Security News > 2023 > October > DC elections agency warns entire voting roll may have been stolen

The US Capitol's election agency says a ransomware crew might have stolen its entire voter roll, which includes the personal information of all registered voters in the District of Columbia.

The DC Board of Elections first became aware of the intrusion on October 5, when a criminal gang called RansomVC claimed to have broken into a server belonging to DataNet Systems, the agency's website hosting provider, and accessed 600,000 items of US voter data including DC voter records.

In a Friday update posted on its website, the voting agency said the break-in now looks worse than it originally thought.

"DataNet Systems confirmed that bad actors may have had access to the full voter roll which includes personal identifiable information including partial social security numbers, driver's license numbers, dates of birth, and contact information such as phone numbers and email addresses," the agency added.

It said the service provider couldn't definitely say "If or when" the incident occurred, or "How many, if any, voter records were accessed." The elections agency says it will now contact all registered voters, and it has also hired Mandiant to assist with the incident response.

"DCBOE will release its full findings when they are available." The agency didn't have any further updates as of Monday morning, DCBOE spokesperson, Sarah Winn Graham, told The Register.

News URL

https://go.theregister.com/feed/www.theregister.com/2023/10/23/washington_elections_agency_breach/