Bluesky user reports AO3 security incident with possible multi-week downtime
- Status
- Unverified: only social posts report this so far
- Kind
- Security outage
- Vendor
- AO3
- Product
- Archive of Our Own
- First seen
Summary
A Bluesky post claims AO3 is dealing with a security incident that could keep the site down for up to four weeks. The poster links it to a PHP vulnerability disclosed the previous week, but the post does not confirm the cause or any breach.
If you use AO3
Check AO3's official announcements for confirmed status and timelines
Change your AO3 password if you reuse it elsewhere
Be cautious of emails or messages claiming to be from AO3 that ask for credentials
Check AO3's official announcements or status channels for confirmed details
Watch for further notices before logging in or entering account credentials
Change your AO3 password and any reused passwords if you later learn of a breach
What the sources say 11
· Bluesky: “ao3 has a security incident and might be down for *up to 4 weeks* and it seems to be related to the PHP vulnerability from last week...” Source
· Bluesky: “oof, AO3 is down due to a security incident. yikes.” Source
· Bluesky: “so I guess ao3 is down for the foreseeable future and they said something about a security issue?” Source
· Bluesky: “AO3 warned of a possible security incident, keeping the site offline for weeks while investigating, with no data deleted and user database theft unconfirmed.” Source
· Bluesky: “AO3 warned of a possible security incident, keeping the site offline for weeks while investigating, with no data deleted and user database theft unconfirmed.” Source
· Bluesky: “Popular fan fiction site AO3 might be offline for up to a month due to a recent security incident.” Source
· Bluesky: “AO3 temporarily shut down after a security incident, may take up to four weeks to restore, and users were urged to change passwords and exercise caution.” Source
· Bluesky: “AO3 temporarily shut down after a security incident, may take up to four weeks to restore, and users were urged to change passwords and exercise caution.” Source
· Bluesky: “The fanfic site could be down for weeks due to a “security incident.”” Source
· Mastodon: “Earlier today, we detected evidence of a security incident on AO3.” Source
· Bluesky: “Fan fiction site AO3 says it will be offline for two to four weeks after a security incident” Source