Substack confirms data breach affects users’ email addresses and phone numbers
Substack confirms data breach affects users’ email addresses and phone numbers
Newsletter platform Substack has confirmed a data breach in an email to users. The company said that in October, an “unauthorized third party” accessed user data, including email addresses, phone numbers, and other unspecified “internal metadata.”
Substack specified that more sensitive data, such as credit card numbers, passwords, and other financial information, was unaffected.
In an email sent to users, Substack chief executive Chris Best said that the company identified the issue in February that allowed someone to access its systems. Best said that the company has fixed the problem and started an investigation.
“I’m reaching out to let you know about a security incident that resulted in the email address and phone number from your Substack account being shared without your permission,” said Best in the email to users. “I’m incredibly sorry this happened. We take our responsibility to protect your data and your privacy seriously, and we came up short here.”
It’s not clear what exactly the issue was with its systems, and the scope of the data that was accessed. It’s also not yet known why the company took five months to detect the breach, or if the company was contacted by hackers demanding a ransom. TechCrunch asked the company for more details, and we will update our story if we hear back.
Substack did not say how many users are affected. The company said that it doesn’t have any evidence that users’ data is being misused, but did not say what technical means, such as logs, it has to detect evidence of abuse. However, the company asked users to take caution with emails and texts without any particular indicators or direction.
On its website, Substack says that its site has more than 50 million active subscriptions, including 5 million paid subscriptions — a milestone it reached last March. In July 2025, the company raised $100 million in Series C funding led by BOND and The Chernin Group (TCG) with participation from a16z, Klutch Sports Group CEO Rich Paul, and Skims co-founder Jens Grede.
Techcrunch event
Boston, MA | June 23, 2026
Ivan covers global consumer tech developments at TechCrunch. He is based out of India and has previously worked at publications including Huffington Post and The Next Web.
You can contact or verify outreach from Ivan by emailing im@ivanmehta.com or via encrypted message at ivan.42 on Signal.
Patrocinado
Patrocinado
Patrocinado
Patrocinado
Anúncios
Categorias
Leia Mais
After backlash, Adobe cancels Adobe Animate shutdown and puts app on ‘maintenance mode’ After customer backlash, Adobe said it won’t fully discontinue Adobe Animate, as planned. The company this week announced it would shut down its 2D animation software, Adobe Animate, amid an increased focus on its investments in AI. On Monday, Feb. 2, 2026, the company issued an update to the company’s...
Beyond crafting, Mechanical Components are also necessary for repairing weapons once their durability starts to drop. Since high-tier gear degrades quickly during extended raids, keeping spare components on ARC Raiders Coins hand can mean the difference between surviving your next expedition and heading in underpowered. Where to Find Mechanical Components Mechanical Components fall under the...
Ryan Routh sentenced to life in prison for 2024 attempt on Trump's lifeBernd Debusmann Jrat the White HouseGetty ImagesRyan Routh was taken into custody shortly after being fired upon by a Secret Service agent during the incident in West Palm Beach, Florida. Ryan Routh has been sentenced to life in prison for attempting to assassinate President Donald Trump on a Florida golf course in September...
Gus Lamont: Suspect identified in disappearance of four-year-old in Australian outbackSouth Australia PoliceGus was last seen playing outside his house on the family's remote sheep stationPolice say a suspect has been identified over the disappearance of a four-year-old boy who went missing in the South Australian outback. Gus Lamont was last seen playing outside his home on a remote sheep...
Naked images remained in Epstein files despite outcryBecky DaleandMatt Murphy,BBC Verify BBCUnredacted images and videos showing nudity released in the Epstein files have been online for days despite US officials being warned about failures in redaction, which lawyers say has caused victims "irreparable" harm.The files seen by BBC Verify are among thousands of documents lawyers say they have...
