Newsletter platform Substack notifies users of data breach