Crime Stoppers Chapter Halts Anonymous Tips After P3 Global Intel Breach Exposes 1.5 M Reports

What happened

The P3 Global Intel SaaS platform, used by Toronto Crime Stoppers, was breached in March 2026, leaking more than 1.5 million tip records, including personal identifiers for over 850 000 submissions. Toronto Crime Stoppers subsequently paused all tip‑submission channels because it could no longer guarantee anonymity.

Why it matters for trust and compliance

• This breach demonstrates why a continuous vendor‑risk assurance program is essential: it provides ongoing visibility into third‑party controls, creates a defensible audit trail, and aligns with a single control objective that maps to many frameworks.
• Continuous monitoring of third‑party security controls to detect gaps before they lead to data exposure.
• Collecting evidence of vendor commitments (e.g., anonymity guarantees) to satisfy audit and regulatory readiness.

Who is affected

Recommended actions

1. Conduct a formal third‑party risk assessment of the tip‑management platform, focusing on data‑privacy and access‑control controls.
2. Require the vendor to provide continuous security evidence (audit logs, independent assessments) and update contracts with breach‑notification clauses.