Substack disclosed a security breach where an unauthorized intruder accessed user contact details including email addresses, phone numbers, and account metadata during October 2025. The incident went undetected for months until February 2026. While passwords and financial data were not compromised, a threat actor has posted
Sort: