Toronto Crime Stoppers has suspended its operations after details emerged showing that a major data breach exposed more than 1.5 million crime tips submitted through Crime Stoppers chapters across Canada, including records that were supposed to remain anonymous.
The Toronto chapter said it had ordered its technology provider to stop accepting new tips and instructed Canada’s National Anonymous Call Centre to stop processing information intended for Toronto.
The move came after reporting showed that personal information was present in a large number of leaked records, raising serious concerns about whether people who relied on Crime Stoppers’ promise of anonymity could be identified.
FCRF’s Chief AI Officer Certification Returns on November 14 to Prepare Future AI Leaders
More Than 176,000 Toronto Tips Were Affected
Navigate360, the vendor linked to the compromised system, told Toronto Crime Stoppers that 176,859 Toronto tips were included in the stolen data.
Those tips were submitted between January 2022 and November 2025.
The vendor also identified 14,973 names within the affected Toronto records, but said it could not determine whether the names belonged to tipsters, suspects or both.
Across Canada, more than 1.5 million leaked tips were reviewed, with about half reportedly containing some form of personal information. Some of the exposed records dated back as far as 25 years.
The leaked data was made available by Distributed Denial of Secrets, which received material linked to the breach.
Toronto Chapter Says Its Promise of Anonymity Was Broken
Toronto Crime Stoppers acknowledged that the breach had undermined the central promise it had made to people using the service for more than four decades.
The programme has long encouraged witnesses and members of the public to submit information without providing their names, particularly in cases where people may fear retaliation or do not want to be seen speaking directly with police.
The Toronto chapter said people should not submit tips by phone, online or through the app until it can establish a safer way to protect anonymity.
It also said that since March, Navigate360 had repeatedly maintained that its P3 system was secure. According to the Toronto chapter, the vendor said in April that Toronto’s data had not been stolen, before informing the organisation in June that Toronto records had in fact been affected.
Toronto Crime Stoppers said it had made repeated legal requests for the actual text of the stolen tips but had not received them.
Hacktivist Group Claimed Responsibility for Breach
A hacktivist collective known as Internet Yiff Machine claimed responsibility for the March breach.
The group said its goal was to demonstrate that Navigate360 and its subsidiary P3 Global Intel had overstated the security of their systems.
The breach has now moved beyond a conventional data exposure issue because it has disrupted the operation of a public crime-reporting programme built around anonymity.
Toronto Crime Stoppers said it would keep its service paused until it could provide a system that it could fully stand behind and that better protected people submitting sensitive information.
Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics