Hackers copied about 8.3 million anonymous tip records from Navigate360, a school safety software company whose reporting tools are used by schools and police across the US. Some of the stolen records include student names, birth dates, Social Security numbers and medical information.
Navigate360 publicly disclosed the incident on October 23, one day after Nevada’s Department of Education warned families that its SafeVoice school tip line was affected.
What happened
Navigate360 is an Ohio-based company that sells panic buttons, threat detection and anonymous reporting tools. Its platforms reach about 19 million students in more than 35,000 schools in the US and Canada, according to Cybernews. More than 5,000 law enforcement agencies also use its systems.
The company says it spotted suspicious activity around March 18, 2026. An investigation found that an unauthorized party had accessed one of its systems and copied data between November 21, 2025, and March 5, 2026.
No hacking group has publicly claimed the attack. The US Department of Justice has opened a criminal investigation, and members of Congress have asked questions about the incident.
What data was exposed
The stolen tip records may include, depending on the record:
- Student and family names
- Addresses, phone numbers and email addresses
- Dates of birth and student ID numbers
- Social Security numbers
- Medical information
The 8.3 million figure counts records, not people, so the number of individuals affected is likely lower. Navigate360 says it has found no evidence so far that the data has been used for fraud or identity theft.
Nevada’s SafeVoice hit hardest so far
Nevada is the only state confirmed by name. The state’s Department of Education says about 10 percent of SafeVoice tips that contained personal details were compromised. It is also working with education leaders in other affected states, which it did not name.
Nevada officials have been openly critical of the vendor. They say Navigate360 first flagged a possible problem in spring but sent incomplete impact reports for months. The state only learned this month that the stolen tips included student personal data.
The state has now started looking at alternative vendors for its tip line. SafeVoice itself remains online and accepting reports.
Why this breach is different
Tip lines like SafeVoice exist so students can report bullying, threats or self-harm concerns without fear of being identified. A leak of these records puts that promise of anonymity at risk, not just the personal data inside them.
That anonymity also makes cleanup harder. Nevada says it cannot reliably contact everyone affected, so it is relying on public notices. Navigate360 will issue its own notice under a court order.
What Navigate360 says it is doing
The company says it brought in outside cybersecurity specialists, added new safeguards and reported the incident to law enforcement and regulators. It has also hired a data mining firm to review exactly what was copied. It has not said whether it will offer credit monitoring.
What families should do
If your child’s school uses SafeVoice or another Navigate360 tip line, take these steps now:
- Call the assistance line. Navigate360’s hotline is 833-966-1754, open Monday to Friday, 6 a.m. to 6 p.m. Pacific.
- Freeze your child’s credit. A child’s Social Security number is valuable to fraudsters because a stolen identity can go unnoticed for years. Parents can request a free credit freeze for a minor at Equifax, Experian and TransUnion.
- Watch for targeted phishing. Be wary of emails, texts or calls that mention the breach, a school tip or your child by name. Navigate360 and schools will not ask for passwords or payment details.
- Check for official updates. Nevada families can follow the SafeVoice Nevada website for guidance on assistance and remedies.
Technwz will update this story as more states and details are confirmed.
Sources
- Nevada Department of Education notice (Oct 22): official source for the 10% figure, the hotline, and the DOJ investigation
- Cybernews: source for the 8.3 million records figure, the exposed data types, and Navigate360’s reach
- International Business Times UK via inkl: Navigate360’s March 18 detection date and Nevada’s report timeline
