# Navigate360 breach exposes Crime Stoppers tips from its P3 platform, Canada's privacy commissioner investigates · pwn.watch > Navigate360, the US company behind the P3 tip platform used by Crime Stoppers programs, disclosed on Oct 23 2026 that an unauthorized third party was in one of its systems from Nov 21 2025 to Mar 5 2026 and copied data. It says the files may include names, addresses, dates of birth, Social Security numbers, phone numbers, email addresses and other sensitive information. CBC News reports more than 1.5 million Canadian tips from the past 25 years were compromised, and Toronto Crime Stoppers says 176,859 of its tips were affected. On Oct 27 Canada's Privacy Commissioner opened an investigation into Navigate360. Page: https://pwn.watch/i/navigate360-p3-crime-stoppers-tip-breach · generated 2026-10-28T08:54:10.908Z ## Status - Severity: high · status: live · patch: partial - Product: Navigate360 P3 tip management platform (used by Crime Stoppers) - Started: 2025-11-21 ## Follow this incident - RSS (one item per update): https://pwn.watch/i/navigate360-p3-crime-stoppers-tip-breach/feed.xml - JSON Feed: https://pwn.watch/i/navigate360-p3-crime-stoppers-tip-breach/feed.json - Full data (timeline, sources, posts, agentBrief): https://pwn.watch/i/navigate360-p3-crime-stoppers-tip-breach.json - This file: https://pwn.watch/i/navigate360-p3-crime-stoppers-tip-breach/llms.txt ## Updates (newest first) - 2026-10-27: The Privacy Commissioner of Canada opens an investigation into the safeguards Navigate360 had in place at the time of the breach. (https://www.priv.gc.ca/en/opc-news/news-and-announcements/2026/nr-c_261027/) - 2026-10-23: Navigate360 publishes its Notice of Data Breach and begins notifying affected people: names, addresses, dates of birth, Social Security numbers, phone numbers, email addresses and other sensitive data may be involved. CBC reports more than 1.5 million Canadian Crime Stoppers tips from its P3 tip platform were compromised, and several Crime Stoppers chapters pause tips. (https://finance.yahoo.com/technology/articles/navigate360-notice-data-breach-130000848.html) - 2026-03-18: Navigate360 becomes aware of suspicious activity on one of its systems and starts an investigation with a cybersecurity firm. (https://finance.yahoo.com/technology/articles/navigate360-notice-data-breach-130000848.html) - 2025-11-21: An unauthorized third party gets into Navigate360's internal IT environment and starts copying files; access lasts until March 5 2026. (https://finance.yahoo.com/technology/articles/navigate360-notice-data-breach-130000848.html) ## Fix brief # Security brief: Navigate360 breach exposes Crime Stoppers tips from its P3 platform, Canada's privacy commissioner investigates Source: https://pwn.watch/i/navigate360-p3-crime-stoppers-tip-breach · status: live · severity: high · updated Oct 28, 2026, 06:02 UTC ## Patch status **PARTIALLY PATCHED: some fixes exist, but not every affected branch/product is covered. Check carefully and apply mitigations where no fix exists.** ## What it is Navigate360, the US company behind the P3 tip platform used by Crime Stoppers programs, disclosed on Oct 23 2026 that an unauthorized third party was in one of its systems from Nov 21 2025 to Mar 5 2026 and copied data. It says the files may include names, addresses, dates of birth, Social Security numbers, phone numbers, email addresses and other sensitive information. CBC News reports more than 1.5 million Canadian tips from the past 25 years were compromised, and Toronto Crime Stoppers says 176,859 of its tips were affected. On Oct 27 Canada's Privacy Commissioner opened an investigation into Navigate360. Severity detail: Supposedly anonymous crime tips, some with identifying details, plus Social Security numbers and other personal data, stolen over more than three months - Product: Navigate360 P3 tip management platform (used by Crime Stoppers) ## Affected versions - Not specified in the data. Check the advisories below. ## Check whether you're affected No generic command applies (the product is a hosted service, appliance or desktop app). Check the installed version in its admin UI / About screen and compare with the versions above. ## Fix No fixed version is listed. Follow the vendor advisory below. ## Mitigations The data marks this as partial. Until every affected component is fixed, apply the vendor mitigations from the advisories below (restrict network exposure of the affected service, disable the vulnerable feature if the advisory allows). ## Specific notes There is nothing to patch. If you ever sent a tip to Crime Stoppers through P3 (web, app or phone) or got a Navigate360 notification letter, watch for phishing and identity theft, and take up the offered credit monitoring if your Social Security number was involved. Organizations that use P3 should ask Navigate360 which of their records were taken. ## Latest updates - Oct 27, 2026: The Privacy Commissioner of Canada opens an investigation into the safeguards Navigate360 had in place at the time of the breach. - Oct 23, 2026: Navigate360 publishes its Notice of Data Breach and begins notifying affected people: names, addresses, dates of birth, Social Security numbers, phone numbers, email addresses and other sensitive data may be involved. CBC reports more than 1.5 million Canadian Crime Stoppers tips from its P3 tip platform were compromised, and several Crime Stoppers chapters pause tips. - Mar 18, 2026: Navigate360 becomes aware of suspicious activity on one of its systems and starts an investigation with a cybersecurity firm. - Nov 21, 2025: An unauthorized third party gets into Navigate360's internal IT environment and starts copying files; access lasts until March 5 2026. ## Advisories - [Navigate360 Notice of Data Breach](https://finance.yahoo.com/technology/articles/navigate360-notice-data-breach-130000848.html) (Navigate360 (Business Wire)) - [Security Breach Notification (Navigate360, LLC)](https://riag.ri.gov/media/9391/download) (Rhode Island Office of the Attorney General) - [Privacy Commissioner of Canada to investigate data breach involving Crime Stoppers](https://www.priv.gc.ca/en/opc-news/news-and-announcements/2026/nr-c_261027/) (Office of the Privacy Commissioner of Canada) ## Write-ups & news - [Privacy commissioner to investigate Canadian Crime Stoppers breach](https://www.cbc.ca/news/investigates/privacy-commissioner-canada-crime-stoppers-breach-investigation-9.7398559) - [No evidence stolen Crime Stoppers data used for fraud, provider says](https://globalnews.ca/news/12122683/crime-stoppers-cyber-breach-navigate360/) ## Caveats Navigate360 says it found the activity around Mar 18 2026, finished its file review on Oct 22 2026 and has no evidence the data was misused for fraud or identity theft. The 1.5 million figure is CBC's own analysis; Navigate360 has not published a total. Several Canadian Crime Stoppers chapters and police services paused anonymous tips. Navigate360 also sells software to US schools. --- Machine-readable: https://pwn.watch/i/navigate360-p3-crime-stoppers-tip-breach.json · all incidents: https://pwn.watch/incidents.json. Verify against the vendor advisory before changing production systems.