Hello.
Last night some of you—I don’t know who or how many of you, because I deleted the emails they sent in error—may have been affected by this:

Substack @SubstackInc

This evening we published an update to our privacy policy, terms of use, and publisher agreements and mistakenly sent an email notification to a small percentage of Substack users that included many email addresses in the ‘to’ line. 1/2

July 29th 2020

24 Retweets76 Likes

I take digital privacy and security seriously. I say this both as a person who works in and around media and technology, and as someone from the kinds of backgrounds that mean “getting disappeared into an unmarked van by people acting on behalf of the US government” has been part of my threat model for years and years.

I am furious about this breach, and especially furious at the utterly inadequate response the company has provided in the aftermath.

I am considering the options for this newsletter—the landscape of options is frankly not great. In the meantime, I wanted to extend my sincere apologies that your support for this project may have led to the exposure of your email address.