State election offices' emails are way too easy to hack


Only 4 percent of state election offices could actually stop hackers from sending emails from their official accounts, an alarming new study from cybersecurity firm Anomali has found. The study was provided to Axios, which published a story Monday that detailed just how easy it is to mess with elections.
The danger stems from how basic email is set up, Axios says. There are no security measures on basic email servers that ensure an email is actually coming from the address it's labeled with. State election systems — or anyone who wants email security — should install a combination of measures known as SPF and DMARC, which together tell recipients that an email is probably fake or can designate a message as spam.
Yet just 4 percent of offices have this system in place, the study found. And only 10 percent of offices use another security protocol called DKIM, which makes sure emails are actually from the sender they appear to be from. All of this could mean hackers could easily send a convincing email to voters saying their polling location or date had changed, among other sneaky suppression maneuvers.
The Week
Escape your echo chamber. Get the facts behind the news, plus analysis from multiple perspectives.

Sign up for The Week's Free Newsletters
From our morning news briefing to a weekly Good News Newsletter, get the best of The Week delivered directly to your inbox.
From our morning news briefing to a weekly Good News Newsletter, get the best of The Week delivered directly to your inbox.
Anomali derived its study from election offices across 50 states, three U.S. territories, and Washington, D.C. Read a more technical explanation of the dangers at Axios.
A free daily email with the biggest news stories of the day – and the best features from TheWeek.com
Kathryn is a graduate of Syracuse University, with degrees in magazine journalism and information technology, along with hours to earn another degree after working at SU's independent paper The Daily Orange. She's currently recovering from a horse addiction while living in New York City, and likes to share her extremely dry sense of humor on Twitter.
-
Music reviews: Chance the Rapper, Cass McCombs, and Molly Tuttle
Feature "Star Line," "Interior Live Oak," and "So Long Little Miss Sunshine"
-
Film reviews: Eden and Honey Don't!
Feature Seekers of a new utopia spiral into savagery and a queer private eye prowls a high-desert town
-
Critics' choice: Three chefs fulfilling their ambitions
Feature Kwame Onwuachi's grand second act, Travis Lett makes a comeback, and Jeff Watson's new Korean restaurant
-
DOGE put Social Security data at risk, official says
Speed Read DOGE workers made the personal information of hundreds of millions of Americans vulnerable to identity theft
-
Court rejects Trump suit against Maryland US judges
Speed Read Judge Thomas Cullen, a Trump appointee, said the executive branch had no authority to sue the judges
-
Trump expands National Guard role in policing
Speed Read The president wants the Guard to take on a larger role in domestic law enforcement
-
Trump says he's firing Federal Reserve Governor Lisa Cook
Speed Read The move is likely part of Trump's push to get the central bank to cut interest rates
-
Abrego released from jail, faces Uganda deportation
Speed Read The wrongly deported Kilmar Abrego García is expected to be detained at an ICE check-in and deported to Uganda
-
Trump arms National Guard in DC, threatens other cities
speed read His next targets are Chicago, New York and Baltimore
-
Judge: Trump's US attorney in NJ serving unlawfully
Speed Read The appointment of Trump's former personal defense lawyer, Alina Habba, as acting US attorney in New Jersey was ruled 'unlawful'
-
Third judge rejects DOJ's Epstein records request
Speed Read Judge Richard Berman was the third and final federal judge to reject DOJ petitions to unseal Epstein-related grand jury material