Slashdot Mirror


Millions of Texas Voter Records Exposed Online (techcrunch.com)

A folder containing an estimated 14.8 million Texas voter records was left on an unsecured server without a password. Considering Texas has 19.3 million registered voters, this leak is very substantial. The file was discovered by a New Zealand-based data breach hunter who goes by the pseudonym Flash Gordon. TechCrunch reports: It's not clear who owned the server where the exposed file was found, but an analysis of the data reveals that it was likely originally compiled by Data Trust, a Republican-focused data analytics firm created by the GOP to provide campaigns with voter data. The file -- close to 16 gigabytes in size -- contained dozens of fields, including personal information like a voter's name, address, gender and several years' worth of voting history, including primaries and presidential elections. It's not known exactly when the data was compiled, but an analysis of the data suggests it was prepared in time for the 2016 presidential election. It's also not known if the file is a subset of the 198 million records leak last year -- or if it's a standalone data set.

79 comments

  1. RMS is right by 110010001000 · · Score: 4, Insightful

    ...the best solution to this is not the collect the data in the first place. If you collect data it will get out.

    1. Re:RMS is right by Anonymous Coward · · Score: 0

      From the perspective of those who benefit from the data, failing to collect it is pretty much the worst solution.

    2. Re:RMS is right by bobbied · · Score: 3, Interesting

      ...the best solution to this is not the collect the data in the first place. If you collect data it will get out.

      Let me get this straight.. Are you saying that we shouldn't keep voter registration rolls or keep track of who voted in an election?

      You do realize that such voter information is public record and subject to inspection by anybody who asks, right? This stuff is generally for sale if you have money to buy it.

      It looks like this information was just an archive of voter rolls, crossed with voter records and other public information.

      --
      "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
    3. Re: RMS is right by Anonymous Coward · · Score: 0

      We need mandatory jail time for leaks.

    4. Re: RMS is right by Anonymous Coward · · Score: 0

      they were all in love with dyin
      they were doin it in Texas

    5. Re:RMS is right by Anonymous Coward · · Score: 0

      We should also round up every Republican in the US and exile them to Antarctica.

    6. Re:RMS is right by pslytely+psycho · · Score: 1

      What do you have against Antarctica?

      --
      Donald Trump, on a crusade to make Nixon look respectable
    7. Re:RMS is right by Anonymous Coward · · Score: 0
      Given that Flash Gordon comes from New Zealand, it's interesting to contrast and compare the NZ legislation around Electoral Rolls

      In recognition of the fact enrolment is compulsory the Electoral Act contains very detailed provisions regulating the persons and organisations that the Electoral Commission is lawfully able to disclose information in electronic format from the electoral rolls, the permitted purposes and the information that can be made available.

      From the Act itself:

      Every person commits an offence who knowingly and wilfully supplies, receives, or uses information supplied in electronic form, or derived from information supplied in electronic form, under section 112, 113, or 114 for a purpose other than a purpose authorised by those sections.

    8. Re:RMS is right by Anonymous Coward · · Score: 0

      Transport would be too expensive, maybe just herd them over the border into Mexico, and then build a wall.

    9. Re: RMS is right by houghi · · Score: 2

      The fact that this is public is an issue of and by itself. Voter data should have a limited lifetime and only be looked at after a procedure by a selected group of people.

      --
      Don't fight for your country, if your country does not fight for you.
    10. Re:RMS is right by Anonymous Coward · · Score: 0

      We should also round up every Republican in the US and exile them to Antarctica.

      That wouldn't be cool.
      I've heard about several Republicans who couldn't bring themselves to vote for so obviously corrupt politicians and stayed at home.
      I don't really think they are to blame.

      Unlike some others I don't think we should treat a group of people badly just because they belong to that group.
      Instead we should only punish those who actually did something bad.

    11. Re: RMS is right by bobbied · · Score: 1

      The fact that this is public is an issue of and by itself. Voter data should have a limited lifetime and only be looked at after a procedure by a selected group of people.

