The illegal use of voter information by rightwing separatists in the province of Alberta has raised fresh fears over Canada\u2019s electoral integrity by making valuable and \u201cincredibly confidential\u201d personal data easily accessible to malicious actors, security experts have warned.<\/p>\n
The data breach, one of the largest in Canadian history,<\/a> has prompted warnings of a \u201ctruly terrifying\u201d new battleground over information, persuasion and foreign interference in already weakened democratic systems.<\/p>\n Activists in the oil-rich province have in recent months increased their effort to force an independence referendum. But debates over secession \u2013 already rife with accusations of treason<\/a> and internecine feuding \u2013 have been overshadowed by revelations that a separatist-linked organization gained illegal access to Alberta\u2019s official list of electors. The database contains the names, home addresses and contact information for roughly 2.9 million voters.<\/p>\n Elections Alberta, the body that administers the vote in the province, says it has launched an investigation into how a far-right group was able to access the database and use it for a campaign to reach voters.<\/p>\n Separatist leaders recently unveiled an initiative using data-driven campaigning and grassroots mobilization to connect with voters.<\/p>\n During an online meeting with supporters, Centurion Project organizer Emmott Kelsey told attendees<\/a> the app would \u201crevolutionize\u201d how campaigns are run. He boasted that the software underpinning it is \u201cso groundbreaking\u201d that it had been presented to Donald Trump\u2019s White House.<\/p>\n \u201cAnd we\u2019re kind of the guinea pigs with it,\u201d he said. The Guardian asked Kelsey to clarify his remarks but did not receive a response.<\/p>\n One of the key figures of the Centurion Project is David Parker, a veteran Alberta political organizer with deep ties to the separatist movement, and to US Maga activists and far-right figures such as Tucker Carlson. Parker has previously faced hefty fines from Elections Alberta<\/a> over violations of voting laws.<\/p>\n \u201cParker is a shockingly effective political organizer. What he was doing was attempting to create a digital grassroots organizational tool. And on its face, there\u2019s nothing wrong with that,\u201d said Jen Gerson, an Alberta-based journalist. \u201cBut in order to populate the app that underlies the Centurion Project, he needed data.\u201d<\/p>\n People gather outside the Alberta legislature to rally for Alberta\u2019s independence on 3 May 2025. Photograph: NurPhoto\/Getty Images<\/p>\n In March, Gerson was tipped off<\/a> that the Centurion Project had obtained a copy of the province\u2019s voter list. Her source said they had been able to access the Centurion Project\u2019s database without using their real name or any traceable personal information.<\/p>\n Gerson said the absence of any security or protection was astounding.<\/p>\n \u201cAnybody with a burner account and no credentials could then access the file and potentially download information from it,\u201d she said. \u201cIf you knew about it, you could anonymously access the entire data root file.\u201d<\/p>\n Gerson reported her concerns to Elections Alberta in late March. But the oversight body responded that while her report was \u201ccompelling\u201d, Parker could have obtained the list legally from a data broker and concluded there were \u201cno reasonable grounds\u201d to investigate.<\/p>\n A month later, however, EA obtained a court order to shut the database down and launched an investigation. Canada\u2019s federal police, the RCMP, and Alberta privacy commissioner are also investigating the breach.<\/p>\n In order to prevent the improper sharing of voter lists, EA \u201cseeds\u201d voter lists with fake names, and the body was able to confirm that the CP list had originally been provided legally to the Republican party of Alberta, a fringe rightwing party, and then improperly shared.<\/p>\n The party said it had told Centurion Project not to use the data but did not say if the list had come from within the party. \u201cWe were proactive on that before the injunction today, and we\u2019ll be fully complying with Elections Alberta,\u201d leader Cam Davies told the Canadian Press.<\/p>\n The provincial government has blamed the elections agency for failing to investigate the breach when first notified. But EA says the provincial government weakened its investigative powers last year.<\/p>\n Elections Alberta says nearly 600 people accessed the voter list which it described as \u201cincredibly confidential\u201d, adding in a statement that it understood Albertans were \u201cunhappy, scared and anxious\u201d about the situation.<\/p>\n \u201cWe have heard countless stories about the risks people face having their information made public, including stories from domestic violence survivors, law enforcement, marginalized communities, and more,\u201d the group said, calling on the government to amend existing laws to prevent a similar breach in the future.