Anonymous tips have helped police investigate crimes for decades. But a cybersecurity breach involving a platform used by Crime Stoppers has raised a troubling question for people who came forward expecting their identities to remain protected: what happens when that trust is compromised? Toronto Crime Stoppers suspended its tip-taking services after learning that nearly 180,000 tips submitted between January 2022 and November 2025 were included in data stolen from P3, a third-party platform operated by Navigate360. The breach, which was discovered in March, also involved nearly 15,000 names associated with the affected Toronto tips. It remains unclear whether those names belong to people who submitted information, individuals identified in the tips or both. The consequences could extend beyond Toronto. Halton Regional Police Service has confirmed that some data related to Halton was included in the breach, while Durham Regional Police Service is reviewing the incident and has removed references directing the public to Crime Stoppers from its public-facing channels. For former Toronto police officer and security specialist Ross McLean, the exposure threatens more than the security of a database. It could undermine a vital way for people to help investigators without putting themselves at risk. Why anonymity matters Crime Stoppers provides a way for people to share information about suspected criminal activity without identifying themselves. That distinction can be crucial for witnesses who fear retaliation, people who know someone involved in a crime or individuals who are uncomfortable approaching police directly. The breach is particularly concerning because information submitted through the program can involve serious criminal investigations, McLean said in an interview with CTV New Channel on Thursday. “It’s really quite serious ... this is another thing that we’re seeing, much like Project South when information went the wrong way from the police to the bad guys,” he said. The full contents of the stolen Toronto tips have not been provided to the charity, leaving it unable to determine exactly what information was exposed or assess the risks to individual tipsters. Although Crime Stoppers does not ask people submitting tips to provide their names, some may include identifying details when explaining what they witnessed. Toronto Crime Stoppers said its practice is to remove such details before information is forwarded to investigators. The breach, however, involved some original submissions that could contain identifying information. McLean said the anonymity offered by Crime Stoppers serves a purpose that conventional police reporting channels cannot always replicate. “They (police) have to record where they got it (info) from…they can’t necessarily protect your anonymity,” he said. What police services are doing Toronto Crime Stoppers announced Oct. 21 that it had stopped accepting tips through its website, telephone service and app while it works on a safer alternative. The charity said it had been seeking answers from Navigate360 for months, including information about which tips were affected and what personal details may have been exposed. It said it was told in April that Toronto’s data had not been taken, before being informed in June that the breach had affected its records. Toronto police have also suspended their use of the Crime Stoppers tip line while reviewing the additional safeguards and security measures that will be implemented. In Halton, police confirmed that some data related to the region was affected and said they had suspended their use of Crime Stoppers while awaiting further information about the breach’s scope and impact. The Halton Regional Police Service emphasized that Crime Stoppers operates independently and that its tip-management platform is not connected to the service’s internal systems. It said it is investigating and assessing potential effects on police operations. Durham police have taken a separate precautionary step, removing public-facing references directing people to Crime Stoppers while assessing the newly available information. The Durham Regional Police Service said the incident did not involve a confirmed intrusion into its internal information systems. Both Halton and Durham police have encouraged people with information about crime or public safety concerns to contact them directly through existing reporting channels. However, those routes do not offer the same anonymity associated with Crime Stoppers. What should affected tipsters do? Toronto Crime Stoppers said it will never initiate contact to ask someone for a tip number, password or other information. Anyone who receives such a request should be suspicious. The charity has urged people not to submit new tips through its website, telephone service or app until further notice. Anyone facing immediate danger should call 911, while non-emergency reports can be made directly to Toronto police. For people worried that their information may have been exposed, the biggest challenge is the uncertainty. Without access to the text of the stolen tips, Toronto Crime Stoppers said it cannot establish what individual submissions contained or determine the precise risks. McLean said people affected may need to consider protective steps, depending on the nature of the information involved. “It’s going to be the normal things you have to look at if someone hacked your banking information,” he said, referring to measures such as changing an email address and reviewing other long-standing personal information. Those steps may not address every risk, particularly where a tip involved a serious criminal case or someone who could face retaliation if identified. A setback for crime prevention The immediate concern is the safety of people whose information may have been exposed. The longer-term challenge is whether the public will continue to trust anonymous reporting systems. McLean said the loss of a reliable tip line could make it harder for police to receive information from people who do not have personal connections within law enforcement. He also pointed to the value of anonymous tips for journalists investigating major stories, noting that reporters use secure communications methods to help protect their sources. “Something that we really need today, probably more than ever, is a good solid tip line where people can be safe,” he said. Toronto Crime Stoppers said it has been working with law enforcement and technology partners on a safer way to receive tips and will not resume collecting them until it has a system it considers secure.
