Canada’s Supreme Court established nearly three decades ago that confidential Crime Stoppers tipsters must be protected from identification through court proceedings. But those protections did not prevent a cyberattack on a private technology platform from exposing more than 1.5 million Canadian-linked crime tips, raising questions about whether legal anonymity can survive the systems used to store confidential reports.
In its 1997 ruling in R. v. Leipert, the Supreme Court held that informer privilege extends beyond names to information that could indirectly identify anonymous tipsters. The narrow exception involves circumstances where disclosure is necessary to establish an accused person’s innocence.
Toronto Crime Stoppers explicitly references that decision in its privacy policy, assuring individuals that their identities are legally protected.
Sponsored · Cambria Gold Mines
The ruling, however, governs disclosure of confidential informer information within the justice system. It does not establish technical safeguards for databases maintained by outside contractors.
That distinction became an operational crisis on Wednesday, when Toronto Crime Stoppers suspended anonymous submissions through its telephone, online, and mobile channels. Toronto Police separately suspended its use of the program pending a security review.
The police directed residents toward conventional reporting channels, acknowledging those alternatives lack Crime Stoppers’ anonymity protections.
A CBC investigation published identified more than 850,000 Canadian-linked tips containing potentially identifying information within records stolen from P3 Global Intel in March. The exposed information included residential addresses, telephone numbers, email addresses, licence plates, and banking details associated with rewards.
The outlet found more than 4,300 reports in which tipsters apparently disclosed their full names. Some records also retained staff warnings that contributors had identified themselves or had been exposed.
Sponsored · Silver47 Exploration Inc.
The identifying details did not exclusively belong to informants. They also concerned people accused of wrongdoing, victims, and other individuals referenced in submissions.
Toronto Crime Stoppers said Navigate360, the US-based company responsible for the P3 platform, initially advised in April that Toronto’s information had not been affected.
The company acknowledged the city’s exposure in June. By July, approximately 176,859 Toronto tips had been identified as compromised, with 12,392 potentially containing personal information.
That latter estimate rose to approximately 14,980 by September.
Toronto Crime Stoppers chair Sean Sportun said the organization had still not received the contents of the stolen reports as of Wednesday. The organization maintains that it removes identifying details before forwarding tips to investigators, but the stolen material included original submissions held by its provider.
Canadian involvement was not entirely new. Hamilton Police had publicly acknowledged a related breach on June 17.
