#Substack data breach

Substack disclosed a security incident from October 2025 that exposed user emails and phone numbers, but waited four months to inform users, sparking debate about transparency in creator platforms.