Chess.com Confirms Data Breach After Hackers Exploit External System

Chess[.]com, the Orem, Utah-based online chess platform, has confirmed a data breach in which personal information of thousands of users was compromised after attackers exploited an external system connected to its network. The breach affected 4,541 individuals across the United States, including one Maine resident, with the compromised data including names and other personal identifiers.

The incident occurred on 5 June 2025 and was not discovered by the company’s security team until 19 June 2025, according to official breach notification documents filed with Maine’s Attorney General office. Chess[.]com notified affected users on 3 September 2025, a delay that the firm says falls within legal requirements but is nonetheless notable. To protect those affected, the company is offering 12 months of identity theft protection services at no cost.

According to the breach notification, the attackers gained access through an “external system breach” and the firm has not disclosed specific details about security improvements implemented following the incident.