Substack Data Breach: Emails & Phones Exposed

A security incident in October 2025 resulted in unauthorized access to limited user data on Substack. The platform recently notified affected users that their email addresses and phone numbers were compromised. Substack CEO Chris Best confirmed that the breach did not expose passwords or financial details. The company has since addressed the system vulnerability and launched a full investigation. They are also enhancing security measures to prevent future occurrences. Best conveyed his sincere apologies to users for the data protection failure, emphasizing the company's commitment to user privacy. Users are advised to exercise caution regarding potential suspicious emails or texts.