Capitol Fax.com - Your Illinois News Radar » “Foreign” hack attack on state voter registration site
SUBSCRIBE to Capitol Fax      Advertise Here      Mobile Version     Exclusive Subscriber Content     Updated Posts    Contact
CapitolFax.com
To subscribe to Capitol Fax, click here.
“Foreign” hack attack on state voter registration site

Thursday, Jul 21, 2016

* From the McLean County Clerk’s Facebook page

The State Board of Elections (SBE) fell victim to a cyberattack that was detected on July 12, 2016. Specifically, the target was the [Illinois Vital Records System] database. Once discovered, State Board of Elections closed the point of entry. On July 13th, once the severity of the attack was realized, as a precautionary measure, the entire IVRS system was shut down, including online voter registration.

SBE’s Information Technology and Voting and Registration Systems staff immediately began researching the extent of the infiltration. Thus far, we have determined the following:

    · The pathway into IVRS was NOT through our firewalls but through a vulnerability on our public web page that an applicant may use to check the status of their online voter registration application.
    · The method used was SQL injection. The offenders were able to inject SQL database queries into the IVRS database in order to access information. This was a highly sophisticated attack most likely from a foreign (international) entity.
    · We have found no evidence that they added, changed, or deleted any information in the IVRS database. Their efforts to obtain voter signature images and voter history were unsuccessful.
    · They were able to retrieve a number of voter records. We are in the process of determining the exact number of voter records and specific names of all individuals affected. (Because of the complex methods used to access the data, this may take 10-15 days.)
    · In an effort to prevent an attack such as this from happening in the future, we have made a number of security enhancements to the IVRS and POVA systems.
    · Once the system is brought back online, all IVRS user passwords will need to be changed at the first login (or by your vendor for system specific accounts). The new password must be a minimum of eight characters in length, one of which must be a non-alphanumeric character ($, *, # etc.).

Pursuant to the Personal Information Protection Act (815 ILCS530/), the Illinois General Assembly and the Office of the Attorney General have been notified of the incursion. Furthermore, once we have determined the number of voter records and the individuals whose information was collected, we are prepared to take the proper steps required to notify those persons.

A separate notification will be sent indicating when you and your staff may access IVRS. Thank you for your patience regarding this matter.

Kyle Thomas
Illinois State Board of Elections
Director-Voting and Registration Systems

* Dan Petrela

The registration database is a frequent target of cyberattacks, [Ken Menzel, the Illinois State Board of Elections’ general counsel] said, but “this is the first time that we’re aware of that anybody’s gotten into anything — not for lack of trying .”

Menzel said the board is confident that no voter information in the database was altered and will follow the proper notification procedures if any personal information was compromised.

- Posted by Rich Miller        

15 Comments
  1. - Union Dues - Thursday, Jul 21, 16 @ 12:37 pm:

    SQL injection is not an advanced techique at all and only possible if your web page is poorly written.


  2. - Ghost - Thursday, Jul 21, 16 @ 12:39 pm:

    Points to them for detecting this and their actions afterward. well done.


  3. - Formerly Known as Frenchie M - Thursday, Jul 21, 16 @ 12:42 pm:

    I’m sorry this happened — but there’s very little excuse these days to not prevent a SQL injection attack. They’ve been — for years — a primary attack vector for publicly accessible websites.

    Another issue, though, and one that’s even more troubling — and something I don’t see in the post — is how the passwords were stored (encrypted? properly salted and then hashed?). They say the passwords need to be changed — and that’s good. But I hope — I hope — they’re stored properly.


  4. - Bigtwich - Thursday, Jul 21, 16 @ 12:58 pm:

    So, an early story today was about,

    “Schneider complimenting Rauner’s campaign for helping get tons more data and info on IL voters”

    Hum? s/


  5. - illinois manufacturer - Thursday, Jul 21, 16 @ 1:05 pm:

    Probably China but funny on Rauner. China has been hacking huge amounts of medical data.No one really knows why


  6. - Skeptic - Thursday, Jul 21, 16 @ 1:19 pm:

    *facepalm* You got breached by SQL Injection? Really?


  7. - Jon - Thursday, Jul 21, 16 @ 1:32 pm:

    Isn’t Vital Records, like birth certificates, etc., IDPH, not SBOE? Could it be Illinois Voter Registration System?


