How Armenia Exposed Its Voters for 20 Years

Armenia's Central Election Commission exposed voter personal data -- names, addresses, birth dates, phone numbers, and passport numbers -- through at least 6 different public web systems from 2003 to 2025. An unauthenticated SOAP API let anyone query voter records by address. OWL recovered the evidence from the Wayback Machine.

https://owlorg.com/en/investigations/elections-voter-data-breach/

#Armenia #OSINT #Investigation

How Armenia Exposed Its Voters for 20 Years

Armenia's CEC exposed voter data -- names, addresses, birth dates, phone numbers, passport numbers -- through 6 public web systems. An unauthenticated API let anyone query voter records. OWL recovered the evidence.