Internet Archive leaks 31 million users’ info and succumbs to DDoS

In Data Breach News
October 10, 2024

31 million users’ usernames, email addresses and salted-encrypted passwords are out there

The Register reports:

The Internet Archive had a bad day on the infosec front, after being DDoSed and exposing user data.

On Wednesday afternoon US time the outfit’s digital library Brewster Kahle revealed a DDoS attack had made the site unavailable. The Register understand the outage may have lasted up to five hours, during which time visitors saw only a notification of the incident.

While that was happening, data leak notification service haveibeenpwned (HiBP)posted news of a leak that saw 31,081,179 users’ accounts exposed. Register staff received mails from HIBP that state “The breach exposed user records including email addresses, screen names and bcrypt password hashes.”

Read more at The Register.