The Arizona forensic audit was a Republican-led review of Maricopa County’s 2020 presidential election results, ordered by the Arizona State Senate and carried out from April to July 2021 by Cyber Ninjas, a small Florida cybersecurity firm with no prior election experience. It cost roughly $6 million in private donations on top of $150,000 in public funds, confirmed that Joe Biden won Maricopa County, and produced a long list of fraud and irregularity claims that county officials, independent testing labs, and the Arizona Attorney General’s own investigators later debunked. As of mid-2026, a federal grand jury investigation into the audit is active, and the FBI has collected more than 200 terabytes of audit-related data from the Arizona Senate.1Arizona Mirror. DOJ Subpoena Reveals Federal Investigators Sought Virtually All Records From Arizona’s 2020 Audit
What the Audit Was and Who Ran It
The review grew out of efforts by Arizona Senate President Karen Fann and allies of former President Donald Trump to investigate fraud claims about the 2020 election. On January 12, 2021, the Senate subpoenaed Maricopa County for 2.1 million ballots, tabulation machines, and related election materials. The county resisted, and on February 26, 2021, Maricopa County Superior Court Judge Timothy Thomason ruled the subpoenas were “legal and enforceable.”2Arizona Mirror. Judge Sides With Senate, Says Maricopa Must Turn Over Election Materials for Audit
On March 31, 2021, the Senate hired Cyber Ninjas without a competitive bidding process and after turning down bids from more experienced firms.3States United Democracy Center. Report on the Cyber Ninjas Review The firm reported having five employees in 2020 and had never audited an election.4Brennan Center for Justice. Partisan Arizona Election Audit Was Flawed From the Start Its CEO, Doug Logan, had publicly promoted claims that the 2020 election was “stolen.” Subcontractors included Wake TSI for vote counting, CyFIR and Digital Discovery for voting system review, and separately Shiva Ayyadurai’s firm EchoMail, which was contracted for $50,000 to review signatures on mail-in ballot envelopes.5Tucson Sentinel. Audit Ayyadurai Claims
The physical ballot review began on April 23, 2021, at the Veterans Memorial Coliseum in Phoenix. The counting method itself drew criticism from election administrators. Rather than Arizona’s legally authorized “stacking” method, Cyber Ninjas used a “carousel” system in which ballots moved past counters on a spinning device, giving workers two to six seconds to view each ballot.3States United Democracy Center. Report on the Cyber Ninjas Review The process also included a search for bamboo fibers in ballot paper, rooted in a conspiracy theory that fraudulent ballots had been shipped from Asia.4Brennan Center for Justice. Partisan Arizona Election Audit Was Flawed From the Start
What the Audit Actually Found
The final report was presented on the Arizona Senate floor on September 24, 2021. The headline result undercut the premise of the review: the hand recount of 2.1 million ballots confirmed Biden’s win in Maricopa County and in fact slightly widened his margin, tallying 99 additional votes for Biden and 261 fewer votes for Trump than the official canvass.6CNBC. Trump-Friendly Cyber Ninjas Audit of Arizona Votes Still Shows Biden Won Senate President Fann acknowledged the vote totals were “close” to the county’s official results.
Alongside that confirmation, the report raised dozens of claims about alleged irregularities. Among them: that tens of thousands of ballots were “questionable,” that county staff had deleted files, that tabulation equipment had been connected to the internet, and that thousands of duplicate ballot envelope images signaled fraud. Trump, who had not seen the report, said it contained “undeniable evidence” of fraud.6CNBC. Trump-Friendly Cyber Ninjas Audit of Arizona Votes Still Shows Biden Won
How the Irregularity Claims Were Debunked
In January 2022, the Maricopa County Board of Supervisors and County Recorder Stephen Richer released a 93-page report titled “Correcting the Record,” which addressed all 75 claims made by the audit team and categorized 38 as inaccurate, 25 as misleading, and 11 as false.7Arizona Mirror. Maricopa County Rebuts Audit Findings, Bogus Election Claims
On the “questionable” ballots, Cyber Ninjas had flagged 53,304 as potentially invalid. The county found only 37 potential instances of double voting, or 0.069% of the flagged total, and traced the inflated figures to reliance on inaccurate commercial address databases and a matching method that used only first name, last name, and birth year. On deleted files, the county said no data was permanently deleted and pointed to 26 daily backups of the election management server created during the election period. On internet connectivity, the county confirmed that tabulation machines and the election management system were air-gapped; the two web servers auditors flagged were designed for external connections and unrelated to vote tabulation. On duplicate envelope images, officials said these were standard re-scans produced during the legally mandated signature-curing process, not evidence of double voting.
