> ## Content Index
> Fetch the complete content index at: https://www.techloy.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Substack CEO Chris Best Confirms October 2025 Data Breach, Apologise to Users
- URL: https://www.techloy.com/substack-ceo-chris-best-confirms-october-2025-data-breach-aplogise-to-users-2/
- Published: 2026-02-05T11:13:33.000Z
- Updated: 2026-02-05T11:40:27.000Z
- Description: The company claims it has made fixes to the vulnerability.
- Author: Louis Eriakha
- Tags: / Consumer Tech, / Cybersecurity, Substack

In an email sent by [Substack](https://www.techloy.com/tag/substack/) CEO, Chris Best to users Thursday morning, he confirmed that the subscription-based newsletter publishing platform, popular with writers and journalists, suffered a security breach in October 2025, that resulted in the exposure of user data, including email addresses, phone numbers, and other internal metadata.

According to the email seen by Techloy, the breach was discovered on February 3, after the company found evidence of system issues that allowed unauthorized third-party access. 

![](https://storage.ghost.io/c/c1/a6/c1a6d111-d951-41ad-a392-c1e841210b93/content/images/2026/02/Screenshot-2026-02-05-at-12.12.23---PM.png)

“On February 3rd, we identified evidence of a problem with our systems that allowed an unauthorized third party to access limited user data without permission, including email addresses, phone numbers, and other internal metadata,” Best says in the email. He added in the email however, that “importantly, credit card numbers, passwords, and financial information were not accessed,” claiming that there is currently no evidence the exposed data has been used for malicious activity. 

“We do not have evidence that this information is being misused, but we encourage you to take extra caution with any emails you receive that may be suspicious,” the email says. While Substack has not disclosed how many users were affected by the breach, [a blog suggested](https://www.hendryadrian.com/substack-data-breach-leads-to-leak-of-nearly-700000-records/) that as many as about 700,000 accounts may have been compromised. 

[Substack Rolls Out Beta TV App for Apple TV and Google TVThe app brings creator content to the living room and signals a broader shift in how Substack wants audiences to consume its creators’ work.![](https://storage.ghost.io/c/c1/a6/c1a6d111-d951-41ad-a392-c1e841210b93/content/images/icon/techloy-avatar-1-5855.png)TechloyEmmanuel Umahi![](https://storage.ghost.io/c/c1/a6/c1a6d111-d951-41ad-a392-c1e841210b93/content/images/thumbnail/photo-1584438784894-089d6a62b8fa-1)](https://www.techloy.com/substack-rolls-out-beta-tv-app-for-apple-tv-and-google-tv/)

The company says it has since fixed the vulnerability responsible for the incident and is taking additional steps to prevent a similar breach in the future.

This is not the first time users data on Substack have been exposed . In 2020, [the company placed recipient addresses](https://gizmodo.com/substack-just-accidentally-revealed-email-addresses-of-1844538889) in the “CC” field instead of the “BCC” field while sending out a mandatory policy update, allowing users to see the email addresses of others included in the same message. 

At the time the company said it was “so sorry this happened – and we are aware of the irony. This was a genuine mistake, we feel terrible about it, and we will do everything in our power to never repeat it.” 

For a platform that hosts millions of independent writers and publishers, incidents like this highlight the growing importance of strong security practices, especially as creators increasingly rely on services like Substack to manage audiences, subscriptions, and sensitive user information. 

“I'm sorry. We will work very hard to make sure it does not happen again,” Best added.

[Substack adds live streaming capability for creatorsA cool way for creators who want to diversify their offerings.![](https://storage.ghost.io/c/c1/a6/c1a6d111-d951-41ad-a392-c1e841210b93/content/images/icon/techloy-avatar-1-5856.png)TechloyEmmanuel Oyedeji![](https://storage.ghost.io/c/c1/a6/c1a6d111-d951-41ad-a392-c1e841210b93/content/images/thumbnail/Substack-4.jpg)](https://www.techloy.com/substack-adds-live-streaming-capability-for-creators/)