Overview
Late on Wednesday, October 21, 2026, the Toronto chapter of Crime Stoppers broke ranks with the national association, published a timeline of what it knew and when, and announced it is pausing operations. The move follows a CBC report that more than 1.5 million tips from Crime Stoppers chapters nationwide were exposed in a vendor data breach.
Background
The stolen data was published in March 2026 by Distributed Denial of Secrets (DDoSecrets). A hacktivist collective calling itself Internet Yiff Machine claimed responsibility. It said it wanted to show that vendor Navigate360 and its subsidiary P3 Global Intel had misrepresented their capabilities.
Timeline (per Toronto Crime Stoppers)
| When | Event |
|---|---|
| March | Breach and leak. The national association and chapters confirm a breach without details |
| April | Navigate360 tells Toronto its data was not taken |
| June | Navigate360 says Toronto's data was affected, without saying what was exposed |
| October | CBC reports on the leak. Toronto publishes its timeline and pauses operations |
Data Exposed
- CBC found that about half of the 1.5 million tips it reviewed contained personal information. Some tips date back 25 years.
- Navigate360 told Toronto that 176,859 of the stolen tips came from Toronto, reported between January 2022 and November 2025.
- Navigate360 found 14,973 names in those tips but could not say whether they belonged to tipsters, suspects, or both.
Dispute With the National Association
The national association blamed Navigate360 and P3 Global Intel for the lack of information. Toronto's chapter countered that Navigate360 had repeatedly claimed P3 was secure and had not responded to its lawyers' requests for the text of the stolen tips. Neither the national association nor Navigate360 responded to requests for comment.
Actions Taken
- Navigate360 was directed to stop taking tips and processing new information.
- Canada's National Anonymous Call Centre was told to stop receiving and processing Toronto's tips.
- The public is advised not to send tips by phone, online, or through the app until a safer method exists.
- The chapter is looking for a way to accept tips truly anonymously, and apologized to anyone whose anonymity may have been compromised.
Takeaways
- Anonymity services carry unusual breach impact: exposure can endanger tipsters, not just inconvenience them.
- Vendor assurances need verification: conflicting statements from the vendor over several months delayed an accurate picture.
- Contract for breach transparency: require data-content disclosure and timely notification from processors.