Stacey Abrams, the Democratic candidate for the governor of Georgia, has accused her Republican opponent and current Georgia Secretary of State Brian Kemp of abusing his power by leveling “cooked up” hacking allegations.
The Democratic Party of Georgia said it was blindsided Sunday when Kemp’s office announced it had “opened an investigation” into the party on Saturday evening after what it described – without evidence – as “a failed attempt to hack the state’s voter registration system.”
In a flurry of statements sent on Sunday, Rebecca DeHart, executive director of the Democratic Party of Georgia, said the “scurrilous claims are 100 percent false” and slammed the move as a “political stunt.”
By Monday morning, Abrams took to the airwaves to push back.
“In fact, I think he cooked up the charge because he realizes once again he has left six million voters’ information vulnerable and this happened twice before,” Abrams told George Stephanopoulos on “Good Morning America” on Monday, likely in reference to a pair reported data breaches in Georgia in 2015 and 2017 that exposed the information on millions of residents.
Stephanopoulos noted that Kemp had declined to appear on the broadcast, but at a rally at the DeKalb Peachtree Airport on Monday, Kemp addressed the controversy for the first time, telling reporters that he was not concerned by perception of the announcement.
“I’m not worried about how it looks. I’m doing my job,” Kemp said. “This is how we would handle any investigation when something like this comes up.”
In a statement on Sunday, Kemp’s office said they had officially requested the FBI to investigate the matter. The FBI declined to comment. The Department of Homeland Security said Sunday that the State of Georgia had notified the department about the issue but declined to comment further. The Georgia Bureau of Investigation, the state’s independent investigative agency, confirmed on Monday that its Georgia Cyber Crime Center will conduct an investigation at the request of Kemp’s office.
"The Democratic Party of Georgia will stop at nothing to regain relevance and power in our state," Ryan Mahoney, Communications Director for Kemp’s gubernatorial campaign, said on Sunday. "In an act of desperation, the Democrats tried to expose vulnerabilities in Georgia's voter registration system. This was a 4th quarter Hail Mary pass that was intercepted in the end zone. Thanks to the systems and protocols established by Secretary of State Brian Kemp, no personal information was breached. These power-hungry radicals should be held accountable for their criminal behavior.”
The Georgia Democratic Party took to Twitter on Monday to join Abrams in accusing Kemp of misusing his office to influence the election, tweeting “Kemp is trying to play Georgians and the media for fools, just hours before polls open. Won’t work. Georgians can fight back against abuses of power by VOTING tomorrow.”
On Sunday, the party published two emails that purport to show a private individual who pointed out potential vulnerabilities in websites used by Georgia residents to print sample ballots and registration information that the individual suggested could allow a hacker to steal or manipulate registration information.
David Cross, an attorney who has been involved in cybersecurity-related litigation against the Georgia Secretary of State’s office, told ABC News he was also alerted to the potential vulnerabilities by that same individual. He said he contacted the FBI – in an email exchange he shared with ABC News -- and an outside counsel for Kemp on Saturday.
Election security researcher Matt Bernhard, a post-graduate student at the University of Michigan who serves as a security expert in Cross’s lawsuit against the Secretary of State’s office, told ABC News he was asked by someone involved in that litigation to review the claims. He said he verified them as far as he could by analyzing the sites’ source code, but Bernard and other cyber security experts told ABC News that fully verifying the issues would have required potentially running afoul of the law.
Bernhard outlined his findings in a blog post, which was reviewed by Adam Meyers, vice president of intelligence at the cybersecurity firm Crowdstrike, at ABC News’ request. Meyers told ABC News the vulnerabilities as described were potentially serious.
“There are huge issues here,” Meyers said, both because of the potential for political mischief and for cyber-criminal groups who specialize in stealing and selling personal information.
On Monday afternoon, however, Candice Broce, a spokesperson for the Georgia Secretary of State, said that no vulnerabilities had been found, telling ABC News in a statement that the “allegations of vulnerabilities could not be substantiated by our cyber security team.”
“To be clear, those webpages are not linked to a location containing files with confidential or sensitive information,” Broce said in a follow-up statement.
This is not the first time Kemp has raised allegations about attempts to infiltrate the secretary of state’s computer network. Just days after the 2016 presidential election, Kemp requested a federal investigation by the Department of Homeland Security, citing 10 suspected unauthorized attempts by DHS personnel to penetrate the state’s firewall.
A report from the Inspector General of DHS released in July 2017, concluded that allegations were unsubstantiated. The investigation determined that the activity flagged by Kemp was the “result of normal and automatic computer message exchanges,” and that there were no unauthorized intrusion attempts.
The race between Kemp and Abrams, who could become the nation’s first African-American woman to be elected governor, has been close and contentious. As of Monday afternoon, FiveThirtyEight’s gubernatorial forecast showed Abrams and Kemp locked in a tight contest, with Kemp holding on to a very small advantage.
David Cross's interview was featured in the Monday, Nov. 5, 2018, episode of ABC News' daily news podcast, "Start Here."
"Start Here" is the flagship daily news podcast from ABC News -- a straightforward look at the day's top stories in 20 minutes. Listen for free every weekday on Apple Podcasts, Google Podcasts, iHeartRadio, Spotify, Stitcher, TuneIn, or the ABC News app. On Amazon Echo, ask Alexa to "Play 'Start Here'" or add the "Start Here" skill to your Flash Briefing. Follow @StartHereABC on Twitter, Facebook and Instagram for exclusive content, show updates and more.