Scribd notifies users of data breach exposing emails and partial card details
Scribd, Inc., parent of Scribd, Slideshare, Everand and Fable, sent breach notifications on October 26, 2026 saying an unauthorized third party may have accessed user email addresses, the last four digits of credit cards, card issuer, expiry date, country and payment history. The company said it found no evidence the data has been misused but is notifying affected users as a precaution, via its notification partner Epiq.
GoKawiil's interpretation of the reporting above, not reported fact.
Even partial financial data exposure can fuel targeted phishing campaigns, since attackers often combine such fragments with other leaked data to appear more convincing. The breach adds Scribd to a growing list of content and subscription platforms facing scrutiny over how they store and protect payment-related metadata, which could raise questions about its security practices and vendor relationships.
- Exposed data includes emails, partial card numbers, issuers, expiry dates and payment history, but not full card numbers.
- Scribd says there's no evidence yet that the stolen data has been misused.
- Users are urged to watch for phishing attempts impersonating Scribd and its sibling brands Slideshare, Everand and Fable.
YubiKey 5C NFC Security Key — After a data breach like this, strengthening your account security is a smart move, and a hardware security key makes phishing attacks far less effective even if your credentials leak. The YubiKey 5C NFC works across major services supporting two-factor authentication, giving you a durable, reusable way to lock down accounts tied to the exposed email address.
See YubiKey 5C NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: news.ycombinator.com, 2026-10-31
Published there as: “Tell HN: Scribd Breached”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.