Georgia won’t be required to make a last-minute switch to paper ballots for the November midterm elections, but a federal judge still sent a strong message to election officials that she saw significant flaws with the state’s “dated, vulnerable” voting system. U.S. District Judge Amy Totenberg on Monday denied a motion by a group of voters seeking to force Secretary of State Brian Kemp and county election offices to stop using direct recording electronic voting machines, or DREs, for anyone other than people with disabilities in 2018. DREs use reprogrammable, removable memory cards vulnerable to hackers and don’t produce an independent paper audit trail. In her order, Totenberg noted that during recent testimony she heard from both county and state officials that the logistics of moving to a paper ballot with early voting coming next month would create chaos for voters. But the judge also emphasized that she “advises the Defendants that further delay is not tolerable in their confronting of and tackling the challenges before the State’s election balloting system.”
“The State’s posture in this litigation—and some of the testimony and evidence presented—indicated that the Defendants and State election officials had buried their heads in the sand,” the judge said.
Nowhere was this more clear than when Georgia cybersecurity expert Logan Lamb accessed at least 15 counties’ election management databases from the central tabulator via the state Center for Election Systems’ public website, the order continued. The white hat hacker notified CES he was able to obtain private elector information and DRE passwords used by polling place supervisors, but the state took no action between August 2016 and February 2017.
The FBI took possession of CES’s server, which was moved internally—but not before the controversial erasure of its election data. The data was deleted on July 7, 2017, three days after Kemp’s office was alerted to the lawsuit accusing state officials of ignoring warnings the election system was vulnerable.