Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

ClosedHighNo fix needed

Internet Archive hacked: 31 million user records stolen

Internet Archive (archive.org)

Attackers defaced archive.org with a JavaScript alert and stole a 6.4GB user authentication database: 31 million unique email addresses, screen names and bcrypt-hashed passwords. The newest record was from 2024-09-28. The data was shared with Have I Been Pwned. Around the same time the site was knocked offline by DDoS attacks.

Why this severity: Data breach, 31M accounts

Started
Oct 9, 2024
Closed
Oct 20, 2024

Follow this incident

Affected

Not published yet

Fixed in

No fixed release yet

Timeline2

  1. archive.org shows a hacker's JavaScript alert; breach of 31M records confirmed

    Source
  2. Most recent timestamp in the stolen user database

    Source
News & write-ups1

Get an email when a new major security incident drops. No spam, unsubscribe any time.