Canada’s privacy commissioner has opened an investigation into the company behind the tip-management platform used by Canadian Crime Stoppers chapters. The announcement follows local statements that some programs have paused receiving tips or that police have suspended participation.
The immediate question for someone considering a report is practical: which channel is operating, and what protection does that channel actually offer? A familiar program name is not enough to answer either question during this incident.
What the commissioner is investigating
The Office of the Privacy Commissioner of Canada’s October 27 announcement names Navigate360, the commercial provider and manager of the platform. The inquiry will examine the security safeguards in place at the time of the breach and compliance with the federal private-sector privacy law, PIPEDA.
That scope matters. The OPC says Crime Stoppers is a nonprofit and that PIPEDA generally does not apply to nonprofit organizations. The commercial service provider is the subject of this investigation. The announcement does not establish that the provider violated the law, identify a complete national victim count or resolve the technical cause.
The OPC says its engagement also concerns containment, reducing risks to affected people and preventing further breaches. It has not published further investigative details while the inquiry is active.
A name in a tip is not necessarily the tipster
Crime Stoppers Guelph Wellington’s October 22 statement provides a specific local account. It says Navigate360 told the program that 14,898 tips, dating from 1996 to 2025, were in the stolen data and that those tips contained 1,407 names.
The program also identifies an important uncertainty: it had not been told whether the names belonged to people who submitted tips, people named as suspects, or both. Those figures are the chapter’s account of information received from its vendor. They are not a count of confirmed identified tipsters across Canada.
The chapter says people sometimes identify themselves in a tip even though the program does not ask for their names. It says some original tip material containing potentially identifying details was retained in the affected system. An intake form that does not require a name can therefore still receive identifying information in the narrative.
Avoid treating every exposed name as the same kind of record. That distinction affects both reporting accuracy and what an individual can reasonably infer about their own situation.
Local pauses have different boundaries
Peel Regional Police announced on October 22 that it was suspending participation in the program. It described the Crime Stoppers platform as independent of police systems and infrastructure. It also said that direct reporting to police does not provide the anonymity associated with Crime Stoppers.
Cobourg Police Service’s October 26 notice says it temporarily paused use and promotion of the Peterborough and Northumberland portal and tip line. Its notice says it would not receive or act on Crime Stoppers tips during the pause and directs people to its existing reporting channels.
These notices describe those organizations’ actions on those dates. They do not establish the operating status of every Canadian chapter. Before submitting sensitive information, read your local program’s latest notice and confirm that the intended channel is receiving reports.
If you are concerned about an earlier tip
Guelph Wellington’s notice warns that its program will not contact people asking for information about a submitted tip. Do not disclose a tip number or other identifying details in response to an unexpected message merely because the sender refers to the breach.
Use independently obtained official contact information to check an instruction. Do not paste the contents of a sensitive tip into a public forum or an unrelated breach-checking service to ask whether it was exposed. This site cannot inspect the affected platform or determine whether a particular tip was involved.
If someone is in immediate danger, use emergency services. For other reporting, consider the local notice carefully: a direct police channel may be available, but availability and anonymity are separate questions. The inquiry and the local response notices should be read together, without turning an unresolved investigation into a promise of safety.