The Crime Stoppers leak just got a lot more real for anyone who ever sent in an anonymous tip. Toronto Crime Stoppers has paused its entire program after a CBC investigation found that more than one point five million tips sent to Canadian chapters were exposed in a massive hack.
The investigation, published Wednesday by CBC News, found that the data was stolen from software provider P3 Global Intel in March, according to MobileSyrup's summary of the CBC report. A hacktivist group called Internet Yiff Machine claimed it wanted to expose weaknesses in the platform.
What the leak contains
CBC reports that more than eight hundred fifty thousand of the exposed tips included personally identifiable information. That covers tipsters, people named in allegations, and even Crime Stoppers staff and police. Often it was street addresses and phone numbers, though CBC also found tens of thousands of personal emails and licence plates.
Hundreds of banking details tied to cash rewards were reportedly in the data too. There were also more than four thousand three hundred cases where tipsters typed in their full names, even though they are told not to. Staff reportedly warned in hundreds of cases that a tipster had been compromised, yet the information stayed in the database unredacted.
The nonprofit Distributed Denial of Secrets made the data available to researchers and journalists. CBC says it used encryption and offline work environments to handle the material. The leak reportedly includes tips on famous cases such as the Barry and Honey Sherman murders and the manhunt for Ryan Wedding.
Toronto hits pause
Toronto Crime Stoppers is the chapter with the most tips in the leak. Chair Sean Sportun said one hundred seventy-six thousand eight hundred fifty-nine of its tips were affected by the breach, according to Global News. Twelve thousand three hundred ninety-two of them may contain personal information.
Sportun told the public to hold off on sending anything. In his statement he said that until the group has a safer way to protect people, tips should not be sent by phone, online or through the app. The group has removed the Tip Submit feature from its website and asked its call centre to stop processing new information.
Toronto police said they are temporarily suspending their use of Crime Stoppers while they review safeguards. Anyone with information can still use regular police reporting channels, but those are not anonymous. In an emergency, people should call nine one one.
The blame game
Sportun said P3 owner Navigate360 repeatedly assured the organization that the system was secure. A month after the attack, the provider said some Canadian data had been stolen but that Toronto submissions were not affected. Months later, that changed, and the group says it was told tips from January 2022 to November 2025 were hit.
Navigate360 also handed over a list of almost fifteen thousand names found in the breach, but Sportun said it lacks the detail needed to measure risk. Despite requests through lawyers, the company has not provided the text of the stolen tips, he said. Navigate360 did not immediately respond to Global News.
Why Gen Z should care
Many younger people report things online, from scams to threats, and expect that a tip line keeps their name out of it. When that expectation breaks, people become less willing to speak up, and that makes it harder for police to solve cases that depend on community help.
The leak also raises a bigger question about who holds our data. Charities and public safety groups often rely on outside vendors for software, and when a vendor is hacked, the people who trusted the service pay the price. Stronger rules on redacting and deleting old records would be a good place to start.
Anonymous tip lines only work if people trust they are anonymous. This Crime Stoppers leak shows how a single vendor can turn a promise of privacy into a database of addresses and phone numbers. Some tipsters now fear retaliation, and some experts blame the organization as well as its software provider.
If you have ever submitted a tip, it is smart to watch for official updates and think about whether details you shared could identify you. For more on how Canada is dealing with big stories like this one, see our Canada coverage.
For now, the pause leaves a gap in the system. The group says it will keep pressing for answers and share what it learns, but rebuilding trust may take far longer than fixing the software.
Comments 0
No comments yet. Be the first to share your thoughts!
Leave a comment
Share your thoughts. Your email will not be published.