Archive.org, possibly one of the only entities to preserve the entire history of the Internet, was recently compromised in a hack that revealed data of roughly 31 million users.
A little after 2 PM California time, social media blew up with screenshots showing what the archive.org homepage displayed.
It read:
archive.org
Have you ever felt like the Internet Archive runs on sticks and is constantly on the verge of suffering a catastrophic security breach? It just happened. See 31 million of you on HIBP!

HIBP is short for "Have I been Pwned",
the authoritative site for breach notifications that help people protect their accounts after they've been compromised.
The message didn't last long.
Soon after it appeared, archive.org, when it loaded at all, displayed a message saying the site was temporarily down.
Later, the site returned. Archive.org's Brewster Kahle said on on a social media site that the archive had come under a DDoS attack.
Now, "Have I Been Pwnd" is reporting that archive.org was hacked.
HIBP said the compromise occurred last month and exposed 31 million records containing email addresses, screen names, and bcrypt-hashed passwords
arstechnica.com/information-te…

Internet Archive's "The Wayback Machine" has suffered a data breach after a threat actor compromised the website
and stole a user authentication database containing 31 million unique records.

News of the breach began circulating Wednesday afternoon after visitors to archive.org began seeing a JavaScript alert created by the hacker, stating that the Internet Archive was breached.

"Have you ever felt like the Internet Archive runs on sticks and is constantly on the verge of suffering a catastrophic security breach?
It just happened. See 31 million of you on HIBP!," reads a JavaScript alert shown on the compromised archive.org site.

The text "HIBP" refers to is the "Have I Been Pwned" data breach notification service created by Troy Hunt,
with whom threat actors commonly share stolen data to be added to the service.

Hunt told BleepingComputer that the threat actor shared the Internet Archive's authentication database nine days ago
and it is a 6.4GB SQL file named "ia_users.sql."

The database contains authentication information for registered members
-- including their email addresses, screen names, password change timestamps, Bcrypt-hashed passwords, and other internal data.
bleepingcomputer.com/news/secu…