Skip to content
AI Exploit De-anonymizes 1.52 Million Georgia Ballots

AI Exploit De-anonymizes 1.52 Million Georgia Ballots

First seen 6 Oct 2026, 11:26 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 6, 2026 at 12:58 UTC
  • •AI agent exploited a known vulnerability to de-anonymize 1.52 million ballots.
  • •Georgia's election officials implemented emergency measures but face political stalemate.
  • •The exploit highlights the risks of unpatched vulnerabilities in election systems.

An AI coding agent costing $20 successfully de-anonymized 1.52 million ballots from Georgia's May 2026 primary. The exploit utilized a known, unpatched vulnerability in Dominion voting machines, allowing the AI to match 98.9% of in-person ballots across 114 counties. This incident has prompted Georgia election officials to implement emergency measures, including redacting ballot ID numbers and shuffling ballots before printing. Despite these actions, a permanent technical solution remains stalled due to political disagreements in the state legislature. The vulnerability, disclosed in 2022, involves deterministic identifiers assigned to electronic ballot records, with a software fix certified in March 2023 but not widely deployed. This event marks a significant shift in election data transparency policy, raising concerns about ballot privacy ahead of the upcoming midterm elections.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-08-01
Max Springer conducts AI exploit test
Max Springer demonstrated the exploit using a $20 AI agent, successfully linking voters to their ballots.
Yahoo
2026-10-01
Georgia State Election Board emergency meeting
The board discussed the implications of the AI exploit and voted on emergency measures to protect ballot privacy.
Yahoo
2026-10-06
Articles published detailing exploit
Multiple news outlets report on the exploit and its implications for Georgia's election integrity.
The Guardian

More articles in this cluster (4)

Following this threat?

Track Election Assistance Commission in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (7)

1 / 2

Common questions

What vulnerability was exploited?
The exploit took advantage of a known flaw in Dominion voting machines that assigns deterministic identifiers to ballots.
What measures has Georgia taken in response?
Georgia officials have redacted ballot ID numbers and instructed counties to shuffle ballots before printing.
Is there a permanent fix for this issue?
A software fix was certified in March 2023, but it has not been widely deployed due to political disagreements.