Utah: Audit finds some elections offices stored passwords in plain sight, other security issues | Bridger Beal-Cvetko/KSL
Auditors are recommending several changes to ensure the cybersecurity of Utah’s elections after finding a handful of potential “vulnerabilities” with password management and improperly stored election computers. While the report from the Office of the Legislative Auditor General found that election computers were not connected to the internet, as required by state law, it said an election server in one county had hardware that could be used to connect to the internet. The report also advised election officials to fix other issues after finding that some election workers in small counties stored usernames and passwords on paper notes next to computers and that two election computers in a pair of smaller counties were stored “in unsecured locations to which members of the public had regular access.” Because election equipment cannot be connected to the internet, hackers would need physical access to breach any of the computers, which is why auditors said it’s risky to have that equipment accessible to the general public. Read Article