As reported by BleepingComputer, Substack recently disclosed a significant data breach. The company's CEO, Chris Best, sent users a notice of the breach this week, sharing that email addresses, phone numbers, and "other internal metadata" were shared from Substack accounts without their permission. The company reportedly discovered the breach on Feb. 3, even though hackers accessed the data itself in October of 2025. That means the data was in unauthorized hands for roughly four months before Substack identified the breach.
What Best doesn't share is the scope of the breach. For that, we have to turn to BleepingComputer, which found a post from a "threat actor" on the hacking forum BreachForums. The actor posted a database of 697,313 Substack records, sharing that the Substack user base is much larger, but the scraping method was "noisy and patched fast." This actor says the data compromised includes email addresses, phone numbers, names, user IDs, Stripe IDs, profile pictures, and bios—a bit more detailed than the report from Substack's CEO.
What Substack can do after this breach
Unfortunately, there's not much users can do to mitigate a data breach once it's happened. The data stolen from Substack is already lost, and you won't be able to undo that. However, there are some steps you can take to protect yourself in the wake of the breach, and to prevent this data loss in the future.
You may also want to consider masking your email address going forward. Use a service like Apple's "Hide My Email" or DuckDuckGo's email protection to generate a "burner" address each time you need to share your email with a service. The service will send messages to the burner address, which gets forwarded to your real address. That way, the service doesn't know your real address, and, if hacked, won't compromise it. Hackers will only get the burner, which you can shut down at any time.
Hence then, the article about this substack data breach may have compromised nearly 700 000 user records was published today ( ) and is available on Live Hacker ( Middle East ) The editorial team at PressBee has edited and verified it, and it may have been modified, fully republished, or quoted. You can read and follow the updates of this news or article from its original source.
Read More Details
Finally We wish PressBee provided you with enough information of ( This Substack Data Breach May Have Compromised Nearly 700,000 User Records )
Also on site :