Global SOF Foundation Data Breach
The 2025 Global SOF Foundation data breach is a confirmed security incident in which an unauthorized person accessed one of the organization's email accounts on or about October 14, 2025.
The organization has not published how many were affected, so the incident cannot be placed on this scale.
Exposed Data Types
1 sensitive6- Medical information
- Names
- Social security numbers
- Driver's license numbers
- Government IDs
- Dates of birth
About This Breach
The investigation found that some files in the account may have been accessed and acquired; the organization has not disclosed the total number of people affected.
Global SOF Foundation, formally the Global Special Operations Forces Foundation, is an independent nonprofit organization based in Tampa that supports international cooperation across the special-operations community. The organization described the incident as involving information related to a limited number of people but did not provide a numerical total.
How Did the Incident Occur?
The organization learned on or about October 14, 2025 that an unauthorized person may have accessed an email account, contained the issue, and began an investigation with outside cybersecurity specialists. Following forensic work and a document review, it determined on July 9, 2026 that files may have been accessed and acquired on the day of the incident. The attacker and the method used to enter the account were not disclosed.
What Information Was Affected?
The potentially affected files contained full names, Social Security numbers, driver's license numbers, government-issued identification numbers, non-U.S. national identification numbers, dates of birth, and medical information. Global SOF Foundation emphasized that not every data type applied to every person.
How Did Global SOF Foundation Respond?
The organization says it contained the threat, worked with outside specialists, and began notifying people whose information appeared in the relevant files on July 15, 2026. At the time of the notice, it reported no indication of fraud or identity theft connected with the incident and said it was strengthening its security practices.
What Should Affected People Do?
People connected with the organization should watch for direct notices and review credit reports, financial accounts, and health-insurance statements for unfamiliar activity. If a Social Security or government ID number was involved, free credit-freeze and fraud-alert options may be considered. Unexpected notice messages should be verified through the organization's official website before opening links.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
