Pull to refresh
Logo
What Changed
Following Why Sign Up
Cardenas campaign website exposed voter data of 1.5 million Chicago residents

Cardenas campaign website exposed voter data of 1.5 million Chicago residents

Rule Changes Chicago, IL local

Investigation finds the full Chicago voter roll, including protected judges' records, was downloadable from George Cardenas's site

Yesterday: Block Club Chicago amplifies the story

Overview

Updated 53 minutes ago

A Chicago mayoral candidate's campaign website left home addresses, birth years, and voting histories of 1.5 million voters open for anyone to download. The data covers what appears to be every registered voter in Chicago, including the mayor, the governor, and judges whose records are shielded by state privacy law.

The Better Government Association's Illinois Answers Project found the files and told the campaign, which took them down in early September. The episode is now testing whether Illinois's 2024 voter-data law has teeth.

Why it matters

If a campaign can't protect the addresses and voting histories of 1.5 million residents, Illinois's voter-privacy law may face its first real test.

Monday: what changed in Chicago, IL

One short email a week with the openings, closings, permits and council votes we covered. Free. Unsubscribe in one click.

Questions about this story

Free account needed to ask — your question is kept and asked for you right after sign-up. Answers are public.

No questions yet — be the first to ask.

Key Indicators

1.5M
Chicago voters exposed
Home addresses, birth years, and voting histories for what appears to be every registered voter in Chicago were downloadable from Cardenas's campaign site.
GoTeam
Exposed dashboard password
The password for a campaign-worker voter dashboard was left in the website's publicly viewable source code.
$108K
Cardenas campaign fundraising
Reported to state election authorities as of Sept. 30, 2026.
$19.2M
Frontrunner's war chest
Secretary of State Alexi Giannoulias's campaign funds at the end of September, roughly 178 times Cardenas's haul.

Voices

Curated perspectives — historical figures and your fellow readers.

Sign up to generate historical perspectives on this story.

Log in Sign Up

People Involved

George Cardenas
George Cardenas
Cook County Board of Review commissioner and Chicago mayoral candidate
Denies knowing about the vulnerability; called it 'a programming glitch.'
 Alexi Giannoulias
Alexi Giannoulias
Illinois Secretary of State and mayoral frontrunner
Leading the race in fundraising.

Organizations Involved

Illinois Answers Project
Illinois Answers Project
Nonprofit investigative newsroom
Uncovered the vulnerability and disclosed it to the campaign before publishing.

A nonprofit newsroom run by the Better Government Association that reports on how power works in Illinois.
Cook County Board of Review
Cook County Board of Review
County government body
Cardenas currently serves as one of its three commissioners.

A three-member elected board that hears property tax appeals in Cook County.

Timeline

2024 October 2026

7 events Latest: Yesterday
Tap a bar to jump to that date

  1. Block Club Chicago amplifies the story

    Latest Publication

    Block Club Chicago publishes its own report on the exposure, bringing the findings to a wider audience.

  2. Illinois Answers publishes investigation

    Publication

    The nonprofit newsroom details how the voter data, including protected judges' records, was left publicly accessible.

  3. Cardenas files ballot petitions

    Campaign

    He submits thousands of petition signatures to the Chicago Board of Election Commissioners to get on the ballot.

  4. Campaign takes down exposed pages

    Fix

    The vulnerable login page is removed; the full downloadable voter dataset is taken down over the following days.

  5. Investigation tells campaign about exposed password

    Disclosure

    Illinois Answers informs Cardenas and his political director that the password 'GoTeam' is visible in the site's public source code.

  6. Cardenas enters mayor's race

    Campaign

    George Cardenas announces his candidacy at a McKinley Park event, about two years after leaving the City Council.

  7. Illinois tightens voter-data law after AG lawsuit

    Legal

    After an Illinois company published a large batch of voter data, the attorney general filed suit and legislators restricted how such data can be used.

Scenarios

1

Illinois attorney general sues Cardenas campaign over voter data

Possible Resolves by Q2 2027

Discussed by: Block Club Chicago and Illinois Answers note the AG's 2024 lawsuit against a similar data publication.

Illinois law restricts how voter data can be published and used. The 2024 incident ended in an AG lawsuit and tighter rules. If the AG applies that precedent to the Cardenas campaign's exposure, a suit or enforcement action would follow.

2

Cardenas's weak campaign fades before the February primary

Possible Resolves by Feb 28, 2027

Discussed by: Block Club Chicago notes his campaign reported only about $108,000 raised, versus $19.2 million for frontrunner Alexi Giannoulias.

Cardenas entered the race to little fanfare and trails badly in fundraising. The data exposure adds a security scandal on top of a long-shot bid. The February 2027 primary will show whether the campaign has any momentum left.

3

No legal action; the exposure fades as a campaign footnote

Likely Resolves by Q2 2027

Discussed by: Plausible given that files were removed quickly and there is no evidence anyone actually accessed them, as noted in the Illinois Answers report.

The vulnerability was fixed within days, and investigators found no sign the data was downloaded. Without demonstrated harm, the AG may decline to act, and the story recedes during the campaign.

Historical Context

2 moments from history that rhyme with this story — and how they unfolded.

2024

2024 Illinois voter-data lawsuit (2024)

An Illinois company published a large batch of voter data. The state attorney general filed suit, and legislators responded by tightening the law on who can use and publish voter records.

Then

The company faced a lawsuit and the legal rules for handling voter data became stricter.

Now

Illinois now has a more explicit legal framework for how campaigns and companies may handle voter records.

Why this matters now

This is the direct legal precedent for any attorney general action against Cardenas's campaign.

March 2018

Cambridge Analytica scandal (2018)

Reports revealed that political consulting firm Cambridge Analytica harvested personal data from 87 million Facebook users to build voter profiles without their consent.

Then

The company collapsed, Facebook's CEO testified before Congress, and public trust in data handling plunged.

Now

The scandal helped drive adoption of the European GDPR and a wave of wider privacy legislation.

Why this matters now

It shows how exposure of personal voter data can trigger both legal consequences and political backlash.

Sources

(2)
Block Club Chicago Illinois Answers Project