Elections Alberta has issued 568 [2] cease-and-desist letters to individuals who accessed a leaked database of personal voter information.
The move follows a security failure that exposed the private data of nearly the entire voting population in Alberta. This breach represents a vulnerability in the province's electoral infrastructure and raises questions about data sovereignty and voter privacy.
According to reports, the leak involved a searchable database that exposed the personal information of 2.9 million [2] Albertans. The elections watchdog sent the letters to stop the further spread of this sensitive data [1]. Among those who received a cease-and-desist letter was former premier Jason Kenney [1].
Parallel to these letters, the privacy commissioner has launched a probe into the breach [1]. The investigation aims to determine how the data was compromised and why it became accessible to the public. Legal actions have also extended to a separatist application, against which a temporary injunction was obtained [3].
Additional law enforcement involvement has been reported, with an RCMP investigation into the separatist app linked to the secret voter list [4]. The agency's effort to reclaim the data and penalize unauthorized access underscores the scale of the exposure, affecting millions of citizens across the province [2].
While some reports stated that more than 500 letters were sent [1], the specific count stands at 568 [2]. The agency continues to monitor the situation as the privacy commissioner's investigation proceeds [1].
“The leak involved a searchable database that exposed the personal information of 2.9 million Albertans.”
The scale of this breach, affecting roughly 2.9 million people, suggests a systemic failure in how Alberta manages its voter registries. By targeting high-profile figures and specific apps with legal injunctions, the government is attempting to contain the data's circulation, but the use of a searchable database means the information was likely mirrored or archived by multiple third parties before the cease-and-desist orders were issued.
