Fund Meant to Protect Elections May Be Too Little, Too Late

The Election Assistance Commission, the government agency charged with distributing federal funds to support elections, released a report Tuesday detailing how each state plans to spend a total of $380 million in grants allocated to improve and secure their election systems.

But even as intelligence officials warn of foreign interference in the midterm election, much of the money is not expected to be spent before Election Day. The EAC expects states to spend their allotted money within two to three years and gives them until 2023 to finish spending it.

Election experts have expressed skepticism that the money will be enough to modernize election equipment and secure it against state-sponsored cyber threats.

“Nationally, $380 million sounds like a huge amount of money, but in the context of what the election officials are needing to defend, replace, oversee and mitigate, it’s really not that much,” said Tammy Patrick, a senior adviser at the Democracy Fund. Federal funds were allocated to states proportionally, based on each one’s voting-age population.

As California Secretary of State Alex Padilla wrote in an opinion piece for The Hill, the $380 million isn’t even new money: “Remember butterfly ballots and hanging chads? The recent federal appropriation was simply the final disbursement of money originally approved in 2003 to address the debacle of the 2000 presidential election in Florida.”

Nearly two-thirds of the funds are expected to go toward new voting equipment and increased cybersecurity protection, with the remainder going toward updating voter registration systems, implementing postelection audits, improving election-related communication efforts and holding the money in reserve.

Two states — Kansas and Montana — received extensions and have yet to submit plans to the federal government.

Here’s how the other states plan to use their portions of federal funds.

The largest portion of the $380 million will be used to improve election cybersecurity, on items such as training local election officials, purchasing new software, and hiring IT personnel and cybersecurity experts.

Thirty-eight states are allocating funds to cybersecurity. Illinois is one of three — Wisconsin and New York are the others — planning to dedicate all of their allotments to this. In 2016, Russian hackers breached Illinois’ voter registration database and stole the names, emails and partial Social Security numbers of nearly half a million voters.

“We needed to send a strong signal that we were doing everything we could to make sure that nothing like that happened again,” said Matt Dietrich, the public information officer at the Illinois State Board of Elections. Illinois is using part of its $13.2 million share to deploy a “cyber navigator” team to perform on-site risk assessments for local election officials.

Thirty states plan to use grant money to purchase new voting equipment, replacing voting machines that are often decades old. Six of those states — Alaska, Arkansas, Delaware, Louisiana, North Dakota and Pennsylvania — are expected to use all of their funds to replace voting equipment. The last time a new voting system was purchased in Alaska, for example, was in 1998.

Replacing voting equipment, however, is a costly endeavor that often takes years, and few states will make widespread improvements to their machinery before the midterms. “These machines are not something you can just go to Best Buy and fire up,” said Thomas Hicks, the chairman of the EAC. “It’s going to take time to build that infrastructure.”

In the lead-up to the 2016 election, hackers targeted election systems in 21 states and in a small number of cases successfully penetrated voter registration databases. Twenty-six states plan to use grant money to improve their voter registration systems.

Nevada, which is the state allocating the highest percentage of its funding — 65.4 percent — to voter registration systems, plans to implement multi-factor authentication and require training modules for local election officials. The state also plans to add a full-time position to work on implementing these goals.

North Carolina, which plans to spend a higher dollar amount than any other state, will be improving its voter registration system, dedicating more than $5 million to modernize its decentralized, decades-old statewide election information system by late 2019.

Twenty-one states plan to use some portion of the federal grant money to perform election audits, accounting for 5.1 percent of the funds. Oregon is spending the highest percentage of its funds — 52 percent — on election audits, according to an estimate from the EAC.

Depending on how elections are run, audits come in a variety of forms.

Connecticut plans to run forensic audits on all of its election vendors. Maryland plans to perform a software audit to validate the election results after the midterm election. Rhode Island plans to deploy a pilot “risk-limiting audit” for the upcoming election.

Election auditing remains an “evolving” field, Patrick said, and many of the states will follow Rhode Island’s lead in piloting audits.