The voter history file is the ledger that says which real person cast which ballot; when it fails, a certified total no longer connects to the electorate it is supposed to represent. In the 2020 general election, that ledger failed across five states in every direction at once. Pennsylvania certified its presidential result on November 24, 2020 with 121,240 more ballots counted than voters recorded in its Statewide Uniform Registry of Electors, and its SURE history file contained 1,573 mail ballots cast by voters listed as over 100 years old and 41 Allegheny County ballots mailed to persons with a date of birth of January 1, 1800. Fulton County, Georgia, recorded 22,534 more ballots counted than voters credited in the history file and failed to create the legally required Numbered List of Voters for advance voting at all. Michigan’s Qualified Voter File has been altered monthly since 2020 — method of voting, jurisdiction, and whether a person voted — and a 2025 snapshot shows roughly 499,850 fewer VoterIDs credited with voting than ballots certified; on December 1, 2020, inside the federal 22-month preservation window, the state directed county clerks that certain election records “must be deleted.” Wisconsin’s WisVote system carries 569,277 active registrations with the placeholder date January 1, 1918, of which 115,252 are credited with voting in 2020, on a public portal with a documented vulnerability to undetected remote history edits. Arizona’s own canvass estimated 96,389 ghost votes statewide and up to 173,000 Maricopa residents who confirmed voting but for whom no vote was ever recorded. The ledger was not just wrong; it was rewritable.
The 30 findings consolidate into five structural patterns; the ones below carry most of the national-security weight.
- Official records show more ballots counted than voters credited with voting. Pennsylvania’s SURE system recorded 6,760,230 voters as having voted on November 3, 2020, while Secretary of State Boockvar certified 6,962,607 presidential votes — a 121,240-vote deficit of recorded voters relative to certified ballots on the state’s own system of record. Fulton County, Georgia’s official records show 148,319 absentee ballots counted against 125,784 voters credited with casting a ballot, a 22,534-ballot gap, and the county produced no contemporaneous Numbered List of Voters for advance voting, severing the statutorily required audit trail for tens of thousands of additional ballots. Arizona’s statewide canvass estimated 96,389 ghost votes cast under the names of registered voters who were either unknown to the listed address or verified as having moved away before October 2020, and up to 173,000 Maricopa residents who confirmed voting but for whom no vote was ever recorded.
- The voter history ledger was edited after certification, on a monthly cadence. Sequential snapshots of Michigan’s Qualified Voter File document post-election alteration of voter history on a monthly basis — method of voting, voting jurisdiction, and whether a given voter voted at all — producing a current gap of roughly 499,850 fewer VoterIDs credited with voting than ballots certified. On December 1, 2020, within the federal 22-month record preservation window and in the middle of legislative inquiries, Michigan’s Bureau of Elections directed all county clerks that certain election records “must be deleted.” In Wayne County, thirteen days after election night, a “black trunk” was delivered containing revised poll lists that substituted for the originals; Detroit’s Director of Elections denied under oath at certification having provided them, a denial contradicted by the contemporaneous record.
- The controls that decide who can edit the ledger were demonstrably not enforced. Wisconsin’s MyVote WI public-facing portal had a documented vulnerability that permitted undetected remote alteration of voter history, and the Legislative Audit Bureau found that the Elections Commission issued 3,137 FIDO multi-factor authentication keys to the statewide WisVote database and “apparently does not know how many FIDO Keys they have actually issued.” At least one Zuckerberg-5 city granted a private nonprofit partner real-time API access to both WisVote and the BadgerBooks electronic poll book system used at check-in on election day. In Maricopa County, a mid-election software update to the “Sitebook” electronic poll books neutralized the system’s alert against issuing multiple ballots to a single voter without supervisor override, and the county produced no chain-of-custody documentation for the EPB records.
- The registration side of the ledger carries placeholder and implausible identities at scale. Wisconsin’s WisVote database contains 569,277 active voter registrations with an identical placeholder application date of January 1, 1918 — the standard value used in many systems when the true registration date is unknown or missing — and 115,252 of those placeholder-dated records are credited with having voted in 2020. Pennsylvania’s SURE history file contained 1,573 mail ballots cast by voters listed as over 100 years old, 41 Allegheny County ballots mailed to persons with a date of birth of January 1, 1800, and 245 mail votes cast by voters with no date of birth at all. At the TCF Center in Wayne County, sworn poll challengers observed election workers manually entering thousands of unregistered individuals into the electronic poll books using the placeholder birthdate 1/1/1900 to bypass validation.
- Supporting records required to prove any of this after the fact were missing at certification. Delaware County, Pennsylvania, certified the 2020 election with 244 of 428 precincts missing required voter-list information, 125 of 428 tally tapes missing, 137 of 428 ballot-count tapes missing, 255 of 428 open-poll tapes missing, and 244 of 428 zero-report tapes missing — leaving no documentary proof that the tabulators were cleared of stored totals before polls opened.
Read as a national-security question, the Voter History Integrity record describes the decoupling of a certified election from the electorate it is supposed to certify. Elections are a federally designated critical-infrastructure component, and the integrity of that component depends on a specific two-way reconciliation: every ballot counted has to correspond to a real voter credited as having cast it, and that ledger has to remain sealed and auditable for years after certification. In the cycle described above, the ledgers showed hundreds of thousands more ballots than voters; the history files were edited monthly after the fact, with records in at least one state ordered deleted inside the federal preservation window; the controls governing who could edit those files were, by design and by negligence, not enforced; the registration rolls themselves carried placeholder and implausible identities at the scale of hundreds of thousands; and the supporting paper and digital records that would allow any of this to be reconstructed after the fact were missing at the point of certification. A foreign or domestic actor planning around a close federal contest does not need to add votes if it can edit the list of who voted after the canvass and does not need to manufacture voters if a system of record already carries hundreds of thousands of placeholder identities credited with voting. That is the attack surface this record describes, and it is the posture any future adversary will plan around whether the United States chooses to address it or not.
