The personal information of roughly 2.9 million voters in Alberta has been exposed in one of the largest data breaches in Canadian history, sparking urgent warnings from security experts about the fragility of the nation’s electoral integrity. The breach, which saw “incredibly confidential” data—including names, home addresses, and contact details—fall into the hands of right-wing separatists, has transformed a provincial political dispute into a national security concern.
At the center of the controversy is the Centurion Project, an organization linked to Alberta’s independence movement. The group allegedly leveraged an insecure database to power a “groundbreaking” campaigning app designed to mobilize grassroots support for secession. However, the lack of basic security protocols meant that the sensitive data of millions was potentially accessible to anyone with a burner account, leaving domestic violence survivors, law enforcement officers, and public servants vulnerable to harassment or targeted interference.
The incident has exposed a dangerous intersection between data-driven political campaigning and foreign influence. Security analysts warn that the breach is not merely a local failure of privacy, but a “truly terrifying” precursor to a new era of information warfare where voter lists are weaponized to destabilize democratic systems from within.
The anatomy of a systemic failure
The breach began not with a hack, but with a leak. According to investigations by Elections Alberta (EA), the voter list was originally provided legally to the Republican Party of Alberta, a fringe right-wing party. From there, the data was improperly shared with the Centurion Project.
The scale of the negligence became apparent in March, when Alberta-based journalist Jen Gerson was tipped off about the database. Gerson discovered that the Centurion Project’s data root file lacked virtually any protection. “Anybody with a burner account and no credentials could then access the file and potentially download information from it,” Gerson stated, noting that the absence of security was “astounding.”
Despite Gerson reporting these concerns to Elections Alberta in late March, the oversight body initially declined to investigate, suggesting the data might have been obtained legally through a third-party broker. It took another month for EA to secure a court order to shut the database down and launch a formal probe. By that time, EA estimates that nearly 600 unauthorized individuals had accessed the confidential list.
| Timeline Event | Action/Outcome |
|---|---|
| Late March | Journalist Jen Gerson alerts Elections Alberta to the insecure database. |
| April 16 | David Parker demonstrates the database to volunteers, exposing former Premier Jason Kenney’s private data. |
| Late April | Elections Alberta obtains a court order to shut down the Centurion Project database. |
| May 3, 2025 | Separatist rallies held at Alberta legislature as RCMP and Privacy Commissioner investigations intensify. |
The ‘Centurion Project’ and the MAGA Connection
The Centurion Project is led by David Parker, a veteran political organizer known for his ties to the separatist movement and connections to U.S.-based MAGA activists, including figures like Tucker Carlson. Parker has a history of friction with electoral authorities, having previously faced significant fines from Elections Alberta for voting law violations.
The organization’s ambitions extended beyond Alberta. Emmott Kelsey, a Centurion Project organizer, claimed during a supporter meeting that the software underpinning their app was so advanced it had been presented to Donald Trump’s White House. “And we’re kind of the guinea pigs with it,” Kelsey told attendees, framing the project as a revolution in data-driven campaigning.
The danger of this approach was highlighted during an April 16 demonstration. A witness from the opposition NDP reported that Parker was able to instantly pull up the home address and phone number of former Alberta Premier Jason Kenney. The incident prompted a police report and a warning from Kenney, who noted that such breaches could haunt journalists, judges, and activists for years.
“We have to assume that all of our personal information and address are potentially available to bad actors,” said Jen Gerson. “People are exceptionally angry and they’re very scared.”
A broader battle for digital sovereignty
The Alberta breach mirrors a escalating conflict over voter data in the United States. Recently, the U.S. Department of Justice sued 30 states and the District of Columbia over the failure to provide full voter registration lists, while voting rights groups have accused the Trump administration of using such requests to prepare for voter purges.
Patrick Lennox, a former manager of criminal intelligence for the RCMP’s federal policing programs in Alberta, warns that the Centurion Project’s reliance on U.S.-based software creates a “digital sovereignty” crisis. If voter data is stored on American servers without stringent protections, it becomes accessible to U.S. Data brokers and foreign intelligence agencies.
Lennox suggests that the destabilization of Canadian democracy may be a deliberate strategy. “Powerful actors and authoritarian regimes are very creative and have real designs on taking apart the last remaining liberal democracy in North America,” Lennox said, adding that the U.S. Administration’s signaled support for Alberta separatists is a move to weaken Canada’s negotiating position on trade and sovereignty.
This concern is echoed by researchers at the University of Regina and DisinfoWatch, who have documented covert influence campaigns from Russia and China targeting Alberta. Brian McQuinn, co-director of the Centre for Artificial Intelligence, Data, and Conflict, noted a parallel between the language used to undermine Ukrainian sovereignty before the 2022 invasion and the current rhetoric used by some U.S. Allies regarding Canada.
What happens next?
The fallout from the breach has left Elections Alberta in a precarious position. While the provincial government has criticized the agency for its delayed response, EA contends that the government itself weakened the agency’s investigative powers last year. The agency is now calling for urgent legislative amendments to prevent the improper sharing of voter lists and to increase penalties for those who weaponize electoral data.
The investigation is now in the hands of the RCMP and the Alberta Privacy Commissioner. The next critical checkpoint will be the conclusion of the RCMP’s forensic audit of the Centurion Project’s servers to determine exactly how many third parties—including foreign entities—accessed the 2.9 million voter records.
This is a developing story. We invite our readers to share their perspectives on voter privacy and electoral security in the comments below.
Disclaimer: This article discusses ongoing legal investigations and allegations of electoral interference. All parties mentioned are presumed innocent until proven guilty in a court of law.
