WASHINGTON – Habersham County’s Mud Creek precinct in northeastern Georgia had 276 registered voters ahead of the state’s primary elections in May. But 670 ballots were cast, according to the Georgia secretary of state’s office, indicating a 243 percent turnout.
The discrepancy, included in a number of sworn statements and exhibits filed as part of a federal lawsuit against the state by election security activists, comes amid swelling public concern for the security of Georgia’s voting systems. Georgia is one of four states that uses voting machines statewide that produce no paper record for voters to verify, making them difficult to audit, experts say. And cybersecurity experts have warned that there were security flaws on the state election website leading up to the 2016 contest that permitted the download and manipulation of voter information.
The court filings highlight various issues with Georgia’s 16-year-old voting machines, as well as the system that runs them and handles voter registration information.In one sworn statement, a voter explains that she and her husband, who were registered to vote at the same address, were assigned different polling places and different city council districts. In another, a voting machine froze on Election Day. An Atlanta Democrat’s voting machine provided him a ballot including the 5th Congressional District, for which longtime Rep. John Lewis ran unopposed, instead of his 6th Congressional District ballot, which featured a competitive Democratic race.
But others, like the incorrect ballots, could have been caused by anything from a clerical error to a malicious manipulation of voter data, said Hursti, who is also the organizer for the Voting Village at hacking conference DEF CON, where participants demonstrate hacking into some state voting machines.
It’s possible that there’s a connection between the security issues reported at Georgia’s Center for Election Systems and the issues chronicled in the court statements, but an immediate switch to paper ballots is necessary regardless, Hursti said.
“But the connection is not needed,” he said. “You don’t need to have a smoking gun to do the right thing.”
In a statement, the office of Georgia’s Secretary of State Brian Kemp defended the security of state elections.
“Alongside federal, local and private sector partners, we continue to fight every day to ensure secure and accurate elections in Georgia that are free from interference. To this day, due to the vigilance, dedication and hard work of those partners, our elections system and voting equipment remain secure,” spokeswoman Candice Broce wrote in an email.
Kemp has set up a bipartisan commission to look into changing state voting machines ahead of the 2020 elections, but not in time for the midterm elections this November.
The court statements are the latest additions to the growing list of concerns surrounding Georgia’s election security.
In July, Justice Department special counsel Robert Mueller’s indictment indicated that Russian operatives charged with hacking into Democrats’ emails also visited county election websites in Georgia, among other states.
Kennesaw State University’s Center for Election Systems, which was responsible for running Georgia’s elections, was proved vulnerable by friendly cybersecurity experts both before and after the 2016 elections.
Voter information and other important data, which gets disseminated to polling places in Georgia’s 159 counties, was open to the public and could have been manipulated by bad actors, charged Logan Lamb, the first friendly hacker to notify the state of the issue. He sent that notification in August 2016, but the problem was not fully solved until March 2017.
Bowers, who works as an advocacy coordinator in Josh McCall’s campaign for the 9th Congressional District, had checked her “My Voter Page” on the secretary of state’s office website before heading to the polls in July and found she’d been assigned a new precinct – number 100.
But when she arrived at what she thought was her new polling place, she was told she was still assigned her original polling place in precinct 96. She wound up filling out a provisional ballot that day. When she checked her “My Voter Page” after the election, she wrote in her statement, she was assigned to precinct 96 once more. Bowers, for example, noticed that a machine was marked “Do Not Touch,” when she went to vote in July. One poll worker told her votes had been cast on the machine prior to its failure on Election Day. After the polls closed, Bowser noticed the results tape from the machine showed it hadn’t collected any votes.