Platinum Technology Resource Cybersecurity Incident Investigation

Recently, it was reported by an online source that Platinum had experienced a cybersecurity incident impacting the privacy of its data. According to this source, a cybersecurity researcher discovered 13 non-password-protected databases that contained millions of records belonging to Platinum.¹ The exposed databases contained 4.6 million documents with lists of available or active voters, absentees, early mail-in voting records, and duplicate voters.¹ Other documents marked as “voter records” contained far more potentially sensitive personal information, including full name, physical address, some email addresses, date of birth, Social Security numbers (full and partial) or driver’s license number, and historical voting records.¹ The databases also contained copies of voter registration applications, death certificates, and records of change of address, jurisdiction, or state.¹ Additionally, there were candidate documents (such as statements of candidacy) detailing contact information, as well as petitions with voter signatures, addresses, candidate loyalty oath, economic interest, and supporting documentation.¹ Documents marked as official ballot templates for primaries and general elections were similarly available.¹

According to the source, after discovering the exposed information, the researcher attempted to contact Platinum but received no response. Upon further investigation, the researcher determined that another company, Magenium Solutions, was responsible for technical support for Platinum. During a phone call to Magenium, the researcher was told that Magenium would look into the issue and inform Platinum.¹ A day later public access to the databases was restricted.¹ At this time, it is not known how long these documents were exposed to the public or if anyone else may have accessed the database.¹ As of September 19, 2024, Platinum has not publicly acknowledged the data exposure or confirmed whether the incident resulted in a data breach.