{"id":1836,"date":"2017-07-06T07:53:53","date_gmt":"2017-07-06T13:23:53","guid":{"rendered":"https:\/\/www.rapidsslonline.com\/blog\/?p=1836"},"modified":"2022-04-22T01:09:09","modified_gmt":"2022-04-22T06:39:09","slug":"deep-root-analytics-breach","status":"publish","type":"post","link":"https:\/\/www.rapidsslonline.com\/blog\/deep-root-analytics-breach\/","title":{"rendered":"Deep Root Analytics: You Don\u2019t Know Us, But We Lost Your Info\u2026"},"content":{"rendered":"

A political data analysis company has exposed 198 million US voter records<\/h2>\n

Chances are you\u2019ve never heard of Deep Root Analytics, and in this case that may actually be a good thing. The fewer people that know of the GOP data analysis company\u2014the lower the odds your voter records were compromised.<\/p>\n

That\u2019s because, according to security firm UpGuard<\/a>, Deep Root Analytics left a database containing 198 million voter records exposed for the world to see.<\/p>\n

To provide a little bit of context, according to US Census information there are approximately 200 million registered American voters. Carl wasn\u2019t a math major, but 198 over 200 is\u2026 basically, ALL the voter records.<\/p>\n

An UpGuard Cyber Risk analyst named Chris Vickery, who found the files, notified federal authorities who we can only assume wrote a sternly worded letter or some other bureaucratic foolishness.<\/p>\n

What? I Read It for the Articles!<\/h2>\n

A Deep Root spokesman told the celebrity gossip blog, Huffington Post, \u201cwe take full responsibility for this situation.\u201d<\/p>\n

Deep Root also said that it believes only Vickery accessed the information, which is a lot like when you come home after a hard day\u2019s work, open your son\u2019s bedroom door to say hello and catch him trying to stuff an old Playboy under his mattress. Then when you ask him about it he tells you he only looked at it the one time.<\/p>\n

You know, the one time you caught him.<\/p>\n

I\u2019m not saying I don\u2019t believe Deep Root Analytics, I\u2019m just\u2014well, actually, yes that is what I\u2019m saying. I don\u2019t believe Deep Root.<\/p>\n

Deep Rooted Analysis of Your Personal Information<\/h2>\n

What\u2019s more frightening than the fact that your personal information \u2013 names, addresses, political affiliations \u2013 was potentially just compromised by a group whom you never even consented to having possession of your data in the first place?<\/p>\n

How about the analysis they were performing on that questionably obtained information?<\/p>\n

Vickery downloaded over 1.1 terabytes of unsecured information. What he found was staggering, Deep Root uses 9.5 billion (with a B) data points to build a terrifyingly accurate model of 198-million US voters\u2019 political preferences using advanced algorithmic modeling across 48 political issues.<\/p>\n

Not only does Deep Root have an obscene amount of data about you \u2013 data you never even agreed to let it have \u2013 that data has been used to profile you and segment you into demographics.<\/p>\n

Ok, How Deep Are We Talking Here?<\/h2>\n

DEEP. Without getting overly political, there was even more valuable data on both the 2008 and 2012 elections available on those servers. This information is potentially way more dangerous than your voter records.<\/p>\n

This is information from DataTrust, the \u201cGOP\u2019s exclusive data provider.\u201d There are two sets of 51 files, one for each state and the District of Columbia. Each file, which is in .CSV form, contains 32-character RNC IDs \u2013 one for every voter in the database, regardless of affiliation \u2013 that link a number of data points together.<\/p>\n

The IDs can be used to look up voters by name. For a frame of reference, here is a list of all the .CSV categories:<\/p>\n

\"Deep<\/a><\/p>\n

For those who don\u2019t want to parse all of that, these data sets include things like: date of birth, addresses, phone numbers, party affiliations, racial demographics, religious leanings, registration status, income information\u2014even if someone is on the federal \u201cDo Not Call\u201d list.<\/p>\n

That data appears to have been used by another GOP analytics group, TargetPoint, to create a model for the 2016 election.<\/p>\n

In a 50GB file, each potential voter is scored against 46 columns, each of which contains a policy or candidate that the voter may or may not be likely to vote for. The GOP then uses this information for micro-targeting (both parties do this, it\u2019s not as if the GOP are the only ones performing this analysis).<\/p>\n

