Substack said that customer data was accessed in October 2025, but wasn't discovered until early February.
Nude photos. The names and faces of sexual abuse victims. Bank account and Social Security numbers in full view.
If you’re impacted by the security incident, you’ll hear directly from the brand with an email from Substack's CEO.