Wake County suspended an election-worker software vendor after a possible cyberattack exposed access credentials. The vendor had read-only access to names, emails, training and assignment information for a pool of about 9,000 precinct officials. ElectSure notified Wake County of a compromise. A hacker obtained a secret password used by the vendor. The checked account from WRAL supports those points through reporting, records, or clearly attributed statements. Claims by governments, companies, police or participants remain identified as claims unless the source record independently verifies them.
The platform supported registration and training for about 9,000 election workers. Its database access was read-only and excluded Social Security numbers, birth dates and financial data. Wake County revoked access and ended use of the platform. County officials reported no evidence that ballots or vote-counting systems were touched. Together, those details establish what changed by the edition deadline. They do not convert an early estimate into a final count or a stated intention into a completed result. Later records may refine dates and quantities without erasing the confirmed core.
Third-party vendors can create security exposure without connecting to ballot systems. Names and email addresses can still enable targeted phishing. Election-security reporting must distinguish evidence from speculation to protect public confidence. This context explains the institutions, systems and constraints surrounding wake county drops election vendor after possible cyberattack. It also keeps causation separate from correlation and prevents a broad trend from being used as unsupported proof about one event.
Investigators had not determined whether poll-worker data was actually taken or whether other counties were affected. The next documentary tests are the vendor's forensic report and state review and notice and phishing guidance for affected election workers. Until those records appear, the responsible account is bounded: report the verified development, preserve attribution, state the unknowns and avoid filling gaps with a plausible but unproven narrative.