Substack confirms data breach affects users’ email addresses and phone numbers

Ooopsie... possibly a problem for some folks: https://www.theguardian.com/media/2026/feb/07/revealed-how-s...

I am still confused for days whether this is a real news or a hoax. Only a substack user saying they received this email. I did not. And there is no official statement by Substack. What is really going on here?

Israel hacked a US based company and leaked data because they couldn't directly censor them?

So, is the breach for substack users or for people who subscribed to substack users’ newsletters?

> including email addresses, phone numbers, and other unspecified “internal metadata.”

> Substack specified that more sensitive data, such as credit card numbers, passwords, and other financial information, was unaffected.

I hate it when companies do this.

passwords and credit card numbers are easily changed.

names, emails and phone numbers are not.

[dead]