A vendor who goes by the name “DataDirect” is selling the entire US voter registration record on The Real Deal Market (a marketplace on the dark net). The hacker claims he has records for 50 states and he sells them for 0.5 BTC (around $340) per state. The listing’s description goes by:
“US voter registration records. Selling the DB on a State-by-State basis. 0.5 BTC per state (you must tell me which State you want. Some people think it’s unfair to make each State cost the same amount because some States are much bigger than others. I think it’s just easier this way.”
This is not the first time when voter data has been leaked online. In December 2015, security researcher Chris Vickery found 191 million of US voter registrations records on the internet in an unprotected folder. It is unclear though, whether DataDirect downloaded the records from that folder or hacked government servers. According to Vickery, in December, there was a lack of interest shown by the law enforcement authorities in recovering the data or taking the database off from public view:
“I’ve been working with journalists and authorities for over a week to get this database shut down or secured. No luck so far,” Vickery said.
The data seems legit, which means that this is a major problem for the U.S. Election Assistance Commission (EAC) and to the users themselves. Anybody who uses the records could land massive attacks either on the government or to the voters.