Voter File Linkage Attacks: How Electoral Records Can Expose Military Families, Enable Biased Hiring, and Fuel Identity Fraud

Public voter registration data, widely available across U.S. states, contains fields that create serious vulnerability when combined with other datasets, according to research presented by Noah M. Kenney, founder of consultancy Digital 520. The core risk lies not in any single dataset, but in the ability to link voter files to social media activity, employment records, and mail routing information to construct detailed profiles of individuals and their households. The research examined counties in Texas and North Carolina, representing different approaches to voter data access restrictions, to demonstrate how seemingly limited public records can be weaponized for targeting, discrimination, or fraud when aggregated with external sources.

The scenarios identified include significant national security exposure. A foreign intelligence service could cross-reference voter records with publicly available social media posts to identify family members of deployed military personnel, potentially enabling targeted influence operations or blackmail. Employers could analyze primary ballot history—a matter of public record in many jurisdictions—to screen job applicants by political affiliation, effectively legalizing discrimination against certain voter demographics. Most directly actionable for criminals, voter file suspense indicators, which flag addresses associated with returned mail, can identify individuals who may be vulnerable to address takeover fraud through bogus change-of-address requests filed with postal services.

The findings underscore a fundamental tension between transparency in electoral administration and the secondary uses enabled by data aggregation. States like Texas restrict certain voter data fields, while others publish more comprehensive information, creating uneven exposure across jurisdictions. Kenney's analysis suggests the risk is structural rather than theoretical: the same characteristics that make voter rolls functional for legitimate electoral purposes—consistency, cross-state availability, and linkage to fixed addresses—also make them reliable anchors for intelligence or commercial exploitation when combined with commercial data brokers, social media APIs, and public records from other domains.