Security researchers warn that rapid advances in artificial intelligence are exposing a vulnerability in Georgia's voting system that could allow voters to be matched to their ballots after casting. The issue, known for several years, has gained renewed attention as AI tools make it easier to exploit technical flaws in election data. Georgia is the only state using the affected Dominion Voting Systems equipment statewide, a situation researchers describe as a "perfect storm" due to the state's open records laws and its status as a key political battleground.
What the Right Is Saying
State election officials and some board members contend that existing legal protections and practical realities mitigate the risk. Gabriel Sterling, special projects manager in the secretary of state's office, pushed back on concerns about vote-buying or coercion, noting that mail ballots would be easier to manipulate for those purposes and that campaigns might find it cheaper to target voter profiles than to identify specific ballot matches. State Election Board member Sara Tindall Ghazal, who voted against a proposal to mandate the software update, expressed frustration but emphasized that revealing how someone voted is a felony. "I hate the fact that it's even physically possible, but there are very, very severe penalties if somebody were to actually do this," Ghazal said. An agency lawyer argued that the update had not been certified by the secretary of state, implementation would take months, and the legislature had not provided necessary funding.
What the Left Is Saying
Election security advocates and researchers argue that the state's failure to apply a software update recommended by the manufacturer leaves voters' privacy at risk. Mark Lindeman, policy and strategy director at Verified Voting, stated that the combination of statewide equipment use and public access to records creates a unique vulnerability in Georgia. "It's really embarrassing that this is still a possibility," Lindeman said. Marilyn Marks, executive director of the Coalition for Good Governance, argued that restricting public access to documents is not a sufficient solution. "When Georgia's election records contain identifiers that can be used to trace ballots to voters, the only legal and acceptable answer is to stop recording that information," Marks said. She proposed an interim measure to collect ballots in locked boxes and shuffle them at a central tabulating center to prevent tracing.
What the Numbers Show
The vulnerability involves a flaw in the software used by Dominion Voting Systems, now renamed Liberty Vote. While the system randomizes cast-vote records and electronic ballot images, the flaw allows them to be reordered to match the sequence in which they were cast. Max Springer, a Princeton University researcher, demonstrated that a publicly available AI assistant could reverse this shuffling using data from Georgia's May primary. By combining the AI-processed records with early voting lists and public audit logs obtained through records requests, Springer was able to match most ballots to specific voters. J. Alex Halderman, a voting technology specialist at the University of Michigan who helped expose the flaw, noted that AI "illustrates how much more easily vulnerabilities can be exploited now that AI can do all of the technical work for you." Other jurisdictions using the same equipment have either applied software patches or restricted the release of records necessary to exploit the flaw.
The Bottom Line
Georgia's Constitution mandates that elections be by secret ballot, and state law requires voting machines to permit voting in "absolute secrecy." While the flaw does not allow votes to be changed or cast doubt on election results, it threatens the privacy of the individual voter. The State Election Board rejected a proposal by member Salleigh Grubbs to require the software update by a specific deadline, citing concerns about authority and the short timeline before the November midterms. Grubbs argued that privacy "protects the integrity of the entire election." The secretary of state's office has instructed county officials to redact problematic information in public records and is working with a vendor to scramble the order of ballot images before release. Experts warn that without a technical fix, the reliance on legal penalties and redactions leaves the secret ballot vulnerable to AI-assisted reconstruction.