      But, the original poster said "if you collect it, it will eventually get out". I'm merely pointing out that we have to collect this information so the "just don't collect it" idea isn't possible.

      I'm not so sure though, that public disclosure of this information isn't necessary as well. Records of *who* voted in what election are of vital importance and should be information which is collected and in order to provide evidence of free, open and fair elections. For that reason such records are indispensable and must be disclosed to at least some independent observers.

      We may wish to discuss terms and procedures for such handling such information, but as the original poster points out. If you collected it, it will get out.

      --
      "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
    12. Re: RMS is right by Anonymous Coward · · Score: 0

      The issue at hand is does this information consist of anything non-public? Hell, in Florida and many other places you can get this stuff on demand--which pisses me off when I get emails from candidates now. I've got to update my voter info to remove that actually..

      Don't get me wrong--even if the data is the same thing you can get from the elections office it's still a dumbass mistake to leave anything internal to your org accessible like that and they should count themselves very lucky.

    13. Re: RMS is right by Anonymous Coward · · Score: 0

      Unlike the US, Mexico enforces their laws against illegal immigration quite effectively and severely. Unless, of course, you sneak into Mexico not to stay but intending to pass through on your way to illegally enter the US and then they're OK with it.

      I wish I was kidding.

      Mexico also has strict constitutional definitions of citizenship and constitutional requirements that certain essential industries be owned and run by native Mexicans. We could in fact learn a thing or two from them--just not the things leftists seem to want.

  2. Exposed, but did anybody actually get them? by reboot246 · · Score: 0

    The fine article doesn't tell us who may have downloaded the records or if they were just found exposed. Could well be no harm was done at all.

    I can put a hundred dollar bill down on the sidewalk, but I haven't lost anything until somebody picks it up. Besides, most of this info is open to the public anyway.

    1. Re:Exposed, but did anybody actually get them? by Anonymous Coward · · Score: 0

      Uh huh. Because nobody is interested in that information, nobody's likely to go looking for it. Certainly not anyone with any kind of IT skillz.

  3. Retribution coming... by Anonymous Coward · · Score: 0

    Don't. Mess. With. Texas!

    1. Re:Retribution coming... by bobbied · · Score: 3, Funny

      Don't. Mess. With. Texas!

      Seems they left it the stuff on the front porch and said "Come and Take it!"

      --
      "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
  4. And? by DaHat · · Score: 1

    In many states, you can get a copy of the voter registration database pretty easily. Some even have public web links to zip files. In others they may charge you per entry.

    Know what almost all of them have? "personal information like a voter's name, address, gender and several years' worth of voting history"

    Why? They are invaluable to campaigns for basic things like get out the vote efforts.

    Sure, they run their own data systems on top (marking known donors to friendly or unfriendly candidates), social media history, etc, but this should not be surprising or shocking.

    1. Re:And? by 110010001000 · · Score: 2

      Um no. Where do you get voting history information? The most you get is party affiliation.

    2. Re:And? by DaHat · · Score: 1

      Ex: Want a copy of the voter registration list from... Ohio? Pick a county: https://www6.sos.state.oh.us/o...

    3. Re:And? by DaHat · · Score: 3, Interesting

      Depends on the state.

      Ex: Here in Washington state, party affiliation is not part of the list (but history is)... while it is in Ohio affiliation is, but history is not: https://www6.sos.state.oh.us/o...

      The primary purpose of these databases being available in some form is for political reasons.You as a candidate or just an interested party is going to need to know who to target with your door knocking & mailings.

      See someone who is only an irregular voter? Might make a good target to encourage to vote for your person/issue.

      See someone who is pretty regular? Their mind may already be made up.

    4. Re: And? by Anonymous Coward · · Score: 0

      All public information. You have to get the who voted in what primary and general election separately but all public information in Texas. Also each party is given a list of the other parties voters so they cannot switch which primary they are voting in during a runoff

    5. Re:And? by Keith+Mickunas · · Score: 0

      My coworker is active in his party at the county level and he told me a while back that these are all public records in Texas and you can see anyone's voting history.

