‘The selling of an election’: how private firms compromised midterms security