Plaintext Master Cryptographic Key, 12-Year-Old Shared Password, and Two Anonymous Remote Logins with Escalated Privileges (MI)

Forensic analysis of the Antrim County EMS revealed that the master cryptographic key used to encrypt all voting results transmitted from tabulators was stored in plaintext in a database table – identical to the vulnerability confirmed in Georgia. Additionally, all users relied on the generic, shared administrative account “EMSADMIN” with a 12-year-old password: “dvscorp08!” – a password whose format encodes the corporate initials “dvs” (Dominion Voting Systems) and the year “08,” indicating it was set at manufacture in 2008 and never changed. CyTech/CyFir forensic examination documented two successful, anonymous remote logins with escalated privileges on November 5 and November 17, 2020 – two and fourteen days after the election – using this credential. The identity of these remote actors has never been publicly established.