Quantcast

Voting systems in Va., 20 other states targeted by hackers in 2016

9/29/2017, 6:24 a.m.
State and city officials sought to allay public fears this week after the U.S. Department of Homeland Security announced that …

By Ronald E. Carrington

State and city officials sought to allay public fears this week after the U.S. Department of Homeland Security announced that hackers targeted the voting systems in Virginia and 20 other states before the 2016 presidential election.

For many states, the notification by federal authorities last Friday was the first official confirmation that they were on the list. The notice came roughly a year after officials initially said states were targeted by hacking efforts possibly connected to Russia.

Virginia officials told the Free Press on Tuesday that while hackers may have tried to break into the state’s system, they were not able to change a person’s vote or alter election results.

“The hackers unsuccessfully scanned in the state voting system trying to find potential holes and openings,” said Edgardo Cortés, commissioner of the Virginia Department of Elections. “After the scanning, there was no further activity or an attempt to get into anything.”

He said throughout the year, the state elections agency “does routine scans of the systems — the same things the bad guys do — to be able to find out if there are any potential holes so that they can be fixed.”

Virginia, he noted, was the first state to work with a National Guard cybersecurity group to do an assessment of the state’s voter system to determine where improvements can be made.

U.S. Sen. Mark Warner of Virginia, vice chairman of the Senate Select Committee on Intelligence that is investigating Russian hacking in the 2016 election, said, “It’s unacceptable that it took almost a year after the election to notify states that their election systems were targeted.”

In a statement issued last Friday, he said he was “relieved” that the Homeland Security department finally acted upon requests and notified top election officials in the 21 affected states.

In addition to Virginia, the other states affected are Alabama, Alaska, Arizona, California, Colorado, Connecticut, Delaware, Florida, Illinois, Iowa, Maryland, Minnesota, North Dakota, Ohio, Oklahoma, Oregon, Pennsylvania, Texas, Washington and Wisconsin.

“We have to do better in the future,” Sen. Warner stated. “Our elections are the bedrock of our democracy … While I understand that DHS detects thousands of attempted cyber attacks daily, I expect the top election officials of each state to be made aware of all such attempted intrusions — successful or not — so that they can strengthen their defenses, just as any homeowner would expect the alarm company to inform them of all break-in attempts even if the burglar doesn’t actually get inside the house.”

Richmond Voter Registrar J. Kirk Showalter said no systems were hacked in the city.

“There are so many safeguards built into the city and state system that the potential for mischief to affect the outcome of the election is not great,” Ms. Showalter said.

“Hacker can’t access the City of Richmond’s machines through the internet because there is no wireless connection on the voting machines,” she said. “You need to physically lay your hands on it to hack it.

“The hacking that we know about in Virginia is about the voter registration database,” she continued. “Even if someone did get to that database, at worse, the only thing they could do is change someone’s voter registration.”

In early September, the state Department of Elections decertified touchscreen voting machines used in 22 localities, saying they no longer can be used for elections in the state, including the upcoming gubernatorial election on Tuesday, Nov. 7.

Richmond and surrounding counties do not use that type of equipment and were not affected by the decision.

Mr. Cortés told the state Board of Elections at the time that in a security review of the machines, Virginia’s IT agency concluded that “the potential for loss of vote is significant” with the touchscreen machines because of the lack of paper trail audits.

Ms. Showalter said her office is prepared for the Nov. 7 election. To ensure the integrity of the city’s machines, she said her office sends a thumb drive to the equipment vendor, who writes and installs a program that can tabulate the votes cast for each candidate. The thumb drive is shipped back to Ms. Showalter’s office, where a test vote is taken to ensure the tabulation coincides with the votes cast. If the outcome isn’t accurate, Ms. Showalter said, the vendor is called in to solve the problem.

She said for the November election, the city will have 76 voting machines using paper ballots that are scanned into a processor for counting. She said10 backup machines will be available in case of any problems.