Techcrunch AO3 Fan Fiction Site Faces Extended Outage Due to Security Incident
Article Content
- •AO3 is expected to be offline for up to four weeks due to a security incident.
- •Users are advised to change passwords, especially if reused elsewhere, due to potential data compromise.
- •The outage significantly impacts a large community of over 11 million users and 18 million works.
The Archive of Our Own (AO3) fan fiction website has gone offline due to a security incident, with a potential downtime of up to four weeks. Initially reported as routine maintenance on October 29, the Organization for Transformative Works (OTW) later revealed that a security incident had occurred, prompting users to change their passwords. While no user data has been confirmed as stolen, the nonprofit organization has not ruled out the possibility of user information being compromised. AO3, which hosts over 18 million works and has more than 11 million users, is crucial to fan culture. Users are expressing distress over the outage, particularly as it coincides with significant fan events. OTW is still investigating the incident and will provide updates as more information becomes available.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (10)
Following this threat?
Track AO3 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What caused the AO3 outage?
Should I change my AO3 password?
When will AO3 be back online?
Continue Reading
Binance Hack: $6.3 Billion Stolen in Largest Crypto Heist On October 29, 2026, Binance, the world's largest cryptocurrency exchange, reported a major security incident involving an estimated $6.3 billion in stolen funds. The attack was attributed to a compromised laptop belonging to a DevOps engineer, allowing unauthorized withdrawal transactions. Approximately $3 billion in…
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…