Substack data breach leaks users’ email addresses and phone numbers | CSO Online

Substack has experienced a data breach where email addresses and phone numbers of some users were exposed due to a system vulnerability exploited in October 2025. The company has since fixed the issue and is investigating, assuring users that passwords and financial information were not compromised.