Published on May 16th, 2019 📆 | 5839 Views ⚑
0Which FL election offices were hacked? Supervisors are asked
Florida Gov. Ron DeSantis speaks during the education bill signing ceremony at William A. Kirlew Junior Academy, a Seventh-day Adventist K-8 school in Miami Gardens, on Thursday, May 9, 2019.
dsantiago@miamiherald.com
Floridaâs governor is facing calls to name the two local election offices he says were hacked ahead of the 2016 election. But based on his own comments, heâs not the only one in Florida choosing to keep that information secret.
In the weeks since Robert Muellerâs report on Russian interference in the 2016 election revealed that hacking efforts by Russian intelligence outfit GRU were in fact successful in âat least oneâ Florida county despite years of public information to the contrary, the Miami Herald and Tampa Bay Times have contacted each of the stateâs 67 election supervisors to ask whether their office had been hacked.
And all but a handful of Floridaâs election supervisors have said in interviews or in public statements that they have no reason to believe their offices were involved â even though the FBI told Gov. Ron DeSantis recently that it notified the victims years ago.
âWe have not been told we are [among the hacked counties],â Assistant Suwanee Elections Supervisor Jennifer Kinsey said Wednesday. âWeâre kind of wondering who it is, too.â
Election offices in Gadsden and Hardee counties either declined to comment or failed to respond to requests for information, although thereâs no information to suggest that either of those two counties were hacked. Sumter County Supervisor Bill Keen said in an interview Wednesday morning that he has no reason to believe his office was hacked, but an election coordinator in his office later responded to an email seeking comment by saying information about hacking was exempt from disclosure because âour answers could either directly or indirectly allow yourself or others, including nation states trying to do harm to our elections process, to ascertain details harmful to national security. ...â
At least 11 election offices received malware-laced emails from hackers. But officials in Floridaâs largest counties say they have no reason to believe they were hacked.
The widespread denials continue to cloud an already muddy controversy that refuses to fade even as Floridaâs senior-most politicians assert that no election data was manipulated by the hackers who tricked their way into local registration databases. They also undercut trust in Floridaâs election security, given that only a few weeks ago the same people who are now assuring that successful hacking attempts had no consequence on the 2016 election were insisting that, in fact, those hacking attempts had all failed.
âIt is absolutely shameful and ridiculous that the federal government will not tell the citizens of the state of Florida and the public officials all they know about the hack,â said Ion Sancho, a former Leon County election supervisor who went public in September 2016 with the details of a private conference call between election officials, Homeland Security and the FBI on hacking attempts . âCertainly, the Russian GRU, they already know which counties theyâve penetrated. The only ones that are being kept in the dark are the citizens, the voters themselves.â
Until Tuesday, and even after the release of Muellerâs report, all indications were that the FBI and Homeland Security had consistently told state and local officials that hacking threats in 2016 were widespread but unsuccessful.
Information that Russian intelligence agents spoofed emails made to appear as if they came from elections vendor VR Systems and tried to trick Florida supervisors into opening malware-laced attachments has been public for two years. But going back to an initial conference call with the FBIâs Jacksonville office in September 2016, elections officials in the nationâs largest swing state have said they were told those efforts all failed because no one opened the attachment.
What information that did exist publicly to suggest that any hacking attempts had succeeded anywhere in the U.S. was limited to vague references without geographical information in a January 2017 Director of National Intelligence report and a May 2018 U.S. Senate Intelligence Committee report. When then-Sen. Bill Nelson warned last summer that hackers had gained access to voting systems in Florida and had âfree reinâ to move around, he was ridiculed by his opponent, Floridaâs then-Gov. Rick Scott, and questioned by election supervisors.
Thereâs no information to support that hackers still had access in 2018, as Nelson warned, but it now appears that he was at least partially correct. And it also appears that the FBI left the state in the dark even though it had, in fact, informed two local offices that theyâd been hacked in 2016 â offices that either remained quiet or lied publicly about whether theyâd been breached.
âThis was something the counties knew about prior to the 2016 electionâ as they worked with the FBI, Gov. DeSantis said Tuesday during a hastily called press conference. âIâm not allowed to name the counties. I signed a disclosure agreement [with the FBI]. I would be willing to name it for you guys but they asked me to do that so Iâm going to respect their wishes.â
The FBI did not specifically answer questions Wednesday about why it deemed the identity of the hacked election offices as classified, but a spokesperson noted that non-disclosure agreements are ârequiredâ under the terms of a 2003 executive order when people without security clearances, such as DeSantis, are briefed on sensitive or classified information. The spokesperson also said that the âFBIâs victim notification policy was followed in this case.â
But with the FBI saying little publicly, itâs difficult to know whatâs true in cases when rumors spread and information conflicts.
During a recent congressional hearing on voting rights in Fort Lauderdale, U.S. Rep. Frederica Wilson, D-Miami, said thereâs a ârumorâ that Broward was one of the hacked election offices. But both the current and former election supervisors in Broward said that information was false.
And before DeSantis revealed details of his Friday briefing, U.S. Sen. Marco Rubio, a member of the Senate intelligence committee, suggested to The New York Times that the FBI had likely chosen not to inform election officials whoâd been hacked in order to protect sensitive information. Also on Wednesday, the chief operating officer of VR Systems disputed DeSantisâ assertion that âthe reason why those counties got affected was not necessarily those counties but it was because of a private vendor they were using.â
âAfter receiving a media inquiry based on Governor Ron DeSantisâ comments, we immediately called our contact at the FBI, who confirmed what as weâve said all along, VR Systems was not the source of any penetration into any county supervisor of elections systems,â said COO Ben Martin. âBased on this information, we stand by our assessment that a spear phishing email impersonating our company was the likely source.â
DeSantis said Tuesday that heâs trying now to determine why Florida officials were left unaware that hacking had been successful. He said he was told during his briefing that there were state agents of a task force who knew about the hacks and itâs possible that information should have been transmitted to the governor. In the meantime, some elections watch organizations say theyâre less concerned with who was hacked three years ago than with the question of whether Florida is prepared to stop hacking efforts in 2020.
â2016 proved that foreign governments have much to gain from meddling in our elections,â said Liza McClenaghan, chairwoman of the Florida board of voting advocacy group Common Cause. âMore attacks are on the way.â
A spokeswoman for Floridaâs Division of Elections confirmed that Secretary of State Laurel Lee also signed a non-disclosure agreement during the same meeting attended by DeSantis. But she said âthe FBI was very clear that there was no manipulation of voter data, vote counts or election results in 2016,â and said there were âzero successful hacking attemptsâ during last yearâs midterm elections.
State, local and federal officials also stress that the voter registration networks that were breached donât connect to the systems that tabulate votes, although hacking into a registration database would potentially allow for other kinds of mischief.
âItâs not necessary for me to know the specific county,â said Chris Chambless, election supervisor in Clay County and a member of a Homeland Security Government Coordinating Council. âI do realize that while itâs frustrating at times, that there is a need for security and the ability to withhold information, and I have to trust in the protocols that are in place....â
Former Gov. Scott, now a U.S. senator, met Wednesday with the FBI, and Floridaâs Democratic delegation has scheduled a press conference to follow their own Thursday FBI briefing. Calls have grown for officials to make public what the FBI is keeping classified. And as more people are informed about the extent of hacking in 2016, itâs possible that more information will be forthcoming as well.
âIf I gotta bet,â said Madison Supervisor Tommy Hardee, âThursday, when they have that committee meeting, the names will come out.â
McClatchy DC reporter Alex Daugherty and Tampa Bay Times reporter Steve Contorno contributed to this report.
Gloss