Cyberattack strikes Coffee County, the site of a 2021 election breach

Georgia election officials cut county’s connection to voting systems
The alleged conspiracy to overthrow the 2020 presidential election stretched from Donald Trump’s lawyers in Washington to his sympathizers in South Georgia’s Coffee County, resulting in charges against four of those involving the tampering of voting software and ballots. (Hyosub Shin / Hyosub.Shin@ajc.com)

Credit: HYOSUB SHIN / AJC

Credit: HYOSUB SHIN / AJC

The alleged conspiracy to overthrow the 2020 presidential election stretched from Donald Trump’s lawyers in Washington to his sympathizers in South Georgia’s Coffee County, resulting in charges against four of those involving the tampering of voting software and ballots. (Hyosub Shin / Hyosub.Shin@ajc.com)

The Georgia county where tech experts copied the state’s election software after the 2020 election was hit by a cyberattack this month.

The secretary of state’s office confirmed the Coffee County cyberattack late Friday and severed the county’s connection to Georgia’s voter registration system as a precaution.

“We took immediate action weeks ago, before Coffee County would acknowledge the issue, and cut them off from all of our systems immediately” on April 16, said Mike Hassinger, a spokesman for the secretary of state’s office.

It’s unclear whether the intrusion was a ransomware attack similar to an incident earlier this year in Fulton County, where hackers took information from government computers and demanded a payment. Fulton officials have said they refused to pay the ransom.

The incident was first reported by CyberScoop, a cybersecurity publication.

The Coffee County Board of Commissioners said in a statement that the U.S. Cybersecurity and Infrastructure Agency notified it of “unusual cyber-activity” on April 15.

Credit: Coffee County security video

icon to expand image

Credit: Coffee County security video

“Upon examination, Coffee County’s IT infrastructure showed no evidence of exfiltration of data/files, but did indicate cyber-activity by an unknown malicious actor,” the board said. “Coffee County has informed federal authorities of the incident and is working diligently with these agencies to identify the origin and possible identity of the persons responsible.”

Coffee County is where supporters of former President Donald Trump copied Georgia’s statewide voting system software and other confidential data in January 2021.

A nonprofit organization run by attorney Sidney Powell, an ally of Trump, paid $26,000 for computer analysts to copy the information on Jan. 7, 2021, the day after a riot at the U.S. Capitol.

Powell and a Scott Hall, a bail bondsman who participated in the breach, have pleaded guilty to charges related to the incident as part of the Fulton County election interference case against Trump.

Two other Coffee County defendants, Republican Party official Cathy Latham and former county elections supervisor Misty Hampton, are also facing criminal charges.

ransomware

Credit: ArLuther Lee

icon to expand image

Credit: ArLuther Lee