Cybersecurity Threats Curb Online Voting Company Ambitions

The Internet Law Resource Center™ is the complete information solution for practitioners in cyberlaw. Follow the latest developments on ICANN’s gTLD program, keyword advertising, online privacy,...

By Michaela Ross

Sept. 20 — After multiple hacks of Democratic Party e-mail systems and fears of Russian cyber attacks on the U.S. election, paper ballots have taken on an unexpected appeal.

Online voting software companies are convinced convenience-loving Americans will increasingly push to cast their ballots on smartphones and laptops, and they're working to make that happen. But voter advocates, election officials and others are still leery of the risks involved in conducting elections over the all-too-vulnerable internet. For now, fears about voting security may be giving paper-ballot backers the upper hand where it matters most: Americans' confidence in the integrity of the election system.

“In recent weeks, reports on cyber attacks have voters questioning whether their vote will actually count, and that, in my opinion, is more damaging than the potential for hacking,” Louisiana Secretary of State Tom Schedler told a House committee meeting Sept. 13. The best voting system, he said, is the one which “people of that state feel comfortable voting.”

A handful of privately-owned companies developing online voting software worldwide, such as Sctyl, Everyone Counts Inc. and Smartmatic International Corp., say their technology is not only ready but crucial for the U.S. to adopt, as aging voting infrastructure and lost mailed ballots loom as larger security risks.

“Let’s face it, everyone wants to be the next Uber, the next disruptive tech, and we’re doing that with voting,” said Marc Fratello, an executive advisor of Scytl, which has developed online voting software for use by overseas and military voters in France and portions of the population in Switzerland and Norway. The company said it controls 87 percent of the online government voting market.

In the U.S., online voting via e-mail, fax or internet portals is limited mainly to overseas and military voters in 32 states and the District of Columbia. Other countries, such as Estonia, have offered nationwide online voting since 2005. In the U.S., several states, including California and Virginia, have tried to expand online voting without success for reasons including security and implementation concerns.

Vote-by-mail and paper-based systems are on the rise in the U.S. But these methods are far less secure than online voting, Lori Steele Contorer, founder and chief executive officer of Everyone Counts, which develops software for online voting and in-person voting machines, told Bloomberg BNA. Contorer said paper is easy to tamper with or misplace at polling stations, and postal workers do not need security clearances to handle ballots.

“They’re pretending what we do today is secure,” Contorer said about mail-based voting. “There’s not a mission critical process in the world that uses 150-year-old technology.”

Online Voting's Potential

Contorer founded San Diego-based Everyone Counts with $35 million in private investment and has offered services for private sector elections since 1996. The company’s revenue has doubled in each of the last two years, she said, and it has offered online voting to military and overseas voters in states like Alabama and Utah as well as in parts of the U.K. and Australia.

Although select countries have been faster to adopt internet voting technologies than the U.S., the American public—now used to doing everything online from buying a mortgage to renting an apartment—will push for an internet voting system in the coming years, Contorer and other voting software executives told Bloomberg BNA. Recent hacks are a minor setback, they said.

“I think what makes this country great is the use of technology,” said Fratello, whose Barcelona-based Scytl develops online voting software for Alaska, where all absentee voters can cast their votes online. “In the long run, more people will vote because of the access of being able to do this.”

Snail-Mail Inefficiencies

Online voting would increase voter participation by allowing citizens to vote from anywhere, Fratello said. In 2012, 54 percent of potential voters in the U.S. cast ballots, according to the Pew Research Center. Internet-based voting also lets blind or disabled citizens vote independently using voice-recognition software or customized adaptations on home computers.

Online voting could also fix the problem of aging voting machine technology in the U.S. when state and local budgets are strained, Contorer said. Forty-three states are using machines at least 10 years old that are “perilously close” to the end of their lifespans, according to a 2015 study from the Brennan Center for Justice. Replacing polling stations with all-internet voting could cut election costs by 60 percent, Contorer said. Everyone Counts also produces software for in-person polling machines

Companies also touted the security that internet portal voting offers versus ballots lost in the mail.

“This form of remote voting is extremely inefficient, is very, very fragile, many votes get lost,” Antonio Mugica, chief executive officer of London-based Smartmatic, which also manufacturers physical voting machines and other election tech, told Bloomberg BNA.

As many as one in five ballots cast by people who attempted to vote by mail—or 7.6 million votes out of a pool of 190 million registered voters—may have been lost in the 2008 election, according to an election study by Charles Stewart III, a professor at Massachusetts Institute of Technology and a director of the Caltech/MIT Voting Technology Project.

