Chess.com Data Breach Affects 0.003% of Users
Chess.com, a prominent online chess platform, has revealed a data breach that transpired between June 5 and June 18, 2021. The breach impacted a small fraction of its over 100 million registered users, exposing personal information of 4,541 individuals.
The breach was detected on June 19 and swiftly reported to federal law enforcement. Chess.com facilitates around 10 million games daily for its extensive user base. The compromised file transfer tool remains unidentified, and Chess.com has not specified the exact data stolen. However, they assure users that no banking information or member account details were compromised, affecting fewer than 0.003% of users.
The targeted and compromised file transfer tool is 'ExaVault'. No hacking group has claimed responsibility, and Chess.com has no evidence of exposed data being shared publicly. In July, two popular file transfer tools, Wing FTP and CrushFTP, reported vulnerabilities that required patching, raising concerns about file transfer tool security.
Chess.com has taken measures to secure its systems and is collaborating with law enforcement to investigate the breach. Users are advised to remain vigilant and monitor their personal information. The platform continues to function normally, with over 10 million games facilitated daily.
Read also:
- Singapore Warns of China-Linked APT Group Targeting Critical Infrastructure
- Trump and Xi speak over the phone, according to China's confirmation.
- NVIDIA introduces Blackwell to the cloud and unveils the significant enhancement of GeForce Now at Gamescom 2025, marking a major step in cloud gaming technology.
- Strategies for Adhering to KYC/AML Regulations in India, a Leading Fintech Center (2024)
