Alberta Voter Data: Your address was exposed for a month on a searchable app
Millions of Albertans' addresses exposed on a searchable app.
[CALGARY, AB] — Your name, your home address, and a unique code tied to your voter identity were sitting in a searchable app — accessible to anyone with an account — and it took roughly a month after a journalist first raised the alarm for anyone in authority to act.
What Got Out, and Who Put It There
On April 30, 2026, a Court of King's Bench judge granted an emergency injunction forcing the immediate shutdown of a database containing the personal information of nearly 3 million Albertans — essentially every registered voter in the province. The exposed data included names, home addresses, postal codes, and unique voter identifiers.
This was not a hack. Elections Alberta confirmed its internal systems were never breached. The data originated from a legitimate copy of the Provincial List of Electors provided to the Republican Party of Alberta last summer. Political parties are legally entitled to those lists for campaigning. They are strictly prohibited from sharing them with outside groups.
The Centurion Project — a separatist organization led by David Parker, the political organizer who founded Take Back Alberta — allegedly received that data and built an app designed to identify and mobilize sovereignty supporters ahead of a potential referendum.
The Detail That Should Unsettle Everyone
Privacy experts have called the exposure "incredibly serious." The reasons go beyond the obvious. The database reportedly included the home addresses of judges, Crown prosecutors, high-ranking police officials, and politicians — people whose residential information is typically shielded precisely because its exposure invites harassment or worse.
For ordinary Calgarians, the risks are more mundane but still real: a verified, province-wide list of names and addresses is a sophisticated starter kit for phishing campaigns and mail-based fraud, even without social insurance numbers attached.
A Month of Inaction Is the Other Story
According to reporting reviewed for this piece, a journalist flagged the potential breach to Elections Alberta in late March 2026. The official investigation and the subsequent court injunction did not materialize until late April. That gap — several weeks during which the database remained live and searchable — is now drawing pointed questions about institutional response times.
Elections Alberta has not publicly explained the delay.
The Law Has a Hole in It
The Alberta Privacy Commissioner has identified a structural problem: once a political party legally receives voter data, current legislation provides limited oversight over what happens next. Political parties are not subject to the same privacy obligations as private corporations handling personal information.
The incident has triggered calls for immediate amendments to the Election Act to close that gap. No specific legislative proposals have been tabled publicly as of this writing.
Where Things Stand
The RCMP and Elections Alberta are conducting a joint investigation. The Centurion Project has been ordered by the court to produce a complete list of every person who accessed or downloaded the data within four days of the April 30 order. Whether that list has been delivered — and what investigators intend to do with it — has not been confirmed.
No charges have been announced against the Republican Party of Alberta or The Centurion Project.
The harder question sitting underneath all of this: if a pro-independence group could legally receive 3 million Albertans' home addresses through a routine electoral process, and the law had no mechanism to stop what came next, how many other parties are sitting on the same data right now?