FBI refuses to tell Florida voters whether their information was targeted by Russia hackers in 2016 election

The governor knows. The state’s congressional delegation knows. The FBI knows. The Russian hackers certainly must know.

Almost everyone, it seems, has been told which Florida voter registration systems were breached during the 2016 presidential election — except for the voters whose information was targeted.

Elected leaders in Washington and Tallahassee want to tell them but say they cannot. The FBI has kept the information classified, refusing to publicly identify the two counties where Russian hackers had access to voter data that could have allowed them to wreak havoc for voters on election day.

On Thursday, the FBI faced a torrent of bipartisan fury from Republican and Democratic lawmakers in Florida, who, one after another, denounced the federal agency’s lack of transparency, calling it unacceptable that it has taken three years for the authorities to reveal to them which counties were hacked.

“I don’t know who the hell they think they are to not share that information with us,” representative Matt Gaetz, a Republican from the Panhandle, said in a news conference on Thursday after the Florida delegation met behind closed doors in the Capitol with officials from the FBI and the Department of Homeland Security.

Now that they know, Florida officials are prohibited from sharing the details with voters.

Adding to the lawmakers’ anger were worries about what the hackers did once they gained access to the voter rolls. FBI officials told lawmakers that they had no evidence any data had been altered, but they could not say “with certainty” that no manipulation had occurred, said representative Debbie Mucarsel-Powell, a Miami Democrat.

The voter registration systems are separate from voter tabulation systems, which officials say were untouched. Voter rolls are public information in Florida, but access to the registration data could have allowed the hackers to delete or add voters, cancel their mail-in ballots or alter their party affiliation.

“We still have a lot of questions,” Ms Mucarsel-Powell said.

Tucked in the Mueller report last month was confirmation that the FBI had determined that a Russian military intelligence unit known as the GRU had breached “at least one Florida county government” during the 2016 election.

That revelation prompted members of Congress to request Thursday’s briefing. Its importance only grew after Governor Ron DeSantis, a Republican, disclosed on Tuesday, after his own briefing, that two counties had been hacked. The governor added a note of exasperation that the FBI had required him to sign a nondisclosure agreement to receive the classified information.

Identifying the two counties has become Florida’s political parlour game du jour, with the state’s 67 elections offices offering varying degrees of denials that they were breached to local and national news outlets. Lawmakers said on Thursday that the FBI had told them the intrusion came through a spear-phishing email, as elections officials had earlier suggested.

FBI officials said the names of the hacked counties should remain classified because identifying them could tip off the Russians to law enforcement sources and methods. That argument did little to quell the politicians’ frustrations, given that the Mueller report has been public for weeks, and now the governor and almost every federal officeholder in the state knows the names of the two counties.

“The Russians know we know,” said representative Stephanie Murphy, a Democrat from the Orlando area. “The only people who don’t know are the American people.”

In a statement this week, the FBI said that it continued to work with local, state and federal officials “to proactively share information in a concerted effort to protect elections networks in Florida, and across the country, from adversary activity.”

The FBI notified the two counties of the breach as part of the agency’s victim notification protocol, several lawmakers said. As part of that protocol, the FBI does not publicly identify victims, to maintain productive working relationships with them.

Without knowing which counties were breached, voters can do little to hold elections supervisors (who are elected officials in all but one Florida county) accountable for taking the necessary steps to prevent a similar hacking in the future, lawmakers said.

The New York Times