Fan-Fiction Platform Archive of Our Own Faces Extended Downtime After Security Breach

Image: TechCrunch · Source

Archive of Our Own (AO3), a beloved fan-fiction site, is undergoing a security incident investigation and may remain offline for two to four weeks as its nonprofit operator works to resolve the issue.

Archive of Our Own (AO3), a widely used platform where fan-fiction enthusiasts publish and read stories about popular characters and universes, has announced a significant outage. Originally expected to be a brief downtime for routine maintenance, the site is now projected to be offline for up to four weeks due to a detected security incident.

The Organization for Transformative Works (OTW), the nonprofit behind AO3, initially did not disclose details but later confirmed they are still investigating the breach and assessing its full scope. According to OTW's statement, while there is no current evidence that the user database was stolen, they cannot completely exclude the possibility. This database includes sensitive information such as usernames, email addresses, IP addresses, and hashed passwords.

In response to the incident, AO3 has recommended users change passwords on any other sites where they may have reused the same credentials, despite the site's use of industry-standard password hashing techniques. OTW indicated that restoring full service might take between two and four weeks, but they hope to return a degraded version of the site more quickly.

The announcement has stirred significant concern within AO3's passionate user community, with millions of views and widespread commentary on social media shortly after OTW's update.

Some speculation has emerged connecting the incident with the recent critical vulnerabilities discovered in the PHP programming language, referred to as "PHP Armageddon." However, AO3 operates on Ruby on Rails, not PHP, making a direct link unlikely.

OTW and AO3 have not commented further beyond their official statement. Users are encouraged to monitor AO3's status page for ongoing updates regarding the restoration process.