AO3 goes offline after security incident, says user database theft can't be ruled out

moyix · x · 2026-10-30

AO3 (Archive of Our Own) published a maintenance notice confirming a security incident detected earlier in the day, with the site staying down while the team investigates.

Key points: no works, bookmarks, or kudos were deleted; the org doesn't currently believe the user database was stolen but cannot rule it out — the database holds usernames, emails, IP addresses, and hashed passwords. Users are advised to change passwords, especially weak or reused ones.

Original post →

More from Safety

Safety channel →