In a potentially serious security breach, Oregon's Secretary of State's office reportedly exposed an internal election-testing website to the public internet just days before the November 3rd election.

BREAKING NEWS: In a potentially serious security breach, Oregon’s Secretary of State’s office reportedly exposed an internal election-testing website to the public internet just days before the November 3rd election.

According to reporting by YamCo News and @Oregonian, the website displayed simulated election results, including 59,331 ballots counted and 2.39% statewide turnout.

The Secretary of State’s office says these were test results, not actual votes.

But here’s the troubling part.

According to The Oregonian, a system update caused the website to become accessible outside its protective firewall, allowing public search engines to discover information that was apparently intended only for internal election testing – not the public.

Former state representative Julie Parrish (@hotcouponmama) reportedly discovered the exposure, and the state subsequently took the website offline.

Here’s where things get interesting.

Oregon’s Secretary of State explicitly assures voters that the state’s ballot-counting equipment is NEVER connected to the internet, so that is a lie they have been telling the public for years. This particular website has been indexed by Google for 10 YEARS.

Now, to be clear, a publicly accessible election-results testing website is not the same thing as internet-connected ballot-counting equipment. There is currently no evidence that the actual vote-tabulation machines were compromised.

But the distinction raises an important question: If an election-related staging website could become publicly accessible because of a system update, what safeguards ensure that Oregon’s actual ballot-counting equipment and production election systems remain completely isolated?

Is this just an example of embarrassing incompetence from @ORSecretaryRead’s office or something far more sinister?

This raises several questions that Secretary of State Tobias Read should answer publicly:

How did a system update inadvertently expose an internal election website?

What security controls failed, and how long was the website publicly accessible?

Was the staging environment completely isolated from production election systems?

Was any unauthorized access detected?

Has an independent cybersecurity assessment been conducted to determine whether other election-related systems were exposed?

Tobias Read regularly repeats the mantra to voters that its elections are safe and secure. This proves this not the case. As the Trump Administration is ready to send election monitors ahead of the November 3rd election, Read will have some explaining to do. In many states, this might get the Secretary of State immediately fired.

Then Read could say goodbye to his future political aspirations, including the governorship.

Yet here we have an election-related website that reportedly became accessible to the public because of a configuration error, just days before an election.

Oregonians deserve more than Read’s assurances that the exposed information was harmless. They deserve documentation establishing what happened, what systems were affected, and what corrective measures have been taken.

Secretary of State Tobias Read should address this incident publicly and provide the evidence supporting his office’s conclusions.

Election integrity requires verifiable safeguards, transparency, and accountability, not empty platitudes.

— PDX Real (@PDXReal1) October 26, 2026