    6. Re:And? by Anonymous Coward · · Score: 0, Troll

      >Um no. Where do you get voting history information? The most you get is party affiliation.

      Um, you don't know what you're talking about.

      Here, go fill out the form from the Texas Secretary of State site and get all the info that was exposed for less than $1500

      VOTER REGISTRATION PUBLIC INFORMATION REQUEST FORM

    7. Re:And? by DaHat · · Score: 1

      Can confirm. You can request the Texas list here: https://www.sos.state.tx.us/el...

      One of the fields is listed as "ELECTION DATE"

      Thanks for making me find that, I've been building up a list as to where to request lists from each states and only now found the Texas form.

      Christ, they want on the order of $1500 for the full list...

    8. Re:And? by Anonymous Coward · · Score: 0

      Just buy the information from companies that have collected the data over the years. They are happy to sell it to anyone Republicans or Russians makes no difference to their checking account.

    9. Re:And? by Anonymous Coward · · Score: 0

      man, you fucking karma whore.

      Don't pretend you didn't see this link and then plagiarized it.

    10. Re: And? by Anonymous Coward · · Score: 0

      Christ, they want on the order of $1500 for the full list...

      Just send all of them a request for a dollar for Jesus and you will double your investment.

    11. Re:And? by martinX · · Score: 2

      I think it's whether or not they voted, not who they voted for. I live in a country where voting is compulsory (or at least getting your name checked off the voter roll while you collect a Democracy Sausage is compulsory) and I assume that nearly everyone votes, so that "voting history" thing threw me too.

      --
      When they came for the communists, I said "He's next door. Take him away. Goddam commies."
    12. Re:And? by Anonymous Coward · · Score: 0

      >Um no. Where do you get voting history information? The most you get is party affiliation.

      Um, you don't know what you're talking about.

      Here, go fill out the form from the Texas Secretary of State site and get all the info that was exposed for less than $1500

      VOTER REGISTRATION PUBLIC INFORMATION REQUEST FORM

      -1 for the most informative post of the thread?

      Covering for a plagiarist are we mods?

    13. Re:And? by DaHat · · Score: 1

      No, I didn't see it until after I posted. Given they posted @05:58PM and I did @06:05PM, is it so implausible that I hadn't done a full reload and read of every comment prior to posting in that 7 minute window?

      You'll also notice a full 30 minutes earlier I posted this: https://yro.slashdot.org/comme...

      It's as if I have an interest in the area, and may just have done my own research, independent of the post you accused me of plagiarizing. You know, the very thing I called out in my post.

    14. Re:And? by DaHat · · Score: 1

      Interesting that I am posting with a logged in account, while you as an AC are accusing me of plagiarism. How brave.

      No, I was not aware of the post you are quoting until after I posted mine: https://yro.slashdot.org/comme...

    15. Re: And? by Anonymous Coward · · Score: 0

      I baffled as to why voter affiliation should be public. It seems to be a gift to those wishing to deny employment to people on party political grounds, which would be illegal, but amazingly illegal things happen.

    16. Re:And? by Anonymous Coward · · Score: 0

      My coworker is active in his party at the county level and he told me a while back that these are all public records in Texas and you can see anyone's voting history.

      You mean that you can see if they are registered to vote in a primary for a specific party?
      I doubt that you can actually see what they vote for in the election. You can just make a very educated guess.

  5. Voting History Question? by turp182 · · Score: 4, Informative

    Is the voting history the standard stuff, not including actual candidate selection?

    I have to assume so unless people are voluntarily providing this. Per the article below public information can include:
    * Name
    * Street address
    * Party affiliation
    * Elections in which you did (or did not) vote
    * Phone number
    * Email address

    https://www.forbes.com/sites/m...

    I have to assume that's what is available, then aggregated with other information since the summary referred to dozens of data points.

    Frightening that such data could be public to be honest.

