662,679
Records Exposed
Oct 2025
Date of Breach
Database,Data scrape
Breach Type
Feb 2026
Added to Database
About This Breach
In February 2026, a dataset alleged to be a scrape of the US based creator monetization platform Substack was shared on a prominent cybercrime forum. The leaked data contained nearly 700,000 records and included over 660,000 unique email addresses, usernames, phone numbers, and stripe IDs. A notice from Substack said that the incident originally occurred in October 2025.
Compromised Data Types
Country
United States
Language
English
Password Storage
No Passwords
Category
Community, General Business
Indexed On
Feb 10, 2026
Breach Type
Database,Data scrape
What Should You Do?
Get Full Breach Details with LeakedSource Pro
Sign up for a LeakedSource Pro account to see exactly what data was exposed in this breach and get real-time notifications when your information appears in new breaches.
Sign Up for Pro- Watch for phishing emails targeting your inbox. Attackers may use your exposed email address to send convincing scam messages.
- Be alert to smishing attacks (SMS phishing). Scammers may text you pretending to be banks or service providers.
- Enable two-factor authentication (2FA) on all important accounts to add an extra layer of security.
- Use a password manager to generate and store unique, strong passwords for every account.
Were You Affected by This Breach?
Enter your email below to instantly check if your data was compromised in the Substack Scrape 2025 breach and 12,000+ other known breaches.