databreaches.net 4/22/2026, 2:30:53 PM · via preferred

School tip service hit by social engineering IDOR breach

CyberSIXT Evidence Panel Source marked as original reporting

BLUELEAKS 2.0 has reportedly exposed more than 93 GB of data comprising millions of anonymous crime tips, with DataBreaches[.]Net noting that the dataset includes tips from students and about people, including full names in some cases.

The post explains that Navigate360, the parent company of P3 Global Intel, has not publicly confirmed a breach or the presence of identifiable information, and that there has been little public disclosure from Navigate360, Sandy Hook Promises, or the Pennsylvania Attorney General’s office.

It also reveals that the dataset contains tips linked to platforms such as P3tips[.]com, the P3 Mobile App, safe2tell[.]org, safe2saypa[.]org, sandyhookpromise[.]org, Safe2Say Something PA Mobile App, and Say Something M0, with 7,378 unique school names identified in a cleaned list. Navigate360 told clients on 25 March that they were investigating the scope of any data involved, but the update did not admit that sensitive material was present.

The piece describes the incident as stemming from a social‑engineering–enabled breach where a low‑level account and an IDOR flaw allegedly allowed access to all tips, a scenario attributed in part to claims by the hacktivist group Internet Yiff Machine. DataBreaches[.]Net posted this update on 22 April 2026.

View full article

Article by CyberSIXT

Timeline Coverage

Swipe to explore timeline