Chess.com Data Breach – Hackers Breached External Systems and Gained Internal Access

Chess.com Data Breach - Hackers Breached External Systems and Gained Internal Access

Online chess giant Chess.com has disclosed a data breach that compromised the personal information of 4,541 individuals, according to a filing with the Maine Attorney General’s Office.

The cyber incident took place on June 5, 2025 and was discovered nearly two weeks later on June 19, 2025. Chess.com confirmed that the breach was the result of an external hack, where attackers gained unauthorized access to sensitive data.

The company reported that hackers were able to obtain names and personal identifiers, though it did not provide a full breakdown of all the data elements exposed. The breach affected users across multiple regions, including one resident of Maine.

Google News

Chess.com began notifying impacted individuals on September 3, 2025 through written notices. To help protect its community, the company is offering 12 months of complimentary identity theft protection services.

The notification was formally submitted by Elias Colabelli, Head of the Legal Department and Data Protection Officer at Chess.com, who emphasized that the company is strengthening its systems to prevent similar incidents in the future.

Although the number of affected users may seem low compared to other large-scale data breaches, the incident underscores how even major online platforms remain targets for cybercriminals. With more than 150 million users worldwide, Chess.com holds a vast amount of personal data, making it a lucrative target for hackers.

Cybersecurity experts warn that breaches of this nature can pave the way for identity theft, phishing attempts, and further fraud if stolen data circulates on underground markets.

Chess.com has not yet disclosed whether law enforcement is involved in the investigation. The company says it continues to work on tightening security protocols and monitoring its systems closely.

We have reached out to Chess.com for further details regarding the breach and are awaiting their response. This article will be updated as soon as new information becomes available.

For users, the breach is a reminder to stay vigilant, monitor financial accounts, and be cautious of suspicious emails that could exploit stolen personal details.

                   Find this Story Interesting! Follow us on X, Google News, LinkedIn, and  to Get More Instant Updates.

Recent Data Breaches:

  1. PagerDuty Confirms Data Breach After Third-Party App Vulnerability Exposes Salesforce Data
  2. Cloudflare Confirms Data Breach, Hackers Stole Customer Data from Salesforce Instances
  3. Palo Alto Networks Confirms Data Breach – Hackers Stole Customer Data from Salesforce Instances
  4. Zscaler Confirms Data Breach – Hackers Compromised Salesforce Instance and Stole Customer Data




Source link

About Cybernoz

Security researcher and threat analyst with expertise in malware analysis and incident response.