Alberta voter list leak is a potential public safety disaster: enforcement experts

· policy · Source ↗

TLDR

  • Nearly 3 million Alberta voter records (names, addresses, phone numbers) leaked via a separatist group’s canvassing app, with experts warning of decades-long criminal and foreign interference risk.

Key Takeaways

  • The Centurion Project, tied to separatist operative David Parker, built a searchable app using the List of Electors obtained from the Republican Party of Alberta; Parker paid $45,000 for the data from a third-party vendor.
  • Elections Alberta salts voter lists to trace leaks; analysis confirmed the data originated from Republican Party of Alberta head Cam Davies, who claims vendors misused access he later revoked.
  • A journalist warned Elections Alberta on March 31 about a freely downloadable database; the Elections Commissioner declined to investigate until April 27 due to a higher evidentiary threshold introduced by UCP’s 2025 Elections Act amendments.
  • Former RCMP officials warn the data enables micro-targeting of voters ahead of a separatism referendum, and exposes high-risk individuals (judges, police, journalists, domestic abuse victims) whose addresses are otherwise guarded.
  • No public inquiry has been called; Premier Smith’s response was characterized by enforcement experts as inadequate given the scale.

Hacker News Comment Review

  • Commenters with US context note that equivalent voter registration data (name, address, phone) is legally public and freely obtainable in many US states, framing the Canadian reaction as a cultural gap rather than a novel data exposure.
  • The primary technical concern raised is not the PII itself but that accessible election data implies potentially alterable election infrastructure; a secondary concern is that the database was left unprotected, raising questions of intentionality.
  • There is some skepticism about alarmism given widespread prior data exposure, but commenters acknowledge that individuals who deliberately suppress their address (witnesses, judges, journalists) face disproportionate harm.

Notable Comments

  • @uticus: Flags that readable election data implies writable election data – the integrity risk may exceed the privacy risk.

Original | Discuss on HN