In late September 2024, a 6.4 GB SQL file containing login details for users of the website web.archive.org was released publicly. The file contained email addresses, usernames, hashed passwords (using Bcrypt), timestamps, and other internal information. The last timestamp in the data is September 28, 2024, suggesting that the attack occurred then.

Cybersecurity expert Troy Hunt reported that the data would be added to the Have I Been Pwned (HIBP) service so that users could see if their data had been leaked. Hunt tried to contact the Internet Archive, but did not receive a response. After 72 hours, as previously announced, he released the information about the leak, allowing users to verify if their data had been stolen.

Check if your data was breached: https://haveibeenpwned.com/

Source: sekurak.pl i tabletowo.pl