Hackers stole about 8.3 million tip records from systems operated by Navigate360, a US emergency management and anonymous reporting platform used by schools, law enforcement agencies and other organisations, in a months-long data breach that exposed sensitive personal information.
Navigate360 said an unauthorised party accessed its systems between November 21, 2025, and March 5, 2026. The stolen records may include names, addresses, phone numbers, email addresses, dates of birth, student identification numbers, Social Security numbers and information relating to medical conditions or treatment.
Nevada became the first state to publicly confirm that its SafeVoice school tip line was affected, with state officials saying about 10% of tips containing personally identifiable information were compromised.
FCRF’s Chief AI Officer Certification Returns on November 14 to Prepare Future AI Leaders
Nevada Says SafeVoice Data Was Exposed
SafeVoice is a 24-hour anonymous reporting system used by students, families, educators and community members in Nevada to report school safety concerns and threats to student well-being.
The platform accepts tips through a live call centre, mobile application and online portal.
Nevada officials said portions of the 8.3 million compromised records were linked to SafeVoice. Because the system is designed to allow anonymous reporting, authorities said it may be difficult to directly notify students whose personal information was exposed.
The Nevada Department of Education and Department of Public Safety said SafeVoice remained operational and that the incident had not affected local dispatch operations, school response teams or emergency response procedures.
Student and Family Information May Be Among Stolen Records
Depending on the record, the compromised information may include student and family member names, home addresses, telephone numbers, email addresses, dates of birth, student identification numbers and Social Security numbers.
Information relating to medical conditions or treatment may also have been included in some records.
Navigate360 said it had engaged a data-mining firm to review the stolen information and determine the full impact of the breach.
The company said it had no evidence that the stolen data had been used for fraud or identity theft.
Navigate360 says its Campus360 platform serves about 19 million students across more than 35,000 schools in the United States and Canada. More than 5,000 law enforcement agencies and 4,400 businesses also use its systems, although it remains unclear how many organisations outside Nevada were affected.
Nevada Questions Delay in Breach Disclosure
Nevada officials have criticised Navigate360 over the information provided in the months after the breach.
State officials said they were initially notified in the spring that SafeVoice might have been affected by a wider cybersecurity incident and that an independent forensic investigation was under way.
Nevada later said it was only informed this month that the compromised records included student personally identifiable information.
State education and public safety officials said they were coordinating with education leaders in other states to seek greater accountability and transparency from Navigate360.
Navigate360 said it has implemented additional safeguards since the incident and is working with cybersecurity experts to strengthen the security of its networks, systems and data.
About the author — Suvedita Nath is a science student with a growing interest in cybercrime and digital safety. She writes on online activity, cyber threats, and technology-driven risks. Her work focuses on clarity, accuracy, and public awareness.
Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics
