<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
  <title>Substack data breaches · Privacy Unpacked</title>
  <link href="https://privacyunpacked.com/breaches/company/substack/feed.xml" rel="self"/>
  <link href="https://privacyunpacked.com/breaches/company/substack/"/>
  <id>https://privacyunpacked.com/breaches/company/substack/feed.xml</id>
  <updated>2026-02-06T00:00:00Z</updated>
  <author><name>Privacy Unpacked</name></author>
  <entry>
    <title>Substack data breach: 663,121 accounts</title>
    <link href="https://privacyunpacked.com/breaches/company/substack/"/>
    <id>https://privacyunpacked.com/breaches/company/substack/#substack-2026-02-06</id>
    <updated>2026-02-06T00:00:00Z</updated>
    <summary>A breach of Substack was added to Have I Been Pwned’s breach database on 6 February 2026. It affected 663,121 accounts. Exposed: Email addresses and Phone numbers. The breach began on 23 October 2025, 106 days before it was reported.</summary>
  </entry>
</feed>
