Internet Archive Resumes Partial Access After Cyberattack Exposes Millions of User Records

The Internet Archive Restores Partial Access After Major Cyberattack Exposes 31 Million Accounts

The Internet Archive and Wayback Machine return in read-only mode as staff work to secure systems after a breach revealed millions of user records.

The Internet Archive, a staple of digital preservation, experienced a major cyberattack on October 9 that forced the site offline. The incident, which included both a data breach and a Distributed Denial of Service (DDoS) attack, has left millions questioning the security of this essential platform. In response, the Archive is now back online but limited to “provisional, read-only” access, leaving many wondering: What really happened, and what’s next?

Key Points at a Glance:

• Attack Date: October 9, 2024
• Data Compromised: 31 million unique records, including email addresses, screen names, and hashed passwords
• Current Status: Read-only access for users, capturing new content remains disabled
• Why It Matters: The Internet Archive is a critical digital resource, preserving over 916 billion web pages, historical records, and cultural artifacts.

How Did the Attack Unfold?

The Internet Archive, which hosts everything from vintage web pages to academic resources, was hit by a cyberattack described by the hackers as a “catastrophic security breach.” The attack included a DDoS attempt that overwhelmed the platform’s servers, effectively forcing it offline. In the aftermath, Have I Been Pwned confirmed the hackers’ claims, revealing the scale of the breach: approximately 31 million user records were exposed, including email addresses, hashed passwords, and other personal identifiers.

Brewster Kahle, founder of the Internet Archive, described the incident as an opportunity to reinforce the Archive’s defenses. He cautioned that while the site is accessible again, it could undergo further maintenance-related suspensions. The Archive team has been gradually restoring services, including staff email accounts and its web crawlers for national libraries. Kahle emphasized that the priority is securing the platform before it fully reopens.

Access Restored, But With Limitations

Users can now visit the Internet Archive and access much of its content library, but the platform is in a “read-only” mode, meaning that you can search its 916 billion archived pages but can’t add new pages to the collection. It’s a temporary measure, one aimed at safeguarding user data and preventing further breaches.

While it may be inconvenient for those who rely on the Archive to document and save web content, this restricted mode is necessary as the organization assesses and reinforces its security infrastructure. Users are encouraged to be patient, though Kahle indicated that full service restoration will come in phases.

A Growing Dependence on Digital Archives—and Their Vulnerabilities

This cyberattack comes at a time when the Wayback Machine has become more integral to internet users. Recently, Google began linking directly to archived content on the Wayback Machine in its search results, making it an essential tool for accessing older versions of web pages. The move followed Google’s decision to remove its own cached pages, further consolidating the Archive’s role as a go-to resource for historical web data.

The timing of the outage underscores how much the public relies on the Internet Archive to preserve web history. For journalists, researchers, and casual users alike, the Wayback Machine is often the last line of defense against lost information. But this attack highlights a troubling reality: as essential as it is, the Archive is just as susceptible to threats as any other online service. The breach not only compromised user data but also temporarily halted access to a vast repository of digital history.

The Bigger Question: How Do We Secure Digital History?

The Internet Archive’s cyberattack raises some crucial questions about data security in the digital archiving world. As more of our history is stored online, should we be relying on centralized platforms to safeguard our digital heritage? The incident has sparked conversations about whether a decentralized approach to archiving could offer better security and resilience against attacks.

For now, Kahle and his team are focusing on bolstering the Archive’s defenses. Still, the recent breach underscores the need for broader strategies to protect digital history from cyber threats.

Protecting Yourself Amidst the Fallout

For the 31 million affected users, this incident serves as a reminder of the importance of good data hygiene. If you’ve used the Internet Archive, consider these steps:

• Change Your Password: It’s essential to update your password on the Archive site and any other sites where you used the same password.
• Enable Two-Factor Authentication (2FA): This adds an extra layer of security, reducing the risk of unauthorized access.
• Check for Exposure: Sites like Have I Been Pwned can help you determine if your email address or other personal information was compromised.

Moving Forward: Strengthening the Internet Archive

The Internet Archive has resumed its mission to make historical content accessible, but it faces a hard road ahead. Digital libraries hold an incredible wealth of information, and as this incident shows, they’re not immune to the threats plaguing other sectors of the internet. In the meantime, Kahle assures the public that his team is dedicated to restoring trust by strengthening the Archive’s security.

The breach has left many of us reflecting on the fragility of digital preservation. As users, we need to advocate for better cybersecurity measures, both to protect our data and to ensure the preservation of history. The Internet Archive is a valuable resource, but as we’ve seen, it’s one that requires our vigilance and support to keep safe.