Single Shared Password Across All EMS Components – Never Rotated Through 2020 Election (AZ)

The credentials (usernames and passwords) for all EMS server components – EMS workstations, adjudication workstations, HiPro scanners, and ICC workstations – were created during the Dominion software installation on August 6, 2019, and were never changed from that date through the delivery of systems for forensic audit following the 2020 election: a period exceeding two years encompassing one presidential election cycle. The same password was used for all user accounts on all systems, meaning that any person – an insider, vendor employee, or unauthorized actor who obtained the single common credential – could access and potentially modify any component of the election management infrastructure without attribution. This directly violates the Arizona Election Procedures Manual’s requirement that users have unique usernames and secure passwords, and that vendor-supplied generic passwords may not be used. ,