Internet Archive

Disclosed Oct 9, 202431,081,179 affectedConfirmed

Internet Archive hacked, user database of 31 million accounts stolen

Attackers defaced archive.org and stole a user authentication database with about 31 million unique records including email addresses, screen names and bcrypt password hashes; founder Brewster Kahle confirmed the breach. The site was taken offline for several days and was breached again later in October through stolen access tokens.

What is known

People affected	31,081,179 (as reported by the organization)
Disclosed	Oct 9, 2024
Happened	Sep 28, 2024
Attack	Hacking
Data exposed	EmailsPasswordsNames
Sector	Nonprofit · US
Status	Confirmed
Check your email	Have I Been Pwned

Sources

Aggregatorhaveibeenpwned.com

Have I Been Pwned: Internet Archive

Newsbleepingcomputer.com

Internet Archive hacked, data breach impacts 31 million users

Newstheverge.com

The Internet Archive is under attack, with a breach revealing info for 31 million accounts

Official noticein.gov

Indiana Attorney General 2025 data breach report: Internet Archive

Notices filed

Accounts in the dataOct 9, 2024

Have I Been Pwned31,081,179 people

TotalOct 9, 2024

Research31,081,179 people

Residents of INJan 6, 2025

Indiana AG1 person

History of this record

source_type2026-09-25

press to officialby backfillSource

source_url2026-09-25

https://www.bleepingcomputer.com/news/security/internet-archive-hacked-data-breach-impacts-31-million-users/ to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdfby backfillSource

status2026-09-25

disclosed to confirmedby backfillSource

verified_by2026-09-25

empty to in-agby backfillSource

verified2026-09-25

0 to 1by backfillSource

source_type2026-09-25

aggregator to pressby seedSource

source_url2026-09-25

https://haveibeenpwned.com/Breach/InternetArchive to https://www.bleepingcomputer.com/news/security/internet-archive-hacked-data-breach-impacts-31-million-users/by seedSource

country2026-09-25

empty to USby seedSource

sector2026-09-25

tech to nonprofitby seedSource

attack2026-09-25

unknown to hackingby seedSource

data_types2026-09-25

["emails","passwords"] to ["emails","passwords","names"]by seedSource

records_basis2026-09-25

hibp to organizationby seedSource

summary2026-09-25

In September 2024, the digital library of internet sites Internet Archive suffered a data breach that exposed 31M records . The breach exposed user records including email addresses, screen names and bcrypt password hashes. to Attackers defaced archive.org and stole a user authentication database with about 31 million unique records including email addresses, screen names and bcrypt password hashes; founder Brewster Kahle confirmed the breach. The site was taken by seedSource

title2026-09-25

empty to Internet Archive hacked, user database of 31 million accounts stolenby seedSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned), confirmed by Indiana AG. Record counts are as reported. Not legal advice.

Everything about Internet Archive