Chess.com exposed 7.3 million user records through data scraping rather than a direct breach. The leaked file contains usernames, emails, names, countries, chess ratings, and internal Google Ad Manager audience tags, but no passwords or payment data. Evidence suggests the data was collected over nine days using the platform's find-friends feature, similar to a 2023 incident but at roughly nine times the scale.