Skip to content
Breaches.

Chess.com

Disclosed Sep 13, 202612 days ago4,653,212 accountsUnverified

In August 2026, millions of records allegedly sourced from Chess.com were posted online . The data contained 7.3M rows with 4.6M unique email addresses, along with usernames, names, countries and data relating to users' Chess.com accounts. Analysis of the data suggested it had been obtained by scraping. When loaded into HIBP, 99% of the email addresses had already appeared in previous data breaches, further supporting the scraping theory. Read more about scrapes and data breaches.

What is known

People affected4,653,212 (accounts in the leaked data, per Have I Been Pwned)
DisclosedSep 13, 2026
HappenedAug 3, 2026
AttackScraping
Data exposedEmails, Location, Names
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Source
Have I Been Pwned: Chess.com (2026)haveibeenpwned.com · Aggregator

Notices filed

WhereFiledPeople
Have I Been Pwnedaccounts in the dataSep 134,653,212

Other breaches at Chess.com

BreachAffected
Hackers access Chess.com third-party file transfer app, 4,500 users hitSep 3, 20251 year agoVendor breach4,541
Disclosed Nov 10, 2023Nov 10, 20232 years agoScrapingUnverified1.3Macct
History of this record
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Chess.com

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.