Newsletter platform Substack notifies users of data breach

Substack, a newsletter platform, has notified its users of a data breach that occurred in October 2025, where attackers stole email addresses and phone numbers. The breach was discovered by Substack only recently, and while the attackers did not access credentials or financial information, the company has addressed the flaw and warned users of potential phishing attempts.