Substack confirmed a data breach after a hacker leaked data from nearly 700,000 users, including email addresses and phone numbers. Substack is an online platform for publishing email based newsletters and blogs, with built in paid subscriptions and basic analytics. It’s free to start; creators pay a fee on paid plans. In 2026 it’s estimated to serve […] Substack confirmed a data breach after a hacker leaked data from nearly 700,000 users, including email addresses and phone numbers. Substack is an online platform for publishing email based newsletters and blogs, with built in paid subscriptions and basic analytics. It’s free to start; creators pay a fee on paid plans. In 2026 it’s estimated to serve tens of thousands of writers and over 35 million active readers worldwide. Substack disclosed a security incident affecting email addresses, phone numbers, and internal metadata. The company discovered the security breach on February 3rd, 2026, but the incident occurred in October 2025. According to the message sent by CEO Chris Best to the impacted individuals, passwords and financial data were not exposed. “I’m reaching out to let you know about a security incident that resulted in the email address and phone number from your Substack account being shared without your permission.” reads the message sent to the impacted individuals. “On February 3rd, we identified evidence of a problem with our systems that allowed an unauthorized third party to access limited user data without permission, including email addresses, phone numbers, and other internal metadata. This data was accessed in October 2025. Importantly, credit card numbers, passwords, and financial information were not accessed.“ The issue with data breach notifications like this one from Substack (just now!) is that financial data and passwords are listed as 'not leaked.'Great, now there's just a list of emails paired with phone numbers.In a world of 2FA & SIM swaps, email + phone IS critical data. pic.twitter.com/SUtK7h7qvM— Arvid Kahl (@arvidkahl) February 5, 2026
Published: 2026-02-05T20:23:22