Denver judge weighs fallout of passwords leak as Secretary of State Jena Griswold promises investigation

A Denver judge declined Monday night to rule immediately on a lawsuit seeking to force the hand-counting of ballots in more than half of Colorado’s counties as the fallout from an accidental leak of voting equipment passwords continued in the final 24 hours of the election.

District Court Judge Kandace Gerdes heard four hours of testimony in a hearing called in a lawsuit filed by the Libertarian Party of Colorado. The leak had been reported separately last week by the state Republican Party and Secretary of State Jena Griswold, a Democrat.

A lawyer for the Libertarian Party argued that the leak, discovered by a prominent 2020 election denier, compromised the election’s integrity. The suit also seeks the destruction of affected election equipment.

During the hearing, no evidence was presented indicating any voting systems were compromised or had been improperly accessed. First Deputy Attorney General LeeAnn Morrill said suggestions otherwise were based on “supposition” and “fear mongering.”

Last week, after the breach was revealed, Griswold immediately came under fire. Regardless of how Gerdes rules on the Libertarian suit, other election officials are bracing for additional litigation and fallout from the release of the passwords, which came just days before a presidential election that some elements of the Republican Party were already seeking to undermine.

Matt Crane, the executive director of the Colorado County Clerks Association, told The Denver Post that some Colorado Republican officials were already planning to challenge the certification of ballots in the state.

“The software leak is a valid leak for people to be concerned about,” Crane, a Republican who formerly served as the Arapahoe County clerk, said. “But I think it’s mitigated. … But bad actors will do what they do. We know that.”

Griswold calls leak “regrettable”

The affidavit was filed by Shawn Smith, a retired Air Force officer who has previously sought to undermine the 2020 election results. The Post obtained a copy of the affidavit Monday, and it was later described by Smith during the court hearing.

In February 2022, Smith baselessly told a conservative group that Griswold had committed election crimes and that anyone involved in election fraud should be executed.

It’s unclear how the state Republican Party — led by another election denier, chairman Dave Williams — became aware of Smith’s claims. Smith testified that attorney John Case contacted him to ask him to prepare an affidavit about his findings, though he did not indicate how Case knew to contact him. Case, who was in the courtroom Monday, declined to answer when asked by a reporter how he learned of Smith’s findings.

In a statement Monday, Griswold’s office said officials learned of the password leak on Oct. 24 — the same day Smith said he learned of it — from a voting machines vendor.

After conducting an assessment of how widespread the breach was, officials determined that 34 of Colorado’s 64 counties were affected.

Griswold’s office didn’t alert the public — or county clerks — about the passwords’ release until after the Colorado GOP announced it. In an interview Monday, Griswold said she regretted both the release of the passwords and that county clerks learned of it via the media, rather than from her office.

All of the released passwords have since been changed, she said, and the state’s elections remain secure.

“We discovered an error that is regrettable and took as thoughtful and measured of steps to address it (as we could), in an atmosphere that is full of threats and disinformation,” Griswold said.

She said her office was also contracting with Garnett Powell Maximon Barlow & Farbes, a metro Denver law firm, to conduct an outside investigation into what happened. She said the timeline for that investigation was still being determined.

Reviewing security footage

Christopher Beall, Griswold’s deputy, testified in court Monday that the state was reviewing 24-hour surveillance footage, among other security monitoring, to determine if anyone had improper physical access to voting equipment in Colorado’s counties. Those procedures were put in place after former Mesa County Clerk Tina Peters improperly accessed voting systems after the 2020 presidential election.

Beall said the ongoing review had not identified any improper access.

“We’re continuously working on building trust in our elections,” Griswold told The Post. “Colorado’s elections are secure. We have multilayer security at every step of the way. We have strong security measures, internally and externally, and we are always trying to move as quickly as possible in the environment.”

While machines are used to count votes, people still cast votes on paper ballots. And counties across the state conduct reviews called risk-limiting audits that compare the ballots to tallied results after each election.

Griswold has faced Republican ire for her criticism of former President Donald Trump and election conspiracies. One man pleaded guilty last month to making death threats against her and others. Earlier this year, state House Republicans sought to impeach her for calling Trump an insurrectionist and other criticisms made from her official position.

Soon after the breach was made public last week, Sen. Kevin Van Winkle, a Highlands Ranch Republican, requested that the Legislative Audit Committee hold an emergency meeting to assess if the state’s election systems were compromised. Doing so would provide a venue to address questions such as whether the breach was intentional when the passwords were posted, he wrote.