  8. - Honeybear - Thursday, Jul 21, 16 @ 1:47 pm:

    I don’t know what this all means but it sounds quite bad.


  9. - PENSIONS ARE OFF LIMITS - Thursday, Jul 21, 16 @ 1:57 pm:

    SQL injection is hacking 101. The superstars at the newly created division of IT definitely dropped the ball here. “Phony” superstars.


  10. - Rhino - Thursday, Jul 21, 16 @ 3:42 pm:

    The registration database is not private but is supposed to be available to anyone at any time. The key question is whether data was or could have been altered. If not, no harm, no foul.


  11. - Arthur Andersen - Thursday, Jul 21, 16 @ 4:38 pm:

    All snark aside, they need a guy like John Bambenek right now.


  12. - Downstate Libertarian - Thursday, Jul 21, 16 @ 6:15 pm:

    Not happy to see this. As other said, it is not an advanced attack. Not happy to see the password standards that are in place. Considering the “sophistication” of the attack, the point raised by Formerly… is a definite concern. Would not be surprised that any encryption not be up to current standards and salting is probably out of the question.


  13. - PENSIONS ARE OFF LIMITS - Thursday, Jul 21, 16 @ 9:33 pm:

    These rookies need to figure out what information was obtained. I’m not going to tell them what constitutes a breach. I ain’t no superstar. Hint: PIPA


  14. - PENSIONS ARE OFF LIMITS - Thursday, Jul 21, 16 @ 9:38 pm:

    Rhino

    There is personal information in the database that is not publicly available. SQL injection gets that information from a poorly hosted website. Don’t argue for people who messed up. Ever.


  15. - OneMan - Monday, Jul 25, 16 @ 3:23 pm:

    Guess they should be thankful Little Bobby Tables isn’t of voting age yet.

    https://xkcd.com/327/

    Others have said it, but SQL injection is not a sophisticated attack.

    Is the IVRS more than just voter data?


Sorry, comments for this post are now closed.


* Reader comments closed for the weekend
* Taking a sick day
* *** LIVE *** Session coverage
* Yesterday's stories

Support CapitolFax.com
Visit our advertisers...

...............

...............

...............

...............

...............

...............

...............
<


Loading


* Illinois receives $16M federal grant to fight o.....
* 400 kidney donors, recipients hope to break wor.....
* Illinois receives $16M federal grant to fight o.....
* Illinois receives $16M federal grant to fight o.....
* Illinois receives $16M federal grant to fight o.....
* Illinois receives $16M federal grant to fight o.....
* Illinois receives $16M federal grant to fight o.....
* Illinois receives $16M federal grant to fight o.....
* Illinois receives $16M federal grant to fight o.....
* A sanctuary county… for gun owners - Hot Air..


* White Sox reliever Farquhar has brain hemorrhage during game
* White Sox reliever suffers brain hemorrhage during game
* Illinois receives $16M federal grant to fight opioid abuse
* Ramsey Lewis to play Chicago Jazz Festival before retiring
* Illinois universities see rise in union activity
* Astronomical society opens observatory in Central Illinois
* Marker dedicated for W. Indiana's 'Little Syria' community
* Race to raise college scholarship money for Dreamers
* EXCHANGE: Veteran talks about building during wartime
* EXCHANGE: Former Peru resident restores old family tavern

* Government consolidation efforts gain traction in General Assembly
* Bill: Put therapists, not armed security, in Illinois schools
* Report: Improvements to veterans home could cost $265M
* Rauner's point person on Legionnaires' outbreak makes $20K monthly
* Presidential library publishes digital archive of papers from Lincoln's first 33 years
* McCann to run for governor as Conservative Party candidate
* Duckworth, daughter make Senate history
* Report: Raoul hired ex-state worker convicted in fraud case
* Central Illinois couple suing DCFS over handgun ban at home day cares
* Meet the Springfield Fire Department's first female division chief

* Chicago's largest privately held companies
* Yes, we need the United Way
* Techie Neal Sales-Griffin takes aim at Emanuel
* Corrections
* The 0.3%: Million-dollar earners in Illinois


