News brief

Crime Stoppers Toronto Suspends Anonymous Tip Service Following Data Breach

Automated editorial brief
BalticServers data center; illustrative photograph, not the affected infrastructure
BalticServers data center; illustrative photograph, not the affected infrastructure. BalticServers.com; original image resized for this article · CC BY-SA 3.0. Image source

Toronto Crime Stoppers suspended its tip line late Wednesday, hours after CBC reported that more than 1.5 million tips from chapters across Canada were exposed in a data breach. About half the records contained personal information, some dating back 25 years. CBC reporters reviewed the hacked data and reached more than a dozen tipsters. The Toronto chapter apologized and told the public to stop sending tips until a safer system exists.

What Happened in the March Breach

A hacktivist collective called Internet Yiff Machine breached Navigate360 and its subsidiary P3 Global Intel in March, according to the collective's claim of responsibility. The group said its goal was to prove that Navigate360 and P3 had lied about their capabilities. The stolen dataset was shared with Distributed Denial of Secrets, which made it available to journalists.

CBC reporters reviewed the data and reached more than a dozen tipsters whose identities were exposed. Canadian Crime Stoppers Association and individual chapters, including Toronto, had confirmed the breach after the hack but offered no detail about what was exposed, blaming the lack of information on vendor Navigate360.

How Many Toronto Records Were Stolen

Navigate360 told Toronto Crime Stoppers that 176,859 tips submitted between January 2022 and November were stolen. The vendor identified 14,973 names in those records but could not say whether the names belonged to tipsters, suspects or both. Toronto Crime Stoppers requested the full text of the stolen tips through lawyers, but Navigate360 has not responded.

Across all Canadian chapters, about 1.5 million tips were exposed, with about half containing personal information, according to CBC's analysis. Some records dated back 25 years. Crime Stoppers urges people not to provide names when submitting information, but many witnesses included identifying details anyway.

Why the Toronto Chapter Suspended Operations

Toronto Crime Stoppers announced late Wednesday that it will not accept tips by phone, online or through its app until it can guarantee anonymity. Chair Sean Sportun said the organization has operated since 1984 on a promise of anonymity and that the reporting showed that promise was broken for some people.

The chapter directed Navigate360 to stop processing new tips and told Canada's National Anonymous Call Centre to halt Toronto tip intake. Toronto Crime Stoppers acknowledged that pausing removes an option for witnesses afraid of retaliation, neighbors who cannot be seen talking to police and people reporting someone close to them.

Navigate360's Delayed Disclosure Timeline

Toronto Crime Stoppers released a timeline showing what Navigate360 told it and when. In March, the vendor repeatedly said P3 was secure. In April, Navigate360 said Toronto's data had not been taken. In June, the vendor reversed that statement and confirmed Toronto's data was affected but did not say what was exposed.

Only in October did the vendor provide the record count and name count to Toronto. Toronto Crime Stoppers said it made numerous requests for the text of the stolen tips but Navigate360 has not responded. Neither the Canadian Crime Stoppers Association nor Navigate360 replied to a request for comment.

What This Means for Anonymous Tip Programs

The Toronto suspension reveals a risk facing local Crime Stoppers programs: they depend on vendor infrastructure but may have limited visibility into how that vendor secures data or responds to incidents. Other Canadian chapters have not paused operations.

The breach also raises questions about retention. Some of the stolen tips were 25 years old, suggesting long-term storage without clear policies on deletion. The Toronto board now questions whether its vendor can protect witnesses going forward.

Steps to Verify Whether Your Tip Was Exposed

If you submitted a tip to a Canadian Crime Stoppers chapter, contact the local chapter you reported to and ask whether Navigate360 or P3 Global Intel processed your tip. Ask the chapter to confirm what data Navigate360 has shared about the breach and whether your identifying information was included.

If you are a witness in an ongoing case or face retaliation risk, inform the investigating law enforcement agency that your tip may have been exposed. If you need to report new information, confirm that the local chapter has resumed operations with a different system before submitting.

  1. Contact the local Crime Stoppers chapter you reported to and ask whether Navigate360 or P3 Global Intel processed your tip.
  2. Ask the chapter to confirm what data Navigate360 has shared about the breach and whether your identifying information was included.
  3. If you are a witness in an ongoing case or face retaliation risk, inform the investigating law enforcement agency that your tip may have been exposed.
  4. If you need to report new information, confirm that the local chapter has resumed operations with a different system before submitting.

Questions readers ask

How many Crime Stoppers tips were exposed in the breach?

More than 1.5 million tips from Canadian Crime Stoppers chapters were stolen in a March breach of Navigate360 and P3 Global Intel. About half of those records contained personal information. Toronto Crime Stoppers accounted for 176,859 tips submitted between January 2022 and November, with 14,973 names identified in the Toronto subset.

Who stole the Crime Stoppers data and why?

A hacktivist collective called Internet Yiff Machine took responsibility for the March breach. The group said its goal was to prove that Navigate360 and P3 Global Intel lied about their capabilities. The stolen data was shared with Distributed Denial of Secrets, which provided it to journalists for review.

What did Navigate360 tell Toronto Crime Stoppers and when?

In March, Navigate360 said P3 was secure. In April, the vendor told Toronto that its data had not been taken. In June, Navigate360 reversed that statement and confirmed Toronto's data was affected but did not specify what was exposed. In October, the vendor provided record and name counts to Toronto.

Can I still submit a tip to Toronto Crime Stoppers?

No. Toronto Crime Stoppers suspended all tip intake late Wednesday and told the public not to send tips by phone, online or through the app until a safer system is in place. The organization said it will look for a way to accept tips on a truly anonymous basis before resuming operations.

What should I do if I submitted a tip to a Canadian Crime Stoppers program?

Contact the local chapter you reported to and ask whether your tip was processed by Navigate360 or P3 Global Intel. Ask what data Navigate360 has shared about the breach and whether your identifying information was included. If you face retaliation risk, inform the investigating law enforcement agency that your tip may have been exposed.

Source and reporting limits

Based on reporting by The Record. This automated brief is not independent verification. Claims are attributed to the reporting source; later developments may change the picture.

Back to news · Plain text