HACKER STOLE 633,000 ARIZONA VOTER FILES IN 2020, CONFESSED TO THE FBI — BUT BIDEN’S DOJ DID NOTHING
Declassified FBI Files Confirm a Maricopa Voter-Data Breach—But They Do Not Show the 2020 Vote Was Changed
For years, the argument over the security of the 2020 election has been compressed into two competing slogans.
One side points to official statements calling it the most secure election in American history. The other argues that any newly discovered vulnerability proves those assurances were false.
Newly declassified FBI records from Maricopa County show why the reality is more complicated than either slogan.
The records, released by the White House on August 6, confirm that a hacker exploited a vulnerability in a Maricopa County voter-registration website shortly before the November 2020 election and extracted approximately 633,000 voter-registration records.
Investigators determined that 930 of those files contained sensitive, non-public information involving people including domestic-violence victims, judges and law-enforcement officers.
That is a real election-security failure. It is also not the same thing as evidence that ballots were altered or votes were changed.
The distinction is the central fact in understanding what the documents do—and do not—establish.
According to the FBI records, the Maricopa County Recorder’s Office reported an attempt to scrape voter-registration information on November 2, 2020. Investigators later determined that the activity had begun on October 21 and continued until the county detected unusually heavy traffic and restricted access.
The intruder had found that voter identification numbers could be inserted into a website URL to retrieve registration information. He then wrote a PowerShell script to automate the process.
The FBI traced the activity to a residence in Fountain Hills, Arizona, and interviewed the suspect on November 5.
The man described himself as a “hacker or tinkerer.” He told agents that he had discovered the vulnerability while experimenting with his own voter identification number, expanded the process to other numbers, and eventually downloaded a large volume of records.
He estimated that he may have obtained between 1 million and 2 million files. Investigators documented approximately 633,000.
The records also show that he deleted material from Google Cloud and scrubbed data from his hard drives after becoming afraid that law enforcement would come looking for him.
Agents executed a search warrant at his home and seized computers, hard drives and removable storage devices. The FBI later concluded that he had developed and operated the script and had deleted the information he scraped.
Investigators also reported that they found no indication that the hacker was acting under domestic or foreign influence.
Then comes the part of the case that deserves the most scrutiny.
No prosecution followed.
The FBI presented the matter to the U.S. Attorney’s Office for the District of Arizona, the Arizona Attorney General’s Office, the Maricopa County Attorney’s Office and the Pinal County Attorney’s Office.
All four declined to prosecute. The federal office declined the case on July 12, 2021. The released records do not provide a detailed explanation for each prosecutorial decision or specify when all of the state and local decisions were made.
With those offices declining the case, FBI investigators requested that the matter be closed in May 2023.
That creates a legitimate accountability question: why did a case involving unauthorized access to hundreds of thousands of voter records, including sensitive records, end without charges after the suspect admitted what he had done?
The available documents establish the declinations. They do not establish the reasons behind them.
That makes claims of a deliberate political cover-up harder to prove than the underlying non-prosecution itself.
The federal declination occurred during the Biden administration. But the case was also considered by state and local prosecutors in Arizona, and key offices involved were led by Republicans during the relevant period. Arizona Attorney General Mark Brnovich was a Republican, as was Maricopa County Attorney Allister Adel.
So the unanswered question is broader than whether one political party wanted the case buried. The more defensible question is why multiple prosecutorial offices, across different levels of government, reached the same practical result and why their reasoning has not been made public in the released material.
Former Justice Department official Jeff Clark has gone further, asking whether the hacker had been told he was “golden” and could avoid prosecution.
That is a question, not evidence. Nothing in the released FBI records publicly establishes that the suspect received an assurance of immunity or that prosecutors instructed him to claim he acted alone.
The same caution is necessary when the breach is used to challenge broader claims about the 2020 election.
The compromised system was a voter-registration website. It was not Maricopa County’s ballot-tabulation system.
Maricopa County says its election-management and tabulation equipment operates on an air-gapped network separated from the county’s public network and internet-facing websites. Independent voting-system audits conducted after the election found no evidence that the tabulation equipment had been connected to the internet or that votes had been switched.
