Confirmed breach

Chess.com data breach

Country being checked · chess.com · Chess.com (2026)

A breach of Chess.com was added to Have I Been Pwned’s breach database on 13 September 2026. It affected 4,653,212 accounts. Exposed: Email addresses, Names, Usernames and Geographic locations. The breach began on 3 August 2026, 41 days before it was reported.

Status

Confirmed breach

People affected

4,653,212 accounts

Reported

13 September 2026

Breach began

3 August 2026

Time to tell

41 days

What was exposed

• Email addresses
• Names
• Usernames
• Geographic locations

Sources

• Breach databaseHave I Been Pwned

If Chess.com had your data

1. Look for Chess.com (2026)’s own notice or letter: it should say what of yours was involved. Keep it.
2. Expect scams that use your details: calls, texts or emails pretending to be Chess.com (2026), your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

• Spot the scams that use leaked data →
• What to do after a data breach →

Email me if Chess.com has another breach

Alert me

One email to confirm first. We use your address only for this alert, and one click deletes it.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Found a mistake? Tell us and we correct it.