Personal Data Leak Monitor

Chess.com (2026) data breach

4.65M accounts from Chess.com (2026) (chess.com) were exposed in this breach. Besides email addresses, it included geographic locations, names and usernames.

Breach date
August 3, 2026
Accounts
4,653,212
Added to the database
September 13, 2026

Was your email address in this breach?

Check if your email has leaked

We display where your address leaked and what went with it. We never store the address.

We don't store your address. It is checked right here against about 1029 breaches, including this one.

What leaked

Email addressesGeographic locationsNamesUsernames

What to do now

  1. Do not tap links in emails claiming to be that service
  2. Expect scam emails that use your real name
  3. Verify you have not reused that login anywhere

Tools that help with this breach

1PasswordPaidVisit the official site →(opens in a new tab)YubiKeyPaidVisit the official site →(opens in a new tab)

About this breach

In August 2026, millions of records allegedly sourced from Chess.com were posted online. The data contained 7.3M rows with 4.6M unique email addresses, along with usernames, names, countries and data relating to users' Chess.com accounts. Analysis of the data suggested it had been obtained by scraping. When loaded into HIBP, 99% of the email addresses had already appeared in previous data breaches, further supporting the scraping theory. Read more about scrapes and data breaches.

Source: Have I Been Pwned (CC BY 4.0)

Similar breaches from the same period