2026 Substack — BreachForums leak, 697,313 records
Data compromised
Names; emails; phones; user IDs; Stripe IDs; profile pics; bios; subscription metadata
Technical writeup
Substack confirmed breach Feb 2026; data accessed Oct 2025. Hacker leaked 697,313 records on BreachForums: full names, emails, phones, user IDs, Stripe customer IDs, profile pictures, bios, subscription metadata. Passwords and financial data not compromised.
Root cause
Unauthorized access
References
- https://techcrunch.com/2026/02/05/substack-confirms-data-breach-affecting-email-addresses-and-phone-numbers
- https://www.bleepingcomputer.com/news/security/newsletter-platform-substack-notifies-users-of-data-breach/
- https://breached.company/substack-confirms-data-breach-697-000-user-records-exposed-including-email-addresses-and-phone-numbers/
- https://techrepublic.com/article/news-substack-data-breach-user-accounts-leaked