The newly released FBI materials likewise do not show that the hacker altered voter records, accessed ballots, entered the tabulation system or changed any vote totals.
That matters because the famous November 2020 statement from the Cybersecurity and Infrastructure Security Agency was not a claim that no cyber incident of any kind had occurred anywhere in the country.
The joint election-security statement called the November 3 election “the most secure in American history” and said there was no evidence that any voting system had deleted or lost votes, changed votes or otherwise been compromised in a way that affected tabulation.
A serious breach of a registration website can coexist with that narrower conclusion about vote counting.
The new records therefore expose an important weakness in the security and handling of voter data. They do not, on their own, refute the evidence that the certified vote totals in Maricopa County were accurate.
That conclusion is reinforced by what happened after the election.
The Republican-led Arizona Senate commissioned a months-long review of Maricopa County’s 2.1 million ballots in 2021. The review did not overturn the result and its hand count actually increased Joe Biden’s margin by several hundred votes. Separate certified audits of the county’s election equipment also found no evidence of hacking or vote switching.
That history does not erase the voter-data breach. It puts it in the correct category.
The breach was a cybersecurity and privacy failure involving voter-registration records. The available evidence does not make it a ballot-tampering case.
The same distinction applies to statements by Arizona officials after the election.
Katie Hobbs, then Arizona secretary of state, described the election as among the smoothest and most secure in recent history. Republican Maricopa County officials later defended their election before Congress as secure and repeatedly verified.
The declassified records show that intelligence and law-enforcement officials knew about the intrusion around Election Day. But the documents available publicly do not, by themselves, establish what Hobbs personally knew about the FBI investigation or what former CISA Director Chris Krebs personally reviewed before making his public statements.
Saying that those officials knowingly lied therefore goes beyond what the released case file proves.
There is still a substantial transparency problem.
The public was not given the full picture in 2020 that a hacker had extracted hundreds of thousands of voter files, including hundreds containing protected information, and that an FBI investigation had identified the person responsible.
Officials had legitimate reasons to avoid compromising an active criminal investigation. But after the investigation ended without charges, the absence of a clear public explanation left a vacuum that is now being filled by partisan interpretations of the declassified documents.
The Trump administration has placed the Maricopa release alongside broader intelligence disclosures about foreign threats to election infrastructure, including claims involving China’s acquisition of large quantities of American voter data and foreign capabilities to exploit election-related systems.
Those issues deserve scrutiny on their own terms. They should not be collapsed into proof that foreign actors changed the result of the 2020 U.S. presidential election when the released Maricopa records do not show that.
The controversy is now being folded into another political fight: the SAVE America Act.
Supporters of the legislation argue that the episode shows why election systems require stronger safeguards and why public confidence cannot depend on assurances that later turn out to have important omissions.
Critics can reasonably answer that the Maricopa breach involved a web vulnerability and unauthorized data scraping, while the SAVE America Act is primarily focused on documentary proof of citizenship, voter identification and voting procedures. Those provisions would not, by themselves, have prevented a PowerShell script from exploiting an insecure public-facing voter-information portal.
As of August 2026, the legislation had passed the House in different forms but remained stalled in the Senate, which left for its summer recess without advancing President Trump’s preferred version.
So the declassified files settle some important questions.
A hacker really did exploit Maricopa County’s voter-registration website before the 2020 election. He really did obtain approximately 633,000 records, including 930 containing sensitive information. He admitted his role, deleted data, was investigated by the FBI, and ultimately faced no prosecution after four offices declined the case.
Those facts deserve an explanation, especially the prosecutorial decisions and the years-long gap before the public received the fuller record.
But the files do not settle the much larger claim that the 2020 presidential vote in Maricopa County was manipulated.
May you like
The evidence released so far shows a serious voter-data breach and an unresolved accountability failure—not proof that 633,000 votes were compromised, that ballots were altered, or that the certified election result was wrong.
That distinction is less dramatic than the slogans on either side. It is also the distinction the documents actually support.
