The Trump administration is taking direct aim at California state election officials, issuing grand jury subpoenas to election offices statewide ahead of the final day of voting on Nov. 3.

The investigations, first reported by Bloomberg, center on alleged administration of illegal voting. They are ostensibly tied to demands by the U.S. Justice Department that California and other states use federal voter lists to determine whether a voter is a “potential noncitizen” and should be removed.

The Los Angeles County Registrar of Voters told CyberScoop it received multiple grand jury subpoenas last week related to the investigation. The office called the federal efforts an attempt to intimidate California election officials into accepting federal supremacy over state voter registration authority.

“At every step, the U.S. Department of Justice has taken a confrontational, adversarial approach,” said Los Angeles County Registrar Dean Logan in a statement. “Election officials are acting in accordance with state and federal law. Clear court rulings at both the U.S. District Court level and the Court of Appeals have confirmed that. Threats and intimidation have no place in elections. We will take whatever steps necessary to ensure the safety of our employees and to remain focused on serving the voters of Los Angeles County so they can exercise their voting franchise.”

California Secretary of State Shirley Weber, also reportedly a target of the federal probe, did not respond to a request for comment from CyberScoop.

One California election official, Clint Curtis, the outgoing registrar of voters in Shasta County, endorsed the federal government’s efforts to remove 20,000 voters from California voter rolls. Curtis, whose term ends in January, was previously part of a failed effort to hire Tina Peters, a felon and former Mesa County, Colorado, election clerk to help with the upcoming midterms. Curtis has long believed in widespread election fraud.

He told CyberScoop earlier this year that he believed Shasta County elections in 2024 were plagued by suspicious mail-in ballots, saying they looked, felt and “smelled” different from normal mail ballots.

The U.S. Constitution gives states the authority to administer elections and Congress the power to make election laws, something courts have repeatedly upheld in dozens of legal challenges by the Trump administration.

The Department of Justice has claimed there are at least 20,000 such potential noncitizens on California’s voter lists, while the Department of Homeland Security told CyberScoop the figure could be as many as 190,000. The administration’s data, drawn from public voter lists, federal databases and commercially purchased personal information, has been repeatedly criticized by election officials, voting experts and federal courts as inaccurate and unreliable for determining voter eligibility.

Most people identified as “potential noncitizens” turn out to be naturalized citizens who have since gained voting rights, or the result of state administrative errors that mistakenly registered a small number of ineligible voters. Many of those mistakenly registered never cast a ballot.

State officials have had to defend against attempts at federal coercion as well as third-party activists who are constantly testing and probing election procedures nationwide, sometimes without understanding the laws election officials must follow to verify voters.

On Wednesday, the Hennepin County Attorney’s Office in Minnesota announced felony charges against a pair of right-wing provocateurs, James O’Keefe and Cam Higby, for unlawful voting and identity theft. According to a statement from Hennepin County Attorney Mary Moriarty, the two showed up at various election offices, provided false identities of real voters to election judges, violating state laws against misrepresenting their identity in applying for a ballot.

“Elections are the bedrock of democracy and their protection is one of our highest priorities. Individuals engaging in unlawful conduct related to our elections will be held accountable,” said Moriarty. “Our office has had regular meetings with Hennepin County Elections staff in preparation for both the primary and the general elections this year and we are fully prepared.”

Voting rights and civil society groups are also executing short- and long-term plans to combat potential voter disenfranchisement ahead of Tuesday.

Jessica Ayoub, deputy political director for the Michigan American Civil Liberties Union, said her organization has “never been more prepared” for any expected fights with the federal government or local officials seeking to disenfranchise voters, saying they first began planning for different scenarios 18 months ago, cultivating relationships with hundreds of clerks and election staff across Michigan.

“We’ve gamed out 25 potential scenarios and have rapid response strategies that we’ll deploy to ensure our elections are protected and that our democracy remains intact,” said Ayoub, who cited a desire not to publicize further details ahead of next month.

On Friday, voting rights groups filed a new lawsuit against the Department of Justice and Department of Homeland Security in California, seeking to block the federal government’s efforts against state election officials.

The groups are asking a judge to declare that the federal government has exceeded its constitutional authority and that state officials are legally carrying out their duties. They also want the court to force the departments to contact all California election officials who received subpoenas and tell them the investigation has halted due to a court order.

The post California officials confirm grand jury subpoenas as states, civil groups brace to protect elections from federal encroachment appeared first on CyberScoop.