<\/p>\n Parker has denied that he used the Republican Party voter list and suggested the database was compiled from a third party.<\/p>\n \u201cWe have taken action to shut down the app until we can ensure that the dataset is compliant with Alberta and Federal privacy laws. The Centurion Project plans to fully comply with Elections Alberta\u2019s investigation,\u201d Parker said in a statement<\/a>.<\/p>\n In the statement, Parker said volunteers with the Centurion Project \u201cdid not have access to phone numbers or emails\u201d and the dataset was from a third party.<\/p>\n But during an online demonstration of the database for volunteers at a 16 April event , Parker showed how the personal information of any voter could be found on the database. One witness at the event \u2013 a member of the opposition NDP \u2013 was shocked when Parker pulled up the home address and phone number<\/a> of Alberta\u2019s former premier Jason Kenney. That witness then filed a report with the police.<\/p>\n Kenney has said he is hiring a lawyer for advice, warning that the breach may affect domestic violence survivors, journalists, activists, judges, and other public servants for years to come.<\/p>\n \u201cThis has been a real wake up call to the risks that we\u2019re playing with here. We have to assume that all of our personal information and address are potentially available to bad actors,\u201d said Gerson. \u201cPeople are very angry and they\u2019re very scared. But if you don\u2019t want these guys in your house, why are you even thinking about letting them run your country?\u201d<\/p>\n The leak has become a political flashpoint in Alberta, but the efforts to subvert election and privacy laws expose the immense value in voter lists and mirror a similar battle unfolding in the US.<\/p>\n An activist holds a sign outside the Alberta legislature on 3 May 2025. Photograph: NurPhoto\/Getty Images<\/p>\n In recent months<\/a>, the US department of justice has sued<\/a> 30 states and the District of Columbia for failing<\/a> to turn over full copies of their voter registration lists. States, including some controlled by Republicans, have pushed back, citing constitutionally guaranteed authority<\/a> over election administration and worries over data security and privacy laws. Voting rights groups have sued<\/a> the Trump administration over the requests for voter rolls, accusing it of laying the groundwork for voter purges ahead of the November midterms.<\/p>\n \u201cData is a major force in modern politics, especially in the ways it can be leveraged. Powerful actors and authoritarian regimes are very creative and have real designs on taking apart the last remaining liberal democracy in North America,\u201d said Patrick Lennox, former manager of criminal intelligence for the RCMP\u2019s federal policing programs in Alberta. \u201cSince Trump came back into power, he has destabilized that democracy to the point where I don\u2019t think you can legitimately call it a democracy any more \u2026 And I worry that\u2019s exactly what the play is in Alberta.\u201d<\/p>\n The Centurion Project has not said which company developed the underlying software it relies on, but sources familiar with the investigation say the company is based in the United States. When asked for comment by the Guardian, the company did not respond.<\/p>\n Lennox warned that if the file was stored without proper protections, it could be captured by American data brokers who are governed by less stringent privacy laws than in Canada. The breach also comes as the Trump administration has threatened to subjugate Canada and signalled its support for Alberta\u2019s separatists.<\/p>\n \u201cIt\u2019s not like the Americans will put in digital sovereignty precautions for the voter list,\u201d he said. \u201cBecause it\u2019s important to remember: the United States is also trying to break our country.\u201d<\/p>\n Washington is not the only outside actor paying close attention to Alberta\u2019s secession movement. Researchers recently warned that the province is being targeted by covert influence campaigns run by countries such as Russia and China. The Global Centre for Democratic Resilience, the University of Regina and DisinfoWatch recently documented the scope of foreign interference campaigns alongside the proliferation of AI-generated videos and the threat over threats and interference from Donald Trump and his allies.<\/p>\n Brian McQuinn, co-director of the Centre for Artificial Intelligence, Data, and Conflict at the University of Regina pointed out that before Russia\u2019s full scale invasion of Ukraine, researchers documented a spike in discussions about sovereignty in the country.<\/p>\n \u201cThere was this narrative that it was not actually its own sovereign country, that it\u2019s just this sort of mistake of history. This is the exact same language the Americans are using around Canada,\u201d he said.<\/p>\n