October 30, 2026
Reporter: Joseph Wilson
Canada's Crime Stoppers network is changing how Canadians submit anonymous tips following a massive cybersecurity breach that exposed more than 1.5 million Crime Stoppers tips submitted across the country over approximately 25 years.
The Canadian Crime Stoppers Association (CCSA) is now advising participating local programs to accept anonymous tips by telephone only, temporarily moving away from online and app-based submissions that rely on the P3 platform operated by U.S.-based technology company Navigate360.
The decision represents a major change for an organization whose central promise has traditionally been that members of the public can anonymously provide information about criminal activity without identifying themselves.
The change follows a CBC investigation published October 21 that found more than 1.5 million tips submitted to Canadian Crime Stoppers programs had been compromised. CBC's analysis found that at least half of the affected tips contained personal information.
Crime Stoppers Recommends Telephone-Only Reporting
The CCSA said on October 30 that its interim approach will allow participating local programs to receive tips without using Navigate360's P3 platform.
Under the new guidance, Canadians who want to provide an anonymous Crime Stoppers tip are being directed to call 222-TIPS (8477).
The association said local programs will keep newly submitted information under their control and securely transfer relevant information to law enforcement. However, programs that have already suspended their tip services will make their own announcements about when telephone reporting becomes available again.
The organization previously maintained that Navigate360 had made security improvements and that the P3 platform remained appropriate for continued use. The latest telephone-only recommendation represents a significant shift in that position.
More Than 1.5 Million Tips Affected
The scale of the breach is particularly concerning because Crime Stoppers depends on confidentiality to persuade members of the public to provide information about crimes.
According to the CBC investigation, more than 1.5 million tips submitted to Canadian Crime Stoppers programs over the previous 25 years were affected. CBC's analysis found that at least half of the tips contained some form of personal information.
Importantly, a Crime Stoppers tip does not necessarily contain information about the person who submitted it. A person may anonymously report what they saw and identify another individual, vehicle, address or other details connected to an investigation.
That means the potential privacy impact can extend beyond people who voluntarily contacted Crime Stoppers.
Toronto Case Shows the Potential Risk
Toronto Crime Stoppers has provided one of the clearest examples of the problem.
The organization said 176,859 Toronto tips submitted between January 2022 and November 2025 were affected. It said 12,392 of those tips may contain personal information.
Navigate360 also provided Toronto Crime Stoppers with a list containing approximately 14,973 names found in the breached information. However, Toronto Crime Stoppers said it did not have enough information to determine who those names belonged to or fully assess the risk.
The organization has also said Navigate360 has not provided it with the actual text of the stolen tips, making it difficult for Toronto Crime Stoppers to determine exactly what information about individuals may have been exposed.
Toronto temporarily stopped accepting tips by telephone, online and through its app while it searched for a safer system.
The Breach Has Spread Beyond Toronto
Toronto is not the only Canadian Crime Stoppers program affected.
Several police services and Crime Stoppers organizations across Ontario have suspended or reassessed their participation following the breach, including programs connected with Halton, Peel, York, London, Hamilton and Kingston.
Other communities have also taken precautionary measures.
Crime Stoppers of Grey Bruce, for example, suspended the acceptance of tips by telephone, online submission and the P3 application after learning of the national security incident.
By October 30, more than 40 local Crime Stoppers chapters and police agencies in five provinces had temporarily paused anonymous tip intake or their partnerships with the organization, according to reporting based on the CCSA's statement.
The breadth of the response illustrates how seriously Canadian law-enforcement organizations are treating the security implications.
Why the Breach Is Particularly Serious
Crime Stoppers is different from an ordinary online service because anonymity is fundamental to its operation.
The Canadian Crime Stoppers Association says callers are not asked for personal information and that its telephone system does not use caller identification or other phone-tracking services. Tipsters receive a unique identification number and password that allow them to follow up on their submission without revealing their identity.
The organization's traditional model is therefore based on a simple promise:
A person can provide information about suspected criminal activity without revealing who they are.
A breach involving the underlying technology threatens public confidence in that promise, even when there is no evidence that the information has been used for identity theft or other criminal purposes.
Navigate360 Says There Is No Evidence of Fraud Misuse
Navigate360 has said it found no evidence that the affected personal information has been misused for fraud or identity theft.
That statement is important, but it does not mean there is no potential future risk.
Cybersecurity investigations generally distinguish between evidence that stolen information has already been misused and the possibility that compromised information could be exploited later.
The latest information therefore does not establish that Crime Stoppers tipsters have become victims of identity fraud. Instead, it confirms that sensitive information was accessed and that authorities and affected organizations are still dealing with the consequences.
Canada's Privacy Commissioner Opens Investigation
The breach has also attracted attention from Canada's federal privacy regulator.
Privacy Commissioner Philippe Dufresne has opened an investigation into Navigate360's handling and protection of the information. The investigation will examine the security safeguards in place when the incident occurred and whether those safeguards complied with Canada's federal private-sector privacy law.
The Office of the Privacy Commissioner said it contacted both Crime Stoppers and Navigate360 after learning about the incident.
The investigation is expected to examine not only what happened but also whether adequate measures were in place to protect highly sensitive information stored by the technology provider.
What Canadians Should Do Now
For Canadians who have information about an unsolved crime, the new telephone-only approach means they should check with their local Crime Stoppers organization before attempting to submit a tip online.
The national Crime Stoppers Association is directing participating programs toward 222-TIPS (8477) for anonymous telephone reporting, while recognizing that some local programs remain temporarily suspended.
Anyone facing an immediate emergency should call 911, rather than Crime Stoppers.
Crime Stoppers is intended for anonymous information about suspected criminal activity and unsolved cases, not for emergency police response.
People who previously submitted Crime Stoppers tips may also wish to monitor official communications from their local Crime Stoppers organization or police service if they believe their information could have been affected.
A Crisis of Public Trust
The consequences of the breach extend beyond the number of records exposed.
Crime Stoppers has operated for decades on the principle that people who fear retaliation, social consequences or other repercussions can provide information anonymously.
That trust is especially important in cases involving organized crime, drug trafficking, weapons, violence, human trafficking and other serious offences where witnesses may be unwilling to identify themselves to police.
If potential tipsters begin to believe that their information can be exposed through a technology provider, they may become less willing to report what they know.
That could create a secondary consequence of the breach: fewer people willing to come forward with information that police could otherwise use to investigate crimes.
A New Chapter for Anonymous Crime Reporting
The CCSA's decision to recommend telephone-only reporting appears designed to separate the collection of new tips from the compromised P3 platform while the organization works toward longer-term solutions.
The immediate objective is to restore the most important element of the Crime Stoppers model: public confidence that a person can provide information without having their identity unnecessarily exposed.
However, rebuilding that confidence will likely require more than simply changing the method used to submit tips.
The breach has raised questions about third-party technology providers, cybersecurity safeguards, oversight, data retention, notification procedures and the responsibility of organizations that collect extremely sensitive information.
The investigation by Canada's Privacy Commissioner could provide further answers about whether adequate protections were in place.
For now, Canada's Crime Stoppers network is attempting to return to its most basic model — a person picks up the phone, provides information anonymously, receives a confidential tip number and does not have to identify themselves.
The telephone-only approach may be temporary, but the lessons from the breach could permanently change how anonymous crime reporting is managed across Canada.
For the latest official information about submitting an anonymous tip, Canadians should check with their local Crime Stoppers program.