What's Happening?
Hundreds of election offices across Wisconsin are not adhering to recommended cybersecurity best practices, with many still utilizing consumer email accounts like Gmail, Hotmail, or Yahoo for official election business. A Votebeat analysis of state data
revealed that approximately one in three Wisconsin clerks use these non-government email addresses, primarily in municipalities with fewer than 5,000 residents. While some 360 municipalities use custom domains like kenosha.org, these lack the verified government entity status of .gov domains. Kenosha is noted as the largest Wisconsin city without a registered government domain for its email or website. Experts emphasize that government domains are harder to spoof and more resistant to phishing attacks, which have targeted election officials in other states. The Wisconsin Elections Commission has provided grants and assistance to help local governments improve election security, but federal funding for these programs is diminishing.
Why It's Important?
The widespread use of non-government email accounts by Wisconsin election offices poses a significant cybersecurity risk to the integrity of the state's electoral process. Consumer email accounts are more vulnerable to phishing, spoofing, and other cyberattacks, which could lead to the compromise of sensitive election data, the spread of misinformation, or even disruption of election operations. This vulnerability is particularly concerning given past attempts by hackers to breach election officials' emails in other states. The disparity in cybersecurity adoption, with smaller, less-resourced municipalities lagging behind larger ones, highlights an uneven playing field in election security. This situation could erode public trust in election results if systems are perceived as insecure, potentially impacting voter confidence and democratic participation.
What's Next?
With the November election approaching, experts advise against major changes to email systems now, but encourage jurisdictions to begin applying for government domains for post-election implementation. The Wisconsin Elections Commission may need to advocate for continued state funding to subsidize local election security upgrades as federal grants dwindle. One proposed solution is to condition future election security grants on jurisdictions adopting or agreeing to adopt government email domains. This would incentivize compliance and ensure that financial assistance directly contributes to enhancing cybersecurity. Local election officials, particularly in smaller towns, will need to assess their IT resources and potentially seek external support to transition to more secure systems, balancing cost implications with the critical need for robust election security.
Beyond the Headlines
The issue of cybersecurity in Wisconsin's election offices extends beyond technical vulnerabilities; it touches upon the fundamental principles of democratic governance and public trust. The decentralized nature of Wisconsin's election system, with numerous small municipalities, presents a unique challenge in implementing uniform security standards. This situation underscores the broader digital divide, where smaller entities often lack the resources and expertise to keep pace with evolving technological threats. The reliance on consumer email accounts for official business also blurs the line between personal and governmental communications, potentially leading to confusion and reduced credibility. Addressing this challenge requires not only financial investment but also a cultural shift towards prioritizing digital security at all levels of government, ensuring that every voter can trust the authenticity and security of election-related communications.
