Golf Canada data breach: 568K accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2026-08-22
In mid-2026, hundreds of thousands of user records allegedly sourced from Golf Canada began circulating via Telegram. The data included 569k unique email addresses along with names, usernames, dates of birth, genders and approximate geographic locations (city, province and postcode). It remains unclear whether the data was obtained via unintentionally exposed website features or a security vulnerability. Exposed data: dates of birth, email addresses, genders, geographic locations, names, usernames. The breach dates from May 14, 2026; Have I Been Pwned loaded it on Aug 22, 2026.
What to do
- If you had a Golf Canada account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
Sources
All live incidents on Threat Watch