News Blog

Q&A: Why wiping of Georgia elections server matters

Q&A: Why wiping of Georgia elections server matters

The Associated Press
FILE – This Sept. 22, 2016 file photo shows the screen of an electronic voting machine during testing at the Kennesaw State University Center for Election Systems in Kennesaw, Ga. A computer server crucial to a lawsuit against Georgia election officials was quietly wiped clean in July 2017, just after the suit was filed. Data on the server could have indicated whether Georgia elections were manipulated by malicious hackers. (AP Photo/Alex Sanz, File)

    Election reform activists sued Georgia officials on July 3 demanding its highly questioned statewide elections system be immediately retired. Four days later, technicians at Kennesaw State University, which administers the state's elections, destroyed a key piece of evidence — wiping clean an elections management server.

    The server, holding data on Georgia's 6.7 million voters and files used to stage elections, had been exposed on the open internet for at least six months until early June. A security expert, Logan Lamb, first alerted officials to the gaping vulnerability in August 2016 but it had gone unpatched.


    It's necessary to know whether the server might have been hacked and the outcome of last November's election and a special House of Representatives vote on June 20 altered. Data on the server included passwords used by county officials to access elections management files.


    It obtained an Oct. 18 email written by an assistant state attorney general to lawyers in the case. The AP also was given 180 pages of email exchanges of election administrators obtained in an open records request. The documents confirmed the irretrievable deletion not just of the main server but also of two backups on Aug. 9.


    Secretary of State Brian Kemp — a Republican running for governor in 2018 — oversees Georgia's elections and is the main defendant. On Thursday, he blamed the wipe on "the undeniable ineptitude" of Kennesaw State's elections center. His spokeswoman told the AP that Kemp's office did not order the destruction and did not know of it beforehand.

    Kennesaw State officials have not responded to the AP's request to know who ordered the server wiped or why they did not keep an image before deleting its data.

    Emails in the open records request show that a senior university engineer instructed technicians to wipe the server's hard drives. The university's press office said in a statement Thursday that the instruction followed "standard operating procedures."

    The Atlanta FBI, which made an image of the server when it temporarily took custody in March, would not say whether it retained that copy — or whether it has done a forensic examination to determine whether the server was accessed by hackers and had files altered.

    The state attorney general's office, Kemp's lawyer in the case, notified the court Wednesday of its intent to subpoena the FBI for the image.


    That's not clear, though former DeKalb County District Attorney J.Tom Morgan said that if the servers are state property it does violate Georgia law. The plaintiffs' local attorney sent an email July 10 to the defendants' lawyers reminding them of their obligation to preserve electronic evidence. The case was later transferred from state to federal court. A Republican state representative, Scot Turner, called Thursday for a criminal investigation.


    Legal briefs are due Oct. 30, after which Presiding Judge Amy Totenberg would weigh their motion to dismiss the case. Meantime, Georgia's legislature has begun discussing replacing the state's 15-year-old elections system with modern equipment that includes an auditable paper trail at an estimated cost of at least $100 million.

    On Nov. 7, Conyers, Georgia, a city near Atlanta, will test new equipment that produces a paper trail in its local elections.


    Frank Bajak on Twitter:

    Submit a confidential tip to the AP:

    • Star

    Source –

    Leave a Comment