‘We understand that this situation may be concerning’: Port Hope police chief after Crime Stoppers data breach
By editor/reporter Sarah Hyatt
Local police leaders like Port Hope Police Service (PHPS) Chief Tim Farquharson say they’re closely monitoring “a cybersecurity incident” involving a third-party platform used by Crime Stoppers’ organizations – and the potential fallout.
This includes the potential risks to privacy, confidentiality and anonymity of individuals who have provided information through this service, explained Farquharson.
“Given the ongoing assessment of this incident and our responsibility to protect those who come forward with information, the Port Hope Police Service will be temporarily suspending its use of Crime Stoppers at this time while we seek further clarity and assurances regarding the security of the platform and the information submitted through it,” he said.
He stressed “public safety remains our priority.”
Meanwhile, as of Tuesday, Oct. 27, fallout from the Crime Stoppers data breach continued to be reported nationally. And Privacy Commissioner of Canada Philippe Dufresne confirmed there will be a probe to look into the cybersecurity incident “involving tips shared with Crime Stoppers programs across Canada.”
“The commissioner initiated the investigation into Navigate360, the commercial organization that provides and manages the tip management platform used by Canadian Crime Stoppers’ chapters,” reads a release from the privacy commissioner’s office. “The investigation will examine the security safeguards that Navigate360 had in place at the time of the breach to determine the organization’s compliance with Canada’s federal private-sector privacy law.”
The investigation comes after CBC reported 1.5 million tips submitted Crime Stoppers programs in Canada over the last some 25 years were allegedly exposed when Navigate360 was hacked back in March.
Meanwhile, the Canadian Press has reported that the U.S-based company confirmed the breach last week, and said it immediately opened its own investigation, took mitigative measures and instituted additional and enhanced safeguards, with help from another cybersecurity firm at the discovery.
Locally – and prior to the data breach – area police services such as PHPS, the Cobourg Police Service (CPS) and Northumberland OPP would often include Crime Stoppers as an anonymous option and alternative when trying to encourage citizen tips in investigations or appeals for the public’s help. All area services have since ceased these calls and hit the pause button on partnerships and accepting tips through the platform – along with several police departments across Canada, according to multiple national reports.
The Peterborough and Northumberland Crime Stoppers’ chapter has also confirmed the temporary suspension of its anonymous tip submissions due to “the recent data breach involving Navigate360/P3, the third-party platform used by Crime Stoppers programs,” following several others elsewhere recently.
In a public notice posted online, Peterborough Northumberland Crime Stoppers stated protecting the anonymity and safety of those who have placed their trust in the program has always been and will continue be its highest priority.
The organization said in light of information surrounding the breach and in consultation with law enforcement partners, officials made the difficult but necessary decision to pause acceptance of tips “until we can be confident that the systems used to receive information provide the level of security and anonymity our tipsters deserve.”
“This decision was not made lightly; however, the protection of our tipsters and the integrity of our program must always come first,” said the local chapter. “We sincerely appreciate the continued patience, understanding and support of our communities as we navigate this challenging situation.”
Farquharson described Port Hope’s suspension as a precautionary measure while circumstances and potential impacts continued to be assessed.
“We recognize that information provided by members of the public is an important part of keeping our community safe and supporting criminal investigations,” he also acknowledged. “We also recognize that individuals who provide tips do so with the expectation that their identities and personal safety will be protected.
“That trust is fundamental, and we take our responsibility to protect it very seriously.”
Close monitoring means PHPS will continue to seek information and assurances about security relating to the platform and explore alternative ways for citizens to share information safely and anonymously with police, continued Farquharson.
CPS has also issued a statement saying officials are aware of the incident and taking proactive measures.
“As a precaution, CPS is temporarily pausing the use and promotion of the Peterborough and Northumberland Crime Stoppers portal and tipline,” said the service, adding staff are also assessing potential impacts on police operations and appropriate next steps.
CPS also explained that Crime Stoppers operates independently from police services – and while information received through the organization may be shared with police for investigative follow-up, the local chapter and its P3 platform are separate from CPS and any internal police systems.
Cobourg also echoed that public safety remains its top priority. The service is encouraging residents wanting to make investigative-related reports to contact CPS directly – 911 in emergencies and 905-372-6821 for the non-emergency line – or people can visit cobourgpoliceservice.com/online-reporting/.
“We recognize the importance of public trust, confidentiality and the safety of individuals who provide information to Crime Stoppers. CPS will continue to monitor the situation and work with Peterborough and Northumberland Crime Stoppers as further information becomes available.”
PHPS is also encouraging citizens who have information about criminal activity to continue to come forward through appropriate channels, including through direct contact with police.
Meanwhile, Farquharson also said police are committed to identifying secure and confidential ways for people to share information, while respecting privacy and protecting their safety.
“We understand that this situation may be concerning, particularly for individuals who have previously submitted information through Crime Stoppers,” he noted. “Anyone with questions about the incident, including its potential impact on previously submitted tips or personal information, should contact the Canadian Crime Stoppers Association for further information.”
PHPS said updates will be provided as more verified information becomes available.
Earlier, the service also stated that work continues with Crime Stoppers’ partners to determine whether local information was affected and to assess any possible implications for public safety and ongoing investigations. Again, officials in Port Hope stressed the incident involves a third-party platform and isn’t currently characterized as a breach of police-owned internal systems.
Back at the national level, the Office of the Privacy Commissioner of Canada (OPC) stated it also reached out to Crime Stoppers after becoming aware of the incident to offer expertise and guidance around responding to a privacy breach. The OPC also stated it reached out to Navigate360.
“The OPC’s engagement with both organizations is focused on ensuring that the necessary steps are being taken to address the breach and protect Canadians’ personal information,” explained the commissioner’s office. “This includes breach containment and measures to reduce risks to those affected, as well as actions to prevent future breaches.”
However, the OPC has also noted that it oversees compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) that applies to organizations that collect, use and disclose personal information in the course of commercial activities. In other words, PIPEDA generally doesn’t apply to not-for-profit organizations – and Crime Stoppers is considered a not-for-profit.
“As the matter involves an active investigation, the OPC is not in a position to provide further details at this time,” concluded officials.
These were the latest details available at the Independent’s press deadline.
Comments