From e0f6ee10611ca6b40c0529d56470814895036dc4 Mon Sep 17 00:00:00 2001
From: Andy Smith <140088558+andy-smith-tracebit@users.noreply.github.com>
Date: Mon, 4 May 2026 19:15:25 -0400
Subject: [PATCH] Add article - Ars Technica canary trap leak report

---
 README.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/README.md b/README.md
index 5d6a599..ce18ff5 100644
--- a/README.md
+++ b/README.md
@@ -35,6 +35,7 @@
 - Resecurity on [synthetic data for cyber deception and honeypots](https://www.resecurity.com/es/blog/article/synthetic-data-a-new-frontier-for-cyber-deception-and-honeypots) (2025) explores synthetic data to improve honeypot realism.
 - Forescout on [a hacktivist attack targeting OT/ICS](https://www.forescout.com/blog/anatomy-of-a-hacktivist-attack-russian-aligned-group-targets-otics/) (2025) analyzes the incident, including honeypot use and defensive takeaways.
 - UpGuard on [preventing supply chain attacks with honeytokens](https://www.upguard.com/blog/prevent-supply-chain-attacks-with-honeytokens) (2025).
+- Ars Technica on [a Canadian election-list canary trap](https://arstechnica.com/tech-policy/2026/05/in-canada-a-canary-trap-springs-shut-and-ids-election-database-leak/) (2026) covers how salted entries identified the source of a voter database leak.
 
 ## Research