Golf Canada data breach

What happened

According to Have I Been Pwned, in mid-2026 hundreds of thousands of user records allegedly sourced from Golf Canada began circulating via Telegram. The data was disclosed publicly on August 22, 2026. It remains unclear whether the records were obtained through unintentionally exposed website features or a security vulnerability.

What was exposed

The circulating dataset reportedly contained approximately 569,000 unique email addresses, along with names, usernames, dates of birth, genders, and approximate geographic locations including city, province, and postcode.

Who is affected

Any Golf Canada member or registered user whose account existed prior to mid-2026 may be affected. The breach involved roughly 569,000 accounts.

What to do now

If you have a Golf Canada account, consider changing your password as a precaution, especially if you reuse that password elsewhere. Be alert to phishing emails that reference your name or location, as attackers could use the exposed details to craft convincing messages. Monitor your email for any suspicious activity and consider enabling two-factor authentication where available.