NewsInternet Archive breach exposes data of millions of users

Internet Archive breach exposes data of millions of users

The Internet Archive is a project that collects archived versions of web pages. Its service has fallen victim to hackers, leading to the leak of data belonging to tens of millions of registered users, including their email addresses.

They hacked the "Internet Archive". Data of millions of people leaked.
They hacked the "Internet Archive". Data of millions of people leaked.
Images source: © Adobe Stock
Adam Sieńko

"Internet Archive services are temporarily offline. Please check our official accounts, including Twitter/X, Bluesky or Mastodon for the latest information. We apologize for the inconvenience," reads the message currently displayed to visitors of the Internet Archive website.

The Internet Archive, a non-profit organization, was established in 1996 by programmer Brewster Kahle. One of its most notable "products" is the "Wayback Machine," which allows users to see how websites appeared and what they contained in the past. It also stores copies of images and books, serving as a comprehensive "internet archive." Its resources include 700 billion different types of internet content.

Internet users' data leaked online

According to Bleeping Computer, the first to report the hacking attack, the user data leak happened at the end of September. Hackers released a file approximately 6.4 gigabytes in size online, containing data of registered users. Included are email addresses, passwords encrypted with Bcrypt, screen names, and other internal data.

The service writes that it's unknown how the threat actors broke into the Internet Archive or whether any other data was stolen.

Additionally, a few days ago, the Internet Archive was victimized by another hacker attack. This time it was a DDoS attack (a cyberattack involving multiple computers targeting a website simultaneously), reportedly carried out by the group BlackMeta.

"While the Internet Archive is facing both a data breach and DDoS attacks at the same, it is not believed that the two attacks are connected," emphasizes Bleeping Computer.

© Daily Wrap
·

Downloading, reproduction, storage, or any other use of content available on this website—regardless of its nature and form of expression (in particular, but not limited to verbal, verbal-musical, musical, audiovisual, audio, textual, graphic, and the data and information contained therein, databases and the data contained therein) and its form (e.g., literary, journalistic, scientific, cartographic, computer programs, visual arts, photographic)—requires prior and explicit consent from Wirtualna Polska Media Spółka Akcyjna, headquartered in Warsaw, the owner of this website, regardless of the method of exploration and the technique used (manual or automated, including the use of machine learning or artificial intelligence programs). The above restriction does not apply solely to facilitate their search by internet search engines and uses within contractual relations or permitted use as specified by applicable law.Detailed information regarding this notice can be found  here.