While state party officials said sloppy app code held up the count in the Democrats’ first 2020 presidential nominating contest, a review by Massachusetts-based security firm Veracode determined that the IowaReporterApp was also vulnerable to outside interference with vote totals, passwords and other closely held data.
No indication exists that hackers intercepted or changed any of the information transmitted by the app. The app’s maker, Shadow Inc., said that the app “underwent multiple, rigorous tests by a third party” but “as with all software, sometimes vulnerabilities are discovered after they are released.”