What's Happening?
A significant number of Wisconsin election offices, particularly in smaller municipalities, are not adhering to recommended cybersecurity best practices, according to a Votebeat analysis of state data. Approximately one in three Wisconsin clerks still
utilize consumer email accounts such as Gmail, Hotmail, or Yahoo for official election business. This practice is prevalent in municipalities with fewer than 5,000 residents, with most having fewer than 1,000. In contrast, no clerks in municipalities with over 25,000 residents use consumer accounts. Experts warn that using non-government domains makes election offices more vulnerable to phishing attacks and makes it harder for voters to distinguish official communications from fraudulent ones. The state has invested millions in cybersecurity improvements, but smaller jurisdictions often lack the IT resources and funding to transition to more secure government domains.
Why It's Important?
The widespread use of consumer email accounts by Wisconsin election officials poses a substantial risk to election integrity and voter trust. These accounts are more susceptible to spoofing and phishing attempts, which could lead to the compromise of sensitive election data or the dissemination of misinformation. The lack of a verified government domain makes it difficult for citizens to trust the authenticity of communications from election officials, potentially leading to confusion or distrust in the electoral process. This vulnerability is particularly concerning given past attempts by hackers to breach election systems in various states. While larger jurisdictions have largely modernized their cybersecurity, the disparity leaves smaller, often rural, communities exposed, creating an uneven security landscape across the state.
What's Next?
Addressing this cybersecurity gap will require continued effort and funding. The Wisconsin Elections Commission (WEC) has provided grants for security upgrades, but federal funding is diminishing, suggesting the state legislature may need to step in to subsidize future improvements. Experts like Trevor Timmons of Ready for Tuesday suggest that the WEC could condition future election security grants on jurisdictions adopting government email domains. While major changes to email systems are not advisable with the November election approaching, officials are encouraged to begin the process of applying for government domains post-election. The challenge remains significant for small towns with limited budgets and no dedicated IT staff, making ongoing state support crucial for achieving uniform cybersecurity standards.
Beyond the Headlines
The cybersecurity vulnerabilities in Wisconsin's election offices highlight a broader issue of digital inequality and resource disparities within local governance. Small municipalities often operate with limited budgets and personnel, making it difficult to keep pace with evolving technological threats and best practices. This situation underscores the need for centralized support and standardized cybersecurity frameworks that can be implemented across all levels of government, regardless of size or resources. Beyond the immediate threat to election security, the reliance on consumer email accounts can also impact public records management and data privacy. The long-term solution involves not just funding, but also education, technical assistance, and potentially consolidated IT services for smaller jurisdictions to ensure a secure and trustworthy electoral process for all citizens.
