Chess.com

Disclosed Sep 13, 20264,653,212 accountsUnverified

In August 2026, millions of records allegedly sourced from Chess.com were posted online . The data contained 7.3M rows with 4.6M unique email addresses, along with usernames, names, countries and data relating to users' Chess.com accounts. Analysis of the data suggested it had been obtained by scraping. When loaded into HIBP, 99% of the email addresses had already appeared in previous data breaches, further supporting the scraping theory. Read more about scrapes and data breaches.

What is known

People affected	4,653,212 (accounts in the leaked data, per Have I Been Pwned)
Disclosed	Sep 13, 2026
Happened	Aug 3, 2026
Attack	Scraping
Data exposed	EmailsLocationNames
Sector	Tech
Status	Unverified: not yet confirmed by an official notice, a filing or the organization
Check your email	Have I Been Pwned

Sources

Aggregatorhaveibeenpwned.com

Have I Been Pwned: Chess.com (2026)

Notices filed

Accounts in the dataSep 13

Have I Been Pwned4,653,212 people

Other breaches at Chess.com

Hackers access Chess.com third-party file transfer app, 4,500 users hitVendor breach exposed names. Reported to the Indiana AG.Vendor breach4,541 affectedGamingUSSep 3, 2025 Scraping breachScraping exposed emails, location data and names.1.3M accountsTechUnverifiedNov 10, 2023

History of this record

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Chess.com