Skip to Content

Substack reports mass data leak: ‘This sucks. I’m sorry’

The popular newsletter platform was breached in October 2025

Edward the Penitent from ‘The Simpsons.’ Image: The Simpsons / Frinkiac.com

The personal data of an unknown number of Substack users was leaked several months ago, Substack announced today.

“I’m incredibly sorry this happened,” Substack CEO Chris Best wrote in an email to affected users. “We take our responsibility to protect your data and your privacy seriously, and we came up short here.”

According to the email, the security incident occurred in October 2025 but was only discovered yesterday. The leaked data included “email addresses, phone numbers, and other internal metadata.” The company noted, however, that “credit card numbers, passwords, and financial information were not accessed.”

Substack did not respond to Gazetteer SF’s request for comment in time for publication, so the full scope of the leak is not yet known.

At the time of the email (around 6 p.m. Pacific Time), Substack said it had fixed the problem and is conducting a full investigation.

In a section of the email titled “What you can do,” Best only suggested users take “extra caution” with any suspicious texts they might receive.

“This sucks. I’m sorry,” Best wrote. “We will work very hard to make sure it does not happen again.”

Stay in touch

Sign up for our free newsletter

More from Gazetteer SF

The New Liberals just want to enjoy their Tax Havens

At The Irish Bank, policy wonks debate the Billionaire’s March and Georgist land taxes

February 13, 2026

Drinking Companion: In search of lost time at Specs’

Under a flag-draped ceiling and surrounded by history, generations of San Francisco bohos have gathered for Gouda cheese and better conversation

February 13, 2026

Back to school

With the teachers strike over, the hard work of funding and running SFUSD continues

February 13, 2026

Strike Diary, Day Four: Tetris

Piecing together another day without school

February 12, 2026

Dial D for dysfunction

San Francisco’s 911 dispatchers are being asked to work with antiquated equipment, crazy hours, poor mental health, and alongside new trainees who aren’t prepared

February 11, 2026

Strike Diary, Day Two: An unusually calm morning

A feeling of peace has settled into my home, but it’s not all Legos and blueberry muffins for SFUSD teachers

February 10, 2026
See all posts