Colorado's Department of State has fixed a privacy vulnerability in its voter registration search tool that temporarily exposed 59 confidential voter profiles, the department announced.
On August 14, 2026, an update to the "find my voter registration" tool inadvertently overrode security restrictions that prevent access to confidential voter profiles. Users could retrieve profile information by entering a voter's name, zip code, and full birth date. The Department discovered the breach and immediately restored the privacy protections.
According to the Department's review, the majority of the 59 accessed profiles were voters accessing their own information, based on voter reports and IP address analysis. The Department contacted all affected voters.
While the Department said it has "no information to suggest any imminent public safety issues" related to the incident, it enlisted the Colorado State Patrol and the Denver District Attorney's Office on August 28, 2026, to thoroughly examine and address any remaining risks.