AO3 (Archive of Our Own) down for 2-4 weeks after security incident; user database theft not ruled out
Teaser from the source
The Organization for Transformative Works (OTW) took Archive of Our Own (AO3), the large fan-fiction site, offline on Oct 29 for what it first called maintenance, then said it had detected evidence of a security incident. OTW says no AO3 data was deleted and it does not currently believe the user database was stolen, but cannot rule it out. That database may hold usernames, email addresses, IP addresses and hashed passwords. AO3 does not collect real names, and donor data is in a separate system that was not exposed. The site is expected to stay down for at least two weeks and up to four.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchMore on security
Other advisories
- Not ratedosv:OESA-2026-4737uboot-tools security update
- Not ratedosv:OESA-2026-4736uboot-tools security update
- Not ratedosv:OESA-2026-4735uboot-tools security update
- Not ratedosv:OESA-2026-4734unbound security update
- Not ratedosv:OESA-2026-4732unbound security update
- Not ratedosv:OESA-2026-4733unbound security update
- Not ratedosv:OESA-2026-4731libnfs security update
- Not ratedosv:OESA-2026-4730libnfs security update
Other news entries
- Google Calendar phishing campaign hijacks sessions, bypasses MFANewsBleepingComputer
- SonicWall warns of unpatched flaws in end-of-life GMS softwareNewsBleepingComputer
- Sysdig Adds Runtime Security and Governance for AI AgentsNewsSecurityWeek
- Barracuda ESG Authentication Bypass Flaw Opens Path to RootNewsSecurityWeek
- Agentic Data Security Firm Sentra Raises $150 MillionNewsSecurityWeek
- The Race Against the 3-Day Clock: How Rapid7 Helps Meet BOD 26-04 ComplianceNewsRapid7
- AI-Linked Breaches Mount as WorkOS, Northflank, Trigger.dev Disclose HacksNewsSecurityWeek
- System Security Services Daemon (SSSD): Mehrere Schwachstellen ermöglichen Denial of ServiceVulnerabilityBSI CERT-Bund
Source: https://pwn.watch/i/ao3-archive-of-our-own-security-incident-oct-2026