Mugica, whose Smartmartic has average annual revenues of $235 million, said other countries, such as Estonia and parts of Chile using the company’s online software, are leapfrogging the U.S. in fast, accurate voting technology. Although he said he doesn't advocate for exclusively online voting, he believes Americans will see expanded online voting technologies within five to seven years. In March 2016, Smartmatic software was used in Utah's GOP primary election.

“Some so-called experts are creating this cloud of fear of technology, because technology can never be perfect,” he said. “But they’re not comparing it to the current state of affairs, which is very, very bad.”

Old School May Be Better

The U.S. Election Assistance Commission—which develops voluntary guidelines, tests and certifies voting hardware and software—has not certified any internet voting systems. A commission spokesman told Bloomberg BNA it was not clear if an update to its technical guidelines—slated for 2018—would include language about online voting systems. However, the guidelines committee adopted a list of priorities in September 2016 which include discussions on the risks and benefits of electronically returning ballots.

During a House Science, Space and Technology Committee hearing on voting and cybersecurity Sept. 13, several witnesses told lawmakers they didn't support expanding online voting. Moving voters online would increase the risk of cyber attacks, Dan Wallach, electronic voting system specialist and professor of computer science at Rice University, told the committee. Louisiana's Schedler said when people ask him when they will be able to vote on the internet, his answer is, “I hope never.”

Voter advocacy groups, technologists and election officials say online voting software isn’t ready for public use.

“Currently there isn’t a technology that is commercially available today that can protect our election integrity and ballot secrecy—it’s just not there,” said Susannah Goodman, director of Common Cause’s national Voting Integrity Campaign.

The National Institute of Standards and Technology, which works with the U.S. Election Assistance Commission to develop voting tech standards, has questioned the ability of current technology to authenticate voters, audit election results and ensure that the millions of laptops, tablets and smartphones that Americans would vote with could be guaranteed to be free of malware.

Those who support expanding internet voting are “people who have no idea how hostile the internet environment is,” Joseph Lorenzo Hall, chief technologist and director of the Internet Architecture project at the Center for Democracy and Technology, told Bloomberg BNA.

As Scytl, Everyone Counts and Smartmatic have expanded across the globe, studies have called into question the vulnerabilities of internet voting, as well as its ability to increase voter participation. A 2014 internet voting review by British Columbia, Canada, found that factors like a close race are more likely to be the reasons behind a higher turnout, and that internet voting “does not generally cause nonvoters to vote.”

A 2012 study of Everyone Counts online voting software in regions of Australia showed “significant security vulnerabilities and reliability failures,” including misrecorded votes and problems authenticating eligible voters. Inadequate oversight of the system was responsible for some of the blame, the report said, but it did not recommend expanding internet voting to those who can independently use paper ballots. Norway ended its parliamentary election online pilot program using Scytl software in 2014. Government officials said it didn't illustrate significant increases in voter participation, and too little was known about its security mechanisms. Scytl says its software still supports some municipalities for referendums and consultations.

In 2014, University of Michigan researchers said “state-level attackers” and “sophisticated online criminals” could hack Estonia’s country-wide internet voting system—which has since become a joint venture of the country's original operator and Smartmatic. An online voting pilot program in Washington D.C. was scrapped in 2010 after hackers took over the system in a matter of hours.

“Sometimes old school is better, it’s not always the latest technology that works best,” Pamela Smith, president of Verified Voting, a nonprofit organization that advocates for accuracy of elections, told Bloomberg BNA.

Online voting technology should at least be continued to be investigated because Americans have a commitment to allow military and overseas to safely cast ballots, MIT's Stewart told Bloomberg BNA. Currently, it is “virtually impossible” for these voters to receive and return paper ballots in the 45 day window allotted to them, he said, and the EAC has not certified the technology they are now using.

Public Confidence At Issue

The push to expand online voting to a broader population, however, might come down to public confidence in the system, Stewart said.

Election officials in Los Angeles County found lack of voter confidence in online systems trumped the potential benefits of increased convenience and lowered election costs. The country’s largest voting jurisdiction surveyed 3,500 system users while developing a new election system from scratch since 2009. The focus groups found that even younger voters shied away from online voting options, Dean Logan, registrar of the county and president of the California Association of Clerks and Election Officials, told Bloomberg BNA

“The voters themselves are still leery of a pure internet system, they see the stories every day of hacking and company crashes,” Logan told Bloomberg BNA. “They want to know at the end of the day that we can audit and verify the election.”

To contact the reporter on this story: Michaela Ross in Washington at

To contact the editor responsible for this story: Keith Perine at

Copyright © 2016 The Bureau of National Affairs, Inc. All Rights Reserved.