Massive Data Leak: 8.6 Million North Carolina Voters Exposed

On July 31, 2024, a post on a popular online forum disclosed a significant data leak involving the 2024 North Carolina voter list. This leak exposed sensitive personal information of millions of registered voters in North Carolina. This report details the nature of the leak, the data exposed, potential risks, and preventive measures.

Breach Details

Incident Summary

• Date of Leak: July 31, 2024
• Data Leaked: 2024 Statewide North Carolina Voter List
• Number of Records: 8,695,045
• File Size: 3.73 GB
• Data Posted By: User "OriginalCrazyOldFart" on an online forum

Data Exposed

The leaked dataset includes a comprehensive list of personal voter information:

• County ID: Unique identifier for counties.
• County Description: Names of the counties.
• Voter Registration Number (VRN): Unique identifier for each voter.
• NCID: North Carolina identification number.
• Personal Information:
  • Full name (last name, first name, middle name, name suffix)
  • Full address (residential and mailing)
  • City and state
  • ZIP code
  • Phone number
  • Date of birth
  • Gender
  • Race
• Voter Status: Information about voter registration and status.
• Party Affiliation: Political party preference.
• Precinct Information: Precinct codes and descriptions.
• District Information: Various district abbreviations and descriptions (congressional, judicial, senate, etc.)
• Driver's License Information: Used for ID verification, without showing the license number.

Threat Actor Profile

The data was leaked by a forum user named "OriginalCrazyOldFart," who appears to have previously posted similar information. The user expressed frustration over the lack of response to previous posts, indicating potential motivations driven by a desire for recognition or impact rather than financial gain.

Impact Analysis

Potential Risks

• Identity Theft: Exposure of full names, addresses, phone numbers, and birth dates significantly increases the risk of identity theft and fraud.
• Privacy Violations: Detailed personal information can be exploited for malicious purposes, including harassment or targeting by bad actors.
• Political Manipulation: Exposure of party affiliations and voter registration details can lead to targeted political campaigns and potential voter suppression efforts.

Affected Parties

• Voters: 8,695,045 registered voters in North Carolina.
• Election Integrity: The leak can undermine public trust in the electoral process and raise concerns about the security of voter information.