Internet Archive Hit by Massive Data Breach and DDoS Attack
The Internet Archive suffers a severe security incident that exposes 31 million user email addresses and usernames. The nonprofit organization successfully fends off a simultaneous DDoS attack and works to secure its systems.
The Internet Archive faces a major security crisis as a massive data breach exposes 31 million unique email addresses and usernames. Visitors to the site encounter a mocking pop-up message that directs them to the data breach notification service Have I Been Pwned (HIBP), which confirms the scope of the stolen credentials. Founder Brewster Kahle acknowledges the breach, validating the leaked information that affects millions of the nonprofit's users.
In addition to the data theft, the digital library endures a distributed denial-of-service (DDoS) attack that disrupts its services. A hacktivist group claims responsibility for the DDoS attack, though it remains unclear if the same individuals are responsible for the data breach. The dual attacks highlight significant vulnerabilities within the historic organization, which relies heavily on public support to maintain its vast digital records.
Kahle states that the organization fends off the DDoS attack for now and takes immediate steps to contain the damage. The team scrubs its systems of malicious elements and actively upgrades its overall security infrastructure to prevent future incidents. While the archive is currently working to restore normal operations, Kahle warns that there could be more developments to report as the investigation continues.