Secretary of state turned to unverified credit data to check voters’ addresses for ‘election integrity’