Source: Engadget
“The digital publishing platform Substack has told some of its users that their data was stolen in a security breach. The affected account holders had their email addresses and phone numbers scraped in a hack that occurred in October 2025. In an email posted on Bluesky, Substack CEO, Christ Best, said the company became aware of the breach on February 3, which involved an ‘unauthorized third party to access limited user data without permission.’ While internal metadata was also shared in the hack, Best said that credit card numbers and other financial details were not. No passwords were obtained either.” (02/05/26)
https://www.engadget.com/cybersecurity/substack-ceo-informs-users-of-a-data-breach-151113809.html