    I just read the article, pretty scary shit, people should stop participating in surveys or any sort:

    "For example, the data includes fields that might score an individualâ(TM)s believed views on immigration, hunting, abortion rights, government spending and views on the Second Amendment."

    --
    BlameBillCosby.com
    1. Re:Voting History Question? by Anonymous Coward · · Score: 0

      From this post [slashdot.org]

      Public Information Voting History File Record Layout
      COLUMN DESCRIPTION FIELD LENGTH
      COUNTY CODE 1 3
      PRECINCT 4 4
      VUID 8 10
      LAST NAME 18 50
      FIRST NAME 68 50
      MIDDLE NAME 118 50
      FORMER LAST NAME 168 50
      SUFFIX 218 4
      GENDER 222 1
      DOB 223 8
      PERM HOUSE NUMBER 231 9
      PERM DESIGNATOR 240 12
      PERM DIRECTIONAL PREFIX 252 2
      PERM STREET NAME 254 50
      PERM STREET TYPE 304 12
      PERM DIRECTIONAL SUFFIX 316 2
      PERM UNIT NUMBER 318 12
      PERM UNIT TYPE 330 12
      PERM CITY 342 50
      PERM ZIPCODE 392 9
      MAILING ADDRESS 1 401 110
      MAILING ADDRESS 2 511 50
      MAILING CITY 561 50
      MAILING STATE 611 20
      MAILING ZIPCODE 631 20
      EDR (EFFECTIVE DATE OF REGISTRATION) 651 8
      STATUS CODE 659 1
      HISPANIC SURNAME FLAG 660 1
      ELECTION DATE 661 8
      ELECTION TYPE 669 2
      ELECTION PARTY 671 3
      ELECTION VOTING METHOD 674 6
      TOTAL N/A 679

      Election Type Voting Method
      Type Description
      GE General
      CP Primary
      RU Runoff
      SE Special
      LO Local Election
      PO Open Primary
      LR Local Runoff Election

      Voting Method
      Type Description
      EV Early Voting in Person
      ED Election Day
      AX Absentee Ballot Rejected
      AV Absentee Ballot Accepted
      AB Absentee Ballot Received
      PB Provisional Ballot Accepted
      PX Provisional Ballot Rejected

      Status Code
      V Active
      S Suspense
      C Cancelled

      All the fields available from Texas voter registration records. Any other information like email addresses are gathered from other data sources.

  6. i want to know... by Anonymous Coward · · Score: 0

    How come when I expose myself, I get tossed in jail and have to register as a sex offender. But these assholes expose millions and get away with it?

    1. Re:i want to know... by Anonymous Coward · · Score: 0

      One ugly moron versus a sea of people, some of whom are attractive.

  7. Just another example by Anonymous Coward · · Score: 0

    of a Republican owned company not giving a shit

    1. Re:Just another example by Anonymous Coward · · Score: 0

      The company that owned the server is unknown and the one at fault, according to the article you did not read.

      If it is found they are left leaning, I'm going to fist your ass twice a day for the next year as retribution.

  8. Wrong, it should not have existed at all by Anonymous Coward · · Score: 1

    This wasn't the elections office that had the data it was a private analytics firm working for a political party. How in **** did they get this data at all?

    1. Re:Wrong, it should not have existed at all by bobbied · · Score: 1, Flamebait

      This wasn't the elections office that had the data it was a private analytics firm working for a political party. How in **** did they get this data at all?

      Simple: They paid for it. Voter registration data in the public domain and is for sale.

      --
      "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
  9. So much for the GOP running such a tight ship? by Anonymous Coward · · Score: 1

    "an analysis of the data reveals that it was likely originally compiled by Data Trust, a Republican-focused data analytics firm created by the GOP to provide campaigns with voter data."

    1. Re:So much for the GOP running such a tight ship? by 110010001000 · · Score: 1

      Who cares? Democrat or Republican or Independent. Stop collecting this data.

  10. How many dead people are on that list? by Joe_Dragon · · Score: 1

    How many dead people are on that list?

