Substack warns customers of data breach following hacker’s dark web claims

Substack confirmed an unauthorized access incident that exposed user metadata (emails, phone numbers, names, user IDs, Stripe IDs, profile pictures and bios) dating back to October 2025; the company says financial credentials and passwords were not leaked, fixed the flaw on February 3, and is investigating while warning customers to be cautious of phishing and unsolicited messages.