Internet Archive data theft

Internet Archive users found a message on October 3rd when they logged on to the service, warning that 31 million of them had been hacked and that they will appear on the Have I Been Pwned Portal (HIBP), a website where users can check if their credentials for various websites have been breached.

Troy Hunt, creator of HIBP, confirmed receiving a 6.4GB SQL file with 31 million records from the Internet Archive, containing email addresses, names and password information, among other data, with the date of the last user being September 28th, considered to be the date of the data theft. Several days after it was made public, Brewster Kahle, creator of the Internet Archive, confirmed the security breach in a tweet.

Disabling the JS library, debugging systems and increasing security were the actions taken by Internet Archive to prevent another incident from happening again. However, as of October 10th, Internet Archive was without service, due to a new DDoS attack against the platform, and, according to Brester Kahle, it was decided to stop the service in order to protect the information.