-
Substack took four months to tell anyone
On February 6, 2026, Substack disclosed a data breach affecting roughly 697,313 user records. The breach itself happened the previous October. Substack sat on the disclosure for four months, while writers were leaving over the 10% fee anyway.
