Loading story…
A group calling itself Internet Yiff Machine claims it breached P3 Global Intel, a tip-reporting platform owned by Navigate360 and used by law enforcement, schools, and government agencies, and stole about 93 GB of data containing roughly 8.3 million tip submissions. Reports say the exposed records include tip reports, conversations with tipsters, personal information on both tipsters and accused individuals, internal support tickets, and internal pages describing user-tracking features, including a confidential "Session Information Disclosure" capability that could let clients request a tipster’s IP address. The alleged leak is especially sensitive because P3 serves more than 30,000-35,000 schools and multiple US government entities, and the data may include student safety, mental health, bullying, drug, and suicide-threat reports.
The attackers said they exploited multiple security weaknesses, including an alleged lack of encryption and missing rate limiting that allowed them to exfiltrate the full database. Navigate360 said it hired a third-party digital forensics firm to investigate but has not confirmed that sensitive information was accessed or misused. Even without formal confirmation, some users of the platform are treating the incident as credible; Portland Police advised the public to temporarily avoid submitting tips through its Crime Stoppers service while the matter is reviewed.
See attribution, scope, and your downstream exposure.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.