    1. Re:How many dead people are on that list? by Anonymous Coward · · Score: 0

      This was Texas, not Illinois.

    2. Re: How many dead people are on that list? by Anonymous Coward · · Score: 0

      So we just look for the Hispanic and Black sounding names and correlate it with rope sales?

    3. Re: How many dead people are on that list? by Anonymous Coward · · Score: 0

      No no, wait, you're counting Hispanics and Blacks? No way, Texas doesn't do that, they're all in two categories : Castrated livestock or dusty redneck buttfuckers in silly looking cowboy costumes. That's all Texas is. Oh, and a Gulf.

    4. Re: How many dead people are on that list? by DaHat · · Score: 1

      Curiously, the Texas DB seems to have a "Hispanic surname flag": https://www.sos.state.tx.us/el...

    5. Re:How many dead people are on that list? by Anonymous Coward · · Score: 0

      Not so many dead, but run it against previous years lists and you will find that a bunch of voters were purged from the list and had to register again after they were turned away at the voting booth.
      Sketchy things happened last election.

    6. Re: How many dead people are on that list? by Anonymous Coward · · Score: 0

      Curiously, the Texas DB seems to have a "Hispanic surname flag": https://www.sos.state.tx.us/el...

      Only curious to somebody with no practical experience trying to fill in forms designed for single surnames when the rest of the people on down to the south pole are accustomed to having 2 surnames.

      But, yeah, try and make it sound like Texas is racist for trying to be accommodating. Good one. Excuse me while I sniff my own farts and drive away in my Prius. I'm just glad I'm part of the solution, ya know?

  11. Interesting... by Anonymous Coward · · Score: 0

    Researcher in New Zealand...targeting a conservative server in Texas. What are the odds...

  12. Missing something by Anonymous Coward · · Score: 0

    If the campaigns have this, who is it secret from again?

  13. Someone important needs to lose money over this by Anonymous Coward · · Score: 0

    Unless someone important receives a very significant penalty for negligence, this kind of leak will keep happening. Is there such a thing as dishonorable discharge from public service?

  14. What doesn't make sense to me is... by Anonymous Coward · · Score: 1

    If actual votes are documented and for sale to the highest bidder, how is this information not available to the general public after a blackout period, and if it is, how does this help avoiding the vote buying concern that is claimed for why our voting stubs are 'anonymous'?

    Either they are anonymous to avoid retaliation or they are not and should be published for all to see post-haste.

    It seems like most of the promise of privacy in America is not to actually protect the public's privacy but to offer a method of monetizing it by not having the government making it available for free.

    1. Re:What doesn't make sense to me is... by Anonymous Coward · · Score: 0

      Votes aren't documented, you dimwit. Voter registration data the history of when, where, and what election are.

    2. Re: What doesn't make sense to me is... by Anonymous Coward · · Score: 0

      In a truly secret ballot I'm not sure the information of who voted should be retained beyond the election. I'd rather have a system of compulsory voting with a 'none of the above' option.

    3. Re:What doesn't make sense to me is... by Anonymous Coward · · Score: 0

      Votes aren't documented, you dimwit. Voter registration data the history of when, where, and what election are.

      So why do they have it in the file they found?

      The file -- close to 16 gigabytes in size -- contained dozens of fields, including personal information like a voter's name, address, gender and several years' worth of voting history, including primaries and presidential elections.

    4. Re:What doesn't make sense to me is... by JackieBrown · · Score: 1

      They have a history of if you voted not who you voted for

  15. why is that information even available ? by cats-paw · · Score: 2

    contained dozens of fields, including personal information like a voter's name, address, gender and several years' worth of voting history, including primaries and presidential elections.

    How is the voting history even available ?
    Isn't how you voted confidential ?
    Shouldn't it be ?

    --
    Absolute statements are never true
    1. Re:why is that information even available ? by tsqr · · Score: 5, Insightful

      Voting history = whether you cast a ballot. Voting history != who you voted for.

      Being upset by this is like being upset that telephone books are published.

