Substack Confirms Data Breach Exposing User Emails and Phone Numbers
- Securityish
- Privacy & Personal Security
Quick Summary
Substack has reported a data breach where an unauthorized third party accessed user contact details, including email addresses and phone numbers, in October 2025. The company only discovered the breach on February 3, 2026, and has since patched the vulnerability. This incident could undermine user trust, as it exposes sensitive information that may be exploited for phishing attacks.
The Securityish Brief
Substack, a newsletter platform, has acknowledged a security incident involving unauthorized access to user data. The breach occurred in October 2025 but was not detected until February 3, 2026, when the company found evidence of compromised systems. The exposed data includes email addresses, phone numbers, and internal account metadata, although passwords and financial information were reportedly not accessed.
Following the breach, Substack CEO Chris Best communicated directly with affected users, expressing regret and committing to improving security measures. The company has launched a full internal investigation and patched the vulnerability that allowed the breach. Despite this, there is currently no evidence that the stolen data is being misused.
The breach’s implications are significant for Substack, as it relies on trust between writers and subscribers. With nearly 700,000 user records allegedly being advertised on a cybercrime forum, the potential for phishing attacks targeting these users is heightened. This situation emphasizes the importance of maintaining robust security practices.
Understanding the Risks
Users should be aware that their email addresses and phone numbers may now be in the hands of malicious actors. This could lead to targeted phishing attempts, where attackers impersonate Substack or other trusted entities to extract further sensitive information. Users must remain vigilant and monitor their accounts for any suspicious activity.
Organizations like Substack must prioritize user data protection to maintain trust and prevent similar incidents. Implementing stronger security protocols, including regular audits and user education on recognizing phishing attempts, can mitigate risks associated with data breaches.
Key Takeaways
- Monitor your email and phone for suspicious messages or calls that may indicate phishing attempts.
- Consider changing your passwords and enabling two-factor authentication on your Substack account and other accounts.
- Stay informed about potential security updates or recommendations from Substack regarding your account.
- Be cautious of unsolicited communications that ask for personal information or direct you to unfamiliar websites.
- Regularly review your account settings and privacy options to enhance your security posture.
Key Terms & Concepts
- Data Breach: In this article, a data breach refers to an incident where unauthorized access to user information occurs.
- Phishing: Phishing is a fraudulent attempt to obtain sensitive information by disguising as a trustworthy entity in electronic communications.
Read the original article here: https://go.theregister.com/feed/www.theregister.com/2026/02/05/substack_admit_security_incident/
Your 5-Minute Securityish Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.
Securityish
Securityish explains cybersecurity, scams, data breaches, and privacy risks in simple language so you know what’s happening and how to protect yourself.
© 2026 Securityish
