Alberta Separatist Group’s Voter Database Shut Down Amid Privacy Breach Probe
Elections Alberta has taken action against the Centurion Project, an Alberta separatist group, after an alleged privacy breach exposed the personal information of up to three million voters. The agency received credible intelligence on Monday, April 27, 2026, indicating the group had obtained a confidential voter list, prompting cease-and-desist letters the next day. On Wednesday, officials and police delivered a second notice in person during a Centurion Project meeting in Edmonton.
The database, which was publicly accessible until its shutdown on Thursday afternoon under a court-issued injunction, contained home addresses of prominent politicians, judges, Crown prosecutors, and elections officials details not available through public directories. The Centurion Project has four days to disclose all parties that accessed the list and provide their contact information.
The voter list, legally restricted to political parties, candidates, and constituency associations for campaign purposes, was allegedly obtained by the Centurion Project after being shared with the pro-independence Republican Party of Alberta. Elections Alberta confirmed the breach after investigators matched fake names seeded in the original list to those in the Centurion Project’s database, tracing the leak to an anonymous tip.
David Parker, the Centurion Project’s leader, has previously stated the group’s goal is to recruit supporters for a potential Alberta separation referendum this fall. While Parker has not commented, group official Tim Hoven claimed the data came from an unnamed third party and that the app was intended for volunteer use. The Republican Party of Alberta denied providing the list, while the United Conservative Party (UCP) and Progressive Tories also rejected involvement.
Elections Alberta’s public disclosure of the breach is rare, as the agency is typically barred from commenting on investigations. However, officials deemed the situation critical enough to warn Albertans about potential risks, including unexpected communications or identity theft. The RCMP has launched an investigation, and the province’s privacy commissioner has been notified.
Violations of Alberta’s voter list laws carry penalties of up to $100,000 in fines and one year in prison. This incident follows a 2025 fine against Parker and his group, Take Back Alberta, for prior electoral violations. Opposition NDP leader Naheed Nenshi condemned the breach as a threat to democracy and personal safety, while the Republican Party faces calls for deregistration if found responsible.
The case highlights growing concerns over the misuse of voter data and the security of sensitive personal information in political organizing.
Centurion Project TPRM report: https://www.rankiteo.com/company/centurion-project
Elections Alberta TPRM report: https://www.rankiteo.com/company/electionsab
"id": "elecen1777609532",
"linkid": "electionsab, centurion-project",
"type": "Breach",
"date": "4/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Up to 3 million voters',
'industry': 'Politics',
'location': 'Alberta, Canada',
'name': 'Centurion Project',
'type': 'Political organization'},
{'industry': 'Government',
'location': 'Alberta, Canada',
'name': 'Elections Alberta',
'type': 'Government agency'},
{'industry': 'Politics',
'location': 'Alberta, Canada',
'name': 'Republican Party of Alberta',
'type': 'Political party'}],
'attack_vector': 'Third-party data leak',
'data_breach': {'number_of_records_exposed': 'Up to 3 million',
'personally_identifiable_information': 'Yes (home addresses, '
'names)',
'sensitivity_of_data': 'High (personally identifiable '
'information, sensitive personal '
'details)',
'type_of_data_compromised': 'Voter personal information, home '
'addresses of politicians and '
'officials'},
'date_detected': '2026-04-27',
'date_publicly_disclosed': '2026-04-30',
'description': 'Elections Alberta took action against the Centurion Project, '
'an Alberta separatist group, after an alleged privacy breach '
'exposed the personal information of up to three million '
'voters. The database, which was publicly accessible, '
'contained home addresses of prominent politicians, judges, '
'Crown prosecutors, and elections officials. The breach was '
'traced to an anonymous tip, and the group has been ordered to '
'disclose all parties that accessed the list.',
'impact': {'brand_reputation_impact': 'Significant reputational damage to '
'Centurion Project and associated '
'political entities',
'data_compromised': 'Personal information of up to 3 million '
'voters, including home addresses of '
'politicians, judges, and officials',
'identity_theft_risk': 'High risk of identity theft and unexpected '
'communications for affected individuals',
'legal_liabilities': 'Potential fines up to $100,000 and '
'imprisonment for violations of Alberta’s '
'voter list laws',
'operational_impact': 'Shutdown of publicly accessible voter '
'database under court injunction',
'systems_affected': 'Centurion Project’s voter database '
'application'},
'initial_access_broker': {'entry_point': 'Third-party data leak (allegedly '
'from Republican Party of Alberta)',
'high_value_targets': 'Politicians, judges, Crown '
'prosecutors, elections '
'officials'},
'investigation_status': 'Ongoing (RCMP investigation)',
'lessons_learned': 'Growing concerns over misuse of voter data and security '
'of sensitive personal information in political '
'organizing. Need for stricter controls on sharing and '
'handling restricted voter lists.',
'motivation': 'Political organizing, potential Alberta separation referendum',
'post_incident_analysis': {'corrective_actions': 'Court injunction to shut '
'down database, disclosure '
'requirements for parties '
'that accessed the list, '
'ongoing RCMP investigation',
'root_causes': 'Improper sharing and handling of '
'restricted voter data, lack of '
'access controls, potential '
'third-party leak'},
'recommendations': 'Enforce stricter access controls for voter data, enhance '
'monitoring of data sharing, and impose harsher penalties '
'for violations. Political entities should implement '
'robust data protection measures.',
'references': [{'source': 'Elections Alberta'},
{'source': 'RCMP'},
{'source': 'CBC News'}],
'regulatory_compliance': {'fines_imposed': 'Potential fines up to $100,000',
'legal_actions': 'Court injunction, RCMP '
'investigation, privacy '
'commissioner notified',
'regulations_violated': 'Alberta’s voter list laws',
'regulatory_notifications': 'Privacy commissioner '
'notified'},
'response': {'communication_strategy': 'Public disclosure by Elections '
'Alberta to warn Albertans about '
'potential risks',
'containment_measures': 'Database shutdown under court '
'injunction, cease-and-desist notices '
'delivered',
'incident_response_plan_activated': 'Cease-and-desist letters '
'issued, court injunction '
'obtained to shut down '
'database',
'law_enforcement_notified': 'Yes (RCMP)',
'remediation_measures': 'Group ordered to disclose all parties '
'that accessed the list',
'third_party_assistance': 'RCMP investigation launched'},
'stakeholder_advisories': 'Elections Alberta warned Albertans about potential '
'risks, including identity theft and unexpected '
'communications.',
'threat_actor': 'Centurion Project (Alberta separatist group)',
'title': 'Alberta Separatist Group’s Voter Database Shut Down Amid Privacy '
'Breach Probe',
'type': 'Data Breach',
'vulnerability_exploited': 'Improper handling and sharing of restricted voter '
'data'}