Skip to content
Data breachOngoing

Toronto Crime Stoppers halts anonymous tips after breach exposes 1.5 million submissions

Toronto Crime Stoppers suspended all anonymous tips after a breach of its vendor's platform exposed more than 1.5 million Crime Stoppers tips nationwide, including 176,859 Toronto submissions.

Victim
Toronto Crime Stoppers
records
1.5M

On 22 October 2026, Toronto Crime Stoppers β€” the anonymous community tip-line that lets the public report crime to police without identifying themselves β€” suspended its program after a breach of the third-party platform behind it was found to have exposed more than 1.5 million tips submitted to Crime Stoppers chapters across Canada. The scope became public through an investigation by CBC, which reported that about half of the tips it reviewed contained personal information and that some dated back roughly 25 years.

The compromised system belonged to P3 Global Intel, the cloud-based tip-management platform operated by Navigate360. According to CBC, the breach itself occurred in March 2026, when a hacktivist collective calling itself Internet Yiff Machine took the data and had it published through Distributed Denial of Secrets (DDoSecrets); the group said its aim was to show that Navigate360 and P3 Global Intel had overstated their security capabilities. For Crime Stoppers, whose entire value rests on the promise of anonymity, the exposure of tipsters' identities is especially damaging.

Toronto's share of the exposure

Toronto Crime Stoppers said the stolen data included 176,859 Toronto tips submitted between January 2022 and November 2025, along with 14,973 names found within those tips. Navigate360 could not say whether the names belonged to tipsters, suspects, or both. The uncertainty is at the heart of the organisation's concern: an anonymous informant whose identity surfaces in a leaked tip could face retaliation, and the leak may deter future reporting.

A slow, contested disclosure

The organisation's own timeline points to a drawn-out and shifting notification. In April 2026, Navigate360 told Toronto Crime Stoppers that its data had not been taken; by June, the vendor reversed itself and said Toronto's data was affected, but did not specify what had been exposed. Toronto Crime Stoppers says it has since made numerous requests β€” through lawyers β€” for the text of the stolen tips, and that Navigate360 has not responded.

Response and fallout

Toronto Crime Stoppers directed Navigate360 to immediately stop accepting and processing tips, told Canada's national anonymous call centre to stop handling Toronto submissions, and asked the public not to submit tips by phone, online, or through its app until a safer method can be established. Other chapters, including Halton and Guelph Wellington, also paused their programs. Privacy experts quoted by CBC described it as potentially one of the most harmful data breaches Canada has seen, and Canadian and Ontario privacy commissioners noted that a legal gap leaves Crime Stoppers largely outside their oversight. The organisation says it is now searching for a way to collect tips that is genuinely anonymous.

Timeline

  1. The hacktivist collective Internet Yiff Machine breaches P3 Global Intel; the stolen data is published through Distributed Denial of Secrets (DDoSecrets).

  2. Navigate360 tells Toronto Crime Stoppers that its data was not taken.

  3. Navigate360 reverses course and tells Toronto Crime Stoppers its data was affected, without detailing what was exposed.

  4. A CBC investigation reports that more than 1.5 million tips were exposed; Toronto Crime Stoppers publishes a timeline and pauses the program.

Sources

  1. cbc.cahttps://www.cbc.ca/news/investigates/crime-stoppers-data-breach-whats-next-9.7392709
  2. therecord.mediahttps://therecord.media/toronto-crime-tips-org-freezes-ops-after-breach
  3. globalnews.cahttps://globalnews.ca/news/12113098/toronto-crime-stoppers-cyber-breach/
  4. theglobeandmail.comhttps://www.theglobeandmail.com/canada/toronto/article-toronto-crime-stoppers-tips-data-breach/

Related incidents

Data breachResolved

Fair Vote Canada data breach (2024)

In March 2024, the Canadian national citizens' campaign for proportional representation Fair Vote Canada suffered a data breach. The incident was attributed to "a well-meaning volunteer" who inadvertently exposed data from 2020 which included 134k unique email addresses, names, physical addresses,…

Victim
Fair Vote Canada
Records
134.3K