Colorado Secretary Of State Accused Of Major Security Breach With Voting System Passwords

With the November election approaching, Colorado’s Secretary of State Jena Griswold faces serious allegations of a security breach involving voting machine passwords. The Colorado GOP claims that Griswold’s office mistakenly posted sensitive BIOS passwords for voting systems across 63 of the state’s 64 counties on a public website from August to October 2024.

The GOP says these passwords, which were left unprotected, could have been accessed by anyone, raising concerns about potential vulnerabilities in Colorado’s voting infrastructure. According to an affidavit received by the GOP, the BIOS passwords control important system settings, including network capabilities and external drive access. State election rules require these passwords to be kept secure and confidential.

Griswold’s office acted immediately after learning about the exposure, reportedly removing the file from the website and informing the Cybersecurity and Infrastructure Security Agency (CISA). Officials from Griswold’s office stated that voting machines cannot be remotely accessed, which they argue limits the potential for tampering.

Despite these assurances, the Colorado GOP is calling for a swift response. They are requesting confirmation that new passwords are in place and asking for evidence of improved security practices. In their view, such a security lapse — especially so close to an election — undermines confidence in the state’s voting systems.

Matt Crane, a former Republican county clerk and director of the Colorado Clerks Association, downplayed concerns about vote manipulation but acknowledged the issue as a “serious” problem. “It’s concerning, but it doesn’t mean votes can be tampered with,” Crane stated. As the election nears, Colorado Republicans are demanding assurances that Griswold’s office has taken adequate steps to secure all voting equipment.