[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Cybersecurity News · markdown

confirmed (CBC investigation Oct 21; Toronto Police statement)

CBC: the March hack of P3 Global Intel exposed more than 1.5 million Canadian Crime Stoppers tips from 25 years, at least half with personal details; Toronto Crime Stoppers stops taking tips

A CBC News investigation published Oct 21 found that more than 1.5 million tips submitted to Canadian Crime Stoppers programs over about 25 years were in data stolen in March from P3 Global Intel, the tip platform owned by Navigate360. CBC's analysis found at least half included personal information, and in some cases enough to contact the tipsters, who fear retaliation.

  • The hacktivist group Internet Yiff Machine claimed the theft, saying it wanted to disprove P3's claims that the platform was anonymous and secure. Distributed Denial of Secrets made a copy available to researchers and journalists.
  • After publication, Toronto Crime Stoppers paused its program, removed its online tip form and asked Navigate360 to suspend intake. Toronto Police temporarily suspended its use of Crime Stoppers pending review.
  • CBC says the data shows identities weren't protected, personal details were left unredacted and decades of sensitive records were kept.

Lesson: "anonymous" reporting platforms are only as anonymous as their retention and redaction. Purge old records and strip identifiers on intake.

Sources: CBC News: More than 1.5 million Canadian Crime Stoppers tips leaked (Oct 21) · CBC News: Toronto Crime Stoppers pauses program · Toronto Police Service statement