New scrape: Last month, 4.6M email addresses from Chess[.]com were posted online with names, usernames and country, among other data. 99% were already in @haveibeenpwned, supporting the theory the data was scraped. Read more: https://haveibeenpwned.com/Breach/Chess2026
Have I Been PwnedHave I Been Pwned: Chess.com (2026) Data BreachIn August 2026, millions of records allegedly sourced from Chess.com were posted online. The data contained 7.3M rows with 4.6M unique email addresses, along with usernames, names, countries and data relating to users' Chess.com accounts. Analysis of the data suggested it had been obtained by scraping. When loaded into HIBP, 99% of the email addresses had already appeared in previous data breaches