Data breach
Chess.com (2026)chess.com
4 653 212 accounts exposed in a breach dated 2026-08-03.
Breached2026-08-03Added to HIBP2026-09-13 UTCUpdated by HIBP2026-09-13 UTCAccounts4 653 212Domainchess.com
Verified
What happened in Have I Been Pwned’s words
In August 2026, millions of records allegedly sourced from Chess.com were posted online. The data contained 7.3M rows with 4.6M unique email addresses, along with usernames, names, countries and data relating to users' Chess.com accounts. Analysis of the data suggested it had been obtained by scraping. When loaded into HIBP, 99% of the email addresses had already appeared in previous data breaches, further supporting the scraping theory. Read more about scrapes and data breaches.
Exposed data as HIBP classifies it
- Email addresses
- Geographic locations
- Names
- Usernames
How HIBP qualifies it
- HIBP verified that the data came from this service.