• News
    • Tech News
    • AI
  • Gadgets
    • Apple
    • iPhone
  • Gaming
    • Playstation
    • Xbox
  • Science
    • News
    • Space
  • Streaming
    • Netflix
  • Vehicles
    • Car News
  • Social Media
    • WhatsApp
    • YouTube
  • Advertise
  • Terms
  • Privacy & Cookies
  • LADbible Group
  • LADbible
  • UNILAD
  • SPORTbible
  • GAMINGbible
  • Tyla
  • FOODbible
  • License Our Content
  • About Us & Contact
  • Jobs
  • Latest
  • Topics A-Z
  • Authors
Facebook
Instagram
X
TikTok
Snapchat
WhatsApp
Submit Your Content
'Catastrophic' security breach as 31,000,000 passwords are stolen in Internet Archive hack

Home> News> Tech News

Published 16:57 10 Oct 2024 GMT+1

'Catastrophic' security breach as 31,000,000 passwords are stolen in Internet Archive hack

It's time for another password change

Rosalie Newcombe

Rosalie Newcombe

The Internet Archive Wayback Machine is a fundamental area of the Internet as we know it.

With some of the biggest search engines being almost unusable, or now just regurgitating AI slop, being able to find old pages, especially for sites that no longer exist, is a lifesaver.

Not to mention a great step forward in the effort of preservation.

Yes, even those Angelfire and Geocities fan sites of the 90s, with their low-resolution gifs and guestbook counters deserve to be preserved.

Advert

Sadly, just like any area of the internet, the Internet Archive isn’t free of being at the mercy of nonsense hackers.

As of typing, the Internet Archives Way Back Machine has been the target of a DDoS attack, and around 31 million passwords have been compromised.

The DDoS (Distributed Denial of Service) attack was confirmed by Internet Archive founder Brewster Kahle on October 10th, 2024. Kahle took to X (formerly Twitter) to update fans, and internet users alike and state that the website had been ‘defaced’ via a JavaScript library.


The attack was first discovered by visitors of the Way Back Machine on Wednesday October 9th. Those who visited the site were greeted with a JavaScript pop-up which read, 'Have you ever felt like the Internet Archive runs on sticks and is constantly on the verge of suffering a catastrophic security breach? It just happened. See 31 million of you on HIBP!'

Advert

The 'HIBP' acronym, in this case, likely refers to the site 'Have I been Pwned', a website which anyone can use to look up if their own personal date had been involved in a cyberattack.

As reported by Forbes, Founder of HIBP, Troy Hunt had reported to Bleeping Computer, that the hacker shared a databse with them containing 6.4GB worth of data.

The stolen data contains a timestamp of September 28th, 2024, a clue to when the data may have been stolen. (Witthaya Prasongsin via Getty images.)
The stolen data contains a timestamp of September 28th, 2024, a clue to when the data may have been stolen. (Witthaya Prasongsin via Getty images.)

This data consisted of info for registered members of the Internet Archive Way Back Machine, including email addresses, screen names, password change timestampes, Bcrypt-hashed password and 'other internal data'.

Advert

It was here, to Bleeping Computer, that Hunt confirmed that 31 million email addresses, were involved in the breach.

As of typing, the pop up no longer exists. In fact, the entire Internet Archive Way Back Machines is currently not even functional.

Kahle states that those behind the DDoS attack have knocked both archive.org and openlibrary.org, offline. To be 'cautious', Internet Archive is prioritising keeping any data safe, and is also currently not available.

Internet Archive founder, Brewster Kahle, is posting updates on the databreach as it unfolds. (Westend61 via Getty images.)
Internet Archive founder, Brewster Kahle, is posting updates on the databreach as it unfolds. (Westend61 via Getty images.)

Advert

If you're worried about your data, or want to keep up to date on the situation, Kahle stated he will 'share more' about the situation as it unfolds on his X account.

You can also check if your data has been affected by checking your email on the Have I Been Pwned website.

Featured Image Credit: Internet Archive/boonchai wedmakawand via Getty images
Cybersecurity

Advert

Advert

Advert

Choose your content:

12 hours ago
14 hours ago
17 hours ago
  • Bloomberg / Contributor / Getty
    12 hours ago

    People label Elon Musk 'a dangerous sociopath' following his latest move against Wikipedia

    Many have criticized Musk's new AI-powered invention

    News
  • Bloomberg / Contributor / Getty
    14 hours ago

    Biohacker millionaire spending $2,000,000 a year reveals best way to drink coffee to increase your lifespan

    Where would you be without your morning cup of joe?

    Science
  • Stefano Guidi / Contributor via Getty
    14 hours ago

    Zohran Mamdani's one law that could leave Jeff Bezos' $254,000,000,000 net worth seriously damaged

    The Amazon overlord could soon feel the pinch

    News
  • Andrew Harnik / Staff / Getty
    17 hours ago

    CIA director confirms Donald Trump is right about secret Russian and Chinese nuclear tests in shocking statement

    Two key figures have supported Trump's claims

    News
  • Experts urge people to act fast as 19,000,000,000 passwords are leaked in major hack
  • Urgent warning issued to public as 16,000,000,000 passwords are leaked in 'biggest data breach ever'
  • Horrifying report reveals 14,000 US security cameras are livestreaming creepy footage to the entire internet
  • Everything Gmail users need to know as major password hack sees millions of accounts breached