    2. Re:why is that information even available ? by Anonymous Coward · · Score: 0

      Not really, you can abstain from getting a phone, or pay extra to be unlisted.

      I'm not aware of what the reason for making this information public is, possibly to show the legitimacy of the election, prove that these are real people.

    3. Re: why is that information even available ? by Anonymous Coward · · Score: 0

      In the UK you can obtain information on registered voters, but not information on political affiliation or when they voted as those items are rightly considered private.

    4. Re:why is that information even available ? by Anonymous Coward · · Score: 0

      You don't know anything about how politics is done today. This data can (and will) be used to find likely voters -- and those likely NOT to vote -- so that they can be microtargeted. This includes not only turn-out-the-vote activities, but trying to suppress the vote in minority-led districts. This is a big deal, and your lack of expertise doesn't make it less so.

    5. Re:why is that information even available ? by Cro+Magnon · · Score: 1

      They might not know who I voted for, but wouldn't they know which primary I voted in? They could figure from that whether I voted for the Blustering Buffoon or the Wicked Witch of the East.

      --
      Slow down, cowboy! It has been 4 hours since you last posted. You must wait another few hours.
    6. Re:why is that information even available ? by tsqr · · Score: 1

      I don't know how they conduct primary elections in your state, but where I live they don't hold separate elections for the different political parties. A single election is held, where the ballot you're given is dependent upon your party affiliation. At any rate, your party affiliation (or lack of same) is a matter of public record in the first place.

    7. Re:why is that information even available ? by Anonymous Coward · · Score: 0

      Well said. And in St. Petersburg they're probably already using the list for some future anti-vaccine campaigns.

    8. Re:why is that information even available ? by Anonymous Coward · · Score: 0

      In texas, they have to know how you voted in the primary (rep or dem) because if there are runoffs, you are only allowed to vote in the runoffs of the party you voted for in the primary. So the data must persist at least until after the runoffs.

  16. Username checks out by Anonymous Coward · · Score: 0

    GOP is a front for the Kremlin.

  17. Folder containing voter records by najajomo · · Score: 1

    In the US, what's the law regarding who has access to voter records?

  18. Voting machine without audit trail again by Anonymous Coward · · Score: 0

    Texas: "Paper and DRE without paper trail "

    DRE = voting machine.
    https://ballotpedia.org/Voting_methods_and_equipment_by_state

    Again the voting machine where the persons RECORDED vote cannot be verified against the persons ACTUAL vote. They're still using machines without audit trails.

  19. If the GOP already have it by Anonymous Coward · · Score: 0

    "It was likely originally compiled by Data Trust, a Republican-focused data analytics firm created by the GOP to provide campaigns with voter data."

    If the GOP compiled the data, then the harm's already been done.

  20. non issue by Anonymous Coward · · Score: 0

    Anyone and everyone can read public records. As a matter of fact, it's one of the major ways that people get dirt on someone. Cool, public documents were leaked, this is news how?

  21. RTA, Its far far worse by Anonymous Coward · · Score: 0

    You might want to read the article, and realize its the full voting preference metrics. The kind of stuff Cambridge Analytics collects.

    "For example, the data includes fields that might score an individual’s believed views on immigration, hunting, abortion rights, government spending and views on the Second Amendment."

    "Other fields were more relevant to the recent 2016 presidential election, in which the data predictively scored individuals on if they “trust” or have “no trust” for then-Democratic candidate Hillary Clinton."

    "The data also includes additional personal information, such as a person’s phone numbers and their ethnicity and race."

  22. "several years' worth of voting history" by Anonymous Coward · · Score: 0

    So much for an anonymous and secret ballot.

  23. Public Information by in10se · · Score: 1

    Isn't that public information? I know that in my state, I can go to an official state government web site and purchase/download that information for $20. In some states it's free.

    --
    Popisms.com - Connecting pop culture
  24. The Difference by Anonymous Coward · · Score: 0

    The difference of the 14.8m stolen records and 19.3m registered voters is (a) Democrats registered twice and (b) illegal aliens.