Skip to Content

Substack reports mass data leak: ‘This sucks. I’m sorry’

The popular newsletter platform was breached in October 2025

Edward the Penitent from ‘The Simpsons.’ Image: The Simpsons / Frinkiac.com

The personal data of an unknown number of Substack users was leaked several months ago, Substack announced today.

“I’m incredibly sorry this happened,” Substack CEO Chris Best wrote in an email to affected users. “We take our responsibility to protect your data and your privacy seriously, and we came up short here.”

According to the email, the security incident occurred in October 2025 but was only discovered yesterday. The leaked data included “email addresses, phone numbers, and other internal metadata.” The company noted, however, that “credit card numbers, passwords, and financial information were not accessed.”

Substack did not respond to Gazetteer SF’s request for comment in time for publication, so the full scope of the leak is not yet known.

At the time of the email (around 6 p.m. Pacific Time), Substack said it had fixed the problem and is conducting a full investigation.

In a section of the email titled “What you can do,” Best only suggested users take “extra caution” with any suspicious texts they might receive.

“This sucks. I’m sorry,” Best wrote. “We will work very hard to make sure it does not happen again.”

Thanks for reading! If you liked this article, share it with someone. That’s the best way for new readers to discover Gazetteer SF.

More Stories

Everybody knows

This week: Rise of the Nerd Reich, the coming of the Four Horsemen, and other good news

October 2, 2026

Manny Yekutiel’s failed power grab

What the cafe owner and would-be D8 supervisor’s campaign implosion tells us about how power works (and doesn’t work) in San Francisco

October 1, 2026

Deja Solis held the space

The model behind the giant sculpture across the Ferry Building, Marco Cochrane’s ‘I Am,’ looks back

October 1, 2026

Mad Dog, Kezar Pub owner caught on tape with baseball bat could lose alcohol licenses after charges

Cyril Hackett has been charged with two felonies, second degree robbery and assault with a deadly weapon, following a parking dispute

October 1, 2026

Nurses union takes to Market Street to demand ‘Palantir out!’ of their hospitals

Outraged by AI meddling in staffing, bed placement, and patient data, health care workers say they’ve have had enough

September 30, 2026

An anonymously-created website visualizes Sunset Dunes’ popularity

Built in a weekend using Surfline cameras, the site isn’t meant to be political

September 30, 2026