{"slug": "an-ai-chatbot-can-now-unmask-secret-ballots-in-georgia-s-voting-system", "title": "An AI Chatbot Can Now Unmask Secret Ballots in Georgia's Voting System", "summary": "Princeton researcher Max Springer used a publicly available AI assistant to reverse the digital shuffling of Georgia's electronic ballot records and reconstruct the order of 1.52 million ballots, or 98.9% of in-person ballots in the counties he examined, according to an Associated Press report by Kate Brumback published September 13. The flaw, first flagged in 2022 by University of Michigan security researcher J. Alex Halderman and his team, does not change votes or cast doubt on totals but threatens the secret ballot; Georgia has not applied the software update other jurisdictions used and its open records law allowed Springer to obtain early voting lists, cast-vote record files, scanner audit logs and precinct check-in records. Springer detailed the work in a Princeton Center for Information Technology Policy post.", "body_md": "*A Princeton researcher used a publicly available AI assistant to reverse the digital shuffling that's supposed to keep Georgia's ballots anonymous, then paired the result with public records to narrow voters into likely matches.*\n\nGeorgia's statewide voting system has a known flaw that can let someone unscramble randomized digital ballot images and match them back to the people who cast them. According to an Associated Press report by Kate Brumback, published September 13, the weakness doesn't change votes or cast doubt on totals. It does something different. It threatens the secret ballot.\n\nThe flaw itself isn't new. University of Michigan security researcher J. Alex Halderman and his team flagged it in 2022. What's new is who can exploit it, and how easily. Princeton researcher Max Springer gave a publicly available AI assistant the earlier research, then watched it reverse the shuffling of electronic ballot records from Georgia's May primary and tell him what other records it needed to link ballots to names.\n\nHe got those records the normal way: public records requests for early voting lists and cast-vote record files. The AI assistant then created what Springer called buckets of ballots and potential voters. In some cases, more public records, including scanner audit logs and precinct check-in records, narrowed those buckets further.\n\nThat's the whole story of how AI is changing security work. A weakness that once required specialists to understand is now something a determined person can hand to a chatbot and chase through public documents.\n\n[Jacob Coxon Says His Former Anthropic Colleagues Are Genuinely Frightened of AI](https://startupfortune.com/jacob-coxon-says-his-former-anthropic-colleagues-are-genuinely-frightened-of-ai/)\n\nEx-Anthropic researcher Jacob Coxon told the BBC's Laura Kuenssberg that AI safety staff are genuinely frightened and privately planning around a two-year horizon. His account lands days after Anthropic CEO Dario Amodei publicly called for slowing AI development, though critics say the doom talk conveniently serves Anthropic's push for regulation. - [how to understand AI safety concerns from researchers](https://startupfortune.com/jacob-coxon-says-his-former-anthropic-colleagues-are-genuinely-frightened-of-ai/) - [what do anthropic researchers think about AI risk](https://startupfortune.com/jacob-coxon-says-his-former-anthropic-colleagues-are-genuinely-frightened-of-ai/)\n\n## Old machines, no patch\n\nGeorgia voters use touchscreen ballot-marking devices that print paper ballots, which voters then feed into scanners. Those scanners generate cast-vote records and ballot image files. The records are meant to be randomized before release, but the 2022 research showed that the randomization could be reversed because of the way the system labeled ballots.\n\nOther jurisdictions use the same equipment, originally made by Dominion Voting Systems, which has since been sold and renamed Liberty Vote. Many have handled the problem in one of two ways: they applied a software update, or they limited release of the records needed to exploit the flaw. Georgia has not applied the update. It also has an open records law that has allowed access to key files.\n\nThat combination matters. Georgia isn't dealing with a theoretical hole in an old report. Springer tested the method against real data from the May 2026 primary. In his Princeton Center for Information Technology Policy post, he said he reconstructed the order of 1.52 million ballots, or 98.9% of in-person ballots in the counties he examined.\n\nYou don't need to change a vote to damage an election. If a ballot can be traced back to a voter, pressure starts to have proof. Vote-buying starts to have receipts. A secret ballot becomes a promise the system can't fully keep.