Substack confirms data breach affects users’ email addresses and phone numbers

Substack disclosed a data breach where an unauthorized party accessed user email addresses, phone numbers, and internal metadata in October 2025, though the breach wasn't discovered until February 2026. Sensitive data like passwords and financial information remained secure. The company has fixed the vulnerability and launched Show more