Next Story

Need for affordable housing sparks collaboration in Old Fourth Ward

Homeland Security accessed other states’ websites, survey finds


The National Association of Secretaries of State wants federal officials to help resolve concerns that a Department of Homeland Security computer made questionable visits to a number of state computers in recent months.

The organization, based in Washington, “wants to make sure that we help the states in question get a quick resolution of this matter from the Department of Homeland Security and that there is a way to resolve it to everyone’s satisfaction,” Kay Stimson, spokeswoman for the association, told The Atlanta Journal-Constitution on Thursday.

The organization surveyed its members after Georgia Secretary of State Brian Kemp’s staff traced what it considered a cyber threat against its network to a DHS-owned computer. The agency has denied any attempt to penetrate Georgia’s protected systems.

Two states — Kentucky and West Virginia — discovered visits to their systems by the same computer involved in the Georgia incidents. Both of those states, however, said the visits did not appear to be malicious.

Kentucky and West Virginia were among the 48 states that agreed to allow DHS to perform security checks of their election systems in August. Georgia, at Kemp’s direction, was one of two that refused. The DHS computer involved in the current dust up was not part of the agency’s scans of state systems

Kemp said his office’s outside cybersecurity vendor alerted him that the computer in question tried unsuccessfully on Nov. 15 to defeat the office’s protective firewalls.

Bradford Queen, spokesman for Kentucky Secretary of State Alison Grimes, said the National Association of Secretaries of State, at Kemp’s request, asked if other states had experienced similar attempts to access their systems.

“Our office investigated and found that in a handful of instances an IP address allegedly sourced to the Department of Homeland Security had accessed our public voter information and online voter registration websites,” Queen said.

But, they found no “attempt to scan, attack, or infiltrate our system and that the visits appeared to be regular web traffic.”

The responses from Kentucky and West Virginia would seem to bolster Homeland Security’s claim that a federal contractor based in Georgia used the computer in question to perform routine background checks of job applicants. The contractor contacted the secretary of state’s website to check professional licensing databases housed there, DHS Secretary Jeh Johnson said in a letter to Kemp earlier this week.

“We have been in touch with both states and this appears to be normal web traffic,” a DHS official told The Atlanta Journal-Constitution Thursday. The official was not authorized to speak on the record.

But that does not explain why the contractor was on Kentucky’s elections website at all. Kentucky’s secretary of state does not process professional licenses and it seems unlikely the contractor would need to access election results.

Morgan Wright, senior fellow at the Center for Digital Government and owner of a Virginia-based cyber strategy firm, said DHS’s explanations do not hold up.

“How does a laptop, a standard laptop, get configured like this but no others?” Wright said. “It appears to be this one magic computer that makes it appear like a (malicious) scan.”

Either DHS isn’t being completely honest or it has competency issues, Wright said.

“How does a computer get configured to do those things and not be detected?” he said. “What does that tell you about DHS’ ability to defend itself from attacks?”

A spokeswoman for West Virginia Secretary of State Natalie Tennant said the computer in question appeared to visit the state’s election results Nov. 7 and and on Oct. 29, 2016 an invalid website address was used to try to reach its voter registration system. “This activity was recorded by our office firewall. We have no indication at this time that the attempt was malicious.”

Kemp on Wednesday said he was not satisfied with the response thus far from the Department of Homeland Security and asked President-elect Donald Trump to order a full investigation once he is inaugurated in January. Efforts to reach Trump’s communications staff were unsuccessful Thursday.

On Thursday, Kemp said the results of the survey of other states shows the situation “just continues to produce more questions than answers.”

Stimson, the spokeswoman for the national organization, agreed.

The Department of Homeland Security has said they’re investigating, she said, but “we don’t have a full accounting at this point of what was behind this situation.”


Reader Comments ...

Next Up in Georgia Politics

Georgia AG gets 53 forms in fraud probe of Stacey Abrams' voter registration group
Georgia AG gets 53 forms in fraud probe of Stacey Abrams' voter registration group

The State Elections Board on Wednesday referred 53 allegedly forged voter applications to the Attorney General’s Office for possible prosecution, essentially closing a 2014 fraud investigation involving a massive registration drive by the upstart New Georgia Project.  The decision allows the office to decide whether to prosecute those involved...
Opinion roundup from the Left: Why what Trump said at the U.N. won’t work; a speech that was all bluster
Opinion roundup from the Left: Why what Trump said at the U.N. won’t work; a speech that was all bluster

A roundup of editorials Wednesday includes a look at President Donald Trump’s speck to the United Nations on Tuesday. Here are some opinions from the Left. 1. Motormouth Trump warns 'rocket man' Kim From the Chicago Tribune: Trump was blunt in his comments about North Korea during his U.N. speech. Here’s hoping his approach pays off...
Opinion roundup from the Right: Trump gave fair warning to U.N.; speech was perfect example of America first
Opinion roundup from the Right: Trump gave fair warning to U.N.; speech was perfect example of America first

A roundup of Wednesday editorials includes a look at President Donald Trump’s Tuesday speech to the United Nations. Here are some opinions from the Right. From The Washington Times: President Donald Trump took it to the U.N. on Tuesday with a fair warning that the North Korea situation needs to be dealt with. From Fox News: Trump gave two speeches-in-one...
Opinion roundup from the Right: How good a hire was Manafort; Obamacare repeal plan; Trump and the U.N.
Opinion roundup from the Right: How good a hire was Manafort; Obamacare repeal plan; Trump and the U.N.

A roundup of editorials Monday includes a look at ‘hiring the best’ when it comes to Paul Manafort; the latest effort to repeal Obamacare and what President Trump means when he addresses the United Nations Here are some opinions from the Right.  From The Resurgent: Eric Erickson questions the president’s hiring skills as the...
GOP, facing tight deadline, makes one last run at health care overhaul
GOP, facing tight deadline, makes one last run at health care overhaul

The Republican effort to repeal and replace Obamacare seemed all but dead this summer. Now it’s not. Again. Against all odds, Georgians both for and against the effort are watching warily as GOP leaders try one last pass at taking down the signature health care law of the Obama administration before their ability to do so expires Sept. 30. What...
More Stories