DDoS Attack And Data Breach Affects 31 Million Internet Archive Users
In today’s connected world, safeguarding user data is of paramount importance, especially for platforms that store sensitive information. The recent cyberattacks on the Internet Archive highlight the need for enhanced cybersecurity controls. As a non-profit digital library, the Internet Archive offers free access to millions of users globally. However, it recently experienced a significant breach affecting over 31 million users and a series of Distributed Denial of Service (DDoS) attacks.
A pop-up message on the website following the breach warned users about the security issues: "Have you ever felt like the Internet Archive runs on sticks and is constantly on the verge of suffering a catastrophic security breach? It just happened. See 31 million of you on HIBP!" "HIBP" refers to the platform "Have I Been Pwned," a service that helps individuals check if their personal data has been compromised in a breach.
The breach occurred around September 30, 2024, and compromised a 6.4GB SQL file containing sensitive user information such as email addresses, screen names, password timestamps, and encrypted passwords. According to Troy Hunt, the creator of HIBP, about 54% of this data had already been compromised in previous incidents. Hunt also shared that the Internet Archive had been working to mitigate the damage from the breach when the DDoS attack and defacement occurred.
The hacktivist group BlackMeta claimed responsibility for the attack, stating that their actions were politically motivated. In posts on social media, they criticized the Internet Archive, describing the organization’s services as harmful due to its U.S. connections.
This breach raises the question: Should platforms that store private user data be subject to more stringent cybersecurity standards? Cybersecurity isn’t just an option—it’s a necessity in today's digital landscape. Without stronger security measures, even well-intentioned platforms like the Internet Archive remain vulnerable to serious breaches that can erode trust and endanger user privacy.

Comments
Post a Comment