A major problem is that data – and thus electronic evidence – is volatile and often held by service providers in foreign jurisdictions or stored in multiple, shifting or unknown jurisdictions, that is, “somewhere on servers in the cloud”. Attributing an attack, or simply identifying the user of an Internet Protocol (IP) address or the owner of a social media or email account is often not possible with reasonable effort. This is one of the reasons why cybercrime and other cyber threats to electoral democracy are rarely prosecuted.