Mississippi Just Told Every County What Election Cybersecurity Has to Look Like.

Who's responsible when a county's voter database gets hacked?

In 2023, Hinds County, Mississippi's most populous county, found out the hard way. A cyberattack in early September knocked staff off their computers for weeks. Poll worker training had to be rushed to finish before election day instead of its usual early-October schedule. On October 26, the Secretary of State's own website went briefly dark, and poll workers couldn't verify voter registrations while it was down. The network came back before the election. The investigation that followed didn't get a public explanation.

SB2096 exists because that kind of vulnerability shouldn't depend on which county you live in.

The bill requires the Department of Information Technology Services, working with the Secretary of State, to set mandatory minimum cybersecurity standards for every county registrar and election commissioner who accesses or exports data from Mississippi's centralized voter-registration and elections system, known as SEMS. The standards have to be in place by January 1, 2027.

A cybersecurity standard that nobody checks isn't a standard, it's a suggestion. SB2096 backs its requirement with periodic compliance assessments and a defined cure period for counties that fall short. Counties that stay noncompliant face a real consequence: a funding lever tied to the Election Support Fund. The assessment results themselves stay confidential, except to the State Auditor, so the process doesn't become a public roadmap for the next attacker.

SB2096 was authored by Sen. Bart Williams, a Republican, and Sen. Bradford Blackmon, a Democrat, as co-principal sponsors. It passed both chambers essentially unanimously. That's a real contrast. This was the same 2026 session that produced a genuinely contested fight over the SHIELD Act's citizenship checks and a real conflict between two other election bills over identical code language. Securing the pipes that carry every county's voter data didn't need a floor fight. Mississippi's legislators agreed on that part without much trouble.

Ballotpedia counted eight election-related bills Mississippi enacted this session, out of 170 introduced. SB2096 is the quiet one. It doesn't change who can vote or how a ballot gets counted. It changes whether the system holding everyone's registration data can be broken into with a phishing email and a weak password.

Mississippi's most consequential election-security bill this session might not be the one that made headlines. A hacked voter database doesn't care about party lines, and neither did the legislators who passed this one.

This is our read of the law. We encourage you to read it yourself and reach your own conclusions.