Denver District Attorney's Office investigating posted passwords to Colorado election systems
Nov 11, 2024
DENVER (KDVR) — The Denver District Attorney's Office confirmed with FOX31 on Monday that the office is investigating passwords to Colorado election systems that were found to be posted online for months.
However, the agency will not comment more about the investigation, including what has spurred the Denver office to action.
Rep. Caraveo concedes Colorado’s 8th Congressional District seat Sunday
The matter came to light in late October when partial BIOS passwords to Colorado's voting systems were found to have been posted in a hidden spreadsheet on the Secretary of State's website. After investigating, officials found that the partial passwords had been online from June 21 through Oct. 24.
The matter was publicized on Oct. 29 when the Colorado Republican Party sent a letter to the Secretary of State's Office, accusing the Democratic official of "quietly" removing the spreadsheet from the office's website, without changing any of the included passwords or informing the county clerks whose election systems may have been impacted.
On Nov. 1, officials confirmed that the passwords had been changed.
The Colorado GOP said in October that there were over 600 BIOS passwords that were not encrypted or protected, and were open to the public for anyone who knew where to look. BIOS, or Basic Input/Output System, is how a computer’s operating system knows how to operate.
According to Griswold, an employee who mistakenly put those passwords on a hidden tab is no longer with the agency. She assured voters again on Wednesday that the posted password spreadsheet “does not pose an immediate security threat to Colorado’s elections," but also said that she would not resign over the matter.
Officials said the passwords were changed out of precaution.
“The passwords that were improperly disclosed were one of two passwords to make changes to these particular voting system components and can only be used with in-person physical access to that specific machine,” the Secretary of State's Office said in a press release.
Colorado's election systems have several layers of security, the Secretary of State's Office has stressed, including:
24/7 video camera recording of all election equipment
Requirements for clerks to maintain restricted access to secure ballot areas
Requirements for clerks to only share access information with background-checked individuals
Restrictions on secure areas to allow only authorized people in a secure area unless supervised by an authorized and background-checked employee.
“There are also strict chain of custody requirements that track when a voting systems component has been accessed and by whom,” a Secretary of State's Office spokesperson told FOX31. “It is a felony to access voting equipment without authorization.”