Scribd says an unauthorized party accessed internal systems and some user information, and that it closed the vulnerability and ended the access. An October 26 notification shared by a Hacker News user listed possible exposure of an email address, a card’s last four digits and country, issuer, expiry date, and payment history; it did not establish exposure of the full card number. The official notice says more sensitive information was involved for some accounts and that Epiq is notifying users in phases. It recommends precautionary password resets for Scribd, SlideShare, Everand, and Fable, and checking official pages directly instead of following suspicious email links.