Overview of the Incident

The Internet Archive, known for its Wayback Machine, has suffered a significant data breach affecting 31 million users. This breach was confirmed following a JavaScript alert that appeared on the site, stating, “Have you ever felt like the Internet Archive runs on sticks and is constantly on the verge of suffering a catastrophic security breach? It just happened. See 31 million of you on HIBP!”. The site is currently offline as a result of this incident.(Internet Archive Hack Exposes 31 Million Users’ Data)

Details of the Breach

The compromised data includes sensitive information such as email addresses, usernames, and Bcrypt-hashed passwords. The database file, named “ia_users.sql,” is reported to be approximately 6.4GB in size and was shared by the threat actor about a week and a half ago. Troy Hunt, the founder of the data breach notification service Have I Been Pwned (HIBP), confirmed that he received the stolen data on September 30, 2024, and uploaded it to his site on October 9.(Internet Archive Hack Exposes 31 Million Users’ Data)

Ongoing Security Threats

In addition to the data breach, the Internet Archive has faced multiple DDoS attacks, which aim to overload the website with traffic and disrupt access for legitimate users. Brewster Kahle, founder of the Internet Archive, reported that these attacks have caused significant downtime for the site since Tuesday. The second DDoS attack occurred shortly after the breach was announced.

User Recommendations

All registered users of the Internet Archive are advised to change their passwords immediately to protect their accounts from potential misuse. HIBP allows individuals to check if their email addresses have been compromised in this breach .

Context and Implications

This incident highlights ongoing cybersecurity challenges faced by prominent online platforms. The Internet Archive plays a crucial role in preserving digital content and providing access to historical web pages. However, it now grapples with both security vulnerabilities and potential legal issues related to copyright disputes.The situation remains fluid as the Internet Archive works to restore its services while enhancing security measures to prevent future breaches.