Waterloo Regional Police Service and Ontario Provincial Police pause Crime Stoppers partnership

• 

• 

By Lee Griffi

The two police forces in the Gazette readership area have at least temporarily paused their relationship with Crime Stoppers following a recent data breach.

The Crime Stoppers data breach affected anonymous crime-reporting programs across Canada, including Ontario. The central concern is hackers may have exposed information people submitted expecting it to remain confidential.

On Oct. 28, Canada's federal privacy commissioner opened an investigation, and multiple Ontario police services have suspended their participation with Crime Stoppers while they assess the risks, including the Waterloo Regional Police Service (WRPS).

“The WRPS became aware of a cybersecurity incident involving Navigate360, the third-party provider of the P3 tip management platform used by Crime Stoppers programs across Canada. WRPS subsequently received confirmation that Waterloo Regional Crime Stoppers had been impacted,” a statement from WRPS reads. 

“As a precaution, WRPS suspended the promotion of Crime Stoppers as a reporting option through WRPS’ public channels in early July 2026. WRPS continues to actively monitor the situation and is working with Waterloo Regional Crime Stoppers as further information about the breach becomes available and to determine the appropriate next steps.”

While WRPS and Waterloo Regional Crime Stoppers work closely with a shared commitment to community safety, they remain separate organizations. Waterloo Regional Crime Stoppers is operated independently from WRPS, and the Navigate360 platform is not integrated or connected to WRPS’ information technology systems and infrastructure.

“WRPS recognizes the serious concerns arising from recent reports regarding the scope and nature of the Navigate360 breach, and the importance of protecting the anonymity of individuals who have provided confidential information through Crime Stoppers. The safety of the public, those who provide tips and police personnel is WRPS’ primary concern,” the statement continues. 

While WRPS and Waterloo Regional Crime Stoppers continue to review this breach, anyone who may wish to provide information about crime or public safety concerns is encouraged to contact them WRPS at 519-570-9777 or, in the event of an emergency, 911. While these reporting channels do not provide the anonymity associated with the Crime Stoppers program, they will ensure that the information is received by WRPS’ investigators.

The Oxford detachment of the Ontario Provincial Police, and the entire force, is also very aware of the incident. The Gazette reached out to Chief superintendent Brad McCallum from the Crime Prevention and Community Support Bureau.

“While the impact of the cybersecurity incident is assessed, the OPP is pausing the promotion of the Crime Stoppers program. During this time, anyone who may wish to provide information about crime or public-safety concerns is encouraged to contact their local police service’s non-emergency line. If it’s the OPP, call 1-888-310-1122 or go to opp.ca/reporting to see if you can report your incident online. Only dial 911 when immediate police, fire or medical help is needed,” he said.

McCallum added questions regarding the cybersecurity incident, the ongoing investigation, or the scope of any potentially affected data should be directed to the Canadian Crime Stoppers Association.

“The OPP remains focused on its public-safety mandate and will continue to work with community and policing partners, as appropriate.”

The federal privacy commissioner’s investigation will examine whether the company had adequate security safeguards in place when the breach occurred and whether it complied with federal privacy law.

The commissioner’s office oversees compliance with two principal federal privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), which governs personal information handled by many private-sector businesses. In this case, the investigation involves PIPEDA and the conduct of Navigate360, which operates the P3 tip-management platform used by Crime Stoppers organizations.

The investigation will centre around whether or not Navigate360's security safeguards were adequate at the time of the breach. The commissioner’s office has also said its engagement with Navigate360 and Crime Stoppers is focused on ensuring the breach is contained, reducing risks to affected people and preventing similar incidents in the future.