Live data from Hacker News

Substack confirms data breach affects users’ email addresses and phone numbers

techcrunch.com

21–30 of 49 posts

Re: Substack confirms data breach affects users’ email addresses and phone numbers

#23

> including email addresses, phone numbers, and other unspecified “internal metadata.” > Substack specified that more sensitive data, such as credit card numbers, passwords, and other financial information, was unaffected. I hate it when companies do this. passwords and credit card numbers are easily changed. names, emails and phone numbers are not.

Phone number login in 2026 is really just asking for someone to do a SIM swap attack on the victim's account to steal their identity.

Surely a list of services that allow phone number logins exists so that one can avoid signing up in the first place and we would then see it in another connecting breach.

Re: Substack confirms data breach affects users’ email addresses and phone numbers

#24

I am still confused for days whether this is a real news or a hoax. Only a substack user saying they received this email. I did not. And there is no official statement by Substack. What is really going on here?

I don't think it's fake - it explains why suddenly I got a ton of "verify your registration to XYZ" emails in the past week.

Re: Substack confirms data breach affects users’ email addresses and phone numbers

#25

Earlier quoted context omitted.

[flagged]

It is a common saying, but the saying is "couldn't care less"

They are commonly used synonymously. English as she is spoke is not a logical language.

https://www.merriam-webster.com/grammar/could-couldnt-care-l...

https://dictionary.cambridge.org/dictionary/english/could-ca...

Re: Substack confirms data breach affects users’ email addresses and phone numbers

#26
post #12
post #8

Earlier quoted context omitted.

Could you please tell me which forum this was posted on

I'm fairly sure even mentioning the name of the forum isn't allowed on HN. It should be trivial to find it yourself, though. I also replied to someone else with the CSV headers if you're only trying to find out what exactly was included in the leak: https://news.ycombinator.com/item?id=46932380 Also, keep in mind that this is a partial leak. The data was scraped from some leaky endpoint which was patched out before e…

> this is a partial leak.

Substack PR probably love this. Like a gas tank has a partial leak.

Re: Substack confirms data breach affects users’ email addresses and phone numbers

#27
post #25

Earlier quoted context omitted.

It is a common saying, but the saying is "couldn't care less"

They are commonly used synonymously. English as she is spoke is not a logical language. https://www.merriam-webster.com/grammar/could-couldnt-care-l... https://dictionary.cambridge.org/dictionary/english/could-ca...

[dead]

Re: Substack confirms data breach affects users’ email addresses and phone numbers

#28
post #6

Earlier quoted context omitted.

>I really could care less if my passwords were leaked couldn't*

[flagged]

Try:

"It is impossible that he could care less." — The Morning Post (London, Eng.), 18 Jul. 1840

Re: Substack confirms data breach affects users’ email addresses and phone numbers

#29
post #23

> including email addresses, phone numbers, and other unspecified “internal metadata.” > Substack specified that more sensitive data, such as credit card numbers, passwords, and other financial information, was unaffected. I hate it when companies do this. passwords and credit card numbers are easily changed. names, emails and phone numbers are not.

Phone number login in 2026 is really just asking for someone to do a SIM swap attack on the victim's account to steal their identity. Surely a list of services that allow phone number logins exists so that one can avoid signing up in the first place and we would then see it in another connecting breach.

PayPal :(

Re: Substack confirms data breach affects users’ email addresses and phone numbers

#30
post #22

The AI agents are throwing another party celebrating over yet another data breach where they can train on this data and can now get to know us even more for personalized conversations about our Substack activity.

They'll also be training on the hack experience to make the next "AI" better at its job.
Post reply on HN