The Colorado Secretary of State’s Office inadvertently posted a spreadsheet to its website with a hidden tab that included voting system passwords.
In a statement to 9NEWS, a spokesperson for the Colorado Secretary of State’s Office said that “the Department is working to remedy this situation where necessary.”
“The Department took immediate action as soon as it was aware of this and informed the Cybersecurity and Infrastructure Security Agency (CISA), which closely monitors and protects the county’s essential security infrastructure,” the spokesperson said.
On Tuesday morning, Colorado Republican Party Vice Chair Hope Scheppelman shared the hidden tab discovery in a mass email, along with an affidavit from someone who claims they had downloaded the Excel file from the Colorado Secretary of State’s website and discovered the hidden tab by simply clicking “unhide.” The name on the affidavit was blacked out in the Republican Party email.
9NEWS left a voicemail with Scheppelman on Tuesday afternoon.
The passwords that were in the hidden tab are known as BIOS passwords and are one part of the security process for Colorado’s voting machines.
They are passwords needed to configure system settings.
“There are two unique passwords for every election equipment component, which are kept in separate places and held by different parties. Passwords can only be used with physical in-person access to a voting system,” a spokesperson for the Colorado Secretary of State’s Office said.
“To be very clear, we do not see this as a full security threat to the state. This is not a security threat,” Colorado’s Democratic Secretary of State Jena Griswold told 9NEWS Tuesday.
Click this link for the original source of this article.
Author: Paul Bedard
This content is courtesy of, and owned and copyrighted by, https://www.offthepress.com and its author. This content is made available by use of the public RSS feed offered by the host site and is used for educational purposes only. If you are the author or represent the host site and would like this content removed now and in the future, please contact USSANews.com using the email address in the Contact page found in the website menu.