Two-thirds of major political donation sites are lacking critical security measures.
According to recent research by DataDome, political donation sites are increasingly becoming targets for malicious actors. As the election season approaches, the surge in political contributions could attract cyber criminals who may attempt to compromise political donation websites at a higher rate. Ensuring the security of these donation sites is crucial to safeguard not only the secure transfer of funds, but also to protect sensitive donor information like names, addresses, and credit card details.
The research examined three major donation platforms in the United States and revealed that two of them were lacking essential security measures. These platforms relied on basic defenses that proved inadequate against present-day cyber threats. Only one platform implemented two-factor authentication, while none adequately defended against bot traffic or credential stuffing attacks.
The repercussions of this security vulnerability are threefold, as outlined by the research:
- Malicious actors could infiltrate user accounts and extract sensitive information, like credit card details, making users susceptible to identity theft and financial fraud.
- In the event of a breach, the platforms could encounter chargebacks, fraudulent activities, and legal expenses.
- Fundraising efforts could suffer, as a breach might tarnish a platform’s reputation, dissuading potential contributors from donating.
The research urges political campaign donation platforms to enhance their security protocols as the election season nears.