Intruders used compromised credentials to access an ETS SFTP server, copying records of California students back to 2006.

The post One Compromised Login Exposed Millions of California Students’ Records appeared first on SecurityWeek.

A bipartisan update to a California wiretapping law will eliminate the right to sue over internet-based surveillance, ending a key provision of a 57-year-old wiretapping law. Advocates say it is an overdue correction meant to prevent frivolous lawsuits, while privacy advocates call it a blow to digital consumer privacy rights.

The California Invasion of Privacy Act, originally passed in 1967, requires a court order for wiretapping, eavesdropping, interception or recording of telephone calls. Over time, courts extended the law to cover most internet-based communications as well, such as email and websites.

 In 2015, lawmakers added a provision allowing residents to sue companies for unauthorized use of certain internet-tracking technologies, such as pen registers, with penalties up to $5,000 per violation, plus triple damages. Last week, Calif. Gov. Gavin Newsom signed SB 690 into law, that removes the right of private citizens to sue websites and mobile applications through CIPA.

Newsom and sponsors of the law say the provision has spawned thousands of lawsuits and demand letters against companies for using common internet-tracking tools, like browser cookies and tracker pixels, that can serve legitimate business purposes.

Pen registers and trap-and-trace devices are primarily used by law enforcement agencies—such as local police, the FBI, and the DEA—as well as national security organizations during active criminal and counterintelligence investigations. Authorized through a court order, investigators use pen registers to log outgoing metadata like dialed phone numbers, IP addresses, and timestamps (and trap-and-trace tools for incoming contacts) to map out a suspect’s communication network without listening to the content of the conversations.

“This measure addresses the vexatious use of CIPA lawsuits and demand letters to extract settlement money from small businesses that unwittingly install software on their websites that at times have tracked and shared the information of visitors to the site,” Newsom wrote in his signing statement. “I applaud the authors’ efforts and align myself with the goal of protecting small businesses from overzealous lawsuits based on a statute written without today’s complex technology landscape in mind.”

According to privacy attorneys at law firm Kelley Drye, the addition of the pen register and trap-and-trace statute in 2015 was meant to codify how law enforcement agencies could obtain court orders for phone metadata without violating CIPA.

 Estimates of lawsuits filed under the provision vary widely. The law was widely supported by business groups like the Chamber of Commerce, which was one of hundreds of California groups that signed in support of the legislation last year.

The Alliance for Legal Fairness, a Virginia-based lobbying firm backing the legislative update, tracked approximately 600 lawsuits under the provision in 2025, according to written comments. Today, the group claims that number has “exploded” to more than 4,000.

According to Shruti Bhutani Arora and Christine Mastromonaco, privacy attorneys for the law firm Pillsbury, plaintiffs and prospective litigants have “sent tens of thousands of demand letters to businesses threatening class-action suits under the CIPA’s pen-register and trap-and-trace provisions for using everyday website tools like cookies, analytics software and pixels.”

A report from the California Assembly Committee on Privacy and Consumer Protection characterized the pen register provision as “the poster child for abusive lawsuits.”

“Enterprising plaintiffs’ attorneys have exploited the statute at scale to go after businesses using third-party software to enable advertising on their websites,” the committee wrote. “Because the potential liability can be staggering, businesses generally settle this litigation hastily, encouraging vexatious litigants to continue blasting out demand letters.”

Meanwhile, most major California labor unions opposed the law, as did the American Civil Liberties Union, the Consumer Federation of California, the Privacy Rights Clearinghouse, the Electronic Privacy Information Center and dozens of civil rights groups.

The committee report also noted opposition by “a broad array of privacy, civil society, legal and immigrant rights organizations.”

The Electronic Frontier Foundation in particular has fought the bill for years. Early versions of SB 690 would have exempted other privacy provisions from private lawsuits, but later versions narrowed the exemption to just pen registers and trap-and-trace devices. 

Privacy groups argue the exemption will make it easier for companies to track, collect and sell consumer data to third parties, including data brokers, while making it harder for individuals to take legal action.

Hayley Tsukayama, director of state affairs at EFF, told CyberScoop that the bill “never should have been signed” and that the organization tried and failed to lobby Newsom to veto it.

“CIPA was originally intended to protect personal privacy against the threat of surveillance of private communications,” said Tsukayama in a statement. “But this ‘reform’ harms privacy by making it impossible for ordinary people to sue companies engaged in unlawful metadata surveillance. That’s especially scary as the federal government and other law enforcement agencies seek data from businesses or data brokers to target people based on their political beliefs, religious affiliations, or health decisions.”

