Months after a data breach incident involving Crime Stoppers was disclosed to the public by Hamilton police, the program has been put on hold. The Hamilton Police Service made the announcement on Thursday, expressing the need for more information on the security of the tip-management system post-breach. Like many other law enforcement agencies, Hamilton police regularly encourage the public to report anonymous crime tips through Crime Stoppers. Just recently, in a news release on October 16, Hamilton police advised individuals with information about a fire to contact them or use Crime Stoppers for anonymity.
A recent investigation by CBC News revealed that over 1.5 million tips submitted to Canadian Crime Stoppers programs in the past 25 years were compromised in a breach that occurred in March. The breach exposed personal details that allowed CBC to contact more than a dozen tipsters. Hamilton police emphasized the importance of protecting confidential information and the anonymity of Crime Stoppers users in their press release.
Following suit, the Halton Regional Police Service also decided to halt its use of Crime Stoppers, acknowledging the gravity of the situation in safeguarding the anonymity and safety of informants aiding investigations. Halton police stated that they are actively evaluating the potential impact of the breach on their operations.
Hamilton police were notified of the breach by Crime Stoppers in June, and any inquiries regarding the breach were directed to the Canadian Crime Stoppers Association, a separate entity. David J. Forster, president of the Canadian Crime Stoppers Association, mentioned that they were investigating the impact on anonymous tipster information. Forster highlighted their practice of anonymizing incoming tips but refrained from drawing conclusions until a thorough review was completed.
CBC’s investigation revealed lapses in protecting tipsters’ identities, unredacted personal information, and improper record maintenance. Canada has 68 registered Crime Stoppers chapters as non-profits, as per data from the Canada Revenue Agency. Since the investigative report was published, at least seven chapters have announced the suspension of their programs in response to the data breach incident.
