Crime Stoppers Breach Exposes 8.3 Million "Anonymous" Tips

Security surveillance cameras on exterior wall

TL;DR: A hacktivist group calling itself "The Internet Yiff Machine" breached P3 Global Intel, the Texas company that runs the tip management platform for Crime Stoppers programs, law enforcement agencies, schools, and federal agencies across the US. The stolen data includes 8.3 million records spanning February 1987 to November 2025. Worse: the breach exposed a secret feature that let customers track tipsters' IP addresses, directly contradicting Crime Stoppers' promise of complete anonymity. If you ever submitted a "confidential" crime tip through this system, your identity may now be in criminal hands. Portland Police has already told residents to stop using Crime Stoppers.

What Happened

On March 18, 2026, a hacker group published 93 gigabytes of data stolen from P3 Global Intel, a cloud-based tip management platform owned by Navigate360. The company provides the backend for Crime Stoppers programs, school safety tip lines, and law enforcement agencies across the country [1][2].

The hackers, self-identified as "The Internet Yiff Machine", claim they accessed approximately 8 million hotline tips dating back to 1987. They submitted the stolen data to Straight Arrow News, which verified portions by contacting affected individuals [3].

Navigate360 CEO JP Guilbault responded with standard breach language: "To this point, we have not confirmed that any sensitive information has been accessed or misused" [4]. The company has engaged a third-party forensics firm but hasn't confirmed the scope of the breach.

Who's Affected

P3 Global Intel's platform is used by [3][5]:

Four federal departments: Defense, Homeland Security, Justice, and Interior
The US military: Listed as the largest federal user
Law enforcement agencies nationwide: Police departments using Crime Stoppers
30,000+ schools: Via Navigate360's SaferWatch app for anonymous student tips
US nonprofits: Various Crime Stoppers chapters and community organizations

Portland Police Bureau has already issued a public warning, telling residents to "temporarily refrain" from submitting tips through Crime Stoppers and instead email [email protected] directly [6].

What Was Stolen

According to security researchers and journalists who reviewed the data, the breach includes [3][5][7]:

Crime tips: Reports of crimes, threats, suspicious activities, many submitted with the expectation of anonymity
Personal info on accused individuals: Names, emails, dates of birth, phone numbers, home addresses, license plates, Social Security numbers, criminal histories
Tipster identities: Names and contact information of people who submitted "anonymous" tips
IP addresses: Digital fingerprints that can identify tipsters' locations
User account credentials: Login details for law enforcement users
Chat logs: Conversations between tip senders and receiving agencies
Reward distribution records: Information about payments made to tipsters

The data spans nearly four decades, from February 1987 to November 2025. That's generations of people who trusted the system.

The "Anonymous" Lie

Here's the part that should make you angry.

Crime Stoppers has always marketed itself as completely anonymous. "Your call is not recorded. You will not be asked your name" is their tagline. People report dangerous criminals because they trust that promise.

But according to the leaked data, P3 offered a feature called "Session Information Disclosure" that allowed customers to request tipsters' IP addresses [3]. Internal documentation shows: "When tracking is enabled, the values are stored for a period of up to 90 days—and can be made available to you upon formal request."

Translation: law enforcement agencies could unmask "anonymous" tipsters whenever they wanted. The anonymity was theater.

Now hackers have that same capability. They know who submitted tips, who they accused, and potentially where they live.

The School Connection

P3's platform powers SaferWatch, an app used by over 30,000 K-12 schools for anonymous student tip lines. Students report bullying, threats, weapons, drug use, trusting their reports stay confidential [5][8].

Education Week reports the breach potentially exposed student data, though the full scope remains unclear [8]. If students' identities are in that 93-gigabyte dataset, retaliation becomes a real risk.

Navigate360's silence on whether school data was compromised is deafening.

BlueLeaks 2.0

Security researchers are drawing comparisons to BlueLeaks, the 2020 breach that exposed 269 gigabytes of US law enforcement data. That leak revealed how police fusion centers collected information on protesters and activists [9].

This breach is different, and potentially more dangerous. BlueLeaks exposed what police knew. The Crime Stoppers breach exposes who told them.

If you reported a gang member, domestic abuser, or drug dealer to Crime Stoppers, and that person has connections to criminal networks, the tables just turned. Your "anonymous" tip has a name attached to it now.

Navigate360's Response

The company has said almost nothing substantive. CEO JP Guilbault's statement: "We have not confirmed that any sensitive information has been accessed or misused."

Navigate360 claims to have engaged external forensics but hasn't:

Confirmed the scope of the breach
Notified affected law enforcement agencies
Contacted schools using SaferWatch
Warned tipsters whose identities may be compromised
Explained the "Session Information Disclosure" feature

The FBI has not commented. Multiple law enforcement agencies contacted by reporters declined to confirm whether their data was compromised [4][6].

What You Should Do

If you've submitted tips through Crime Stoppers or similar programs:

Assume your identity may be compromised
Consider whether any tips you submitted could create retaliation risks
Monitor your credit reports and personal accounts for unusual activity
Be skeptical of unsolicited contacts asking about past reports

If you're in a high-risk situation (gang witness, domestic violence reporter, etc.):

Document your concerns now in case you need evidence later
Consider whether additional security measures are needed
Contact local victim advocacy organizations for guidance

Going forward:

Don't use Crime Stoppers platforms until this breach is fully disclosed
If you must report crimes, call police non-emergency lines directly
Use a VPN if submitting any online tips (though this isn't foolproof)
Never assume "anonymous" digital systems are truly anonymous

The Trust Problem

Crime tip systems only work if people trust them. Witnesses to gang violence, domestic abuse, or organized crime put themselves at risk by coming forward. The promise of anonymity is the only thing making that risk manageable.

P3 Global Intel broke that promise twice: first by secretly tracking IP addresses, then by failing to protect the data they collected.

How many people will now stay silent about crimes they witness? How many criminals will escape justice because the system designed to catch them just handed their accusers' identities to hackers?

This isn't just a data breach. It's a breakdown of the social contract that makes anonymous reporting possible.