Tuesday, November 03, 2026
Tech

Crime Stoppers data breach exposed 1.5 million anonymous Canadian tips: what happened

Rive News Research Desk

Published · 5 min read

Web StoryWatch this story in 15 seconds →

Key takeaways

  • Hackers stole Crime Stoppers tip records in March 2026 from P3 software run by U.S. vendor Navigate360.
  • A CBC investigation found more than 1.5 million Canadian tips exposed, about half with personal details.
  • Toronto Crime Stoppers has paused all tip intake until it can prove the system is safe.
A laptop screen showing code, representing a cyberattack on tip software
Hackers stole tip records from P3, the software Crime Stoppers programs use to store tipsPhotograph: Yuri Samoilov/Wikimedia Commons (CC BY 2.0)Image: Wikimedia Commons

Toronto Crime Stoppers stopped taking tips on October 21, 2026. A CBC investigation found hackers had exposed more than 1.5 million Canadian Crime Stoppers tips. Many records held names, home addresses, and phone numbers of people who believed they were anonymous.

What happened

In March 2026, hackers broke into P3. P3 is the tip-management software that Crime Stoppers programs use.

Toronto Crime Stoppers has used P3 since 2018. The platform is owned by a U.S. company called Navigate360, also known as P3 Global Intel.

The hackers called themselves Internet Yiff Machine. They described themselves as hacktivists, or hackers with a political message.

In a manifesto, they said they wanted to disprove the company's claim that the platform was "anonymous" and "secure." A copy of the stolen data was later given to journalists by Distributed Denial of Secrets, a non-profit that publishes hacked documents it views as being in the public interest.

What followed was months of slow answers. In March 2026, Navigate360 told Toronto Crime Stoppers the platform "is secure" and that Toronto data was not taken. About a month after the attack, the provider admitted some Canadian data had been stolen but said Toronto tips were unaffected.

The RCMP learned in May 2026 that Canadian data was included. Toronto Crime Stoppers only learned in June 2026 that its own data had been breached, without knowing how much was exposed.

The full picture became public on October 21, 2026. That day, CBC News published an exclusive investigation by Valerie Ouellet and Michelle Allan.

CityNews Toronto reported Toronto Crime Stoppers' suspension the same evening. Global News followed with its own report on October 22.

Why it matters

Crime Stoppers exists to protect people who report crimes. Tipsters are told they will stay anonymous. This breach broke that promise for a huge number of people.

CBC analyzed more than 8.3 million raw leaked records. It identified about 1.6 million Canadian tips submitted over the last 25 years. The headline figure: more than 1.5 million tips exposed.

About half of those records included personal information. More than 850,000 tips held details such as names, home addresses, phone numbers, emails, licence plates, and bank details for cash rewards.

In over 4,300 reports, tipsters introduced themselves with a full name. CBC said hundreds of records still held staff warnings about exposed tipsters, left in place without being removed.

The scale inside Toronto alone is striking. Chair Sean Sportun said 176,859 Toronto tips submitted between January 2022 and November 2025 were affected.

Navigate360's own list found 14,973 names in the breached Toronto data. Global News reported that 12,392 Toronto tips may contain personal information.

Navigate360 has not told Toronto Crime Stoppers whether the names belong to tipsters, to people named in tips, or both.

The tips covered very serious crimes. They included reports about murders, terrorists, pedophiles, and organized crime groups.

High-profile cases in the data included the murders of Barry and Honey Sherman, the disappearance of Amber Tuccaro, the Luka Magnotta case, and the Ryan Wedding manhunt. Nearly 49,000 tips were linked to a case cleared by an arrest or charges. Nearly 1,000 tipsters had been approved for cash rewards.

Two cybersecurity experts reviewed CBC's work. They were Professor Ali Dehghantanha of the University of Guelph and Ben Coon of a US cybersecurity firm, Unit 221B.

Coon raised a hard question about old records: "If a tip is closed, does that need to remain online? The answer to that, to me, is no."

This is not the only tech failure making news this week. The Google Cloud outage that hit London banks and courts showed how much we rely on outside software. And the Revolut outage that blocked payments showed how fast one failure can spread.

A hacker typing on a Linux laptop
About half of the leaked Canadian tips held personal information, CBC foundPhotograph: Kowalski7cc/Wikimedia Commons (CC0)Image: Wikimedia Commons

What happens next

Toronto Crime Stoppers has shut down every way to send a tip. It removed the "Tip Submit" feature from its website.

It asked Navigate360 to suspend the intake function. It also asked the National Anonymous Call Centre to stop processing new information for Toronto.

Chair Sean Sportun told the public not to send tips by phone, online, or through the app "until we have a safer way to protect you."

He added: "We never ask for your name, and we don't want it. But people sometimes include details to explain what they saw." He said the group keeps asking Navigate360 for the full text of the stolen tips but has not received it.

The Canadian Crime Stoppers Association called the situation extremely serious. Its president, David Forster, said: "We recognize the concern and uncertainty this incident has created, particularly for people who trust Crime Stoppers with sensitive information."

The association said protecting people's safety and anonymity is its "highest priority." Navigate360 did not respond to CBC's or Global News' requests for comment.

The RCMP said the breach could "jeopardize public safety, including the safety of tipsters, individuals identified in tips and police officers." The force said it was first told the leak held no Canadian data and no personal information. It added that it has not received reports of anyone being threatened as a result.

The Toronto Police Service has temporarily stopped using Crime Stoppers while it reviews the situation. People can still share information through normal police reporting channels, but those are not anonymous.

For tipsters, the waiting is the hardest part. CBC managed to contact more than a dozen of them, including Andrew Rivard of Manitoba.

He told CBC it was "very scary, to be honest" to think his information could be used for revenge. He urged the organizations to be honest with the public and let people decide for themselves.

Toronto Crime Stoppers says it will not restart its tip line until it can stand behind the system that protects tipsters. How long that takes is unknown. The group is still pressing Navigate360 for the stolen records, so it can see exactly what was exposed and warn the right people.

Taggeddata breachCanadaprivacy

Related stories