.S. voter files are in the hands of foreign governments” and that U.S. voting and ballot-counting systems are vulnerable to hacking and manipulation. The Trump administration reportedly used this evidence to advocate for the passage of the “Save America Act,” which aimed to implement voter ID requirements and restrict mail-in ballots.