AO3 Shuts Down for Weeks After Security Breach

Millions of fan-fiction readers and writers face an extended disruption after Archive of Our Own (AO3), one of the world's largest fan-fiction platforms, announced plans to suspend its services for maintenance for up to a month. The nonprofit-operated website disclosed a security incident this week and is investigating how an attacker gained access.

AO3 contains approximately 18.8 million works spanning 83,000 fandoms, according to figures cited by The New York Times. Its stories draw inspiration from books, movies, television programs and public figures, including members of K-pop groups.

The platform serves approximately 12 million users and is operated by the Organization for Transformative Works, a nonprofit organization supported entirely by volunteers. Its extended downtime follows the discovery of unauthorized access to its systems.

Rebecca Tushnet, a founder of the Organization for Transformative Works, confirmed the intrusion in an interview on Friday, October 30. She said the volunteer team was investigating the incident and working to secure the platform.

There had been "an intrusion," said Rebecca Tushnet, a founder of the Organization for Transformative Works.

Tushnet described the immediate priority as identifying the security weakness and ensuring the attacker could no longer exploit it.

"Figure out the path that the attacker used and make sure that it's been removed," said Tushnet.

The confirmation followed an announcement published on AO3's Tumblr page a day earlier. The platform said its team had identified signs of a security problem but had not yet established the full extent of the incident.

"Detected evidence of a security incident," AO3 said in its Tumblr announcement.

The organization also said its investigation was ongoing, with the scope of the incident still under review.

"Determining its scope," AO3 said about the ongoing investigation.

Despite the security concerns, the platform reassured users that their published stories and other saved information remained intact. The announcement specifically addressed works, bookmarks and user appreciation records.

"All your works, bookmarks, kudos, etc., are safe," AO3 said in its announcement.

The prospect of a shutdown lasting several weeks has also affected access to archived versions of the website. Users have increasingly turned to the Internet Archive's Wayback Machine to retrieve previously recorded snapshots of AO3.

Mark Graham, director of the Wayback Machine, said an outage of this duration was exceptionally unusual for an online service.

"Nearly unheard-of," Graham said in an email, describing the prospect of such an extended interruption.

The increased demand has also placed additional pressure on the digital archive, which preserves snapshots of hundreds of websites across the internet every day.

"Putting a heavy load on the Wayback Machine," Graham said, describing the increased traffic to archived versions of AO3.

Mehdi Daoudi, an internet resilience expert at infrastructure monitoring company LogicMonitor, said service interruptions can have multiple causes. However, most disruptions typically last between a few minutes and several hours, making AO3's potential monthlong maintenance period considerably longer than ordinary outages.