Here\u2019s a look at the issues you\u2019re being modeled on:<\/p>\n

\"Deep<\/a><\/p>\n

Per Dan O\u2019Sullivan, who wrote the UpGuard report and looked himself up: \u201cIt is a testament both to their talents, and to the real danger of this exposure, that the results were astoundingly accurate.\u201d<\/p>\n

When I read that last quote, I got so scared a little bit of pee came out. That\u2019s a terrifying amount of information. And all that data was exposed online for who knows how long.<\/p>\n

But it\u2019s OK, Deep Root believes<\/em> the only one who accessed it during that time is the guy who reported it.<\/p>\n

How reassuring.<\/p>\n

Stay cautious, my friends.<\/p>\n","protected":false},"excerpt":{"rendered":"

A political data analysis company has exposed 198 million US voter records Chances are you\u2019ve never heard of Deep Root Analytics, and in this case that may actually be a … Read More Deep Root Analytics: You Don\u2019t Know Us, But We Lost Your Info\u2026<\/span><\/a><\/span><\/p>\n","protected":false},"author":10,"featured_media":1907,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[24],"tags":[],"class_list":["post-1836","post","type-post","status-publish","format-standard","has-post-thumbnail","category-web-security-updates"],"yoast_head":"\nDeep Root Analytics: You Don\u2019t Know Us, But We Lost Your Info\u2026<\/title>\n<meta name=\"description\" content=\"A political organization that you've probably never even heard of may have exposed your voter records to the entire internet...\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.rapidsslonline.com\/blog\/deep-root-analytics-breach\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Deep Root Analytics: You Don\u2019t Know Us, But We Lost Your Info\u2026\" \/>\n<meta property=\"og:description\" content=\"A political organization that you've probably never even heard of may have exposed your voter records to the entire internet...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.rapidsslonline.com\/blog\/deep-root-analytics-breach\/\" \/>\n<meta property=\"og:site_name\" content=\"RapidSSLOnline Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/rsosslcertificates\/\" \/>\n<meta property=\"article:published_time\" content=\"2017-07-06T13:23:53+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-04-22T06:39:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.rapidsslonline.com\/blog\/wp-content\/uploads\/2017\/07\/deep-root-analytics.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"475\" \/>\n\t<meta property=\"og:image:height\" content=\"207\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Adam Thompson\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@rsossl\" \/>\n<meta name=\"twitter:site\" content=\"@rsossl\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Adam Thompson\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Deep Root Analytics: You Don\u2019t Know Us, But We Lost Your Info\u2026","description":"A political organization that you've probably never even heard of may have exposed your voter records to the entire internet...","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.rapidsslonline.com\/blog\/deep-root-analytics-breach\/","og_locale":"en_US","og_type":"article","og_title":"Deep Root Analytics: You Don\u2019t Know Us, But We Lost Your Info\u2026","og_description":"A political organization that you've probably never even heard of may have exposed your voter records to the entire internet...","og_url":"https:\/\/www.rapidsslonline.com\/blog\/deep-root-analytics-breach\/","og_site_name":"RapidSSLOnline Blog","article_publisher":"https:\/\/www.facebook.com\/rsosslcertificates\/","article_published_time":"2017-07-06T13:23:53+00:00","article_modified_time":"2022-04-22T06:39:09+00:00","og_image":[{"width":475,"height":207,"url":"https:\/\/www.rapidsslonline.com\/blog\/wp-content\/uploads\/2017\/07\/deep-root-analytics.jpg","type":"image\/jpeg"}],"author":"Adam Thompson","twitter_card":"summary_large_image","twitter_creator":"@rsossl","twitter_site":"@rsossl","twitter_misc":{"Written by":"Adam Thompson","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.rapidsslonline.com\/blog\/deep-root-analytics-breach\/#article","isPartOf":{"@id":"https:\/\/www.rapidsslonline.com\/blog\/deep-root-analytics-breach\/"},"author":{"name":"Adam