A major data breach involving Crime Stoppers may have exposed 1.5 million tips submitted across Canada over the past 25 years, along with thousands of personal details.
Privacy expert Michael Geist says the breach could be one of the most harmful in Canadian history. He says both Crime Stoppers and Navigate360, the U.S.-based company that managed the tip system, could be held responsible for protecting the information.
Geist also warns that Canada’s privacy laws are outdated, with weak penalties and limited ways for victims to receive compensation.
The stolen information was taken in March by a hacking group that wanted to challenge Navigate360’s claims that its P3 platform was secure and anonymous.
Cybersecurity expert Ali Dehghantanha raised concerns about how the company handled the breach. Toronto Crime Stoppers said it received several different explanations about the stolen data over seven months. The company later said the system was safe and fully operational.
Experts warn that it remains unclear whether the full extent of the breach has been identified.
An internal memo from the Canadian Crime Stoppers Association advised local groups not to contact privacy commissioners, saying they did not have authority over Crime Stoppers.
The association’s president later said outside cybersecurity experts had investigated the breach and fixed security weaknesses. However, the exposure of information already stolen remains a serious concern.
