PHP Vulnerability Responses by Company

GOLFTEC Enterprises, LLC

Companies / web services
Aliases / services
GOLFTEC / GolfTec / GOLFTEC Enterprises, LLC
Official website
https://www.golftec.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

In-person payments at selected US GOLFTEC centers

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

A June 16, 2017 notice reported POS intrusions at selected centers between March 2 and June 15, 2017, potentially compromising payment-card information. Online transactions were not affected. GOLFTEC said the intrusion had been contained and remediated.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Review the relevant card statements and promptly report unfamiliar transactions to the card issuer. Enrollment for the notice's free credit monitoring closed on September 30, 2017.

Official service URL

Source URLs

  1. Official operator evidencehttps://policies.golftec.com/us-canada/terms-of-useService and operation documentation
  2. Official incident noticehttps://oag.ca.gov/system/files/GOLFTEC-Security%20Breach%20Letter%20%286.14.17%29-California%20Version_0.pdfService and operation documentation
Related official sources
  1. Official operator evidenceOfficial information directoryIdentifies GOLFTEC Enterprises, LLC and the relevant scope.
  2. Official incident noticeOfficial notice; link to this PHP incident unconfirmedIncident scope and guidance for affected people.

Comments