Posted on 08/06/2026 7:37:57 AM PDT by DFG
Arizona's largest county suffered a significant breach of its election data in the days before the 2020 presidential election when a self-described hacker foiled security and obtained 633,000 voter registration files but the Biden Justice Department and local prosecutors declined to bring charges even after the FBI got the suspect to confess, according to declassified documents made public Thursday by the White House.
The scraping of Maricopa County's voter registration files was the most flagged security incident in a cyberintrusion log kept by U.S. spy agencies in the days around the Nov. 3, 2020 election, and it caused an extensive FBI investigation that led agents to a home in Fountain Hills, Ariz., the memos show.
The man the FBI confronted admitted he wrote a computer script to exploit the county voter systems security and scraped the files, which included 930 with "sensitive voter information like domestic violence victims, judges and law enforcement officers," according to the FBI case files declassified and made public by President Donald Trump's White House Government Transparency Task Force.
FBI Director Kash Patel sent a letter to that task force this week stating the bureau spent "significant resources" but could not get the U.S. Attorney's Office in Phoenix, the Arizona Attorney General’s Office, the Maricopa County Arizona Attorney’s Office or the Pinal County, Arizona Attorney’s Office to bring charges despite an admission from the alleged hacker.
File FBI_Letter.pdf The U.S. Attorney’s Office declined to prosecute the alleged hacker on July 12, 2021, under the Biden Administration, according to the FBI. The newly released memos do not state when the other prosecutorial agencies made similar decisions not to bring charges, but the full case was officially closed in 2023.
Just one day before the Nov. 3 election, the Maricopa County Recorder’s Office submitted a tip through the Arizona Counterterrorism Intelligence Center that there had been “an attempt to scrape voter registration information,” according to one FBI summary.
File FBI_Opening_Doc.pdf According to that memo, an unidentified intruder gained access to voter registration data on the recorder’s website by using a “Powershell script” that exploited a weakness in security. More than 633,000 voter records were exfiltrated between Oct. 21, 2020, and Nov. 2, 2020, the memos state.
According to Microsoft, "a PowerShell script is a plain text file saved with a .ps1 extension that contains a sequence of commands (called cmdlets), variables, and logic to automate tasks."
Voter registration files do not include ballots, and there's no evidence votes were changed in the incident, But the U.S. intelligence community has been warning since 2020 that if bad actors gained access to such files they could hamper the ability of voters to cast ballots in the future. China has obtained about 220 million such files, documents released last month by President Donald Trump show.
The Maricopa County incident appeared frequently in the Intelligence Community’s cyber instruction logs in the days leading up to and on the day of the presidential election. Those logs were also made public, with redactions for sensitive information, by the White House. They show that by 7:15 AM on Election Day, the Intelligence Community knew that the Maricopa intrusion had scooped up non-public information.
At the time, Maricopa County election officials said that the suspect accessed the website where people could register to vote, but could not pierce the server where the county’s voter registration files are actually stored. The county also said that the only information obtained on individual voters were voter registration numbers, but this is contradicted by the FBI, which identified more than 900 voter records that contained private information, like domestic violence victim status.
File Intel_Cyber_Logs_2020.pdf The FBI traced the intrusion to a Fountain Hills, Ariz., home and agents were dispatched several days after the election to interview the subject and execute a search warrant on the premises.
The man was forthcoming, telling federal agents exactly how he discovered the vulnerability in the Maricopa County Recorder’s website and how he wrote a computer script to exploit it, according to an FD-302 memorializing the interview. An FD-302 is the official FBI form used by special agents to write down a summary of an interview with a witness, suspect, or informant.
The suspect, who described himself as a “hacker or tinkerer,” told the agents that he first discovered the vulnerabilities in Maricopa’s website about two months earlier, in September 2020. “He noticed his voter ID appeared in the URL” after entering his own voter information and “tested the vulnerability by entering several seven-digit numbers into the URL path resulting in access to different voter registration information,” the agents wrote.
FBI_302.pdf The man said that after discovering the vulnerability, he developed a “PowerShell script” that he ran from the beginning of October until around November 2, 2020, the day before the election. At that point, Maricopa County had detected the intrusions and “fixed their firewall,” according to the FBI memo.
The man estimated he obtained between 1 million and 2 million voter files.
The FBI agents noted that the suspect eventually “realized the gravity of the situation and became scared,” knowing that “he would get a visit from [law enforcement].” Though he considered telling the media about his actions, he decided to keep his breach a secret and scrubbed his hard drives and deleted files from his Google Cloud, according to the FBI-302.
The same day of the interview, FBI agents executed a search warrant on the suspect’s home. The search was publicly reported by Forbes in December 2020. The Arizona Daily Independent also reported that a home was targeted by FBI agents seeking evidence of a cyberattack on a then-unnamed organization.
The agents reportedly seized eight hard drives, three computers, and a bag of USB sticks.
Forbes reported that a man who lived at the address was previously investigated by police in 2011 when he lived in Wisconsin. While working as the IT administrator for the City of Ashland, local police questioned him over a series of spoof emails sent out ahead of a local election.
After both federal and state prosecutorial agencies declined to bring charges using the FBI’s findings, the investigative team requested that the bureau close the case in May 2023, nearly three years after the intrusions were first detected, an additional FBI memo shows. The agents cited the declinations to justify closing the file.
Dear FRiends,
We need your continuing support to keep FR funded. Your donations are our sole source of funding. No sugar daddies, no advertisers, no paid memberships, no commercial sales, no gimmicks, no tax subsidies. No spam, no pop-ups, no ad trackers.
If you enjoy using FR and agree it's a worthwhile endeavor, please consider making a contribution today:
Click here: to donate by Credit Card
Or here: to donate by PayPal
Or by mail to: Free Republic, LLC - PO Box 9771 - Fresno, CA 93794
Thank you very much and God bless you,
Jim
Well let’s prosecute him now!
THE MOST SECURE ELECTION IN HISTORY
Our DOJ hasn’t either.
Arizona forgot how to hold elections ever since the Californicators took over.
Just a hacker or tinkerer , but one with a documented history of election interference
Nothing to see here, just a harmless bloke having a bit of fun with is computer.
What could be more innocent than that.
The week after the 2020 an IT expert in Mi testified that Dominion machines were routinely hard wired into the WWW — in violation of their own installation instructions. He showed piccies of the cables laid across the floor.
He was ignored — ‘cause all elected parties (including judges) benefited by the corruption. Until such folks go to jail, nothing will change.
So, by 2019 the Chinese had Voter rolls and signatures on 200 million Americans. Yet, the US federal government is denied the same information from 22 states when it requests to ensure that they are legitimate, US citizens, and not double voting.
In Arizona, a democratic administration in 2020 got caught ‘allowing’ the voter roll file to be ‘lifted’. I am going to guess, without reading the article, that China was going or did do the following:
1. Fake Driver ID’s.
2 Fake voter information
3. Fake mail in votes by using this information.
Mail in voting should be limited to people who really can’t vote, and it should never be open enough to be interfered with by a nemesis nation. The Federal Government must have access to voter rolls, to ensure free and fair elections.
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.