Chess.com (2026) data breach
4,653,212 accounts exposed.
Check whether your email is included on Have I Been Pwned.
What was exposed
Email addressesGeographic locationsNamesUsernames
What to do
- Expect more phishing emails that mention this service. Do not click links in them; go to the site directly.
- Turn on two-step verification wherever it is offered, and use a password manager.
About this breach
In August 2026, millions of records allegedly sourced from Chess.com were posted online. The data contained 7.3M rows with 4.6M unique email addresses, along with usernames, names, countries and data relating to users' Chess.com accounts. Analysis of the data suggested it had been obtained by scraping. When loaded into HIBP, 99% of the email addresses had already appeared in previous data breaches, further supporting the scraping theory. Read more about scrapes and data breaches.