A commercially available AI coding agent costing $20 de-anonymized 1.52 million Georgia ballots from the May 2026 primary, matching 98.9% of in-person ballots across 114 counties and triggering emergency action from the state's top election official1.
Max Springer, a postdoctoral research fellow at Princeton's Center for Information Technology Policy, carried out the demonstration in August 2026. He pointed the agent at a 2024 academic paper detailing a known flaw in Dominion ImageCast Precinct and Dominion ImageCast Evolution scanners, which assign deterministic, non-random unique identifiers to electronic ballot records. The agent produced a functional exploitation pipeline within hours by cross-referencing public cast-vote-record files with early-voting sign-in lists. The solution required no insider access, network exploitation, or proprietary data.
A patch certified but undeployed
The underlying vulnerability was disclosed in 2022. A software fix, version 5.17, was certified by the Election Assistance Commission in March 2023, yet it remained largely undeployed in Georgia by August 2026. Twenty-one states reportedly utilize the affected scanners2. Funding for a comprehensive Dominion software overhaul has stalled in the state legislature.
Secretary of State Brad Raffensperger ordered the redaction of ballot ID numbers in public records and instructed counties to shuffle ballots before printing. That directive triggered a contentious emergency meeting of the Georgia State Election Board on October 1, 2026. The board passed a 3-2 resolution urging the Secretary of State to update the voting machines. Board member Salleigh Grubbs argued that the redaction order violated state law enacted after the 2020 election. Grubbs also proposed that voters place ballots in secure boxes for later scanning, but the proposal was unsuccessful.
Competing assessments
Gabriel Sterling of the Secretary of State's office pushed back on the severity of the findings, citing lingering uncertainty in any matching attempt. J. Alex Halderman called the incident a "wake-up call about how easily technical flaws can be weaponized when AI handles the heavy lifting". Ben Adida of VotingWorks said the Secretary of State's office had previously addressed security concerns.
The Federal Trade Commission has reportedly begun to scrutinize the broader agent liability gap exposed by the episode. Early voting for the November 2026 midterms begins on October 13.
ANALYSIS The episode illustrates how AI agents compress the skill and time required to operationalize known but unpatched vulnerabilities: a single researcher, with no specialized election-security background indicated in the reporting, replicated in hours what previously demanded bespoke scripting and domain expertise. The three-year gap between the Election Assistance Commission's certification of a fix and its absence from Georgia's machines turned a theoretical risk into a live ballot-privacy breach once an AI agent removed the implementation barrier.