> including email addresses, phone numbers, and other unspecified “internal metadata.” > Substack specified that more sensitive data, such as credit card numbers, passwords, and other financial information, was unaffected. I hate it when companies do this. passwords and credit card numbers are easily changed. names, emails and phone numbers are not.
Phone numbers are kinda concerning given their popularity as 2FA. A phone number is now basically your shared password for everything. It's also semi public, hard to change and you are basically one SIM swap attack away from a full compromise.
Substack confirms data breach affects users’ email addresses and phone numbers
41–49 of 49 posts
Re: Substack confirms data breach affects users’ email addresses and phone numbers
#42Earlier quoted context omitted.
This is what I've been saying for years. I really could care less if my passwords were leaked. My phone number, on the other hand, is near-impossible to change. The fact that VoIP/virtual numbers are blacklisted from use almost everywhere doesn't help anything, because otherwise I would just use a ton of cheap rented numbers. The same goes for full names on file, physical addresses, and other hard-to-change informati…
>I really could care less if my passwords were leaked couldn't*
Re: Substack confirms data breach affects users’ email addresses and phone numbers
#43> including email addresses, phone numbers, and other unspecified “internal metadata.” > Substack specified that more sensitive data, such as credit card numbers, passwords, and other financial information, was unaffected. I hate it when companies do this. passwords and credit card numbers are easily changed. names, emails and phone numbers are not.
Phone number login in 2026 is really just asking for someone to do a SIM swap attack on the victim's account to steal their identity. Surely a list of services that allow phone number logins exists so that one can avoid signing up in the first place and we would then see it in another connecting breach.
For example, I tried to set up another form of 2FA on Chase, but it still defaults to phone. I can’t disable or change it.
Re: Substack confirms data breach affects users’ email addresses and phone numbers
#44Earlier quoted context omitted.
Looked up NatSocToday on Substack, and they do have the swastika as a banner; they don't even hide or be subtle about it. Full on nazi, in plain sight. And plot twist, they are anti-Trump. I'm overwhelmed.
I'm not caught up on fringe and irrelevant political groups, but I think Trump has a base completely different than a pre-2016 republican would align with. Before you would have: Lifelong Red Team Republican(40%), non ideological Opportunists (30%), Ideological Crazies (30%) Today you have: Lifelong Red Team Republican(40%), non ideological Opportunists (10%), Ideological Crazies For Trump (50%) The GOP lost that upp…
Is not really limited to Trump at all, even though the consequential and public nature of Trump takes everyone’s attention … ironically, with its opponents only feeding that loop in how they oppose it.
It’s a core characteristic of narcissism people rarely understand. Narcissism (individual or system) utterly depends on conflict for its “narcissistic supply”. When you “oppose it”, you are in fact only fueling that which you believe you are opposing. It’s a paradox that people have an impossible time understanding, especially all the people who see “Nazis” everywhere, while openly and violently “protesting” in this supposed “Nazi” regime they’re opposing. Narcissistic control needs that for its manipulation. That is precisely the kind of fuel narcissists love and need and relish with glee as you oppose them, because it means they have you exactly where they want you, emotional and easily manipulated and controlled.
You think the Super Bowl would happen if people stopped living the delusion of “my team” conflict with “not my team”? When you see that stadium full of people, realize that every single one of those thousands of people, will have spent on avg. ~$15,000 per person. It takes manipulation into a state of mental illness to do that. No different than Trump supporters or Nazi fighters or all the other kind of fantasy LARPing that is so pervasive in America, living a life of delusion created for them because it is profitable and makes people easily manipulated.
Re: Substack confirms data breach affects users’ email addresses and phone numbers
#45Earlier quoted context omitted.
>I'm fairly sure even mentioning the name of the forum isn't allowed on HN Well let's find out I did a tiny bit of research, pretty sure it's BreachForums ( https://en.wikipedia.org/wiki/BreachForums )
BreachForums was shut down
This source claims it's Breach forums but no idea if it's reliable
https://www.bleepingcomputer.com/news/security/newsletter-pl...
Re: Substack confirms data breach affects users’ email addresses and phone numbers
#46Earlier quoted context omitted.
I'm not caught up on fringe and irrelevant political groups, but I think Trump has a base completely different than a pre-2016 republican would align with. Before you would have: Lifelong Red Team Republican(40%), non ideological Opportunists (30%), Ideological Crazies (30%) Today you have: Lifelong Red Team Republican(40%), non ideological Opportunists (10%), Ideological Crazies For Trump (50%) The GOP lost that upp…
I’m not even really sure it’s a cult of personality per se. It seems more like yet another form of mental illness that affects so many Americans in different ways, where they live delusional, parasocial, vicarious lives based on a fantastical world that they’ve put in place of reality they rejected. It’s really no different than all the people in America today who will expend immense amounts of money and resources on…
Re: Substack confirms data breach affects users’ email addresses and phone numbers
#47Re: Substack confirms data breach affects users’ email addresses and phone numbers
#48Earlier quoted context omitted.
> some folk A very specific folk. Volksgemeinschaft is a German expression meaning "people's community", "folk community", "national community", or "racial community", depending on the translation of its component term Volk. https://en.wikipedia.org/wiki/Volksgemeinschaft
Your quote leaves out the most interesting part: the word is now associated with some particularly folksy folk who notoriously used it in their. genocidal ideology > The concept was notoriously embraced by the newly founded Nazi Party in the 1920s, and eventually became strongly associated with Nazism after Adolf Hitler's rise to power. (From your Wikipedia link.)
‘Folksy folk’ is a great euphemism.
Re: Substack confirms data breach affects users’ email addresses and phone numbers
#49I am still confused for days whether this is a real news or a hoax. Only a substack user saying they received this email. I did not. And there is no official statement by Substack. What is really going on here?