Substack notifies users about a “limited” data breach in October 2025 via a now-patched flaw found on February 3; a threat actor leaked a ~697K-record database
Newsletter platform Substack is notifying users of a data breach after attackers stole their email addresses and phone numbers in October 2025.