Skip to main content
See every side of every news story
Published loading...Updated

Substack says intruder lifted emails, phone numbers

Substack disclosed that about 700,000 user email addresses and phone numbers were exposed in a breach detected four months after the October 2025 attack.

  • On February 3, 2026, Substack said it discovered evidence of a system compromise and emailed affected users this week, with CEO Chris Best confirming the breach exposed emails, phone numbers, and metadata in October 2025.
  • Substack says an unauthorized third party exploited a flaw in October, with detection delayed for four months; it has since patched the flaw and launched an internal investigation.
  • A dataset of 697,313 alleged records surfaced on BreachForums, with BleepingComputer and other security outlets reporting it includes names, emails, and phone numbers, though Substack has not tied it definitively to its October breach.
  • Substack says it has found no evidence of misuse but warns users to watch for phishing and says affected account holders will be contacted directly by Substack via email.
  • Substack's scale—more than 50 million active subscriptions—raises stakes for exposed data, following its July 2020 accidental email exposure, while key questions about scope and detection remain.
Insights by Ground AI

21 Articles

Think freely.Subscribe and get full access to Ground NewsSubscriptions start at $9.99/yearSubscribe

Bias Distribution

  • 57% of the sources are Center
57% Center

Factuality Info Icon

To view factuality data please Upgrade to Premium

Ownership

Info Icon

To view ownership data please Upgrade to Vantage

downthetubes.net broke the news in on Thursday, February 5, 2026.
Too Big Arrow Icon
Sources are mostly out of (0)

Similar News Topics

News
Feed Dots Icon
For You
Search Icon
Search
Blindspot LogoBlindspotLocal