A hacker got hold of a secret password used by ElectSure Learning, the Tampa-based company that runs training and scheduling software for Wake County's roughly 9,000 poll workers, prompting the county to cut off the vendor's access and warn precinct officials to watch out for suspicious emails ahead of the midterms. County officials say no voter registration records, ballots, voting machines, or vote-counting systems were touched, but names and email addresses tied to precinct officials may have been exposed.
ElectSure first reported the possible cyberattack to Wake County, and the county revoked the vendor's access to its precinct official database on August 7, according to WRAL. The North Carolina State Board of Elections was notified on August 13 and has been assisting Wake County, spokesperson Jason Tyson said, per the same report. Hacker access to the system remains under investigation, and it is still unclear whether anyone actually obtained poll workers' information.
What ElectSure Did and Didn't Have Access To
ElectSure Learning, founded in 2020, supplies turnkey online training platforms to election jurisdictions across the country, and it is listed as a member of the Election Infrastructure Subsector Sector Coordinating Council that works alongside the Cybersecurity and Infrastructure Security Agency on federal cyber defense. In Wake County, the company had read-only access to a database containing precinct officials' names, email addresses, and training and assignment information, WRAL reports.
What the vendor did not have access to matters just as much. According to county officials cited by WRAL, ElectSure could not see Social Security numbers, dates of birth, financial information, or other sensitive personal data, and no confidential or sensitive information was accessible through the platform. Wake County Elections Director Olivia McCall said the hacker may not have compromised anything at all, and the worst-case scenario the county has identified is that someone obtained poll workers' names and email addresses.
Why an Air-Gapped Voting System Still Poses Risk
The breach highlights a structural feature of election security: voting machines and vote-counting equipment are required to remain air-gapped from external networks, physically isolated from web-based administrative tools like training portals. That isolation is why officials say voter registration records, ballots, and voting equipment were not affected by the ElectSure incident, and why Wake County's voting equipment cannot be accessed through the internet at all.
Still, exposed contact information carries its own danger. Federal advisories from CISA and the Center for Internet Security identify email phishing as the top cyber threat vector aimed at election offices, warning that stolen contact lists let attackers send targeted spear-phishing messages or impersonate officials. Obtained names and email addresses could be used to send phishing messages to Wake County's poll worker pool, which is why officials have asked precinct workers to be cautious about unexpected emails and links.
County Response and What Comes Next
Wake County Board of Elections has suspended use of ElectSure's software entirely and says it will no longer use the platform going forward, instead planning a different process to register and train precinct officials. It remains unclear whether other North Carolina counties that also use ElectSure were affected, state officials told WRAL.
North Carolina's response fits a broader state framework built after prior incidents. The state's Joint Cybersecurity Task Force, formed under Executive Order 254 in March 2022, brings together the N.C. Department of Information Technology, N.C. Emergency Management, and the N.C. National Guard to help local governments respond to network intrusions, according to the N.C. Department of Public Safety. State law also requires public agencies to report significant cybersecurity incidents and notify individuals when personal data is compromised, and North Carolina policy bars state and local government bodies from paying ransoms or negotiating with extortionists.
A Pattern of Vendor-Side Breaches in Wake County
This is not the first time a third-party vendor has exposed Wake County institutions to a data breach. In May, Wake County Public Schools notified families of a breach involving Canvas maker Instructure that exposed staff and student records, forcing the district to temporarily disable access while it reviewed the vendor's data security, per Carolina Public Press. Wake County has also seen this play out at the municipal level: in 2024, the Town of Apex suffered a cyberattack affecting roughly 22,000 people, which Apex rebuilt its network from scratch to resolve, using a court order to retrieve stolen data without paying a ransom.
Public trust in North Carolina elections was already uneven before this incident surfaced. An April poll by Opinion Diagnostics, a firm run by advisers to Republican politicians in Massachusetts and North Carolina, found just 15% of North Carolinians believed elections were becoming more trustworthy, while 44% saw no change and 31.4% said trust was declining. North Carolina election officials are working to strengthen both election security and public confidence, a task the ElectSure incident has now added to directly.
Wake County is the state's most populous county, with more than 1.12 million residents and an election infrastructure managing hundreds of thousands of registered voters, making its pool of 9,000 precinct workers essential to running countywide contests. County officials continue to stress that the incident, whatever its ultimate scope, has not touched the machinery that actually counts votes.
