Internet Archive
Disclosed Oct 9, 20241 year ago31,081,179 affectedConfirmed
Internet Archive hacked, user database of 31 million accounts stolen
Attackers defaced archive.org and stole a user authentication database with about 31 million unique records including email addresses, screen names and bcrypt password hashes; founder Brewster Kahle confirmed the breach. The site was taken offline for several days and was breached again later in October through stolen access tokens.
What is known
| People affected | 31,081,179 (as reported by the organization) |
|---|---|
| Disclosed | Oct 9, 2024 |
| Happened | Sep 28, 2024 |
| Attack | Hacking |
| Data exposed | Emails, Passwords, Names |
| Sector | Nonprofit · US |
| Status | Confirmed |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: Internet Archivehaveibeenpwned.com · Aggregator | Aggregator |
| Internet Archive hacked, data breach impacts 31 million usersbleepingcomputer.com · News | News |
| The Internet Archive is under attack, with a breach revealing info for 31 million accountstheverge.com · News | News |
| Indiana Attorney General 2025 data breach report: Internet Archivein.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Have I Been Pwnedaccounts in the data | Oct 9, 2024 | 31,081,179 |
| Researchtotal | Oct 9, 2024 | 31,081,179 |
| Indiana AGresidents of IN | Jan 6, 2025 | 1 |
History of this record
- 2026-09-25 · source_type: press to official · backfill source
- 2026-09-25 · source_url: https://www.bleepingcomputer.com/news/security/internet-archive-hacked-data-breach-impacts-31-million-users/ to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdf · backfill source
- 2026-09-25 · status: disclosed to confirmed · backfill source
- 2026-09-25 · verified_by: empty to in-ag · backfill source
- 2026-09-25 · verified: 0 to 1 · backfill source
- 2026-09-25 · source_type: aggregator to press · seed source
- 2026-09-25 · source_url: https://haveibeenpwned.com/Breach/InternetArchive to https://www.bleepingcomputer.com/news/security/internet-archive-hacked-data-breach-impacts-31-million-users/ · seed source
- 2026-09-25 · country: empty to US · seed source
- 2026-09-25 · sector: tech to nonprofit · seed source
- 2026-09-25 · attack: unknown to hacking · seed source
- 2026-09-25 · data_types: ["emails","passwords"] to ["emails","passwords","names"] · seed source
- 2026-09-25 · records_basis: hibp to organization · seed source
- 2026-09-25 · summary: In September 2024, the digital library of internet sites Internet Archive suffered a data breach that exposed 31M records . The breach exposed user records including email addresses, screen names and bcrypt password hashes. to Attackers defaced archive.org and stole a user authentication database with about 31 million unique records including email addresses, screen names and bcrypt password hashes; founder Brewster Kahle confirmed the breach. The site was taken · seed source
- 2026-09-25 · title: empty to Internet Archive hacked, user database of 31 million accounts stolen · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned), confirmed by Indiana AG. Record counts are as reported. Not legal advice.