Internet Archive Suffers Major Data Breach and DDoS Attacks

Overview

• The data breach, which occurred around September 28, 2024, compromised email addresses, usernames, and bcrypt-hashed passwords.
• Hacking group SN_Blackmeta is suspected of being behind the DDoS attacks, although their involvement in the data breach remains unclear.
• Users were alerted to the breach through a defacement message on the site, prompting them to check for compromised data.
• Troy Hunt of Have I Been Pwned confirmed the breach and has integrated the stolen data into the HIBP database for user verification.
• The Internet Archive has taken steps to enhance security by disabling vulnerable JavaScript libraries and cleaning affected systems.