Canadians could be part of new class-action lawsuit against Crime Stoppers
Canadian tipsters could be part of a newly filed class-action lawsuit brought against Crime Stoppers due to a data breach.
Consumer Law Group announced a proposed class-action lawsuit against the Canadian Crime Stoppers Association (CCSA) and Navigate360 due to a massive data breach that exposed personal details and tips provided by around 1.5 million Canadians.
CCSA is a non-profit organization that collects tips anonymously from Canadians about a crime or potential crime. Navigate360 is a U.S.-based private corporation contracted by CCSA to manage private information that CCSA collects.
On Oct. 23, Navigate360 published a notice, stating that it became aware of “suspicious activity on one of its systems” in March 2026. The company said the information affected varies by individual, but the breach involved personal information.
On Oct. 27, the privacy commissioner of Canada, Philippe Dufresne, said he has opened an investigation related to the cybersecurity incident.
The allegations
Colin Temple/Shutterstock
A Dunnville, Ont., resident launched the proposed class-action lawsuit after contacting CCSA about a suspected drug house near his home, the court document states. He gave the organization his name, address, phone number, and email address, but discovered in October that his information may have been part of the data breach.
The lawsuit alleges that CCSA and Navigate360 failed to protect Canadians’ identities and personal information. An estimated 850,000 tips were stored in the affected systems, exposing information such as names, home addresses, phone numbers, email addresses, licence plates, banking details, and Social Insurance Numbers. It also included details about people named in the tips, CCSA staff, and police.
The lawsuit further alleges that the organization left people’s personal information unredacted and unencrypted, and “improperly retained decades of sensitive information and records long past their useful life.”
In addition, it accuses Navigate360 of knowing about the suspicious activity since as early as March 18, 2026, but failing to notify affected individuals until it published the notice on Oct. 23. Navigate360 allegedly violated the Consumer Protection Act and the Personal Information Protection and Electronic Documents Act (PIPEDA).
The website states, “To this day, neither Crime Stoppers nor Navigate360 have provided any notice to affected individuals whose information was compromised.”
Who’s eligible?
PeopleImages/Shutterstock
You could be part of the lawsuit if you’re a Canadian resident whose personal information was given to CCSA and your data was part of the unauthorized access between Nov. 21, 2025 and March 5, 2026.
How much could you get?
For now, the lawsuit is in the proposal stage, so the amount has not been identified yet. However, it seeks punitive, compensatory, and special damages on behalf of affected Canadians.
What should you do next?
If you think you’re eligible, you can join the class action mailing list for the latest information.
Canadians may also be eligible to join other class-action lawsuits, including ones involving Chocmod Canada Inc. and CIBC.