Scribd, Inc. notified users on Monday, October 26, 2026, of a security incident that may have exposed certain user data. The unauthorized access affected email addresses, the last four digits of credit cards, credit card issuer, expiry dates, and payment history (excluding full card details). The company stated it has no evidence of data misuse but is notifying users out of caution.
The breach also involved Scribd's parent company properties: Slideshare, Everand, and Fable. Users were advised to watch for phishing attempts and reminded that Scribd will never request usernames, passwords, or sensitive information via email or text. If users receive suspicious messages, they should avoid clicking links and instead visit scribd.com, slideshare.net, everand.com, or fable.co directly.
Scribd has secured the affected system, ended unauthorized access, and notified law enforcement as well as relevant data protection authorities. The company is working with an expert third-party cybersecurity firm to strengthen access controls and monitoring. A dedicated call center is available at +1-877-361-9887, Monday through Friday, 11:00 a.m. to 11:00 p.m. Central European Time.
The National Cyber Security Center offers guidance on recognizing and avoiding phishing scams. Scribd expressed regret over the incident and commitment to keeping users updated.
Source: Hacker News · Summarized by HeadlinesBriefing