Illinois Election Officials Prep for Cybersecurity Threats

Illinois made headlines in 2016 after state election officials notified 76,000 voters that their information in the registration database had been breached but not changed, an advent being described as a wake up call.

by Bernard Schoenburg, The State Journal-Register / February 24, 2020

(TNS) — As the March 17 Illinois primary approaches, state and local election officials say they are continually working to keep election records, information and vote totals safe from outside meddling.

"What I always say is we're confident that we're doing everything we can to stay a step ahead of any cyber attacker," said Matt Dietrich, spokesman for the Illinois State Board of Elections. "But all you can ever hope, when you're dealing with cyber security, is to stay ahead of the next hacker."

Sangamon County Clerk Don Gray, whose office oversees elections in the county, said every election authority has been "working hard ... protecting and defending our election apparatus. It is absolutely imperative today that we are proactive and being out in front of cybercriminals."

Illinois made national headlines in 2016 after state election officials notified 76,000 voters that their information in the voter registration database had been breached but not changed. In 2018, Special Counsel Robert Mueller's probe of election interference in 2016 yielded indictments of 13 Russian hackers. The indictment referenced the intrusion into the Illinois system.

"I think there's no state that had more of a wake-up call than Illinois," said David Becker, executive director of the nonprofit Washington, D.C.-based Center for Election Innovation and Research.

Since then, he said, "Illinois has been in many ways a model for some of the other states," through transparency about the problem that occurred and about security steps the state has taken.

Experts with the state's Cyber Navigator program and Department of Innovation and Technology have worked with all 108 election authorities to protect the system's integrity. The program has a staff of 10.

"They can conduct risk assessments of the offices," Dietrich said. "They can identify hardware that needs to be updated or software that an authority might need."

The state added about $800,000 to a $13.2 million federal grant in 2018 and used part of it to create the program. In December, the state received authorization for a new $14.8 million federal grant but must provide a 20 percent match before spending the funds. Gov. JB Pritzker's proposed 2021 fiscal budget, which begins in July, includes $3 million for that match.

Other steps taken since the 2016 breach include software upgrades, addition of cybersecurity staff, and work with national organizations and other Illinois state agencies that fight computer attacks.

Neil Herron, the election board's cybersecurity information sharing program manager, noted that election tabulation machines are not networked online, so vote totals can't be compromised from outside. He said reporting results from "a few machines in Chicago" involve using a cellular wireless system — but one that only allows sending data, not receiving it.

He also said that under Illinois law, all voting machines must have some sort of paper backup — either paper ballots as are used in Sangamon County, or paper receipts. That means a vote-by-vote recount can be done in any contested election.

According to Herron, Illinois officials are advising local election authorities on ways to protect their websites. Those sites carry election information, such as where to vote, and report unofficial election results.

In recent years, Herron said, alleged Russian hackers sent a doctored web page with fake results from a Ukraine election to Russian media, but Ukrainian officials discovered the wrong numbers before making them public. He said risks of such meddling continue to exist.

"If a foreign government-backed group wants to penetrate a web page, it's difficult to 100-percent stop them," Herron said. He said an attack most often could just disable a site, but that, too, could deprive people of information, such as where to vote.

In Sangamon County, Gray said, the voter registration system, like most such systems in the state, works through the Illinois Century Network. The system is state-managed and avoids use of outside internet companies. Herron said he thinks about 101 of the 108 election authorities are on the network. The secretary of state's computers are also on the Century Network, spokesman Dave Druker said.

Gray also serves on the State Board of Elections Advisory Council and is on the board of advisors to the U.S. Election Assistance Commission, jobs that help keep him updated on the latest information about security. And, he said, there is routine training about how to avoid threats — like not opening suspicious emails that could contain malicious software — for all staff members in the clerk's office.

Sangamon and other counties were touched by recent problems with the state's automatic voter registration program. Some people flagged for registration at Illinois secretary of state facilities were ineligible while voting rights of some former prison inmates were wrongly purged.

"We've tested extensively," Dietrich said. "That system is up and running. There is no reason to doubt the integrity of AVR."

U.S. Rep. Rodney Davis, the top Republican on the U.S. House administration committee, is hosting state lawmakers and election officials for a "congressional listening session" on election registration errors at 9 a.m. Monday at the Sangamon County Board chambers.

Nationally, said Becker, from the election innovation and research nonprofit, election officials have become more vigilant.

"We are light years ahead of where we were in 2016," Becker said, as federal, state and local officials are doing a much better job of sharing information about threats.

"That being said, whenever you use technology, nothing is completely secure. There's always the chance of some kind of vulnerabilities."

Becker also said he thinks election officials, the media and citizens should lower expectations for instant election night results. Such results are non-official and may not reflect provisional ballots cast and other legal but late-arriving ballots. In close elections, he said, next-day results are "the way it should be." Overturning an improper result announced in a tight race, he said, could cause "chaos and a lot of outrage."

With slower but well-vetted results, he said, supporters of both sides could be confident of the result.

©2020 The State Journal-Register, Springfield, Ill. Distributed by Tribune Content Agency, LLC.

Platforms & Programs