Loading story…
A proposed class-action lawsuit alleges that personal information from Alberta’s official list of electors was improperly obtained and distributed through the Centurion Project, potentially affecting 2.9 million residents. Filed by retired class-action lawyer Clint Docken, the suit claims the voter data was unlawfully accessed and shared, exposing sensitive personal details and creating heightened risks for vulnerable groups including domestic violence victims, health care professionals, and elected officials.
The lawsuit names the Government of Alberta, Chief Electoral Officer Gordon McClure, and two pro-secession organizations over their alleged roles in the incident. The complaint argues that Alberta and Elections Alberta failed to implement adequate safeguards, auditing, and enforcement to protect the voter list, while the other defendants are accused of involvement in obtaining or handling the data; no compensation amount was specified in the filing.
See attribution, scope, and your downstream exposure.
1 event from the most recent confirmed update back to the earliest known activity.
A retired lawyer, identified as former class-action lawyer Clint Docken, filed a proposed class-action lawsuit alleging that the Centurion Project unlawfully obtained and distributed Alberta voter data affecting 2.9 million residents. The suit names Alberta, Chief Electoral Officer Gordon McClure, and two pro-secession organizations over their alleged roles in the incident.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
2 references tracked. Mallory keeps watching after this page renders.
malware.news
Open sourcedatabreaches.net
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Voting rights organizations, including the League of Women Voters and the Electronic Privacy Information Center (EPIC), have initiated legal action against the Trump administration over its efforts to expand and repurpose the Systematic Alien Verification for Entitlements (SAVE) system into a comprehensive voter and citizenship tracking database. The SAVE system, originally designed to verify immigration status for federal benefits, is being transformed to merge federal and state voter data, creating what plaintiffs describe as massive 'national data banks' of Americans' personal information. The lawsuit, filed in the D.C. District Court, alleges that this data consolidation violates the Privacy Act of 1974, which restricts interagency data sharing without public disclosure or congressional notification. Plaintiffs argue that the administration's actions are both illegal and secretive, posing a significant threat to the privacy and civil liberties of millions of Americans. The coalition, represented by legal advocacy groups such as Democracy Forward Foundation, Citizens for Responsibility and Ethics in Washington (CREW), and Fair Elections Center, is seeking an emergency injunction to halt the ongoing data integration. They contend that the administration's efforts could lead to the unlawful targeting and potential disenfranchisement of lawful voters, under the guise of preventing voter fraud. The groups emphasize that the SAVE system was never intended to serve as a comprehensive voter surveillance tool and that its expansion represents an abuse of executive power. In their court filings, the plaintiffs highlight the risk of permanent privacy harms resulting from the centralized pooling of sensitive data across government agencies. They also allege the existence of at least one other interagency 'data lake' that aggregates immigrant-related information, further exacerbating privacy concerns. The legal challenge underscores fears that the administration's data practices could undermine free and fair elections by enabling voter purges and government overreach. Statements from the League of Women Voters' CEO, Celina Stewart, characterize the initiative as one of the most serious threats to electoral integrity in decades. The plaintiffs are urging the court to act swiftly to prevent irreversible damage to voter privacy and democratic participation. The case brings national attention to the intersection of data security, privacy rights, and election integrity. The outcome of this legal battle could set significant precedents for how federal data systems are used in the context of voting and citizenship verification. The controversy also raises broader questions about the balance between preventing voter fraud and protecting individual rights in the digital age. The administration has not publicly detailed the full scope or technical specifics of the planned data consolidation, fueling further concerns about transparency and oversight. Advocacy groups warn that unchecked expansion of such databases could have long-term implications for civil liberties and public trust in government institutions. The court's decision on the emergency injunction will be closely watched by privacy advocates, election officials, and policymakers nationwide.
Jul 12, 2026
Canadian privacy regulators released investigative reports attributing significant responsibility for the PowerSchool data breach to the school systems that used the platform. The breach, which occurred in December, exposed personal information of over 62 million students and 9 million teachers, with data in some cases dating back to 1985. The reports highlighted that the affected schools failed to include adequate privacy and security provisions in their contracts with PowerSchool, did not effectively monitor the company's security safeguards, and lacked proper breach response protocols. Additionally, the lack of multifactor authentication and insufficient limitations on remote access for PowerSchool support personnel were cited as key security lapses. The Ontario and Alberta information and privacy commissioners recommended that schools renegotiate contracts to strengthen privacy and security requirements, implement better oversight of third-party vendors, and establish more robust breach response plans. The incident underscores the importance of comprehensive vendor management and the need for educational institutions to enforce standard security practices, such as multifactor authentication, to protect sensitive student and staff data.
Jun 29, 2026
**Bell Ambulance** reported that a February 2025 network intrusion led to the compromise of protected health information for **237,830 individuals**, after unauthorized activity was detected on **Feb. 13, 2025**. The organization said the exposed data can include **names, dates of birth, Social Security numbers, driver’s license numbers, financial account information, medical information, and health insurance information**; it offered **12–24 months** of credit monitoring/identity protection and stated it was not aware of misuse at the time of notification. The incident response included third-party forensic support, and notifications were issued in phases as the data review progressed, with additional letters sent into March 2026. Separately, **Cornerstone Specialty Hospitals** agreed to pay **$2.35 million** to settle a class action lawsuit tied to a data breach that reportedly affected **nearly 500,000 individuals**. The available reporting focuses on the settlement amount and impacted population size, indicating ongoing legal and financial consequences for large-scale healthcare data exposure even when technical details of the underlying intrusion are not publicly described in the same source.
Jun 29, 2026