Image

Image

“To our knowledge, this represents the first reference on the criminal underground of actors selling or distributing lists of 2018 voter registration data, including US voters’ personally identifiable information and voting history,” said Anomali Labs in a blog post detailing the findings.Shortly after the advertisement was published on Oct. 5, 2018, Anomali Labs noted that another high-profile actor organized a crowdfunding campaign to purchase the voter records. According to the actor, the purchased databases would be made available free of charge to all registered members of the hacker forum – with early access given to donors of the project. As of this writing, the Kansas voter database has been acquired and published. Meanwhile, a second crowdfunding project took a vote to acquire Oregon next. Furthermore, the seller claimed to update the voter registration data every week as he or she received “information via contacts within the state governments.” If combined with other breached data, Anomali Labs warns the voter records could be misused by malicious actors to disrupt the electoral process or pursue large-scale identity theft. "While we know that voter records have been exposed in the past, the fact that they are hitting the market is important," adds Tim Erlin, VP of Product Management and Strategy at Tripwire. "If criminals can successfully monetize these voter records, it will drive greater interest in further compromises."