Skip to content

Chess.com

Disclosed Sep 3, 20251 year ago4,541 affectedConfirmed

Official notice

Hackers access Chess.com third-party file transfer app, 4,500 users hit

Chess.com said attackers accessed a third-party file transfer application it used between June 5 and 18, 2025, discovered on June 19, affecting just over 4,500 users; no financial data was exposed.

What is known

People affected4,541 (as reported by the organization)
DisclosedSep 3, 2025
DiscoveredJun 19, 2025
HappenedJun 5, 2025
AttackVendor breach
Data exposedNames, Other
SectorGaming · US
StatusConfirmed

Sources

Notices filed

WhereFiledPeople
Vermont AGresidents of VTSep 3, 2025
Indiana AGresidents of INSep 3, 202510
ResearchtotalSep 4, 20254,500

Other breaches at Chess.com

BreachAffected
Disclosed Sep 13, 2026Sep 1312 days agoScrapingUnverified4.7Macct
Disclosed Nov 10, 2023Nov 10, 20232 years agoScrapingUnverified1.3Macct
History of this record
  • 2026-09-25 · records: 4500 to 4541 · backfill source
  • 2026-09-25 · occurred: empty to 2025-06-05 · backfill source
  • 2026-09-25 · source_type: press to official · backfill source
  • 2026-09-25 · source_url: https://www.bleepingcomputer.com/news/security/chesscom-discloses-recent-data-breach-via-file-transfer-app/ to https://ago.vermont.gov/document/2025-09-03-chesscom-data-breach-notice-consumers · backfill source
  • 2026-09-25 · status: disclosed to confirmed · backfill source
  • 2026-09-25 · verified_by: empty to vt-ag · backfill source
  • 2026-09-25 · verified: 0 to 1 · backfill source
  • 2026-09-25 · disclosed: 2025-09-04 to 2025-09-03 · backfill source
  • 2026-09-25 · added · seed source

First seen 2026-09-25 (Research), confirmed by Vermont AG. Record counts are as reported. Not legal advice.

Everything about Chess.com

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.