Saanich police have temporarily stopped using Greater Victoria Crime Stoppers following a national cybersecurity breach involving the platform that manages confidential tips.
The department announced the pause on October 28, saying it needed to ensure adequate safeguards were in place to protect information and the anonymity of people who come forward.
As the program’s host agency, Saanich police have directed staff to work with other local police services to assess affected Greater Victoria records and determine whether further investigative action is required. Saanich Police Department
Reported national exposure exceeds 1.5 million tips
According to CBC reporting cited by the Times Colonist, the breach reportedly exposed more than 1.5 million submissions made to Canadian Crime Stoppers programs over approximately 25 years.
That figure concerns tips across Canada. It is not a count of affected Greater Victoria records or the number of people whose identities were exposed.
Saanich’s announcement did not provide a local total or describe the information contained in the records under review.
Greater Victoria Crime Stoppers works with five police departments in the region, providing a channel for members of the public to share information anonymously.
Navigate360 says data was accessed and copied
The incident involves Navigate360, the US-based company operating the P3 Tips platform used by Canadian Crime Stoppers programs.
In its October 23 breach notice, Navigate360 said it became aware of suspicious activity on or about March 18, 2026. Its investigation determined that an unauthorised third party accessed a system and copied data between November 21, 2025, and March 5, 2026.
The company said it introduced mitigation measures, strengthened safeguards and engaged cybersecurity specialists to support its response. www.streetinsider.com
The period of unauthorised access is separate from the age of the records reportedly exposed. Older submissions held in a database can be affected by a more recent intrusion.
Federal privacy investigation examines safeguards
Privacy Commissioner of Canada Philippe Dufresne opened an investigation into Navigate360 on October 27.
The inquiry will examine the security measures in place at the time of the breach and assess the company’s compliance with Canada’s federal private-sector privacy law.
The commissioner’s office said it had contacted both Crime Stoppers and Navigate360. Its work includes examining containment efforts, measures to reduce risks to affected people and steps intended to prevent future breaches.
No finding of a privacy-law violation has been announced. The office said it could not provide further details while its investigation remained active. priv.gc.ca
Local review will determine whether follow-up is needed
Saanich police said confidential tips remain valuable to investigators, but protecting contributors’ information was central to the decision to pause participation.
Officers from local agencies will review affected Greater Victoria records to determine whether individual cases require follow-up.
The department has not announced a date for resuming its use of the program.
The suspension concerns the Crime Stoppers reporting channel. Residents can still provide information directly to Saanich police through the department’s non-emergency line or online reporting service.
How residents can report information
Saanich police are asking people with non-urgent information to use those alternative reporting options during the pause. Anyone requiring immediate police assistance should call 911.
Residents seeking information about the cybersecurity incident itself should direct their questions to Canadian Crime Stoppers, the department said.
Direct police reporting should not be assumed to offer the same anonymity as Crime Stoppers. People concerned about confidentiality can ask how their information will be handled before sharing identifying details.
The local records review and federal investigation remain separate processes: one assesses whether Greater Victoria cases require further action, while the other examines the platform provider’s security obligations.
Read Also: Calgary Keeps Crime Stoppers Open as Lethbridge Suspends Participation After Data Breach
