Substack Confirms Data Breach, "Limited User Data" Compromised

Substack confirmed a security incident in which an unauthorized third party accessed limited user data (emails, phone numbers, and internal metadata) in October 2025; the issue was detected in February and reportedly remediated. No financial information or passwords were accessed, the scope of affected users was not disclosed, and the exposed contact data raises risks of targeted phishing and SIM-swap attacks.