Cyberattack on Wake County Election Software Vendor Exposes Poll Workers' Data
Article Content
- •Wake County suspended ElectSure after a possible cyberattack exposed poll worker data.
- •No evidence suggests that voting machines or ballots were compromised in the attack.
- •The incident highlights ongoing concerns about election security ahead of the midterm elections.
The Wake County Board of Elections suspended its use of ElectSure, a software vendor, following a reported cyberattack. While no evidence indicates that voting machines or ballots were compromised, there is a possibility that information related to poll workers, including names and email addresses, may have been exposed. The attack vector involved unauthorized access to a secret password used by ElectSure, which manages training and registration for around 9,000 election workers in Wake County. The county has cut off access to ElectSure and is investigating the extent of the breach. ElectSure notified the county of the incident on August 7, 2026, leading to immediate action to secure data. The North Carolina State Board of Elections is currently assisting Wake County in handling the situation. The incident raises concerns about election security as midterm elections approach.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track ElectSure in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…