Fund meant to protect elections may be too little, too late

Thirty-eight states are allocating funds to cybersecurity. Illinois is one of three — Wisconsin and New York are the others — planning to dedicate all of their allotments to this. In 2016, Russian hackers breached Illinois’ voter registration database and stole the names, emails and partial Social Security numbers of nearly half a million voters.

“We needed to send a strong signal that we were doing everything we could to make sure that nothing like that happened again,” said Matt Dietrich, the public information officer at the Illinois State Board of Elections. Illinois is using part of its $13.2 million share to deploy a “cyber navigator” team to perform on-site risk assessments for local election officials.

Thirty states plan to use grant money to purchase new voting equipment, replacing voting machines that are often decades old. Six of those states — Alaska, Arkansas, Delaware, Louisiana, North Dakota and Pennsylvania — are expected to use all of their funds to replace voting equipment. The last time a new voting system was purchased in Alaska, for example, was in 1998.

Replacing voting equipment, however, is a costly endeavor that often takes years, and few states will make widespread improvements to their machinery before the midterms. “These machines are not something you can just go to Best Buy and fire up,” said Thomas Hicks, the chairman of the EAC. “It’s going to take time to build that infrastructure.”

In the lead-up to the 2016 election, hackers targeted election systems in 21 states and in a small number of cases successfully penetrated voter registration databases. Twenty-six states plan to use grant money to improve their voter registration systems.

Nevada, which is the state allocating the highest percentage of its funding — 65.4 percent — to voter registration systems, plans to implement multi-factor authentication and require training modules for local election officials. The state also plans to add a full-time position to work on implementing these goals.

North Carolina, which plans to spend a higher dollar amount than any other state, will be improving its voter registration system, dedicating more than $5 million to modernize its decentralized, decades-old statewide election information system by late 2019.

Twenty-one states plan to use some portion of the federal grant money to perform election audits, accounting for 5.1 percent of the funds. Oregon is spending the highest percentage of its funds — 52 percent — on election audits, according to an estimate from the EAC.

Depending on how elections are run, audits come in a variety of forms.

Connecticut plans to run forensic audits on all of its election vendors. Maryland plans to perform a software audit to validate the election results after the midterm election. Rhode Island plans to deploy a pilot “risk-limiting audit” for the upcoming election.

Election auditing remains an “evolving” field, Patrick said, and many of the states will follow Rhode Island’s lead in piloting audits.

Blake Paterson is Electionland Reporting Fellow, and Ally J. Levine is Electionland Data/Interactive Fellow, at ProPublica. This story was originally published by ProPublica.