* Warriors guard Stephen Curry cleared for modified practice after knee injury
* CPS still mum on who will be able to attend new Dunning school
* ‘Austin Powers’ star Verne Troyer dead at 49
* 1 killed, 1 injured in South Austin
* Roberta Flack leaves Harlem awards show after feeling ill
* Trump considering pardon for late boxer Jack Johnson
* New lynching memorial offers chance to remember, heal
* Kaepernick accepts award from Amnesty International, decries ‘lawful lynching’
* Man, 50, reported missing from Little Village may need medical attention
* Boy, 17, shot in South Shore


* Column: Starbucks incident not about 'unconscious bias.' It is about racist behavior in America.
* Armed robbers sought after crime spree spanning nearly 8 miles
* Man holding his daughter is fatally stabbed in neck in random attack at California steakhouse
* Former Cubs top prospect Gleyber Torres to be called up by Yankees
* 2 hospitalized after rollover in Lake Zurich that left vehicle upside down
* With Michael Cohen investigation, Trump's 'fixer' becomes a danger
* Trump tweets he doesn't think personal lawyer will 'flip' during investigation
* Actor Verne Troyer from 'Austin Powers' films dead at 49
* 4 former presidents among hundreds at Barbara Bush's funeral
* Toddler unharmed when gunman opens fire, killing 1 woman and injuring another


» Official: Pop Tax Repeal Could Mean Late Tax Bills, Budget Headaches
» Casino Sale Raises Questions About A Windfall - Or A Conflict - For Pritzker
» Eliminating Golden Parachutes in Illinois; Children’s Author M.J. Mouton; Illinois Budget
» Obamacare Protection Measure Fails in Illinois House
» State Week: McCann Makes Three; Blagojevich Makes Appeal; Preckwinkle Makes History
» WBEZ’s Chicago and Illinois News Roundup: April 20, 2018
» From Columbine To Parkland: Art And Activism
» Web Extra, The Week in Review: Is there a Newspaper War in Chicago?
» The Week in Review: Dorothy Brown Enters Mayoral Race
» #647 Jason Isbell & Opinions on Cardi B


* Government consolidation efforts gain traction in General Assembly
* Statehouse Insider: Governor's race could set records beyond spending
* Guest View: A nation at risk
* Ed Rogers: Anyone who wants to connect with people could learn a lot from Barbara Bush
* Thumbs Up: To women who break down barriers
* Bill: Put therapists, not armed security, in Illinois schools
* Report: Improvements to veterans home could cost $265M
* Rauner's point person on Legionnaires' outbreak makes $20K monthly
* Guest View: New bill would set a dangerous precedent for cybersecurity in Illinois
* Eugene Robinson: Trump's foreign policy is more like international lurching


* Illinois universities see rise in union activity
* Tickets still available for Skillet, For King & Country at SIU Arena on Thursday
* Ebertfest 2018: Day 4
* Illinois receives $16M federal grant to fight opioid abuse
* Midwest engineering students show off skills at SIUC's concrete canoe races
* I-64 driver hits cow, gets rear-ended by state trooper going after speeding suspect
* HS Baseball: Urbana vs Peoria Notre Dame
* Non-emergency number for Carbondale police is not working
* Go Red for Women volunteers put 'pursonality' into May 4 fundraiser at Walker's Bluff
* See the map: What Macon County, Decatur roads will be repaired this summer?


* Baseball: Glenbard East downs Larkin
* Softball: Cary-Grove puts broom to St. Charles North
* Softball: Walker, Glenbard West knock off West Chicago
* Texas school apologizes after slavery assignment
* Girls soccer: Libertyville learns from win against Prospect

* Morning Spin: Democrats still looking vote...
* Nazareth Academy students pray, walk, lear...
* Congress passes $1.3 trillion spending bil...
* Nazareth Academy students pray, walk, lear...
* Underwood hopes winning primary formula ca...
* House approves Curbelo, Hultgren bill prot...
* After primary win, Naperville nurse Underw...
* Bustos pushes to make 'blue wave' happen i...
* Pritzker, other Illinois Democrats in DC: ...
* This RSS feed URL is deprecated

* Booker, Durbin, Krishnamoorthi Introduce H......
* Durbin, Duckworth demand accounting of All......
* Area US senators' votes on Trump nominatio......
* What's the Deal With Chuck Schumer's Pot B......
* Durbin, Duckworth press Allegiant for flig......

