HackingTechnologyInformationSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDMediumContained

Chess.com, LLC

bd_51094529e07762bf · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 19, 2025

Filed

Sep 8, 2025

To disclose

12 weeks

Affected

1state residents only

Linked

6 filings

Confidence

66%

Full breach record for Chess.com, LLC →

Chess.com LLC notified the New Hampshire Attorney General of a security breach involving a third-party file transfer application. The incident was discovered on June 19, 2025, affecting one New Hampshire resident's name and driver's license/state ID. The incident has been contained, and the company offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 12 weeks / 81 days

Jun 19, 2025

Discovered

Sep 8, 2025

Filed

vs. sector median

7 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_9bc9145d37fe9f6d2025-09-03 · +5dVerified
Indiana State AGbd_d4f40ff3bc1d6ae02025-09-03 · +5dVerified
Maine State AGbd_da3bc401913fa8ba2025-09-03 · +5dCandidate
Nebraska State AGbd_ea4cdfd21d1adf7f2025-09-03 · +5dVerified

Show 1 more filing ↓up to 5d gap

Vermont State AGbd_fcd24aa03b555a7d2025-09-03 · +5dVerified

Name: Chess.com, LLC
norm: chesscom
Domain: chess.com

Name: Chess.com, LLC
norm: chesscom
Domain: chess.com
Industry: Technologyllm

Discovered: Jun 19, 2025
Materiality determined: —
Notification sent: Sep 3, 2025
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: External
Regulator citations: Notified federal law enforcement
Initial access: supply_chain

During the incident: Commenced an investigation
Retained leading experts
Notified federal law enforcement
Began taking measures to assess and contain the incident
Taken steps to further secure its systems
Performing dark web monitoring
Offering the potentially impacted individuals complimentary access to twelve (12) months of credit monitoring, web monitoring, and identity theft restoration services
Changes made: Taken steps to further secure its systems
Performing dark web monitoring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(81 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Massachusetts State AGSep 3 · first

Indiana State AGSep 3 · first

Maine State AGSep 3 · first

Nebraska State AGSep 3 · first

Vermont State AGSep 3 · first

New Hampshire State AG+5d · this page

Pattern: first filing Sep 3 (MA), last Sep 8 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/chess-20250908.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 8, 2025
Raw hash: 36cba33e7bc39d697b9ac57117c101a6cca1c145470129555451673ce965c6bf

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityChess.com, LLC

Victim entityChess.com, LLC

Incidentdiscovered Jun 19, 2025

Stated responseCommenced an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov