Substack confirms data breach affects users’ email addresses and phone numbers

Substack said that customer data was accessed in October 2025 but wasn’t discovered until early February.