Starting at 5pm on October 9th, Internet Archive users began reporting a popup message when trying to load the website, as well as an ongoing DDoS attack. The message foreshadows the data of 31 million users being leaked, and telling people to check haveibeenpwned.

(image from twitter)

This comes after IA founder Brewser Kahle mentioned a DDoS attack on the 7th and 8th.


As of writing this archive.org's services do not appear to work, though the message still appears. There has been no official response yet. When any news comes out this news thread will be updated.

---

Update: The Internet Archive has been taken offline as of 5:30pm

Twitter account Sn_darkmeta is claiming responsibility for the outage (as well as past outages), citing that they started the attach because of the American government's association with Israel.

They are under attack because the archive belongs to the USA, and as we all know, this horrendous and hypocritical government supports the genocide that is being carried out by the terrorist state of “Israel”.

IA has been actively working on preserving Palestinian history, as IA's Jason Scott outlined in his twitter thread. This attack is completely contradictory to the attacker's values and makes no sense (assuming Sn_darkmeta is actually involved).

---

At 5:50pm Brewster Kahle made a twitter post acknowledging the DDoS attack, however there was no comment on the security breach.

---

This has now been confirmed to be a breach. Thank you @SylverReZ for dropping the article link.
https://www.bleepingcomputer.com/ne...-hacked-data-breach-impacts-31-million-users/

 

[lordelan]

Unfortunate. (┬┬﹏┬┬)
To avoid anything like this happening to you, please use proper security practices!

BitWarden + randomized password (different for any website/app/login) = problem solved

 

[Yokimari]

They're straight up getting roasted by both sides of the issue, Pro-Palestine and Pro-Israel are both calling these guys out, what a way to bring people together BlackMeta.

 

[SecureBoot]

elon should perma ban that account for terrorism, they have no right to free speech on his platform.. period

I don't think you know what free speech means. Just like elon

 

[AndorfRequissa]

Sorry, they aren't listening. The repetitive jokes contribute nothing and only make threads unbearable to read because you have to filter out all the useless garbage.


???

this isnt a political forum so the only thing i will say is that hacking to get information on whose behind uploading specific content to be preserved on the internet archive is a goldmine for those who live with authoritarianism in their blood. if people are uploading stuff to preserve gaza history that mi6, mossad, CIA want to stop or to know locations and names of whose actually doing it this hack gave them critical information that they needed. at face value im sure i sound crazy to you.

this isnt a political forum and it would take alot of explaining to make people understand what goes into creating kill lists that israel and other powers have used when AI and drones have been implemented into this war. some of this is public knowledge that i am not going to get into your going to have to extrapolate, do your own research, think, and make ur own opinion.

 

[ZeroFX]

Of course an online terrorism attack came from the terrorist country wannabe supporters :/. Internet archive as censored as it is sometimes, is and should be declared officially, humanity patrimony lmao.

 

[slice]

explains why i'm having trouble installing mods onto my wii today

 

[console]

I'm lucky don't have account on Internet Archive. Thanks to god!

 

[J-Will]

I also got pwned

 

[HUNTERFOX]

Damn, whats next

 

[Xalusc]

Of course an online terrorism attack came from the terrorist wannabe country supporters :/. Internet archive as censored as it is sometimes, is and should be declared officially, humanity patrimony lmao.

They're allegedly against the terrorist wannabe country, though

 

[JuanMena]

Genuine question: If my "data got pwned" in there, should I change all my other passwords?

I just did an account literally a week ago after finding out some files were locked for non-registered users.

 

[ZeroFX]

They're allegedly against the terrorist wannabe country, though

They're pro poolestine. And before you start a tantrum i couldn't care less for that part of the world.

 

[PrincessLillie]

Genuine question: If my "data got pwned" in there, should I change all my other passwords?

I just did an account literally a week ago after finding out some files were locked for non-registered users.

Only if you reused the same password for other sites. (YOU SHOULD NEVER DO THIS!)

 

[ZeroFX]

Genuine question: If my "data got pwned" in there, should I change all my other passwords?

I just did an account literally a week ago after finding out some files were locked for non-registered users.

if you use the password in other accounts, specially with the same email combination, yeah. (YOU ARE ABLE TO DO THIS AND EVERYONE ELSE DOES)

 

[JuanMena]

Only if you reused the same password for other sites. (YOU SHOULD NEVER DO THIS!)

if you use the password in other accounts, specially with the same email combination, yeah. (YOU ARE ABLE TO DO THIS AND EVERYONE ELSE DOES)

Yeah, used an email that I had used in other sites... and asked ChatGPT to generate a password, so I'm not sure.
I think I'll just delete the email address altogether.

 

[ZeroFX]

Yeah, used an email that I had used in other sites... and asked ChatGPT to generate a password, so I'm not sure.
I think I'll just delete the email address altogether.

you don't need to delete the email, just separate one email for personal stuff and one for random sites if you'd like to keep it out of a spam list, this one will definitely enter a few now xP

 

[MayorBryce]

Then again people are going to buy alarmo...

Please tell me what this has to do with the current topic.

 

[JuanMena]

you don't need to delete the email, just separate one email for personal stuff and one for random sites if you'd like to keep it out of a spam list, this one will definitely enter a few now xP

Kidding you not, I already have like 6 different Gmail accounts and 2 Hotmail ones.
I stupidly used the Gmail account I have in my smartphone because I was lazy and didn't felt like turning on my lap to click the classic confirmation email.

From now on I'm going to use 10 minute mails for everything.

Now I have to think how am I going to manage my accounts as I'm noticing I have important sites under the same IA mail... goddamnit.

 

[kijetesantakalu042]

Please tell me what this has to do with the current topic.

I think he clicked on the wrong thread

 

[SecureBoot]

Kidding you not, I already have like 6 different Gmail accounts and 2 Hotmail ones.
I stupidly used the Gmail account I have in my smartphone because I was lazy and didn't felt like turning on my lap to click the classic confirmation email.

From now on I'm going to use 10 minute mails for everything.

Now I have to think how am I going to manage my accounts as I'm noticing I have important sites under the same IA mail... goddamnit.

Your email probably isn't compromised if you didn't use the same password here as you use for your email account. You're probably fine to keep using that email