I only received this same email a few hours ago, Oct 30. Why not tell all customers at once, especially if payment information was involved?
And they posted about a security incident on their blog on Oct 1. https://support.scribd.com/hc/en-us/articles/53787421531284-...
[dead]
The email received is a rehash of the linked article, nice find.
>Why not tell all customers at once, especially if payment information was involved?
Answered in the article!
“Q: Am I affected? How will I be notified?
A: We are sending notices to affected individuals in phases, so not everyone has received theirs yet“
And also..
"Q: Where can I find the latest updates?
A: The latest updates regarding the incident will be made available on this page.“
..."Updated October 01, 2026 19:29"
For a site where you find data, they are completely devoid of any useful data on their own incident and redirecting everyone to phone calls where data cannot easily be shared.