COLORADO, USA — Former president Donald Trump's campaign demanded Wednesday that Colorado Secretary of State Jena Griswold (D) temporarily halt the processing of mail-in ballots and re-secure voting systems in counties impacted by her office's leak of voting system passwords online.
The Colorado secretary of state’s office inadvertently posted a spreadsheet to its website with a hidden tab that included voting system passwords months ago but said they were recently made aware of the mistake. The passwords, known as BIOS passwords, are needed to configure system settings. They are one part of the security process for Colorado’s voting machines.
In its letter to Griswold, the Trump campaign noted that it was "particularly concerned" because her office was aware of the leak as early as Oct. 24 but did not notify the public.
The public became aware of the leak on Tuesday morning, when the Colorado Republican Party vice chair shared the hidden tab discovery in a mass email.
The Trump campaign demanded that the secretary of state's office identify any affected counties, notify the counties and direct them to perform a new Logic and Accuracy Test for their election equipment.
The campaign demanded that those counties stop processing mail ballots and prepare to rescan all mail-in ballots already scanned, calling the steps "the only way to guarantee that the election equipment in those counties...are secure."
In an interview with 9NEWS, Griswold maintained that the leak is not a security threat.
"To be very clear, we do not see this as a full security threat to the state. This is not a security threat," Griswold told 9NEWS Tuesday. "There are two passwords to get into any voting component, along with physical access. We have layers of security, and out of just an abundance of caution, have staff in the field changing passwords, looking at access logs and looking at the entire situation and continuing our investigation."
Griswold did not notify county clerks the passwords had been posted until the information became public Tuesday. She argued this was not "not disclosing" the issue.
Per the Trump campaign's letter, Trump attorney Scott Gessler gave Griswold until 10 a.m. Oct. 31 to confirm her office would take the steps they outlined.
On Thursday night, the Secretary of State's Office responded to Gessler and the Trump campaign, as well as a letter from the state Republican Party.
In that letter, Griswold's office reiterated that they "quickly determined that the spreadsheet presented no immediate threat to the security of Colorado’s voting systems or the 2024 General Election."
However, the letter did say the state is taking action for additional security checks and changing passwords to voting systems in 31 counties where that equipment was still using the exposed passwords.
Earlier Thursday, Gov. Jared Polis announced that the state's executive branch was providing the Secretary of State's Office with human capital, air and ground assets, and other logistical support to complete changes to all the impacted passwords and review logs to ensure that no tampering occurred.
As part of this, Griswold would deputize certain state employees with cybersecurity and technology expertise who have undergone appropriate background checks and training. These employees would enter badged areas in pairs to update the passwords for election equipment in counties and would be directly observed by local elections officials from the county clerk’s office.
On Friday morning, Polis and Griswold said in a news release that all passwords were updated and security of affected voting systems was verified.
Polis told 9NEWS if someone doubts the election results, they can pay for a recount, which is allowed under state law.
As for instilling confidence in voters for the integrity of Colorado's elections, Polis said the situation requires "radical transparency."
"Look, I can speak for myself. When we find something out, we make it public," Polis told 9NEWS. "I believe that this situation calls for 'radical transparency.' Exactly who knew what when, who did what when. Be fully transparent."
The state's goal is to complete the password updates by Thursday evening and verify the security of the voting components, leveraging resources from across various departments and coordinating with the secretary of state, local and federal partners.
"What's important here is public confidence," Polis said. "So, transparency is part of building the public confidence, as is accountability, again, 'how did this happen, what happened?' How do we make sure this never happens again but also other errors like this don't happen again."