Iraq's Electoral Commission hacked: Voter data sale highlights growing election cyber threats

A recent discovery by a team of researchers has unveiled a disturbing trend of increased cyber threats targeting elections, with the latest incident exposing the sale of voter data stolen from Iraq’s Independent High Electoral Commission (IHEC). Resecurity, the cybersecurity firm behind the revelation, disclosed the existence of a 21.58GB database containing Iraqi voter cards and personally identifiable information, along with a customized software client designed for IHEC’s Operations & Data Management Department.

 

According to Resecurity, the surge in election cyber threats, which escalated from 10% in 2015 to 26% in 2022, poses a significant risk to democratic processes worldwide. The compromised data, confirmed to be authentic, includes crucial information such as names, dates of birth, polling stations, and registration centers.

Gene Yoo, CEO of Resecurity, emphasized the severity of the breach, stating, "The acquired data is valid and contains valid information that was validated with our law enforcement partners in Iraq."

 

The breach, believed to be a result of an IT supply chain compromise or insider involvement, underscores the vulnerability of election infrastructure systems. Resecurity suggests that malicious actors could exploit the leaked data to orchestrate targeted propaganda and influence campaigns, posing a long-term threat to electoral integrity.

 

Potential suspects in the attack include nation-state actors aiming to destabilize Iraq or domestic actors involved in protest activities. Resecurity’s investigation points to Iran and dissident Kurd nationalists as likely suspects, with evidence suggesting a connection to the Kurdistan region.

 

The exploitation of leaked voter data is not unique to Iraq, as similar incidents have occurred in various countries, including the US, Indonesia, Israel, Turkey, and African nations. Recent findings by Resecurity revealed cyber threats ranging from attacks on election infrastructure to influence campaigns aimed at shaping public opinion and policymaker decisions.