The county also noted internal inconsistencies in Cyber Ninjas’ own hand count. The presidential and U.S. Senate tallies, which should have reflected identical totals of ballots counted, differed by 173 ballots, and more than 28% of ballot batches showed discrepancies between the hand count and the audit’s machine count.8Maricopa County Elections Department. Correcting the Record – Maricopa County’s In-Depth Analysis of the Senate Inquiry
Months before Cyber Ninjas began work, the county had commissioned its own forensic review by two U.S. Election Assistance Commission-certified labs, Pro V&V and SLI Compliance. All central count tabulators and election management workstations passed source code testing. Scans for viruses, malicious software, and unauthorized hardware turned up nothing. Pro V&V examined more than 1.5 million ballot positions and found no evidence of vote switching.9Maricopa County. Elections Equipment Audit
The Arizona Attorney General’s office reached the same conclusion. Republican Attorney General Mark Brnovich, while running for U.S. Senate in April 2022, released an interim report alleging irregularities and criminal violations by Maricopa County. His own investigators’ internal notes said otherwise. After Democratic Attorney General Kris Mayes took office, she released the previously withheld findings, which stated that investigators found “no evidence of election fraud, manipulation or the election process, or any instances of organized/coordinated fraud.” The internal memo described the audit’s allegations as “speculative” and “inaccurate,” specifically debunking claims about dead voters, ineligible voters, double voting, internet-connected machines, and deleted data. Investigators did find “a small number of criminal violations,” including several cases of double voting, some of which occurred outside Maricopa County.10Axios. Arizona Attorney General Audit Findings Withheld
Ayyadurai’s envelope analysis fared no better. He flagged “critical anomalies” including hollow-looking triangles on scanned envelopes, thousands of alleged duplicate images, and signatures he called “scribbles.” Election officials and the ballot printing company Runbeck Election Services explained that the hollow triangles were an artifact of binary scanning used to reduce file sizes, that duplicates came from the signature-curing re-scan process, and that signature verification compares a voter’s signature to the one on file rather than judging legibility. Former Maricopa County Recorder Helen Purcell called the testimony “ridiculous.” Ayyadurai had not contacted county officials or the printing company before presenting his claims publicly.5Tucson Sentinel. Audit Ayyadurai Claims
Who Paid for It
The Senate’s $150,000 contract covered a small fraction of actual costs. Cyber Ninjas received about $5.7 million in private donations from organizations tied to the election denial movement.11The Guardian. Cyber Ninjas Arizona Ballot Audit Donations Trump Supporters The largest donors were:
- The America Project, founded by former Overstock.com CEO Patrick Byrne: more than $3.2 million.
- America’s Future, chaired by Michael Flynn: nearly $1 million.
- Voices and Votes, founded by One America News Network correspondent Christina Bobb, who broadcast the audit’s livestream and solicited donations on air: $605,000.
- Defending the Republic, led by attorney Sidney Powell: $550,000.
- Election Integrity Funds for the American Republic, linked to attorney Matthew DePerno: $280,000.
Logan acknowledged the funding but did not disclose the individual contributors behind the nonprofits, raising concerns about dark money financing a review of public election records.12Arizona Mirror. Election Conspiracy Theorist Groups Paid $5.7 Million for the Arizona Audit
Maricopa County also sought reimbursement for the equipment it said was compromised by the review. In August 2021, the Board of Supervisors voted unanimously to file a $2.8 million notice of claim against the Senate for the cost of replacing voting machines handled by audit contractors, citing a “Covenant of Indemnification” Fann had signed. Fann called the claim a “publicity stunt” and said the machines were undamaged.13azcentral. Maricopa County Files Claim Against Arizona Senate for $2.8M Voting Machine Costs The available record does not indicate a final resolution.
What Happened to Cyber Ninjas
The firm faced a separate public records fight with the Arizona Republic. On January 6, 2022, a Maricopa County Superior Court judge found Cyber Ninjas in contempt for refusing to release records related to the review and ordered sanctions of $50,000 per day until the documents were produced.14azcentral. Arizona Judge Finds Cyber Ninjas in Contempt, Orders $50K Daily Fines The judge warned he would impose fines on individuals if the company ceased to exist.15Washington Post. Cyber Ninjas Ordered to Pay $50,000 a Day in Sanctions
Days later, Logan confirmed the company had dissolved, citing cash flow problems. Reports indicated the firm intended to re-form as a new entity with the same employees. Legal analysts said successor liability principles would likely allow courts to hold a successor firm, and potentially Logan personally, responsible for the outstanding contempt fines and unpaid judgments.16Forbes. How Successor Liability May Disrupt the Best Laid Plans of Cyber Ninjas
The Federal Criminal Investigation
On March 5, 2026, the U.S. Attorney’s Office for the District of Arizona, acting through the FBI Phoenix Field Office’s Fraud Investigations unit, issued a grand jury subpoena to Arizona Senate President Warren Petersen for virtually all records related to the 2020 audit. The subpoena sought Cyber Ninjas’ forensic reports, original electronic media provided by Maricopa County, clones of election software and data, documentation of the forensic tools and procedures used, and communications between the Senate and county election officials.1Arizona Mirror. DOJ Subpoena Reveals Federal Investigators Sought Virtually All Records From Arizona’s 2020 Audit
Petersen complied, turning over more than 200 terabytes of data. The production included multiple six-terabyte hard drives containing forensic images believed to include ballot photographs, backup servers with video footage of the audit, eight USB drives, and miscellaneous documents.17KJZZ. Records: Arizona Senate Turned Over Hundreds of Terabytes of 2020 Election Audit Data to FBI The Maricopa County Board of Supervisors and the County Recorder’s Office confirmed they had not received their own subpoenas.18NPR. Arizona Maricopa County 2020 Records Petersen
No individuals have been publicly identified as targets, and no charges have been announced. The FBI has declined to comment. Attorney General Kris Mayes called the inquiry the “weaponization of federal law enforcement in service of crackpots and lies,” and the FBI simultaneously pursued related 2020 election records from Fulton County, Georgia.19Arizona Capitol Times. Federal Probe Examines Debunked 2020 Arizona Election Audit The investigation remains active as of mid-2026.