Toronto Police Service: Toronto Police division at core of major Project South probe has history of data breaches

Toronto Police Service: Toronto Police division at core of major Project South probe has history of data breaches

Toronto Police’s 12 Division Faces Scrutiny Over Repeated Database Breaches

A recent investigation by The Globe and Mail has uncovered a pattern of unauthorized database access within Toronto Police Service’s (TPS) 12 Division, raising concerns about internal misconduct and data security. The findings come amid Project South one of Canada’s largest police corruption probes where officers from the same division were charged with allegedly misusing law enforcement databases to facilitate criminal activity.

Between 2018 and 2025, 12 Division accounted for nearly a third of all TPS cases resulting in Police Act convictions for database breaches, with four officers disciplined and a fifth facing criminal charges. While these cases predate Project South, they share similarities with the allegations at its core: the misuse of sensitive police systems for personal or illicit purposes.

Key Incidents of Misuse

The breaches varied in severity, from seemingly minor infractions to serious violations:

  • Constable Alison Gaudino (2018) pleaded guilty to unauthorized searches on a personal acquaintance, accessing systems like Versadex, CPIC (RCMP’s national database), and IntelliBook.
  • Constable Brian Collymore (2018) conducted an unexplained license-plate query in 2015, with no justification provided.
  • Constable Daniel Smith (2019) used databases to track down a domestic violence victim from a prior case, later contacting her for personal reasons.
  • Constable Timothy Price (2022) faced the harshest penalty eight days’ docked pay for repeated unauthorized searches on an ex-partner, compounded by a prior 2016 conviction for similar misconduct.
  • Constable Ricardo Gomez (2024) was criminally convicted for leaking confidential information, including personal data and police documents, to an individual with a criminal record. He received six months of house arrest and remains suspended.

Project South and Broader Implications

Project South, led by York Regional Police, stemmed from an alleged attempted assassination of a corrections officer, with investigators tracing the plot back to TPS Constable Timothy Barnhardt, who allegedly used police databases to leak the officer’s personal details. Seven active TPS officers three from 12 Division along with a retired officer, now face charges, though none have been tested in court.

In response to Project South, Ontario’s Inspector-General of Policing has launched a provincewide review of police corruption, with database security as a focal point. TPS Chief Myron Demkiw has acknowledged the need for internal reforms, including an "anti-corruption project" to bolster oversight of systems like CPIC and the Ministry of Transportation’s databases.

TPS Response and Union Perspective

TPS spokesperson Stephanie Sayer downplayed concerns about 12 Division’s disproportionate breaches, noting that disciplinary records may not capture all internal cases. Clayton Campbell, president of the Toronto Police Association, emphasized that not all unauthorized accesses meet the threshold for criminality, with discipline assessed on a case-by-case basis.

Despite these assurances, the concentration of breaches in 12 Division alongside its involvement in Project South has intensified scrutiny of the division’s culture and accountability measures. The outcomes of the provincewide review and pending criminal trials will likely shape future policies on police data access and misconduct enforcement.

Source: https://www.theglobeandmail.com/canada/article-toronto-police-division-at-core-of-major-project-south-probe-has/

Toronto Police Service cybersecurity rating report: https://www.rankiteo.com/company/toronto-police-service

