Crime Stoppers breach via P3 platform exposes more than 1.5 million Canadian tips

A CBC News investigation published on October 21, 2026 found that more than 1.5 million tips sent to Canadian Crime Stoppers programs over about 25 years were exposed in a March 2026 intrusion into P3 Global Intel, the tip management platform owned by Navigate360. CBC's analysis of the stolen data found that more than 850,000 of the tips contained personal information, including addresses, phone numbers, email addresses and some banking details tied to rewards, belonging to tipsters, people named in tips, police and Crime Stoppers staff. Identifying details are normally removed before tips reach investigators, but Toronto Crime Stoppers said in its October 21 statement that some original submissions containing potentially identifying information were stolen from P3.

For Toronto, Navigate360 told the program that 176,859 tips submitted between January 2022 and November 2025 were affected, of which 12,392 may contain personal information, with 14,973 names in the records. Toronto Crime Stoppers paused tip intake by phone, online and through the app on October 21, saying its anonymity promise had been broken, and Toronto Police suspended its use of the program. Crime Stoppers of Grey Bruce and Windsor Police also suspended participation on October 22. The RCMP said it is working with the Canadian Crime Stoppers Association to determine the full scope and has received no reports of threats to tipsters so far. The 1.5 million figure is CBC's own analysis of the stolen data and has not been confirmed by Crime Stoppers or Navigate360, so SecurTek lists it in this item without adding it to the records exposed total, and will update the item when a confirmed count is published.

Update, October 23: Navigate360 published its own formal Notice of Data Breach on October 23, 2026, confirming the incident in its own name for the first time. The company says it became aware of suspicious activity on or about March 18, 2026, and that a forensic investigation determined an unauthorized third party accessed one of its systems and obtained copies of data between November 21, 2025 and March 5, 2026. The files may have contained names, addresses, dates of birth, Social Security numbers, telephone numbers, email addresses and other sensitive information, varying by individual. Navigate360 says it has no evidence of misuse for fraud or identity theft, that it reported the incident to law enforcement and notified regulators, and that it is notifying affected individuals. The notice gives no total number of people or records affected, so the records exposed total is unchanged and the CBC figure above remains CBC's own analysis, not a company confirmed count.

Update, October 24: Officials in Nevada have now stated the total scale of the completed multistate forensic investigation. The Washoe County School District, publishing the Nevada Department of Education and Department of Public Safety notice, says Navigate360 recently completed that investigation, that unauthorized individuals accessed certain data maintained by Navigate360 between November 2025 and March 2026, that the incident impacted organizations across the United States and Canada and involved approximately 8.3 million data records, and that approximately 10 percent of SafeVoice Nevada tips containing personally identifiable information were affected. The information that may have been involved in the Nevada program includes student names, parent or family member names, student identification numbers, dates of birth, and information related to medical conditions or treatment. The matter remains under investigation by the U.S. Department of Justice, Nevada is evaluating alternative vendors, and SafeVoice remains fully operational. The 8.3 million figure is the total records involved in the whole multistate incident, stated by officials as involved, and is broader than the Canadian Crime Stoppers tips tracked in this entry, so it is not added to the records exposed total for this entry and the CBC figure above remains stated as CBC's own analysis.

Sources: Malwarebytes; The Chatsworth Banner; BusinessWire; Reuters; Washoe County School District; Cybernews