Data Breach

Details of millions of U.S. Voters leaked to Russia’s Dark Web forum

Russia’s Kommersant business newspaper reported that a database containing millions of American voters’ details has appeared on the Russian dark web.

A database containing several million American voters’ personal information has appeared on the Russian dark web, Russia’s Kommersant business newspaper reported this week.

The news is worrisome due to the upcoming presidential elections in the US and the fear of foreign interference.

According to the Russian newspaper, a user that goes online with the moniker “Gorka9” advertised free access to the personal information of 7.6 million voters in Michigan in an unnamed discussion forum. Kommersant has also found databases containing details of between 2 million and 6 million voters in Connecticut, Arkansas, Florida and North Carolina.

Leaked records include names, dates of birth, gender, dates of voter registration, addresses, zip codes, e-mails, voter registration numbers and polling station numbers.

The authenticity of the data was confirmed by the software firm Infowatch, which speculate the data was leaked online in late 2019, while Gorka9 claims data was valid as of March 2020.

According to the Russian newspaper, some users of the dark web forum are attempting to monetize the leaked data reporting them to the U.S. State Department. The US State Department recently launched a $10 million reward program aimed at preventing foreign interference in the upcoming election, for this reason, it is willing to pay any report of potentially harmful discovery.

“Forum users have found a way to make money on them, using the State Department’s program “Rewards for Aid to Justice”, which allows them to receive money for reporting the facts of interference in elections in the country.” reported the Kommersant. “The Rewards for Justice program became widely known in the summer; in early August, Znak.com reported that Russians began to receive SMS messages from the State Department with an offer for a reward of up to $ 10 million to detail the facts of foreign interference in the American elections.”

Kommersant reported the case of one user that claimed to have been paid $4,000 for having reported his findings of a leaked Connecticut voter database to the State Department.

Experts quoted by Kommersant speculated that the hackers had already obtained commercial benefits from the leaked data before publishing it online.

Who is behind this leak?

It is impossible to say and the Russian newspaper provided several possible explaination, including the fact that the leak could be the result of a deliberate provocation.

“Anastasia Fedorova, leading analyst in the Information Security department of the IT company CROC, points out that the post about the leak appeared shortly before the US presidential elections scheduled for November 3.” concludes the newspaper. “In her opinion, judging by the completeness of the information, the state system became its source. Another source of Kommersant believes that according to the nickname of the user who published the database, one can assume that this is “the first stage of preparation for accusing Russian hackers of interfering in the US presidential elections.”

[adrotate banner=”9″][adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, US voters)

[adrotate banner=”5″]

[adrotate banner=”13″]

Pierluigi Paganini

Pierluigi Paganini is member of the ENISA (European Union Agency for Network and Information Security) Threat Landscape Stakeholder Group and Cyber G7 Group, he is also a Security Evangelist, Security Analyst and Freelance Writer. Editor-in-Chief at "Cyber Defense Magazine", Pierluigi is a cyber security expert with over 20 years experience in the field, he is Certified Ethical Hacker at EC Council in London. The passion for writing and a strong belief that security is founded on sharing and awareness led Pierluigi to find the security blog "Security Affairs" recently named a Top National Security Resource for US. Pierluigi is a member of the "The Hacker News" team and he is a writer for some major publications in the field such as Cyber War Zone, ICTTF, Infosec Island, Infosec Institute, The Hacker News Magazine and for many other Security magazines. Author of the Books "The Deep Dark Web" and “Digital Virtual Currency and Bitcoin”.

Recent Posts

New PumaBot targets Linux IoT surveillance devices

PumaBot targets Linux IoT devices, using SSH brute-force attacks to steal credentials, spread malware, and…

3 hours ago

App Store Security: Apple stops $2B in fraud in 2024 alone, $9B over 5 years

Apple blocked over $9B in fraud in 5 years, including $2B in 2024, stopping scams…

4 hours ago

Crooks use a fake antivirus site to spread Venom RAT and a mix of malware

Researchers found a fake Bitdefender site spreading the Venom RAT by tricking users into downloading…

8 hours ago

Iranian Man pleaded guilty to role in Robbinhood Ransomware attacks<gwmw style="display:none;"></gwmw>

Iranian man pleads guilty to role in Baltimore ransomware attack tied to Robbinhood, admitting to…

9 hours ago

DragonForce operator chained SimpleHelp flaws to target an MSP and its customers

Sophos warns that a DragonForce ransomware operator chained three vulnerabilities in SimpleHelp to target a…

19 hours ago

Russia-linked APT Laundry Bear linked to 2024 Dutch Police attack

A new Russia-linked APT group, tracked as Laundry Bear, has been linked to a Dutch…

1 day ago