\n\n## Officials shrug, experts don't\n\nGeorgia's constitution says elections shall be by secret ballot, and state law requires voting machines to protect voters so no one can know another elector's votes. Gabriel Sterling, special projects manager in the Secretary of State's office, pushed back in the AP report, saying mail ballots would be an easier route for vote-buying or coercion and campaigns could spend less money by targeting voters through outreach instead of trying to de-anonymize ballot records.\n\nThat answer misses the sharper point. A hard exploit becoming easy is itself a change in risk. Halderman told AP the case is a wake-up call because AI can now do technical work that once sat beyond ordinary reach. Mark Lindeman of Verified Voting called it embarrassing that the vulnerability remains possible, and he said Georgia's statewide use of the system, paired with public access to key records, creates a perfect storm.\n\nState Election Board member Salleigh Grubbs tried to force action sooner. During the board's August meeting, she proposed a rule requiring the Secretary of State's office to apply the manufacturer-recommended software update by Tuesday. The board rejected it after an agency lawyer argued that the update had not been certified by the secretary of state, would take months to carry out, and lacked funding from the legislature.\n\n[Trump says he has no concerns AI could cause human extinction](https://startupfortune.com/trump-says-he-has-no-concerns-ai-could-cause-human-extinction/)\n\nPresident Trump told reporters leaving Dallas he has 'no concerns' about AI causing human extinction, saying his real worry is losing the AI race to China. The comments come days after an Anthropic researcher resigned warning the industry is 'gambling with our lives,' backed by the company's own head of alignment. - [can AI cause human extinction concerns](https://startupfortune.com/trump-says-he-has-no-concerns-ai-could-cause-human-extinction/) - [Trump's stance on artificial intelligence risks](https://startupfortune.com/trump-says-he-has-no-concerns-ai-could-cause-human-extinction/)\n\nFrankly, that is a thin place to leave voters before November. Marilyn Marks is executive director of the Coalition for Good Governance. Withholding records isn't the answer, she told AP. Georgia should stop recording the identifiers that can trace ballots back to voters. She also pointed to an interim fix: collect ballots in locked boxes at precincts, shuffle them, and scan them later at a central tabulating center.\n\nThe Secretary of State's office has told county election officials to refer certain open records requests to the state. The state says it will redact some information and refuse to release other documents. Sterling also said the office is working with a vendor to scramble the original order of ballot images and cast-vote records before they are made public. That may reduce exposure. It doesn't explain why the software update still isn't in place.\n\nUntil Georgia fixes the system itself, voters are left with an awkward bargain. The law promises secrecy, while the machinery and records around it have already shown a path around that promise.\n\n**Also read:** [A Solo Developer Used GPT-6 Astra to Code a Finished Playable Game](https://startupfortune.com/a-solo-developer-used-gpt-6-astra-to-code-a-finished-playable-game/) • [AI Agent Tool Call Confirmation Fatigue Is Quietly Breaking Startup Security](https://startupfortune.com/ai-agent-tool-call-confirmation-fatigue-is-quietly-breaking-startup-security/) • [Google Moves Its AI Safety Team Into the Division That Runs Its Lobbying](https://startupfortune.com/google-moves-its-ai-safety-team-into-the-division-that-runs-its-lobbying/)\n\n*This article is posted in [AI News](https://startupfortune.com/category/ai/), check it out for more related stories.*\n\n## Join the discussion\n\n[Open in the community →](/community/)\n\nAlmost there. Sign in and your reply posts straight away.", "url": "https://wpnews.pro/news/an-ai-chatbot-can-now-unmask-secret-ballots-in-georgia-s-voting-system", "canonical_source": "https://startupfortune.com/an-ai-chatbot-can-now-unmask-secret-ballots-in-georgias-voting-system/", "published_at": "2026-09-13 15:33:50+00:00", "updated_at": "2026-09-13 15:44:11.176018+00:00", "lang": "en", "topics": ["ai-safety", "ai-policy", "artificial-intelligence"], "entities": ["Max Springer", "Princeton University", "Georgia", "J. Alex Halderman", "University of Michigan", "Associated Press", "Kate Brumback", "Dominion Voting Systems"], "alternates": {"html": "https://wpnews.pro/news/an-ai-chatbot-can-now-unmask-secret-ballots-in-georgia-s-voting-system", "markdown": "https://wpnews.pro/news/an-ai-chatbot-can-now-unmask-secret-ballots-in-georgia-s-voting-system.md", "text": "https://wpnews.pro/news/an-ai-chatbot-can-now-unmask-secret-ballots-in-georgia-s-voting-system.txt", "jsonld": "https://wpnews.pro/news/an-ai-chatbot-can-now-unmask-secret-ballots-in-georgia-s-voting-system.jsonld"}}