Voting Booth

Atlanta, Ga (CBS46) -- The Secretary of State's Office has announced an investigation into the Democratic Party of Georgia following an alleged failed hacking attempt.

"While we cannot comment on the specifics of an ongoing investigation, I can confirm that the Democratic Party of Georgia is under investigation for possible cyber crimes," said Candice Broce, Press Secretary. "We can also confirm that no personal data was breached and our system remains secure."

The alleged hacking attempt occurred on the evening of November 3.

Rebecca DeHart, Democratic Party of Georgia Executive Director, issued the following statement in response to the investigation:

"This is yet another example of abuse of power by an unethical Secretary of State. To be very clear, Brian Kemp's scurrilous claims are 100 percent false, and this so-called investigation was unknown to the Democratic Party of Georgia until a campaign operative in Kemp's official office released a statement this morning. 

This political stunt from Kemp just days before the election is yet another example of why he cannot be trusted and should not be overseeing an election in which he is also a candidate for governor. It is also a fact that Brian Kemp is the last person who can be trusted on cyber security given his record of leaking the personal information and social security numbers of six million Georgians.

11th hour, cynical ploys come as no surprise from Brian Kemp, a man who raided the offices of organizations who register people to vote and had a woman arrested for helping her blind father cast his ballot. Brian Kemp is desperate to save his failing campaign, and it's likely we'll see ever more of his abuses of power as the election nears, but Georgians will keep working hard, knocking on doors, making phone calls, and voting to make sure he doesn't get a promotion."

The Secretary of State's Office issued the following response in return:

"We opened an investigation into the Democratic Party of Georgia after receiving information from our legal team about failed efforts to breach the online voter registration system and My Voter Page. We are working with our private sector vendors and investigators to review data logs. We have contacted our federal partners and formally requested the Federal Bureau of Investigation to investigate these possible cyber crimes. The Secretary of State's office will release more information as it becomes available."

The Democratic Party of Georgia released emails that they say triggered the investigation.

From: Richard Wright <[REDACTED]>

Date: Sat, Nov 3, 2018 at 10:48 AM

Subject: SOS Voter page issue details

To: [REDACTED], Rachel Small <[REDACTED]>

Hey Rachel,

Nate asked me to provide you with details on the issues that I’ve discovered, and I believe he spoke to you about.

I’ve attached a postman file which shows details on the two issues I’ve discovered. The first issue is with the MY Voter Page site. It has a url to download sample ballots and poll cards; however, the url allows you to download any file on the system. The second issue is with the online voter registration. On that site, you can download a form to print and mail your registration to the local election office. That url contains an ID number for your request. If you change that ID #, which is just a counter - ie 1, 2, 3, ..., you can download anyones data and that includes lots of PII (ie drivers license and last 4 of Ssn).

Feel free to call me at [REDACTED] if you have questions.

Richard

Rachel then forwarded Richard's email to Sara Ghazal, Voter Protection Director for the Democratic Party of Georgia. Here is Rachel's email to Sara, which is apparently the focus for the Kemp campaign to involve the FBI in making bogus allegations:

---------- Forwarded message ---------

From: Rachel Small <[REDACTED]>

Date: Sat, Nov 3, 2018 at 11:18 AM

Subject: Fwd: SOS Voter page issue details

To: Sara Ghazal <[REDACTED]>

I’ve attached a postman file which shows details on the two issues I’ve discovered. The first issue is with the MY Voter Page site. It has a url to download sample ballots and poll cards; however, the url allows you to download any file on the system. The second issue is with the online voter registration. On that site, you can download a form to print and mail your registration to the local election office. That url contains an ID number for your request. If you change that ID #, which is just a counter - ie 1, 2, 3, ..., you can download anyones data and that includes lots of PII (ie drivers license and last 4 of Ssn).

Copyright 2018 WGCL-TV (Meredith Corporation). All rights reserved.

Recommended for you

(0) comments

Welcome to the discussion.

Keep it Clean. Please avoid obscene, vulgar, lewd, racist or sexually-oriented language.
PLEASE TURN OFF YOUR CAPS LOCK.
Don't Threaten. Threats of harming another person will not be tolerated.
Be Truthful. Don't knowingly lie about anyone or anything.
Be Nice. No racism, sexism or any sort of -ism that is degrading to another person.
Be Proactive. Use the 'Report' link on each comment to let us know of abusive posts.
Share with Us. We'd love to hear eyewitness accounts, the history behind an article.