Internet Archive data breach overview:
- Who: Digital library Internet Archive suffered a data breach for the second time this month.
- Why: The latest data breach has been attributed to Internet Archive failing to rotate out all stolen API keys, leading to a breach of its Zendesk email support platform.
- Where: The Internet Archive data breach affected certain consumers nationwide.
Digital library Internet Archive reportedly suffered a data breach for the second time this month, with the latest incident compromising its Zendesk email support platform.
The latest data breach allegedly occurred after BleepingComputer reportedly warned Internet Archive its source code was stolen via a GitLab authentication token that had been exposed online for nearly two years.
The threat actor reportedly wrote in an email that it was “dispiriting to see” Internet Archive had not done its due diligence by rotating out all API keys that had been stolen, BleepingComputer reports.
The hacker claiming to be behind the initial data breach, meanwhile, reportedly told BleepingComputer they were able to breach Internet Archive after finding an exposed GitLab configuration file on one of its development servers that contained an authentication token that allowed them to download the Internet Archive source code. The incident exposed 31 million unique user records.
Exposed Internet Archive data reportedly included API access tokens for Zendesk support system
The initial hacker reportedly told BleepingComputer they stole 7 TB of data from Internet Archive and that the compromised source code contained additional credentials and authentication tokens, including to the company’s database management system, and that the credentials allowed them to modify Internet Archive’s site and download its user database and more source code.
The data stolen during the Internet Archive data breach included API access tokens for Internet Archive’s Zendesk support system, according to BleepingComputer.
A number of people sent messages to BleepingComputer to let the website know they received replies to old Internet Archive removal requests with a warning it was breached as a result of not correctly rotating stolen authentication tokens.
Were you affected by the Internet Archive data breach? Let us know in the comments.
Don’t Miss Out!
Check out our list of Class Action Lawsuits and Class Action Settlements you may qualify to join!
Read About More Class Action Lawsuits & Class Action Settlements:
6 thoughts onInternet Archive suffers second data breach within a month
Was notified .my information was leaked iduring this attack. Had to fight to get my Hulu back. Dumb me used same password on both sites.
Please add me, i was a part of this breach.
I received a notice from Internet Archive that my data has been leaked and compromised.
Yes, add me. Please and Thank You.
Please add me
Please add me