BC privacy commissioner opens investigation into Crime Stoppers breach

The Office of the Information and Privacy Commissioner for BC (OIPC) has opened an investigation into the Crime Stoppers cybersecurity breach. 

The breach targeted the tip-management platform operated by US-based company Navigate360, which managed tip collection for Crime Stoppers chapters across Canada, including in Greater Victoria. 

Over 1.5 million Canadian tips were reportedly compromised, with an estimated 850,000+ tips containing personally identifiable information such as names, phone numbers, home addresses, personal email addresses, license plates and other sensitive descriptions.

Leaked reports included matters of serious violent crimes, drug trafficking and organized crime groups.

Navigate360 reportedly became aware of suspicious activity on March 18th, but waited until October 23rd to publicly acknowledge the hacker breach. 

Related:

• Saanich Police pauses use of Crime Stoppers tip line following security breach

Though the Office of the Privacy Commissioner of Canada (OPC) had already launched an investigation, the OIPC has also now launched their own. 

BC’s privacy commissioner is specifically investigating whether the British Columbia Crime Stoppers Society took adequate steps to protect personal information gathered from people who reported tips in BC. 

Under the Personal Information Protection Act, the OIPC has jurisdiction over all organizations that collect, use and disclose the personal information of people living in BC. 

Organizations are required to make reasonable security arrangements to protect personal information that they hold. 

The OIPC says that due to the sensitive nature of the personal information held by Crime Stoppers, individuals do not need to complain to the privacy commissioner if they believe they have been affected by the breach. 

As this is an active file before the office, no further information will be provided until the case is closed.