The Office of the Privacy Commissioner of Canada said on Oct. 27, 2026, that Commissioner Philippe Dufresne has opened an investigation into Navigate360 related to a cybersecurity incident involving tips shared with Crime Stoppers programs across Canada.
Navigate360 is the commercial organization that provides and manages the tip-management platform used by Canadian Crime Stoppers chapters. The privacy commissioner said the investigation will examine the safeguards Navigate360 had in place at the time of the breach and whether the company complied with Canada’s federal private-sector privacy law, the Personal Information Protection and Electronic Documents Act.
The privacy commissioner said PIPEDA generally does not apply to not-for-profit organizations, and Crime Stoppers is a not-for-profit organization. As a result, the federal probe is focused on the vendor that managed the platform, not directly on Crime Stoppers chapters.
What is known about the exposed data
CBC News reported on Oct. 21 that more than 1.5 million tips sent to Canadian Crime Stoppers chapters were found in the breached data, with its analysis identifying at least half of those tips as containing personal information. Those figures come from CBC’s review of the hacked data, not from an official public total released by Navigate360 or the privacy commissioner.
The breach was first reported publicly in March. In an Oct. 23 breach notice distributed through BusinessWire, Navigate360 said it became aware of suspicious activity on one of its systems on or about March 18. The company said an unauthorized third party accessed one of its systems and obtained copies of some data between Nov. 21, 2025, and March 5, 2026.
Navigate360 said the potentially impacted information may include names, addresses, dates of birth, Social Security numbers, phone numbers, email addresses, and other categories of sensitive information, with the information varying by individual. The company also said it had no evidence of misuse of personal information for fraud or identity theft.
Toronto’s timeline shows why trust collapsed
Toronto Crime Stoppers paused its program on Oct. 21 and said it would not accept tips by phone, online, or through the app until it has a safer way to protect people. In its statement, the organization said P3, the tip software it had used since 2018, was owned by Navigate360.
Toronto Crime Stoppers said Navigate360 told it that 176,859 Toronto tips dating from January 2022 to November 2025 were in the stolen data. It also said Navigate360 identified 12,392 tips that may have contained personal information and later provided a list of approximately 14,973 names associated with affected tip numbers, without saying whether those names belonged to tipsters, people named in tips, or others.
The Toronto chapter said it does not ask for names and does not want them, but people sometimes include identifying details to explain what they saw. It said its practice is to remove those details before a tip goes to investigators, and that original tips containing potentially identifying information were stolen from P3.
Toronto Crime Stoppers also said it had repeatedly requested the text of the stolen tips from Navigate360 but had not received it, leaving the organization unable to assess the full risk of each affected submission.
Police services pause or limit use of Crime Stoppers
As of Oct. 28, several Canadian police services had paused, suspended, or limited their use of Crime Stoppers while awaiting more information. Toronto Police said it temporarily suspended its use of Crime Stoppers while reviewing new information and assessing additional safeguards. Peel Regional Police, London Police Service, Kingston Police, Niagara Regional Police Service, and Six Nations Police Service also issued statements pausing or suspending use in response to the incident. Waterloo Regional Police said it had suspended the promotion of Crime Stoppers as a reporting option in early July after becoming aware of the incident in late June.
The police statements share one important distinction. Multiple services said Crime Stoppers operates independently from police and that the affected third-party platform was not connected to police information technology systems, networks, databases, or infrastructure.
That narrows one kind of risk: the available police statements do not describe a breach of police systems. It does not resolve the separate risk that tip content, names, phone numbers, addresses, emails, or other details may have been exposed through the third-party platform used by Crime Stoppers organizations.
Anonymity is the issue that makes this breach different
Many breach notices focus on fraud, identity theft, and credit monitoring. This incident carries a different public-safety dimension because Crime Stoppers programs are built around anonymity. A person who submits a tip may be reporting someone they know, a neighbour, a family member, or a person they fear.
Crime Stoppers International said on Oct. 22 that it was not impacted by the P3 Global Intel breach, does not use the P3 platform, operates separate systems, and does not keep a historical database of tips. It also said Canadian Crime Stoppers programs are not members of Crime Stoppers International and directed Canadian-record questions to the Canadian Crime Stoppers Association.
Crime Stoppers International urged the public to be alert to scams and said that if anyone contacts a person about a tip they previously gave, they should not share information. Toronto Crime Stoppers issued similar guidance, saying it will never contact someone first to ask for a tip number, password, or anything else.
Questions still facing investigators and local programs
The federal investigation may clarify what security safeguards Navigate360 had in place and whether the commercial vendor met its obligations under Canadian private-sector privacy law. It may not answer every question facing local Crime Stoppers programs, police partners, and people who used the service.
How many Canadian records were exposed, and which chapters were affected?
Which names or contact details belong to tipsters, people named in tips, staff, police, or others?
How long were raw tips retained, and in what form?
How quickly were affected programs told enough to assess risk?
What technical safeguards were in place before the breach, and what changed afterward?
How will anonymous tip systems handle deletion, redaction, vendor oversight, and breach notification going forward?
For any organization that depends on a third-party system to collect confidential reports, the Crime Stoppers breach puts renewed attention on data retention, vendor access, incident transparency, and how quickly identifying details are removed from raw submissions.
Guidance remains local while the probe continues
Official advice now varies by location. Toronto Crime Stoppers has told people not to submit tips to the Toronto program by phone, online, or through the app while the program is paused. Toronto Police said people can use existing police reporting channels, while acknowledging those channels do not provide the anonymity associated with Crime Stoppers.
Other police services have directed the public to local police reporting channels, emergency services, or local updates while they assess the situation. Niagara Regional Police, for example, said people who wish to report information and remain anonymous can use a local phone number while its review continues.
Anyone in immediate danger is being directed by police services and Crime Stoppers statements to call 911. People concerned about a previous tip are being told to watch for official updates from the relevant local Crime Stoppers chapter or police service and to treat unsolicited requests for tip numbers, passwords, or personal details as suspicious.
Get new small business insights by email
Practical ideas and useful articles to help you make better business decisions.
Tech Help Canada Staff researches, writes, and reviews practical content for business owners and professionals. Our coverage spans business, marketing, SEO, technology, and the tools and systems people use to grow and operate online. We focus on clear, useful information backed by research, hands-on experience, and editorial review. Learn more about our team and editorial standards. Need help with something? Contact Us
