Golf Canada Data Breach Exposes 568,972 User Records
We publish these pages from public notices and reporting so you can understand what was exposed. Everything here is already public. Always confirm with the organization named in your notice.
What happened
According to public breach records, the Golf Canada data breach on 2026-05-14 is reported to have exposed the personal information of 568,972 accounts.
In mid-2026, hundreds of thousands of user records allegedly sourced from Golf Canada began circulating via Telegram. The data included 569k unique email addresses along with names, usernames, dates of birth, genders and approximate geographic locations (city, province and postcode). Golf Canada didn't respond to multiple attempts to make contact, and it remains unclear whether the data was obtained via unintentionally exposed website features or a security vulnerability.
- Change your password immediately if you have an account with Golf Canada.
- Enable two-factor authentication on any accounts using the same email address.
- Monitor your accounts for suspicious activity and unauthorized access.
- Watch for phishing attempts using your exposed personal information.
- Consider using a password manager to generate unique passwords for each service.
Sources
What data was exposed
The following types of personal data were compromised:
- Dates of birth
- Email addresses
- Genders
- Geographic locations
- Names
- Usernames
Breach details
| Detail | Value |
|---|---|
| Breach name | Golf Canada |
| Date | 2026-05-14 |
| Disclosed | 2026-08-22 |
| Accounts affected | 568,972 |
| Domain | golfcanada.ca |
This summary is compiled from public breach-notification data and known leak databases. Figures reflect what those sources report and may be revised as more is learned. If something here looks wrong or you think your information is involved, contact our support team.
We report breaches as a factual record to help people check their exposure. Inclusion here is not an allegation of wrongdoing or negligence by Golf Canada; it reflects a publicly reported security incident.
What to do now
Based on the data exposed in this breach, here are the steps you should take:
- Change your Golf Canada password immediately, and change it anywhere you reused the same credentials.
- Enable two-factor authentication on your Golf Canada account and any other account that shared that password.
- Watch for targeted phishing emails, as your personal information could be used to craft convincing scam messages.
- Monitor your financial accounts and credit reports for signs of unauthorized activity.
- Consider using a password manager to ensure each account has a unique, strong password.
What to do after a breach
- A company emailed me about a breach: what should I do?
- Dark web data versus data brokers
- What to do after a data breach
A free Delist scan checks open-web exposure we support: people-search sites, public records, data brokers, and breach-source signals. Signals are not live listings, and this is not removing you from a dump, a DMV database, or a vendor's private ID store.
More breaches
Free personal data exposure scan
We search the open web for your personal data and show what’s exposed. The scan is free. Removal and monitoring require a paid plan.