Key developments
Alberta voter list exposure triggers probe
Yahoo reported that a public, searchable website run by the Centurion Project posted Alberta's electors list, exposing full names, addresses, contact details, and home electoral divisions for 2.9 million residents. Elections Alberta said the list is only meant for political parties, secured an injunction against further use, and said the RCMP has opened an investigation.
Why it matters
It is a large-scale exposure of voter data that could force tighter controls on political-list handling.
Sources & driving stories
YAHOO
Yahoo coverageYAHOO
Yahoo coverageInstructure confirms Canvas user data exposure
The Record and TechEchelon reported that Instructure, the company behind Canvas, confirmed a cyber incident that exposed information for users at some educational institutions, including names, email addresses, student ID numbers, and messages between users. Instructure said it revoked privileged credentials and access tokens, patched systems, and found no evidence that passwords, financial information, or government documents were stolen.
Why it matters
Canvas is widely used by schools, so even a contained breach can expose sensitive student and teacher communications.
Sources & driving stories
THE RECORD · Jonathan Greig
The Record coverageTECHECHELON · Sara Montes de Oca
TechEchelon coverageConnecticut passes consumer privacy bill
CT Mirror reported that the Connecticut House approved Senate Bill 4 and sent it to Gov. Ned Lamont. The measure would create a way for residents to remove personal data from broker databases and websites, add a data broker registry, and impose new limits on geolocation data, facial recognition technology, and surveillance pricing tools.
Why it matters
If signed, it would expand consumer control over brokered data and tighten limits on sensitive tracking practices.
Sources & driving stories
CT MIRROR
CT Mirror coverageWorth noting
WORTH NOTING
Secret Service facial recognition aid
WBTV reported court records showing a Secret Service contractor used facial recognition and 28 eye-biometric correlations to support North Carolina search warrants.
WORTH NOTING
Forbes settles web-tracking lawsuit
The Record said Forbes preliminarily agreed to pay $10 million to resolve allegations of unauthorized website tracking and to change notice practices for California readers.
Still unclear
OPEN QUESTION
How widely did Alberta's data spread?
The report does not show how many copies or downloads occurred before the injunction, which will determine the long-tail privacy harm.
OPEN QUESTION
Which Canvas institutions were actually affected?
Instructure confirmed access to user data but has not fully mapped the scope across schools and users.