Golf Canada · Breach

Actor alleges leak of 568,972 Golf Canada user records

Nov 04, 2026 · 1 min read

A threat actor posted for download on a hacker forum a roughly 47 MB archive with 568,972 records allegedly belonging to Golf Canada, the national governing body for golf in Canada. The alleged data includes names, usernames, emails, dates of birth, gender and location; authenticity is unverified and Golf Canada has not confirmed an incident. Registered golfers should watch for fake emails about handicap, membership or tournament notices.

By HIFY Radar newsroom Updated 11/04/2026 10:57 AM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

A threat actor posted on a hacker forum a roughly 47 MB archive that would contain 568,972 Golf Canada user records; Golf Canada is the national governing body for golf in Canada. The alleged data includes names, emails, dates of birth, gender and location. Golf Canada has not confirmed an incident and the authenticity of the archive is unknown.

Why it matters

If real, golfers registered with Golf Canada face a higher risk of targeted phishing and identity fraud, especially fake emails about handicap, membership or tournament notices. Data such as name, email, date of birth and address enables convincing messages. How the data was obtained is unclear.

What to do

Treat this as an unverified claim and watch for a statement from Golf Canada. Remind staff and members to distrust emails about handicap, membership or tournaments. Golf Canada should investigate the origin of the archive.

For the technical team

Affected: Golf Canada, entidade nacional que administra o golfe no Canadá; base alegada de 568.972 registros de usuários · Golf Canada, the national governing body for golf in Canada; alleged base of 568,972 user records.
Exploitation: Unverified claim by an actor on a hacker forum, reported by DailyDarkWeb. Golf Canada has not confirmed an incident.
Fix: No fix applicable. Mitigation: watch for fake emails about handicap, membership or tournaments.
Vector: Unknown. The source does not say how the data was obtained; it was posted for download on a hacker forum.
More details: Roughly 47 MB archive with 568,972 alleged records. Alleged fields: names, usernames, emails, dates of birth, gender, city, province and postcode. How the data was obtained is unclear.