California passed major privacy legislation in 2018, standing up the California Privacy Protection Agency to enforce digital privacy laws. It has some of the strictest data broker laws in the nation, requiring brokers to register with the government and provide consumers with easy, universal opt-out options for data collection.

The post Wiretapping change sparks big privacy fight in the Golden State appeared first on CyberScoop.

Tina Peters, the former Mesa County election clerk convicted of seven felonies related to the theft of voting machine software, said Tuesday through her attorney that she won’t accept a formal position overseeing elections in Shasta County, Calif.

Last month, Shasta County registrar of voters Clint Curtis said he intended to hire Peters as assistant registrar to help with the 2026 elections, just months after her prison sentence was cut short by a commutation from Democratic Gov. Jared Polis.

Later, in an interview with CyberScoop, Curtis said he intended to hire Peters as an outside consultant without access to sensitive county election systems. He also said Peters hadn’t yet accepted the position.

At the time, Peters’ attorney, Peter Ticktin, pointed CyberScoop to a statement indicating Peters’ interest in helping the county. On Tuesday, he sent a new statement from Peters that backed away from a formal job role.

“Let me be clear: I have not accepted any position with the Shasta County Elections Office,” the statement said. “There have been discussions about ways I might assist with election integrity and ballot-authenticity efforts, but no formal role has been accepted.”

Peters went on to say her concerns extended beyond Shasta County, to “all 3,114” counties in America and “whether every citizen can trust that our elections are free, fair and transparent.”

The prospective hiring of Peters sparked a backlash, including from Shasta County’s Board of Supervisors, which had just formally censured Curtis for allegedly abusive verbal behavior toward staff, and from Democratic politicians statewide.  Secretary of State Shirley Weber’s office told CyberScoop it was monitoring the county’s  elections for compliance with state and federal laws.

Peters blamed the media for portraying her as a threat to elections, saying she remains “committed to lawful, transparent election integrity efforts that protect the vote of every American citizen.”

“The media continues to mischaracterize my case with words like ‘breaching,’ ‘tampering,’ and similar claims,” Peters said. “My charges were not for changing votes, altering election results, or manipulating any election outcome. Those words are used to create a false impression and distract from the real issue: whether the American people have transparent, verifiable elections they can trust.”

Peters broke into Mesa County’s election office to prove voting machines had shifted votes to Democrat Joe Biden, but  data instead confirmed the county’s 2020 vote totals were accurate. Before her release, Peters at one point expressed written regret to the state for her crimes.

Despite that, on Tuesday Peters again endorsed the idea that all electronic voting machines are untrustworthy, and any elections using them as inherently suspect.

Experts have long said that vulnerabilities exist in U.S. voting machines, but certain longstanding practices, like backup paper ballots, post-election, risk-limiting audits, and relying on decentralized equipment and vendors can also manage risks and catch anomalies. According to the Cybersecurity and Infrastructure Security Agency, nearly 98% of Americans vote on electronic voting machines with paper backups.

Despite a years-long effort and dozens of court challenges, neither Peters nor other Trump allies have ever provided credible proof that manipulation of U.S. voting machines, voter fraud or other problems impacted the 2020 presidential election.

The post Tina Peters, through attorney, backs off formal role in Shasta County elections appeared first on CyberScoop.

The top election official for Shasta County, Calif. said he has offered convicted felon and former Mesa County, Colo. clerk Tina Peters a position as a consultant to help with the 2026 elections, but that she hasn’t accepted the position yet.  

Earlier this month, Shasta County registrar Clint Curtis told local news outlets that he intended to hire Peters as assistant registrar of voters to help with the upcoming 2026 elections, months after she was released from prison in Colorado.

In an interview with CyberScoop this week, Curtis said he was looking to hire Peters as a consultant, citing the length of time involved in hiring her as a full-time employee and the need for immediate help running the upcoming midterm elections.

Curtis said that he initially believed Peters had accepted the position, only to later hear from her that she needed to consult her legal team after her prison sentence was commuted in June.

“She’s got to check it all out, make sure it’s okay, make sure there’s not any roadblocks in there that we don’t know about [or are] illegal, so you got to walk through the whole mess,” said Curtis.

