Nevada Says a Vendor Breach Exposed Some Anonymous School Safety Tips. Your Questions About the Navigate360 Incident, Answered
Nevada says about 10 percent of SafeVoice school safety tips that contained personal information were compromised in a multistate breach at vendor Navigate360. Because tipsters are anonymous, the state cannot notify them directly. Here are the key questions and answers, and the lesson for any organization that collects sensitive reports.
Anonymous tip lines only work if people believe they are anonymous. That promise is now under strain in Nevada and beyond. State officials said this week that a breach at technology vendor Navigate360 compromised some tips submitted to SafeVoice Nevada, the state’s system for reporting school safety threats and concerns about students’ well-being.
This Q&A is based on the Las Vegas Sun’s report and the Nevada Department of Education’s public notice, with context from The Record.
What did Nevada announce?
On October 22 the Nevada Department of Education and Department of Public Safety said Navigate360’s forensic investigation concluded that about 10 percent of SafeVoice tips containing personally identifiable information were compromised. The criminal incident ran from November 2025 to March 2026. Navigate360 first warned the state in the spring and delivered its findings this month.
Is SafeVoice still working?
Yes. Navigate360 has told the state the system remains fully operational around the clock for students and families.
Why aren’t affected people getting letters?
Because tipsters can stay anonymous, the department says it cannot reliably identify and notify everyone affected. It is instead giving public notice under Nevada law through its news release and the SafeVoice website. Navigate360 will issue its own public notice under a court order.
Who can people call?
Navigate360 has set up a call center through HaystackID, the firm that ran the forensic analysis: 833-966-1754, toll-free, 6 a.m. to 6 p.m. Pacific Time, Monday through Friday, excluding U.S. national holidays.
Is this only a Nevada problem?
No. Officials describe it as a multistate incident, and the department says it is working with education leaders in other states to press the company for accountability. The incident has drawn congressional inquiries and a U.S. Department of Justice criminal investigation. Reuters reported in March that a hacker claimed to have breached Navigate360’s tip platform, P3 Global Intel, and Navigate360 says its products are used by more than 30,000 schools. In Canada, The Record reports that Toronto Crime Stoppers paused operations this week after CBC reported that more than 1.5 million Crime Stoppers tips, handled through the same vendor, had been exposed.
What is Nevada doing about the vendor?
With support from the governor’s office, the department has issued a request for information to evaluate alternative vendors and their security protections. It is also working with school districts and local law enforcement to get guidance to students and families.
What this means for your company
You may not run a tip line, but many businesses collect sensitive reports through outside platforms: ethics and whistleblower hotlines, HR complaint forms, customer support portals. If a provider holds information people shared in confidence, ask how long it keeps the data, whether old reports can be deleted on a schedule, how it would notify you of a breach, and what your contract says about forensic findings and costs. Collect only what you need, and give your own staff a clear plan for responding if a provider has an incident.
Need help reviewing the security and data-retention terms of the outside platforms that hold your most sensitive records? Reach out to Layer 7 Data Solutions to discuss how we’ve helped companies similar to yours.
About The Author
