<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>AO3 (Archive of Our Own) down for 2-4 weeks after security incident; user database theft not ruled out · updates</title>
  <link>https://pwn.watch/i/ao3-archive-of-our-own-security-incident-oct-2026</link>
  <description>The Organization for Transformative Works (OTW) took Archive of Our Own (AO3), the large fan-fiction site, offline on Oct 29 for what it first called maintenance, then said it had detected evidence of a security incident. OTW says no AO3 data was deleted and it does not currently believe the user database was stolen, but cannot rule it out. That database may hold usernames, email addresses, IP addresses and hashed passwords. AO3 does not collect real names, and donor data is in a separate system that was not exposed. The site is expected to stay down for at least two weeks and up to four.</description>
  <language>en</language>
  <lastBuildDate>Fri, 30 Oct 2026 00:00:00 GMT</lastBuildDate>
  <atom:link href="https://pwn.watch/i/ao3-archive-of-our-own-security-incident-oct-2026/feed.xml" rel="self" type="application/rss+xml" />
  <item>
    <title>AO3 (Archive of Our Own) down for 2-4 weeks after security incident; user database theft not ruled out: At 01:27 UTC OTW says it detected evidence of a security incident on AO3. No data was deleted; it does not believe the user database was stolen but cannot rule it out, and recommends changing any passwords reused from AO3 on other sites.</title>
    <link>https://pwn.watch/i/ao3-archive-of-our-own-security-incident-oct-2026</link>
    <guid isPermaLink="false">https://pwn.watch/i/ao3-archive-of-our-own-security-incident-oct-2026#2026-10-30-70050fa8</guid>
    <pubDate>Fri, 30 Oct 2026 00:00:00 GMT</pubDate>
    <category>medium</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://status.archiveofourown.org/&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
  <item>
    <title>AO3 (Archive of Our Own) down for 2-4 weeks after security incident; user database theft not ruled out: AO3 goes down at 07:13 UTC for what OTW calls maintenance, expected to take at least 12 hours. At 17:41 UTC OTW says restoration will take around 2 weeks and possibly up to 4.</title>
    <link>https://pwn.watch/i/ao3-archive-of-our-own-security-incident-oct-2026</link>
    <guid isPermaLink="false">https://pwn.watch/i/ao3-archive-of-our-own-security-incident-oct-2026#2026-10-29-cce8c90e</guid>
    <pubDate>Thu, 29 Oct 2026 00:00:00 GMT</pubDate>
    <category>medium</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://status.archiveofourown.org/&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
</channel>
</rss>