A Colorado Department of Corrections official told CyberScoop that as part of her parole conditions, Peters must be employed and live in Colorado. Peters can request a transfer to another state, but she must first receive permission from both states and go through a formal review process.

According to Curtis, hiring Peters as a consultant means she would not have local access to county email or election systems. Peters’ past conviction “doesn’t matter” because her access to county IT would be limited.

“If she’s on staff she’d have logins to the network, logins in the system, she’d basically have full access,” Curtis said in a phone interview. “But consultants don’t have any of that, nor should they, right?”

Consultants “are basically there to actually watch other people do it and make sure they do it right rather than do it themselves,” he added.

At the same time, when asked what responsibilities Peters would have, Curtis described an expansive role, with Peters helping him oversee the registrar’s office and direct his full-time staff of about 12.

Asked what drew him to Peters, Curtis said “well, she’s out [of prison] and I have this position become available [and] I need somebody that can actually supervise and knows something about elections.”

In 2024, Peters was convicted of seven felony crimes related to the theft of voting machine software from Mesa County election facilities, in a failed attempt to prove that the machines had been involved in election fraud during the 2020 election.

She served less than two years of that sentence, as legal appeals, relentless pressure from the Trump administration and eventually a commutation by Colorado Governor Jared Polis saw her released from prison in June.

Curtis said he did not reach out to any Mesa County officials before offering Peters the job, but did cite conversations with her that impressed him and his confidence that he would remain in control of the county’s elections.

“I talked to her and basically, she’s very even tempered, she’s not wild and crazy which is good,” said Curtis. “And so basically I’d still be in charge so it wouldn’t really be a problem…there’s no way she would get out of bounds on me.”

A request to Mesa County’s press office seeking comment was not returned. At Peters’ sentencing hearing in 2024, multiple Mesa County officials testified about the negative impact her crimes and behavior had on the county’s elections, finances and reputation.

When reached for comment, a representative for Peter Ticktin, Peters’ lawyer, provided CyberScoop with a statement from last week regarding Peters’ intentions.

“Tina Peters is giving consideration to helping in the efforts in Shasta County as there most definitely has been monkey business in the way the election was handled,” Ticktin said. “Tina is one of the key voices leading the effort to get the invasive machines out of our election process.”

Earlier this month, Curtis was censured by the Shasta County Board of Supervisors following investigations into  allegations of verbal abuse and threatening language to staff.

Curtis, who was appointed county registrar in 2025, also made a number of claims about what he called suspicious mail-in ballots used during the 2024 election. He claimed the ballots were different sizes and looked, felt and “smelled” different from normal mail-in ballots.

Curtis told CyberScoop he did not follow up with the county’s ballot manufacturer to ask if there was a credible explanation, saying he lacked investigative authority to do so. He also could not answer how many instances of voter fraud his office had confirmed. 

A day after speaking with CyberScoop, the Shasta County Board of Supervisors said Curtis’ claims were “frivolous” and that they “welcomed” investigations by state and federal authorities.

“Mr. Curtis was hired to enhance transparency, strengthen election integrity and restore trust. While some progress has been achieved, including the promotion of meaningful observation within the Elections Office, Mr. Curtis has failed significantly in other core responsibilities, undermining the very principles he was appointed to uphold.”

The press office for California Secretary of State Shirley Weber’s told CyberScoop that irrespective of whom a county employs or contracts with, they must comply with California law, security and confidentiality requirements, and “maintain the integrity of our state’s elections and election processes.”  

Weber also sharply questioned Peters’ involvement in California elections.

“As Secretary Weber has stated, ‘The mere thought of letting someone near any part of California’s elections when that person was convicted of serious election-related crimes while serving as an election official, is simply outrageous,’” Weber’s office wrote in an email. “Our office is monitoring the situation and, as always, will act within our authority and work closely with law enforcement officials to ensure that all elections in our state remain transparent, safe, and fair for all eligible voters.”

Curtis expressed frustration to CyberScoop at the delays, saying he needed immediate help and expressing concern that Peters’ legal roadblocks may make it harder to hire her at all.

“You know, if they stall sufficiently enough, then she won’t be able to get any help to me,” said Curtis. “So I need her fairly quickly. We start early voting in…30 days, something like that. So we need it quickly, we need to get her in here, tell her what to do, set people up and get it ready to go. Otherwise, I have to do it all, and that’s going to be a pain.”

The post Election official says Tina Peters would be consultant, won’t have access to election systems appeared first on CyberScoop.