AO3 says there may have been a security breach exposing user data
- Status
- Unverified: only social posts report this so far
- Kind
- Breach
- Vendor
- AO3
- Product
- Archive of Our Own
- First seen
Summary
AO3 posted a PSA on Bluesky saying there may have been a security breach and that data such as IP addresses, usernames, and emails may be implicated. The post says no fics or comments have been lost and estimates 2-4 weeks for site restoration.
If you use AO3
Change your AO3 password and any other password reused on it
Watch for phishing emails or messages that reference AO3 or account verification
Enable two-factor authentication on your email account
Follow AO3's official channels for confirmed details and restoration updates
Change your AO3 password, especially if reused elsewhere
Review your account for unexpected activity or changes
What the sources say 6
· Bluesky: “There may have been a security breach at AO3” Source
· Bluesky: “They have detected evidence of a ‘security incident’ however they are confident that account history intact and do not believe data has been stolen, but are not ruling out the possibility.” Source
· Bluesky: “Looks like the popular fanfic website AO3 has been breached.” Source
· Bluesky: “So, AO3 is dealing with a security incident.” Source
· Bluesky: “AO3 shared its site might have experienced a data breach, leaving their users’ information vulnerable.” Source
· Bluesky: “The Ao3 security incident was my fault, I was trying to delete all the stuff I find morally objectionable” Source