The breach happened in October, but was detected by Substack on February 3rd.