Chevy Chase Club, a private social and country club in Maryland, identified unauthorized activity on its computer systems on May 29, 2026. A subsequent investigation determined that an unauthorized party accessed parts of the network between March 28, 2026, and May 29, 2026. During that period, files stored on the network were accessed or copied without authorization. The organization began sending written notifications to affected individuals on October 19, 2026, and filed notices with state regulators, including the Vermont Attorney General on October 20, 2026.
The incident compromised personal information for 7,585 individuals nationwide. Confirmed exposed data elements include first and last names along with Social Security numbers. While secondary reports have referenced additional personal and financial details, those categories have not been confirmed in official state regulatory filings.
Details regarding the full technical vector of the unauthorized network access remain limited. Organizations experiencing data incidents often continue internal security reviews, and additional particulars may emerge as state regulatory disclosures are updated.