Tell HN: Scribd Breached

	Tell HN: Scribd Breached
	256 points by x______________ 10 hours ago \| 100 comments
	tl;dr: Scribd notified users on October 26, 2026 of a security incident in which an unauthorized third party accessed user data including email addresses, credit card last 4 digits, card issuer, expiry date, country, and payment history (but not full card details). Scribd says it has secured the system, notified law enforcement and data protection authorities, and is working with a cybersecurity firm, while warning users to watch for phishing attempts.
	HN Discussion: •AI is just a tool revealing pre-existing vulnerabilities; defenders need freedom to red-team ↓Scribd deserves no sympathy due to its predatory business practices toward users ↑Scribd has a repeat history of breaches, suggesting systemic security negligence ↓Disclosure was too slow and lacks transparency about which specific system was breached •Future security is asymmetric warfare where attackers with better agents hold the advantage