Navigate360 breach: about 8.3 million tip-system records involved, Social Security numbers may be included
Navigate360 said on October 23, 2026 that an unauthorized third party accessed one of its systems and obtained copies of data between November 21, 2025 and March 5, 2026, and that the data may include names, addresses, dates of birth and Social Security numbers.
What happened
Navigate360, the company behind the P3 tip-management platform used by school safety programs, Crime Stoppers programs and law enforcement agencies, said in a notice dated October 23, 2026 that it became aware of suspicious activity on one of its systems on or about March 18, 2026. Its investigation, run with a leading cybersecurity firm, determined that an unauthorized third party had accessed one of its systems and obtained copies of some data between November 21, 2025 and March 5, 2026. Navigate360 says it put mitigation measures in place on discovery, has since implemented additional safeguards, reported the incident to law enforcement and notified regulatory bodies, and has engaged a data mining firm to review the copied data in detail; it says it has no evidence that personal information has been misused for fraud or identity theft. Separately, the Nevada Department of Education and the Nevada Department of Public Safety said in a public notice on October 22, 2026 that the completed forensic investigation had concluded that approximately 10 percent of SafeVoice Nevada tips containing personally identifiable information was compromised; SafeVoice is Nevada’s anonymous school-safety reporting system, whose digital intake platform Navigate360 provides. Nevada says Navigate360 first notified it in spring 2026 that SafeVoice may have been affected, and that the system remained operational throughout.
Who is affected
People whose information was in the data the attacker copied — the information varies by person. Navigate360’s notice says the potentially impacted information may include names, addresses, dates of birth, Social Security numbers, telephone numbers, email addresses and other categories of sensitive information, and the company’s notice does not state a total number of affected people. Washoe County School District, summarising the investigation for Nevada families, says the incident impacted organisations across the United States and Canada and involved approximately 8.3 million data records. For Nevada’s SafeVoice program specifically, the district says the tips may contain student names, parent or family member names, student identification numbers, dates of birth, information related to medical conditions or treatment, and other information that could reasonably identify a student when combined with other data; it notes SafeVoice does not systematically collect usernames, passwords or user credentials, and that identifying information in a tip was included voluntarily by the person reporting. Because SafeVoice is designed for anonymous reporting, Nevada says it cannot reliably identify and directly notify everyone affected.
How serious
The concrete risk is identity fraud. A name combined with an address, a date of birth and a Social Security number is the core set a criminal needs to apply for credit or services in that person’s name, and where the person is a student that fraud can run for a long time before anyone checks the child’s credit file. There is a second, distinct risk in this incident: the records are safety tips submitted on the understanding that the reporter would stay anonymous. If a tip’s contents can be tied back to the student, family member or other person named in it — including sensitive details such as medical information included in a report — the harm is exposure of something the reporter never agreed to make public, not just financial fraud. The same details also enable targeted phishing that quotes a real tip or a child’s real information to win a parent’s trust.
What to do now
If you or your child used a school tip line run on Navigate360’s platform — SafeVoice in Nevada is the confirmed example — follow the guidance Nevada and Washoe County School District give: monitor financial and personal accounts, review credit activity, and use available credit and identity monitoring services if you believe your information may have been compromised; the district says that guidance applies to both adults and minors. Navigate360 has set up a dedicated call center for questions about this incident at 833-966-1754, Monday to Friday (6 a.m.–6 p.m. Pacific Time in Nevada’s notice; Navigate360’s own notice gives the same window as 9 a.m.–9 p.m. Eastern Time). Nevada families can also follow updates on the SafeVoice Nevada website. Treat unexpected messages that reference a tip you submitted, or your child’s details, as unproven until you have checked them through the school or the official program site yourself.
Sources: Navigate360 notice of data breach (Business Wire) · Nevada Department of Education / Department of Public Safety notice · Washoe County School District SafeVoice incident page · Cybernews