Newly declassified documents released by the White House have renewed questions surrounding election security during the 2020 election, revealing details about a previously reported cyber intrusion involving voter records in Arizona’s Maricopa County. The records do not allege that election results were altered, but they have prompted fresh scrutiny over how the incident was handled and communicated to the public.
According to one of the declassified documents, FBI Director Kash Patel informed the White House Task Force on Government Transparency that a hacker obtained approximately 633,000 Maricopa County voter records. The document also states that information relating to roughly 930 voters that was not publicly available, including records involving domestic abuse victims, was accessed during the breach.
Additional material included in the release describes an FBI interview conducted in November 2020 with an individual whose name was redacted. According to that interview, the hacker believed he had extracted between one million and two million files, totaling an estimated four gigabytes of data. The individual reportedly told investigators that a PowerShell script was used to exploit vulnerabilities on the Maricopa County Recorder’s website.
The documents indicate that Maricopa County reported the intrusion through the Arizona Counter Terrorism Information Center on November 2, 2020. By Election Day, November 3, the incident had reportedly been circulated among federal election security officials.
One of the more notable aspects of the newly released records involves the handling of the criminal investigation. According to the documents, the suspect admitted to deleting locally stored files, remotely stored data, and Google Cloud information after believing law enforcement was preparing to execute a search warrant. The records further state that the individual acknowledged destroying evidence because he expected a visit from federal investigators.
Despite what the documents describe as a confession and evidence of unauthorized access, the records indicate that prosecutors declined to pursue charges. According to the released materials, the U.S. Attorney’s Office for the District of Arizona, the Arizona Attorney General’s Office at the time, the Maricopa County District Attorney’s Office, and the Pinal County District Attorney’s Office all declined to prosecute the case.
The incident bears similarities to reporting that surfaced in late 2020 regarding an FBI raid on the home of Elliot Kerwin, then a 56-year-old information technology specialist living in Fountain Hills, Arizona. At the time, reports indicated that investigators were searching for evidence connected to an alleged cyberattack involving voter data. While the newly released documents do not identify the individual by name, one report appears to describe an incident matching the previously reported investigation.
Public reporting during the 2020 election generally maintained that the intrusion did not involve election management systems or vote tabulation equipment and that there was no evidence ballots or vote totals were affected. The newly released records likewise focus on voter registration data rather than voting machines or election results.
The documents have nevertheless raised questions about how much federal officials knew regarding the breach while publicly emphasizing election security. Critics have pointed to statements made after the election by then-CISA Director Chris Krebs, who described the 2020 election as “the most secure in American history,” arguing that the existence of the voter data breach deserved greater public attention.
The newly declassified materials do not conclude that election outcomes were changed or manipulated. Instead, they center on the reported breach of voter records, the government’s internal awareness of the incident, and why a suspect who allegedly admitted to the intrusion and destruction of evidence was ultimately not prosecuted. Those questions are likely to remain the focus of continued debate as lawmakers and investigators review the newly released documents.
Leave a Comment