1. [News](/news) 2. The Centurion Project data breach: what happened and what's at risk # The Centurion Project data breach: what happened and what's at risk A data breach involving The Centurion Project was reported in April 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team May 1, 2026 Table of Contents * [What happened in the Centurion Project data breach?](#what-happened-in-the-centurion-project-data-breach) * [Who is behind the incident?](#who-is-behind-the-incident) * [Impact and risks for Centurion Project customers](#impact-and-risks-for-centurion-project-customers) * [How to protect against similar security incidents](#how-to-protect-against-similar-security-incidents) ## Key facts: The Centurion Project data breach * Date reported April 30, 2026 * Target entity The Centurion Project * Source of breach Unknown, unauthorized third-party * Data types Voter list information, confidential information * Status Confirmed; reported on April 30, 2026. * Severity Medium; the incident involves the exposure of confidential voter data for millions of individuals, increasing the risk of targeted social engineering. ## What happened in the Centurion Project data breach? The Centurion Project (thecenturionproject.ca), an Alberta-based separatist group, was involved in a significant data breach reported on April 30, 2026. The incident centered on a database that was allegedly accessible to the public, prompting immediate investigations by Elections Alberta and the RCMP. No specific threat actor has been identified as being responsible for the exposure, which appears to stem from a database configuration issue or unauthorized access to sensitive records. The database reportedly contained confidential voter information for up to three million Albertans, originating from a list provided to the Republican Party of Alberta in 2025. Following a court injunction, public access to the database was terminated, and the organization has been ordered to identify all individuals who accessed the data. This medium-severity incident highlights critical concerns regarding the management of political data and personal privacy. Such exposures typically lead to heightened risks of identity-related fraud and targeted phishing campaigns. ## Who is behind the incident? The attacker or cause of the incident has not been identified. ## Impact and risks for Centurion Project customers For the three million Albertans potentially affected by this breach, the primary risks include identity theft and highly targeted phishing. Because the exposed data involves voter lists, it likely contains names, addresses, and other identifiers that malicious actors can use to build detailed profiles for social engineering. While direct service disruption is unlikely for the individuals involved, the misuse of their confidential information remains a significant long-term concern. Typical outcomes of such exposures include the unauthorized distribution of data on dark web marketplaces. To mitigate these risks, individuals should monitor their financial statements for unusual activity, update passwords for sensitive online accounts, and remain highly cautious of unsolicited communications. Transparency from investigating authorities is essential for helping the public understand the full scope of the exposure and necessary protective steps. ## How to protect against similar security incidents Given the exposure of confidential voter information at The Centurion Project, affected individuals should take immediate steps to secure their personal data and monitor for signs of misuse. * **Monitor for phishing and social engineering.** Be skeptical of unsolicited emails, texts, or phone calls that reference your personal information or political affiliations. Do not click on links or download attachments from unknown or unverified senders. * **Enable multi-factor authentication.** Implement phishing-resistant MFA on all sensitive accounts, including email, banking, and government portals. Use authenticator apps or hardware security keys rather than SMS-based codes whenever possible. * **Enroll in identity theft protection.** Consider using a credit monitoring service to receive alerts regarding unauthorized changes to your credit report. Place a fraud alert on your credit files if you suspect your personal information has been compromised. * **Review attack surface management.** Organizations should perform regular audits of database permissions to ensure sensitive information is not publicly accessible. Deploy continuous monitoring tools to detect misconfigured cloud storage or exposed digital assets. > Taking these proactive measures can significantly reduce the risk of secondary attacks following a data exposure incident. ## Frequently asked questions ### What happened in the Centurion Project security breach? On April 30, 2026, The Centurion Project (thecenturionproject.ca) disclosed a security breach. According to initial reports, a database containing confidential voter information for up to three million Albertans was shut down following investigations by Elections Alberta and the RCMP. ### When did the Centurion Project breach occur? The The Centurion Project breach was publicly reported on April 30, 2026. The exact date of the attack has not been disclosed. ### What data was exposed? The types of data involved in The Centurion Project incident reportedly include confidential voter list information. ### Is my personal information at risk? If you interacted with The Centurion Project or are a registered voter in Alberta, there’s a possibility your home address and other confidential voter identifiers were compromised. Stay alert for scammers contacting you while impersonating law enforcement, government entities, or other legitimate businesses. ### What steps should companies take after being breached? The Centurion Project has shut down the database following a court injunction. They have been ordered to identify individuals who accessed the list. Authorities are currently reviewing security measures and providing guidance to affected parties. ## Is your organization exposed to a similar risk? UpGuard continuously monitors vendors for exposed credentials and infrastructure risk, so you can catch the next breach before it becomes a headline. [Start your free trial](https://cyber-risk.upguard.com/register/trial) Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](https://www.upguard.com/instant-security-score?) ## Latest news Stay up-to-date with the latest news in cybersecurity. * ### [Hugging Face data breach: key facts and what we know so far](/news/hugging-face-data-breach-2026-07-20) A data breach involving Hugging Face was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 20, 2026 * ### [EY data breach: what happened and what's at risk](/news/ey-data-breach-2026-07-19) A data breach involving EY was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 17, 2026 * ### [South Florida Injury & Convenient Care data breach exposes names and Social Security numbers](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) A data breach involving South Florida Injury & Convenient Care was reported in July 2026. See incident details, impact on customers, and security measures. UpGuard Team July 16, 2026 * ### [Park West Psychology data breach: what happened and what's at risk](/news/park-west-psychology-data-breach-2026-07-16) A data breach involving Park West Psychology was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 16, 2026 * ### [Fall River Municipal Credit Union data breach: what happened and what's at risk](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) A data breach involving Fall River Municipal Credit Union was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 16, 2026 * ### [NPCIL data breach: World Leaks claims exposure of Kudankulam Nuclear Power Plant files](/news/npcil-data-breach-2026-07-16) A data breach involving NPCIL was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 16, 2026 [View all news](/news) ## Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights.