Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Substack confirms data breach affects users’ email addresses and phone numbers

techcrunch.com

Post reply on HN
Print view View original

31–40 of 49 posts

Re: Substack confirms data breach affects users’ email addresses and phone numbers

#31

Post by squigz »

parable wrote: post #12
meitham wrote: post #8

Earlier quoted context omitted.

Could you please tell me which forum this was posted on

I'm fairly sure even mentioning the name of the forum isn't allowed on HN. It should be trivial to find it yourself, though. I also replied to someone else with the CSV headers if you're only trying to find out what exactly was included in the leak: https://news.ycombinator.com/item?id=46932380 Also, keep in mind that this is a partial leak. The data was scraped from some leaky endpoint which was patched out before e…

> I'm fairly sure even mentioning the name of the forum isn't allowed on HN.

I'm not sure this would be the case? I've seen plenty of links to content of questionable legality shared on HN.

Re: Substack confirms data breach affects users’ email addresses and phone numbers

#32

Post by parable »

chrisjj wrote: post #26
parable wrote: post #12

Earlier quoted context omitted.

I'm fairly sure even mentioning the name of the forum isn't allowed on HN. It should be trivial to find it yourself, though. I also replied to someone else with the CSV headers if you're only trying to find out what exactly was included in the leak: https://news.ycombinator.com/item?id=46932380 Also, keep in mind that this is a partial leak. The data was scraped from some leaky endpoint which was patched out before e…

> this is a partial leak. Substack PR probably love this. Like a gas tank has a partial leak.

This is actually a great analogy for why companies should take small data leaks seriously. A leak is a leak.

Also, to clarify, I don't mean to appear as though I'm discrediting this leak or downplaying its severity. I only mentioned that it was a partial leak to offer an explanation as to why some users received emails and others didn't, as witnessme's comment seemed confused about this.

Re: Substack confirms data breach affects users’ email addresses and phone numbers

#33

Post by shawabawa3 »

parable wrote: post #12
meitham wrote: post #8

Earlier quoted context omitted.

Could you please tell me which forum this was posted on

I'm fairly sure even mentioning the name of the forum isn't allowed on HN. It should be trivial to find it yourself, though. I also replied to someone else with the CSV headers if you're only trying to find out what exactly was included in the leak: https://news.ycombinator.com/item?id=46932380 Also, keep in mind that this is a partial leak. The data was scraped from some leaky endpoint which was patched out before e…

>I'm fairly sure even mentioning the name of the forum isn't allowed on HN

Well let's find out

I did a tiny bit of research, pretty sure it's BreachForums (https://en.wikipedia.org/wiki/BreachForums)

Re: Substack confirms data breach affects users’ email addresses and phone numbers

#34

Post by dxdm »

lostlogin wrote: post #20
dickiedyce wrote: post #7

Ooopsie... possibly a problem for some folks: https://www.theguardian.com/media/2026/feb/07/revealed-how-s...

> some folk A very specific folk. Volksgemeinschaft is a German expression meaning "people's community", "folk community", "national community", or "racial community", depending on the translation of its component term Volk. https://en.wikipedia.org/wiki/Volksgemeinschaft

Your quote leaves out the most interesting part: the word is now associated with some particularly folksy folk who notoriously used it in their. genocidal ideology

> The concept was notoriously embraced by the newly founded Nazi Party in the 1920s, and eventually became strongly associated with Nazism after Adolf Hitler's rise to power.

(From your Wikipedia link.)

Re: Substack confirms data breach affects users’ email addresses and phone numbers

#35

Post by BiteCode_dev »

dickiedyce wrote: post #7

Ooopsie... possibly a problem for some folks: https://www.theguardian.com/media/2026/feb/07/revealed-how-s...

Looked up NatSocToday on Substack, and they do have the swastika as a banner; they don't even hide or be subtle about it. Full on nazi, in plain sight.

And plot twist, they are anti-Trump.

I'm overwhelmed.

Re: Substack confirms data breach affects users’ email addresses and phone numbers

#36

Post by BiteCode_dev »

slopusila wrote: post #3

> including email addresses, phone numbers, and other unspecified “internal metadata.” > Substack specified that more sensitive data, such as credit card numbers, passwords, and other financial information, was unaffected. I hate it when companies do this. passwords and credit card numbers are easily changed. names, emails and phone numbers are not.

Also, name, address and phone numbers let you do so many scams.

A friend of mine received a very well-crafted physical letter at his home about resetting his cryto ledger.

He is now very stressed because there are news about people with crypto getting abducted.

And with the ledger leak they have:

- his name and address

- how much money he has on his ledger

Re: Substack confirms data breach affects users’ email addresses and phone numbers

#37

Post by drcongo »

parable wrote: post #4
slopusila wrote: post #3

> including email addresses, phone numbers, and other unspecified “internal metadata.” > Substack specified that more sensitive data, such as credit card numbers, passwords, and other financial information, was unaffected. I hate it when companies do this. passwords and credit card numbers are easily changed. names, emails and phone numbers are not.

This is what I've been saying for years. I really could care less if my passwords were leaked. My phone number, on the other hand, is near-impossible to change. The fact that VoIP/virtual numbers are blacklisted from use almost everywhere doesn't help anything, because otherwise I would just use a ton of cheap rented numbers. The same goes for full names on file, physical addresses, and other hard-to-change informati…

https://cinemaphile.com/watch?v=om7O0MFkmpw

Re: Substack confirms data breach affects users’ email addresses and phone numbers

#38

Post by Mordisquitos »

witnessme wrote: post #2

I am still confused for days whether this is a real news or a hoax. Only a substack user saying they received this email. I did not. And there is no official statement by Substack. What is really going on here?

Do you reside outside of the EU (and outside anywhere where GDPR equivalents are enforced)? Maybe that would explain it.

Under GDPR, a business has the obligation to inform users if they have been affected by a data breach. That could hypothetically explain why Substack would inform some users (those protected by GDPRish legislation) while keeping it quiet towards the rest of them.

Re: Substack confirms data breach affects users’ email addresses and phone numbers

#39

Post by PlatoIsADisease »

BiteCode_dev wrote: post #35
dickiedyce wrote: post #7

Ooopsie... possibly a problem for some folks: https://www.theguardian.com/media/2026/feb/07/revealed-how-s...

Looked up NatSocToday on Substack, and they do have the swastika as a banner; they don't even hide or be subtle about it. Full on nazi, in plain sight. And plot twist, they are anti-Trump. I'm overwhelmed.

I'm not caught up on fringe and irrelevant political groups, but I think Trump has a base completely different than a pre-2016 republican would align with.

Before you would have: Lifelong Red Team Republican(40%), non ideological Opportunists (30%), Ideological Crazies (30%)

Today you have: Lifelong Red Team Republican(40%), non ideological Opportunists (10%), Ideological Crazies For Trump (50%)

The GOP lost that upper-middle class(opportunists) and they lost ideological believers(pre 2016 crazies). Given how fast it was lost, I expect it to come back in some manner, but Trumpism is a cult of personality rather than ideology.

Re: Substack confirms data breach affects users’ email addresses and phone numbers

#40

Post by direwolf20 »

shawabawa3 wrote: post #33
parable wrote: post #12

Earlier quoted context omitted.

I'm fairly sure even mentioning the name of the forum isn't allowed on HN. It should be trivial to find it yourself, though. I also replied to someone else with the CSV headers if you're only trying to find out what exactly was included in the leak: https://news.ycombinator.com/item?id=46932380 Also, keep in mind that this is a partial leak. The data was scraped from some leaky endpoint which was patched out before e…

>I'm fairly sure even mentioning the name of the forum isn't allowed on HN Well let's find out I did a tiny bit of research, pretty sure it's BreachForums ( https://en.wikipedia.org/wiki/BreachForums )

BreachForums was shut down
Post reply on HN