1 of 1
Story summary
- Substack, the email newsletter platform, confirmed a data breach exposing user emails and phone numbers, not passwords or financial information.
- The unauthorized access occurred in October 2025 and was detected in February 2026.
- CEO Chris Best apologized and said the issue is fixed and an investigation is underway.
- Users should beware phishing and strengthen security because the breach underscores platform risks.
