-
Canadian Crime Stoppers says it is still carrying out an investigation on the damages from a recent cyber incident on the intel platform under P3 Global where informants send crime tips anonymously.
-
U.S. reports allege that hackers grabbed up to 8.3 million records, which include confidential tips people submitted & some personal information belonging to anonymous tipsters.
-
Legal & cybersecurity experts warn that this exposure of tipsters’ identities could place them at risk to make the public question their commitment to using anonymous reporting systems.
The breaching of the software supporting Crime Stoppers programs all over North America has put a lot of people into fear.
Many people are wondering if the bad actors have exposed anonymous tipsters given that some personal information is seemingly appearing for sale on the dark web.
The incident was mainly around P3 Global Intel, an anonymous tip platform based on the cloud which Crime Stoppers organizations, government bodies, police agencies, and even other public safety organizations use to send crime information.
While Canadian Crime Stoppers officials say they are yet to confirm if the breach will have any impact on tipsters in Canada, reports coming from the United States implies otherwise.
US reports allege that hackers may have collected millions of records, which include confidential crime reports & identifying information which individuals who believed they were reporting crimes anonymously submitted to the platform.
Questions Remain About Scope of Canadian Impact
The Canadian Crime Stoppers Association says it is aware of this security incident that affected P3 software but as at publication, they are yet to determine whether it directly affected Canadian tipsters.
Association president David Forster said the organization will continue to take the necessary actions alongside partner & specialists to investigate the matter. They are also willing and available to meet any regulatory obligations that may arise.
The breach has triggered concern because P3 Global Intel is a technology backbone for programs that allow people to report crimes without showing themselves and because of that, many organizations use it.
According to Mailyn Fidler, the assistant law professor at University of New Hampshire, due to the large number of people that adopt the platform, it is clear that control of sensitive information from local police departments to military organizations may be within a single system.
Despite the public warnings which law enforcement issued in some parts of the United States, including guidance from the Portland Police Bureau imploring the residents to stop submitting tips through Crime Stoppers, there has not been any such advisory by the Canadian police service.
Crime Stoppers programs in Canada are still using the P3 platform while the authorities are still carrying on with the investigations.
Police Agencies Received Notifications at Different Times
Police services all over Canada have reported that people sent them information of this cybersecurity incident at different points over several months. This clearly shows that there is a high level of uncertainty around the breach & the potential consequences that might arise from it.
Toronto Police Service said Toronto Crime Stoppers informed them about it immediately after allegations of the breach came up on March 18.
Police stated the updates kept flooding in from Crime Stoppers & the platform’s operators but noted that nobody has determined whether the bad actors also compromised anonymous Toronto tipster information.
Other agencies reported they got their own notifications about the breach much later. Vancouver Police said the operators informed them around May but the details they shared with them about the breach were sparse.
Calgary Police stated it received its report of the incident in April and they are not sure if hackers stole information from Calgary-area tips. Hamilton Police Service also confirmed recently that they also got the information about a Crime Stoppers breach.
The timelines that are different from one another have brought confusion around the incident given that technology outlets first shared the news of the breach earlier in March.
Exposure of Anonymous Informants Sparks Trust Concerns
Regarding the consequences that might arise from this incident, legal experts say the most serious one could be bad actors exposing individuals who sent crime tips under assurances that they’ll remain anonymous.
Attorney Thomas E. Loeser in the US said one of his clients found out that personal information connected to a previous anonymous Crime Stoppers report is available online after a journalist who obtained the details connected with him.
Loeser is of the opinion that this incident shows a terrible breach of public trust because anonymous reporting systems only work because tipsters believe their sensitive information will remain under strong security.
The importance of anonymity is also under pressure elsewhere. The U.S. Department of Homeland Security is pushing social platforms to reveal the identities of anonymous ICE critics, raising similar trust and safety concerns.
If these tipsters fear that their identities are not secure anymore, they may stop reporting criminal activity in the future. Secondly, Professor Mailyn Fidler, shared the same concerns, noting that some of the reports may involve organized crime groups or other dangerous subjects.
In such cases, opening up the identity of the tipster could lead to very serious implications on such a person’s personal safety.
She also pointed out that it is really troubling that law enforcement has not confirmed whether bad actors exposed anonymous reports & personal information after many months, given how risky this incident is to some informants.
Meanwhile, Loeser has launched a proposed class-action lawsuit in the United States against Navigate360, the main company behind P3 Global Intel. For now Navigate360 has refused to give interviews with the reason that criminal investigation into the matter is still ongoing.
