Chevy Chase Club Data Breach Impacts 7,585 Individuals

Chevy Chase Club, a private, member-owned social and country club in Chevy Chase, Maryland, disclosed a data breach that affected approximately 7,585 individuals in the United States.

The breach was disclosed to the attorneys general offices of Indiana, New Hampshire and Vermont starting on Oct. 19, 2026. The club began notifying affected individuals on Oct. 19, 2026.

On or around May 29, 2026, Chevy Chase Club detected unauthorized activity within its computer systems. Upon discovery, the club engaged third-party cybersecurity specialists to determine the nature and scope of the event.

The investigation found that an unauthorized party gained access to a portion of the club's computer network between March 28, 2026, and May 29, 2026, and accessed or copied without certain files without authorization.

Once the scope of the unauthorized activity was confirmed, the club then engaged additional specialists to conduct a detailed review of the potentially impacted files. The purpose of the review was to identify what types of personal information were contained in the affected files and to determine which specific individuals were involved.

The types of personal information exposed in the breach included first and last names and Social Security numbers.

Chevy Chase Club's response to the breach

The club is offering complimentary credit monitoring and identity protection services to impacted individuals.

Additionally, the club set up a dedicated call center to assist people who received a notice and had questions about the incident or about how to enroll in the offered services. More information can be found on the notification letter mailed to impacted individuals.