Golf Canada Suffers Data Breach Affecting 569,000 Users
In mid-2024, Golf Canada experienced a significant data breach, exposing 569,000 unique email addresses along with personal details such as names, dates of birth, gender, and approximate geographic locations. The incident was flagged by cybersecurity monitoring services, including Have I Been Pwned, which tracks compromised data.
Analysis revealed that 76% of the exposed email addresses were already linked to LinkedIn profiles, increasing the risk of targeted phishing or credential-stuffing attacks. The breach highlights vulnerabilities in third-party data handling, as the compromised information may have been accessible through cookies used for service delivery, security, analytics, and advertising.
Golf Canada has not publicly detailed the cause of the breach, but the exposure underscores the ongoing risks of large-scale personal data collection in digital platforms. The incident serves as a reminder of the potential fallout from unauthorized access to user information, particularly when combined with data from other sources.
Source: https://www.linkedin.com/feed/update/urn:li:activity:7496829331168735232
Golf Canada cybersecurity rating report: https://www.rankiteo.com/company/golf-canada
"id": "GOL1787387371",
"linkid": "golf-canada",
"type": "Breach",
"date": "6/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '569,000',
'industry': 'Sports/Recreation',
'location': 'Canada',
'name': 'Golf Canada',
'type': 'Organization'}],
'data_breach': {'number_of_records_exposed': '569,000',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'Personally identifiable information '
'(PII)',
'type_of_data_compromised': ['Email addresses',
'Names',
'Dates of birth',
'Gender',
'Approximate geographic '
'locations']},
'date_publicly_disclosed': '2024',
'description': 'In mid-2024, Golf Canada experienced a significant data '
'breach, exposing 569,000 unique email addresses along with '
'personal details such as names, dates of birth, gender, and '
'approximate geographic locations. The incident was flagged by '
'cybersecurity monitoring services, including Have I Been '
'Pwned, which tracks compromised data. Analysis revealed that '
'76% of the exposed email addresses were already linked to '
'LinkedIn profiles, increasing the risk of targeted phishing '
'or credential-stuffing attacks. The breach highlights '
'vulnerabilities in third-party data handling, as the '
'compromised information may have been accessible through '
'cookies used for service delivery, security, analytics, and '
'advertising.',
'impact': {'brand_reputation_impact': 'Potential reputational damage due to '
'data exposure',
'data_compromised': '569,000 unique email addresses, names, dates '
'of birth, gender, approximate geographic '
'locations',
'identity_theft_risk': 'Increased risk of targeted phishing or '
'credential-stuffing attacks'},
'lessons_learned': 'The breach underscores the ongoing risks of large-scale '
'personal data collection in digital platforms and '
'vulnerabilities in third-party data handling.',
'post_incident_analysis': {'root_causes': 'Third-party data handling '
'vulnerabilities, potential '
'unauthorized access to cookies '
'used for service delivery, '
'security, analytics, and '
'advertising'},
'references': [{'source': 'Have I Been Pwned'}],
'title': 'Golf Canada Data Breach Affecting 569,000 Users',
'type': 'Data Breach',
'vulnerability_exploited': 'Third-party data handling vulnerabilities'}