The Internet Archive, a cornerstone of digital preservation and the home of the popular “Wayback Machine,” has recently fallen victim to a significant data breach. This breach has exposed sensitive information from over 31 million users, raising serious concerns about the security of one of the internet’s most trusted resources1.
The breach came to light on October 9, 2024, when users visiting archive.org encountered a suspicious JavaScript alert warning them of the security breach1. The alert ominously stated, “Have you ever felt like the Internet Archive runs on sticks? It just happened. See 31 million of you on HIBP!” HIBP, or “Have I Been Pwned?”, is a site where users can check if their data has been compromised in previous breaches1.
Troy Hunt, the creator of Have I Been Pwned?, confirmed that he had received a large file containing the compromised data nine days prior1. This file, named “ia_users.sql,” included email addresses, screen names, and hashed passwords3. Around 54% of the accounts had already been compromised in previous data breaches tracked by his platform3.
The breach has caused parts of the Internet Archive to slow down or become temporarily unavailable as the organization works to handle the fallout3. Users have faced difficulties accessing the site, and some features have been disabled while the security team works on repairs.
This incident serves as a stark reminder of the importance of robust digital security measures. As we increasingly rely on digital repositories to preserve our history and knowledge, it is crucial to ensure that these platforms are adequately protected against cyber threats.