Editorials: Crosscheck is ineffective and insecure. But states aren’t withdrawing | Aaron Sankin/Salon
At least eight states have stopped using Kansas’ anti-voter fraud program because of its ineffectiveness, but put citizens’ personal data at risk by not formally withdrawing. The Interstate Voter Registration Crosscheck Program was supposed to help states scrub ineligible voters, but many states have for years found the program’s data to be inaccurate and burdensome to verify. Rather than immediately cancelling the free program, these states continued to send sensitive voter information — in one case, for nearly a full decade — through a system with serious cybersecurity vulnerabilities. Sending data through this insecure system had the potential of opening up millions of American citizens to identity theft. Based on interviews with state election officials and communications obtained through public record requests, the following states have sent voter registration data to Crosscheck without using the analysis received in return to clean their voter lists: South Carolina, Kentucky, West Virginia, Georgia, North Carolina, Nevada, Louisiana and Colorado. None of the states listed have submitted voter data into the Crosscheck program since these cybersecurity vulnerabilities were made public late last year.