Security Incident Knocks Archive of Our Own Offline
AI-generated image · Bay Street Wire
The non-profit fan-fiction site faces a potential month-long outage following a security breach.
Archive of Our Own (AO3), a prominent platform for fan-fiction, may remain offline for two to four weeks following a security incident, according to reporting from TechCrunch.
The outage occurred after what was intended to be routine overnight maintenance. In a statement, the Organization for Transformative Works (OTW)—the non-profit that manages AO3 through donations and volunteers—confirmed they detected evidence of a security incident and are currently investigating its scope. While OTW stated they do not currently believe the user database was stolen, they noted they cannot rule it out. The database contains hashed passwords, email addresses, usernames, and IP addresses; consequently, OTW advised users to change passwords on any other sites where they may have reused the same credentials.
Despite the scale of the outage, TechCrunch reports that the incident is unlikely to be linked to the recent "PHP Armageddon" flaws discovered by Google Wiz and OpenAI, as AO3 is built on the Ruby on Rails framework rather than PHP.
The fragility of the community-led infrastructure was highlighted by the reaction of AO3's passionate user base, which generated millions of views on the site's status page within two hours of the announcement. OTW indicated they hope to restore the site in a "degraded state" sooner than the four-week maximum estimate.