Colorado Secretary of State Exposes 130,000 Confidential Voter Records

The Colorado Secretary of State’s Office exposed the home addresses, birth years, and party affiliations of more than 130,000 confidential voters.

The data sat on a public web tool for roughly four days before anyone noticed. Secretary of State Jena Griswold confirmed the breach on Tuesday, stating that a routine update to the "Find My Voter Registration Tool" on August 14 triggered the error. The tool, intended for standard voters to check their status, began displaying profiles belonging to individuals who had specifically requested confidentiality.

Griswold said the issue was caught by a staff member who is herself a confidential voter. She noticed her own profile was visible to the public. The office fixed the glitch within an hour of discovery. An investigation is underway.

The exposed details included full name, birth year, party affiliation, and residential address. There are more than 133,000 confidential voters in Colorado. These individuals opt for confidentiality to protect their safety or privacy. Their addresses are not meant to appear on the public voter file.

Griswold told FOX 31 that 59 confidential profiles were accessed during the window of exposure. As of Friday evening, her office had contacted 54 of them. "The majority of voters said they had initiated the changes," Griswold said. "We believe that the majority, but not all, did initiate those changes from the conversation with voters."

That distinction matters. If a voter didn’t click anything, their data was still out there for anyone with internet access to see.

The office notified the County Clerks Association on Monday evening. Clerks in affected counties received phone calls to identify local voters who might have been exposed. Griswold acknowledged that a quality assurance process exists, but admitted the mistake slipped past a third review. She expressed regret in a press release: "My staff identified this issue, and we immediately fixed it and are continuing outreach to affected voters."

This isn’t the first time a technical hiccup has left voter data exposed. In October 2024, the Secretary of State’s Office revealed that a spreadsheet containing partial passwords for voting system components was hidden in a tab on its own website. No major breach resulted from that incident, but it highlighted a pattern of loose security protocols in the office’s digital infrastructure.

Candidates for Secretary of State are already weighing in on how to prevent a repeat. Amanda Gonzalez, the Democratic nominee, told FOX 31 that security must be the top priority. "We want to test, double test, triple test any change we make to any election system," she said.

James Wiley, the Republican candidate, pushed for external scrutiny. "We need a true third-party investigation into what happened here," Wiley said. He asked whether the failure lay with the vendor, the technology itself, or a repeat of administrative mishaps within Griswold’s office.

The short version: A software update broke a privacy shield for 130,000 people. The fix took an hour. The investigation is just starting. For the 54 voters who have been called, the question isn’t whether their data was seen. It’s who saw it, and what they did with it.