Post

Latest update from @brewster.kahle.org : “Update: @internetarchive’s data has not been corrupted. Services are currently stopped to upgrade internal systems. We are working to restore services as quickly and safely as possible. Sorry for this disruption.”

450 reposts2K likes

I was told by haveibeenpwned that: "In September 2024, the digital library of internet sites Internet Archive suffered a data breach that exposed 31M records. The breach exposed user records including email addresses, screen names and bcrypt password hashes."

Glad everything is OK! i still wonder WHY someone would do this. honestly big thanks for you all on the internet archive, the amount of stuff you guys have thats important for everyone is insane <3

It's a pity the intruders didn't take the opportunity to do anything beneficial, like grab copies of the data items The Archive is unable to freely share and shove them into a torrent, or something.

It is time to acknowledge that censors have at their disposal, tools like DDOS, and will likely use them in the future. Mitigations like Cloudflare are available. Please consider protecting IA. Thank you for your archival work. As a researcher, it is invaluable to me.

I know they did it for clout but… hacking an understaffed, undersupported nonprofit is just so deeply uncool. Like it’s not a flex to break into a library, of course it’s vulnerable

a) It's well known and high-profile so guaranteed to gain attention. b) It's not a well-funded and defended corporate/enterprise network. DDoS attacks just require money and renting time from a botnet. Based on what's been stated, attackers leveraged a compromised javascript library/module.

Now what was the point of their attack? What good could have it done or what good did they expect to come of it?? Did they just wanna make people upset? If so, they got what they wanted. If not, then damn them anyway.

Wonderful that there was no corruption; Awful that this happened to begin with, some people just lack decency. Hope that this will be over as soon as possible!

Why would someone do such a thing as attack a nonprofit website. Such a fucked up way of getting recognized. Little do some people know, there are some businesses and schools and stuff that rely on content on the Archive. At least nothing was corrupted.