
- Substack confirms October 2025 breach exposing user emails, phone numbers, and metadata
- CEO Chris Best assured no financial data or credentials were accessed; hole patched and investigation ongoing
- BreachForums thread advertises ~700K stolen records, despite Substack claiming no evidence of abuse so far