Archive of Our Own (AO3), a widely used fan-fiction platform operated by the nonprofit Organization for Transformative Works (OTW), is facing an extended outage due to a security incident. Initially taken offline for routine maintenance, the site now expects to remain inaccessible for potentially up to four weeks as the team investigates and addresses the issue. AO3’s status updates have sparked significant attention and concern, with millions viewing posts and users expressing anxious reactions on social media.

The OTW disclosed that while there is no confirmed breach of the user database, the possibility cannot be ruled out. The database contains sensitive information such as usernames, email addresses, IP addresses, and hashed passwords. AO3 uses industry-standard hashing methods to protect passwords but nonetheless advises users to change passwords on other platforms if they reused them elsewhere. The statement emphasized that the investigation into the incident is ongoing and the scope is still being determined.

Contrary to some speculation linking the incident to recent vulnerabilities discovered in PHP—an internet programming language impacted by recent security flaws dubbed “PHP Armageddon”—AO3 clarified that their platform runs on Ruby on Rails, and the outage likely does not relate to that issue. The nonprofit has relied heavily on volunteer efforts and donations to maintain the site, which hosts a passionately engaged user community.

As AO3 works through mitigation steps and recovery, the organization expressed hope to restore service more quickly in a limited capacity but cautioned that full restoration could take several weeks. Fans and users are advised to monitor the official AO3 status page for real-time updates and further communication. The OTW and AO3 have not provided additional comment beyond their public statements.