Toronto Police Suspend Crime Stoppers After Data Breach Exposes Confidential Tips

Toronto police have suspended their use of Crime Stoppers after new details emerged about a breach at the vendor behind its tip-reporting platform. The announcement was published on October 21 at 8:54 p.m. Toronto time, which was 2:54 a.m. on October 22 in Poland. That puts the decision inside the window covered by this morning’s review.

What changed

The police note that Crime Stoppers is a separate organization and that its platform runs independently of police systems. Even so, the new information raised concerns about how well the confidential details of tipsters are protected. Pausing the partnership gives time to assess the additional safeguards that the organization and its service providers are putting in place.

Toronto Crime Stoppers has also stopped accepting new tips. According to CityNews, the organization removed the tip submission feature from its website and told staff to stop handling new information that comes in by phone. The new development is this operational decision and the reasons behind it. The breach of the P3 software itself reportedly happened earlier, in March.

Why confidentiality is at risk

CityNews reports the theft of nearly 177,000 Toronto-related tips submitted between January 2022 and November 2025. The stolen data also included names. The organization stresses that it does not ask tipsters for personal details, but people can still type identifying information into the free-text description of what happened.

According to the organization’s statement, the vendor has not said whether the names it found belong to the people who submitted tips, to people mentioned in the tips, or to both. That means not every exposed name should be treated as an informant’s identity. The organization also says it has not received the content of the stolen tips, which it would need to assess the risk accurately.

Takeaways for organizations

• Review what information users can enter into open-text form fields.
• Set clear rules for how original submissions and any copies held by vendors are stored and retained.
• Have a backup contact channel ready for use while a system is suspended.
• Be clear about the confidentiality limits of any backup channel. Toronto police point out that reporting directly to them does not offer the anonymity that Crime Stoppers provides.

SecurHUB’s take

Protecting a reporting form also means protecting the free text people type into it and the service provider’s back end. Security audits help assess the entire tip-handling workflow and whether an organization is ready to suspend a service safely after an incident.

Sources: Toronto Police Service, CityNews