Redazione RHC : 5 September 2025 07:40
Chess.com, the online chess giant, has reportedly suffered a data breach that exposed the personal information of 4,541 individuals, according to a filing with the Maine Attorney General’s Office.
The cyber incident occurred on June 5, 2025, and was discovered nearly two weeks later, on June 19, 2025. Chess.com confirmed that the breach was the result of an external cyber attack, in which attackers gained unauthorized access to sensitive data.
The company reported that the hackers managed to obtain names and personal information, but did not provide a full breakdown of all the data elements exposed. The breach affected users in several regions, including a resident of Maine.
Chess.com began notifying affected individuals via written notices on September 3, 2025. To help protect its community, the company is offering 12 months of free identity theft protection services.
The notification was formally filed by Elias Colabelli, Chess.com’s Chief Legal Officer and Chief Data Protection Officer, who emphasized that the company is strengthening its systems to prevent similar incidents in the future.
While the number of affected users may seem small compared to other large-scale data breaches, The incident underscores how even major online platforms remain targets for cybercriminals. With over 150 million users worldwide, Chess.com holds a massive amount of personal data, making it a lucrative target for hackers.
Cybersecurity experts warn that breaches of this type can open the door to identity theft, phishing attempts, and further fraud if stolen data circulates in underground markets. Chess.com has not yet disclosed whether law enforcement is involved in the investigation. The company says it continues to work to strengthen security protocols and closely monitor its systems.