2026 Golf Canada — HIBP 569k emails; names/DOB/usernames/geo (Telegram corpus)
Data compromised
Email addresses (~569k unique), names, usernames, dates of birth, genders, approximate geographic locations (city/province/postcode)
Technical writeup
Have I Been Pwned added Golf Canada after ~569k unique email addresses (568,972) plus names, usernames, dates of birth, genders, and approximate city/province/postcode fields circulated via Telegram from records allegedly sourced from the federation around mid-2026 (often dated May 14, 2026). HIBP reports Golf Canada did not respond to multiple contact attempts; whether exposure was an open feature or a vulnerability remains unclear. companyConfirmed false; recordsAffected 568972.
Root cause
User records allegedly obtained from Golf Canada mid-2026 and circulated on Telegram; root path unclear (HIBP)