* Tammy Duckworth becomes first senator to v......
* Few mothers could do what Tammy Duckworth ......
* Four stories that mattered this week, expl......
* 4 stories that mattered this week, explained...
* Sen. Tammy Duckworth bringing baby to Sena......

* "Meeting House Tavern" Coming Soon To Clark & Winnemac
* The Week In Chicago Rock
* The Weekend Desk Report
* IEA RA applauds Parkland student call for #NeverAgain. Votes down anti-NRA New Business Item.
* Just white.
* “You can’t arrest homelessness away.”
* Arizona.
* Final Permit Issued, 5050 N. Broadway Is Ready To Go
* Paris. 1968.
* Keeping retirement real. Steelworker dreams and nightmares.


* IEMA Highlights Role of Volunteers in Disasters
* Governor Rauner activates State Emergency Operations Center in Springfield
* February Flooding Information
* IEMA Urges People to Prepare for Severe Weather
* Governor issues state disaster proclamation for flooding in Iroquois, Kankakee, Vermilion Counties

  
* Apple is replacing some 13-inch MacBook Pro batteries
* DOJ probing AT&T, Verizon for collusion to thwart eSIM and you switching
* Apple is replacing the batteries for some 13-inch MacBook Pros
* Amazon won’t let users review James Comey’s new book if they didn’t purchase it through the site
* Netflix’s Cargo has a few new ideas for the zombie genre
* The Wikileaks Shop says that Coinbase has suspended its account
* Ikea’s first Bluetooth speakers show it’s still figuring out tech

* Farquhar stable after ruptured brain aneurysm
* Super Stats Pack: Game 15
* Astros romp, 10-0
* Farquhar stable after ruptured brain aneurysm
* Farquhar stable but critical after hemorrhage
* South Side Sox Prospect Vote: Round 16
* South Side Sox Roster Ranking: Round 16


Main Menu
Home
Illinois
YouTube
Pundit rankings
Obama
Subscriber Content
Durbin
Burris
Blagojevich Trial
Advertising
Updated Posts
Polls

Archives
April 2018
March 2018
February 2018
January 2018
December 2017
November 2017
October 2017
September 2017
August 2017
July 2017
June 2017
May 2017
April 2017
March 2017
February 2017
January 2017
December 2016
November 2016
October 2016
September 2016
August 2016
July 2016
June 2016
May 2016
April 2016
March 2016
February 2016
January 2016
December 2015
November 2015
October 2015
September 2015
August 2015
July 2015
June 2015
May 2015
April 2015
March 2015
February 2015
January 2015
December 2014
November 2014
October 2014
September 2014
August 2014
July 2014
June 2014
May 2014
April 2014
March 2014
February 2014
January 2014
December 2013
November 2013
October 2013
September 2013
August 2013
July 2013
June 2013
May 2013
April 2013
March 2013
February 2013
January 2013
December 2012
November 2012
October 2012
September 2012
August 2012
July 2012
June 2012
May 2012
April 2012
March 2012
February 2012
January 2012
December 2011
November 2011
October 2011
September 2011
August 2011
July 2011
June 2011
May 2011
April 2011
March 2011
February 2011
January 2011
December 2010
November 2010
October 2010
September 2010
August 2010
July 2010
June 2010
May 2010
April 2010
March 2010
February 2010
January 2010
December 2009
November 2009
October 2009
September 2009
August 2009
July 2009
June 2009
May 2009
April 2009
March 2009
February 2009
January 2009
December 2008
November 2008
October 2008
September 2008
August 2008
July 2008
June 2008
May 2008
April 2008
March 2008
February 2008
January 2008
December 2007
November 2007
October 2007
September 2007
August 2007
July 2007
June 2007
May 2007
April 2007
March 2007
February 2007
January 2007
December 2006
November 2006
October 2006
September 2006
August 2006
July 2006
June 2006
May 2006
April 2006
March 2006
February 2006
January 2006
December 2005
April 2005
March 2005
February 2005
January 2005
December 2004
November 2004
October 2004

Blog*Spot Archives
November 2005
October 2005
September 2005
August 2005
July 2005
June 2005
May 2005

Syndication

RSS Feed 2.0
Comments RSS 2.0
WordPress




Hosted by MCS SUBSCRIBE to Capitol Fax Advertise Here Mobile Version Contact Rich Miller