Thompson","@id":"https:\/\/www.rapidsslonline.com\/blog\/#\/schema\/person\/ab1f810704e5f52f23e62cf0a309fd56"},"headline":"Deep Root Analytics: You Don\u2019t Know Us, But We Lost Your Info\u2026","datePublished":"2017-07-06T13:23:53+00:00","dateModified":"2022-04-22T06:39:09+00:00","mainEntityOfPage":{"@id":"https:\/\/www.rapidsslonline.com\/blog\/deep-root-analytics-breach\/"},"wordCount":761,"commentCount":0,"image":{"@id":"https:\/\/www.rapidsslonline.com\/blog\/deep-root-analytics-breach\/#primaryimage"},"thumbnailUrl":"https:\/\/www.rapidsslonline.com\/blog\/wp-content\/uploads\/2017\/07\/deep-root-analytics.jpg","articleSection":["Web Security Updates"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.rapidsslonline.com\/blog\/deep-root-analytics-breach\/","url":"https:\/\/www.rapidsslonline.com\/blog\/deep-root-analytics-breach\/","name":"Deep Root Analytics: You Don\u2019t Know Us, But We Lost Your Info\u2026","isPartOf":{"@id":"https:\/\/www.rapidsslonline.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.rapidsslonline.com\/blog\/deep-root-analytics-breach\/#primaryimage"},"image":{"@id":"https:\/\/www.rapidsslonline.com\/blog\/deep-root-analytics-breach\/#primaryimage"},"thumbnailUrl":"https:\/\/www.rapidsslonline.com\/blog\/wp-content\/uploads\/2017\/07\/deep-root-analytics.jpg","datePublished":"2017-07-06T13:23:53+00:00","dateModified":"2022-04-22T06:39:09+00:00","author":{"@id":"https:\/\/www.rapidsslonline.com\/blog\/#\/schema\/person\/ab1f810704e5f52f23e62cf0a309fd56"},"description":"A political organization that you've probably never even heard of may have exposed your voter records to the entire internet...","breadcrumb":{"@id":"https:\/\/www.rapidsslonline.com\/blog\/deep-root-analytics-breach\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.rapidsslonline.com\/blog\/deep-root-analytics-breach\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.rapidsslonline.com\/blog\/deep-root-analytics-breach\/#primaryimage","url":"https:\/\/www.rapidsslonline.com\/blog\/wp-content\/uploads\/2017\/07\/deep-root-analytics.jpg","contentUrl":"https:\/\/www.rapidsslonline.com\/blog\/wp-content\/uploads\/2017\/07\/deep-root-analytics.jpg","width":475,"height":207,"caption":"Solve it Yourself: Your Certificate Is Not Trusted Error"},{"@type":"BreadcrumbList","@id":"https:\/\/www.rapidsslonline.com\/blog\/deep-root-analytics-breach\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.rapidsslonline.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Deep Root Analytics: You Don\u2019t Know Us, But We Lost Your Info\u2026"}]},{"@type":"WebSite","@id":"https:\/\/www.rapidsslonline.com\/blog\/#website","url":"https:\/\/www.rapidsslonline.com\/blog\/","name":"RapidSSLOnline Blog","description":"SSL Best Practices for Secure Website","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.rapidsslonline.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.rapidsslonline.com\/blog\/#\/schema\/person\/ab1f810704e5f52f23e62cf0a309fd56","name":"Adam Thompson","sameAs":["http:\/\/rapidsslonline.com"],"url":"https:\/\/www.rapidsslonline.com\/blog\/author\/adam-thompson\/"}]}},"_links":{"self":[{"href":"https:\/\/www.rapidsslonline.com\/blog\/wp-json\/wp\/v2\/posts\/1836","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rapidsslonline.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rapidsslonline.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rapidsslonline.com\/blog\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rapidsslonline.com\/blog\/wp-json\/wp\/v2\/comments?post=1836"}],"version-history":[{"count":0,"href":"https:\/\/www.rapidsslonline.com\/blog\/wp-json\/wp\/v2\/posts\/1836\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.rapidsslonline.com\/blog\/wp-json\/wp\/v2\/media\/1907"}],"wp:attachment":[{"href":"https:\/\/www.rapidsslonline.com\/blog\/wp-json\/wp\/v2\/media?parent=1836"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rapidsslonline.com\/blog\/wp-json\/wp\/v2\/categories?post=1836"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rapidsslonline.com\/blog\/wp-json\/wp\/v2\/tags?post=1836"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}