Archive — US — techcrunch
Substack confirms data breach affects users’ email addresses and phone numbers
Substack has confirmed a data breach affecting users' email addresses and phone numbers, but not sensitive data like credit cards or passwords. The breach was detected in February, and the company has since addressed the issue. CEO Chris Best apologized for the incident, emphasizing their commitment to user privacy while details regarding its scope and the delay in detection remain unclear.
Key points
- Substack confirmed a data breach that exposed users' email addresses and phone numbers.
- The breach was identified by the company in February, but the hackers accessed systems earlier in October.
- More sensitive information, such as credit card numbers and passwords, was not compromised.
- CEO Chris Best communicated the incident to users, acknowledging a failure in data protection.
- The number of affected users is unspecified, and the security measures in place to detect misuse are unclear.
- Substack has over 50 million active subscriptions, including 5 million paid, and recently raised $100 million in funding.
Why it matters
- Data breaches have become increasingly common in the tech industry, raising concerns about user privacy and security.
- Substack's experience highlights the importance of timely detection and response to breaches, especially with major platforms receiving significant user data.
- Privacy laws and regulations are becoming stringent, making data protection paramount for companies managing sensitive user information.
- The breach comes at a time when users are becoming more cautious and aware of online security, impacting user trust and platform reputations.
The Substack data breach serves as a reminder of the vulnerabilities in digital security, underscoring the need for robust protection mechanisms as user data becomes a target for unauthorized access.