Skip to content
Security Affairs·

⚠️Chess.com Leaks 7.3M User Records in New Data Scrape

7.3M Chess.com user records leaked, no passwords but still risky

TL;DR

A 15.5 GB file containing 7.3 million Chess.com user records was leaked online, including email addresses and personal details. No passwords or payment data, but phishing risks remain. Similar to a 2023 leak, this one is nine times larger.

A 15.5 GB file containing over 7.3 million Chess.com user records was leaked online, raising concerns about data scraping and privacy. The file includes email addresses, usernames, real names, countries, chess ratings, and subscription tiers for roughly 75% of the records. While there are no passwords or payment data, the presence of email addresses and personal information poses a significant risk for phishing attacks. The data includes internal Google Ad Manager audience tags and timestamps, suggesting a large-scale scraping operation rather than a server breach. This leak is nine times larger than a similar incident in 2023, indicating a growing issue for Chess.com users.

Chess.com Leaks 7.3M User Records in New Data Scrape — Security Affairs

Key Points

1

A 15.5 GB file containing over 7.3 million Chess.com user records was leaked online.

2

The data includes email addresses, usernames, real names, countries, chess ratings, and subscription tiers for 75% of the records.

3

No passwords or payment data included, but email addresses and personal information pose phishing risks.

4

The file includes internal Google Ad Manager audience tags and timestamps, suggesting a scraping operation.

5

This leak is nine times larger than a similar incident in 2023, indicating a growing issue for Chess.com users.

Why It Matters

If you're a Chess.com user, your email address and personal details are now at risk of being used for phishing attacks. Chess.com should review their data scraping policies and implement stronger security measures to protect user data. The lack of passwords and payment data is a silver lining, but the risk remains high for phishing and identity theft.

Chess.comdata leakuser recordsphishingdata scraping

Comments

Subscribe to join the conversation...

Be the first to comment

Enjoyed this article?

Get it daily. 7am. Free. Reads in 5 minutes.

Join 3,481 builders reading daily.

Also get