"id": "TOR1777898508",
"linkid": "toronto-police-service",
"type": "Breach",
"date": "2/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': 'Personal acquaintances, '
                                              'domestic violence victims, '
                                              'individuals with criminal '
                                              'records, corrections officers',
                        'industry': 'Public Safety',
                        'location': 'Toronto, Canada',
                        'name': 'Toronto Police Service (TPS) - 12 Division',
                        'type': 'Law Enforcement Agency'}],
 'attack_vector': 'Insider Threat',
 'data_breach': {'data_exfiltration': 'Yes (leakage to individuals with '
                                      'criminal records)',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal data',
                                              'Police documents',
                                              'License-plate information',
                                              'Domestic violence victim '
                                              'details']},
 'description': 'A recent investigation by *The Globe and Mail* has uncovered '
                'a pattern of unauthorized database access within Toronto '
                'Police Service’s (TPS) 12 Division, raising concerns about '
                'internal misconduct and data security. The findings come amid '
                '*Project South*, one of Canada’s largest police corruption '
                'probes, where officers from the same division were charged '
                'with allegedly misusing law enforcement databases to '
                'facilitate criminal activity.',
 'impact': {'brand_reputation_impact': 'Intensified scrutiny of 12 Division’s '
                                       'culture and accountability measures',
            'data_compromised': 'Sensitive police records, personal data, '
                                'license-plate information, domestic violence '
                                'victim details, police documents',
            'identity_theft_risk': 'High (leakage of personal data and police '
                                   'documents)',
            'legal_liabilities': 'Police Act convictions, criminal charges, '
                                 'potential fines',
            'operational_impact': 'Internal misconduct investigations, '
                                  'disciplinary actions, criminal charges',
            'systems_affected': ['Versadex',
                                 'CPIC (RCMP’s national database)',
                                 'IntelliBook',
                                 'Ministry of Transportation’s databases']},
 'initial_access_broker': {'high_value_targets': 'Corrections officers, '
                                                 'personal acquaintances, '
                                                 'domestic violence victims'},
 'investigation_status': 'Ongoing (Project South, provincewide review)',
 'lessons_learned': 'Need for enhanced oversight of law enforcement database '
                    'access, internal culture reforms, and stricter '
                    'accountability measures for unauthorized access.',
 'motivation': ['Personal gain',
                'Illicit purposes',
                'Harassment',
                'Criminal activity facilitation'],
 'post_incident_analysis': {'corrective_actions': ['TPS anti-corruption '
                                                   'project',
                                                   'Provincewide review of '
                                                   'police corruption',
                                                   'Enhanced monitoring of '
                                                   'database access'],
                            'root_causes': ['Lack of oversight on database '
                                            'access',
                                            'Internal misconduct',
                                            'Inadequate disciplinary measures '
                                            'for prior violations']},
 'recommendations': ['Implement stricter access controls for law enforcement '
                     'databases',
                     'Conduct regular audits of database access logs',
                     'Enhance training on ethical use of police systems',
                     'Strengthen disciplinary measures for unauthorized '
                     'access'],
 'references': [{'source': 'The Globe and Mail'}],
 'regulatory_compliance': {'legal_actions': ['Police Act convictions',
                                             'Criminal charges'],
                           'regulations_violated': ['Police Act',
                                                    'Criminal Code of Canada'],
                           'regulatory_notifications': 'Ontario’s '
                                                       'Inspector-General of '
                                                       'Policing review'},
 'response': {'communication_strategy': 'TPS spokesperson statements, union '
                                        'perspective shared',
              'containment_measures': 'Disciplinary actions, criminal charges, '
                                      'suspensions',
              'enhanced_monitoring': 'Bolstered oversight of systems like CPIC '
                                     'and Ministry of Transportation’s '
                                     'databases',
              'law_enforcement_notified': 'Yes (Project South investigation)',
              'remediation_measures': 'Provincewide review of police '
                                      'corruption, TPS anti-corruption '
                                      'project, enhanced oversight of database '
                                      'access',
              'third_party_assistance': 'York Regional Police (Project South '
                                        'investigation)'},
 'stakeholder_advisories': 'TPS Chief Myron Demkiw acknowledges need for '
                           'internal reforms; Ontario’s Inspector-General of '
                           'Policing launches review.',
 'threat_actor': ['Constable Alison Gaudino',
                  'Constable Brian Collymore',
                  'Constable Daniel Smith',
                  'Constable Timothy Price',
                  'Constable Ricardo Gomez',
                  'Constable Timothy Barnhardt'],
 'title': 'Toronto Police’s 12 Division Faces Scrutiny Over Repeated Database '
          'Breaches',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unauthorized internal access to law enforcement '
                            'databases'}
Great! Next, complete checkout for full access to Rankiteo Blog.
Welcome back! You've successfully signed in.
You've successfully subscribed to Rankiteo Blog.
Success! Your account is fully activated, you now have access to all content.
Success! Your billing info has been updated.
Your billing was not updated.