Archive of Our Own, the fanfiction library commonly known as AO3, remains offline after its operators discovered evidence of a security incident. The Organization for Transformative Works (OTW) said on October 30 that it was still investigating what happened and could not yet rule out possible exposure of its user database. It expects restoration to take at least two weeks and possibly four. For people who use the site for anime fanfiction, gaming stories and sprawling fandom archives, the most important news is both reassuring and unfinished: OTW says the writing itself has not been deleted, but its investigation is not over.
AO3 has become part of fandom infrastructure rather than merely another social website. Stories, comments, bookmarks and collections can represent years of voluntary creative work. When access disappears, users lose their reading lists and authors lose the usual route to their audience. That is why separating a service outage from confirmed data loss is essential. The organisation has explicitly said existing works, bookmarks and kudos remain safe in its records.
What AO3 has confirmed about the incident
The outage began with maintenance notices on October 29. OTW subsequently stated it had found evidence of a security incident and was keeping the archive offline while determining its scope. In its October 30 update, the organisation said it did not currently believe the user database had been stolen, but also could not exclude that possibility. That is not confirmation of a leak; it is a statement that investigators had not reached a conclusion.
The database may contain account usernames, email addresses, IP addresses and hashed passwords. A password hash is not a plain-text password, but weak or reused passwords can still pose risks if account data becomes exposed. OTW says it uses industry-standard password-storage techniques, and it advises members to change passwords at other sites where they reused their AO3 password. It also says donor information is maintained separately and is not linked to AO3 user records.
How long will AO3 be down?
OTW's current expectation is a minimum of about two weeks, with a possible four-week interruption. It may bring the archive back in a limited or read-only state before full service is restored, and a partial reopening could be followed by further shutdowns while repairs continue. No exact return date has been promised. A viral post claiming the archive is permanently gone or will reopen at a specific hour should be compared with the official status page before it is repeated.
The outage page lists AO3 as experiencing a major outage, while other OTW projects may remain available. That does not imply they are substitutes for AO3, nor does it provide evidence that the wider organisation has lost its library. It simply describes which services are operating at the time of the check. The safest restoration source is the status site operated by OTW itself.
What users should do about their passwords
First, identify whether the password you used for AO3 was also used on email, gaming platforms, payment accounts or social networks. If so, change those other accounts' passwords now, especially your primary email account. Give each service a distinct password and enable its available multifactor authentication. A password manager can make that practical. This is useful precautionary advice, not a claim that attackers already possess your AO3 credentials.
Second, be cautious about emails, direct messages or look-alike websites promising early AO3 access, leaked archives or a special password reset. Security incidents attract opportunistic phishing attempts, and those messages can be harmful even when they have no connection to the original incident. Do not supply login details to unofficial mirrors. When AO3 returns, follow any additional instructions on its own authenticated pages rather than relying on screenshots shared through social platforms.
Are fanfiction works and bookmarks lost?
According to the organisation's statement, no AO3 works, bookmarks or kudos have been deleted. That is an assurance about the status of stored content, not proof that every feature is already accessible. Search indexes, email notifications and background processing can lag even after the main website comes back. Authors should avoid rushing to recreate works elsewhere based on rumours that an inaccessible page has been wiped; duplicate posting is a separate personal choice, not an emergency required by the evidence presently available.
The outage also reveals how much online creative culture depends on volunteer-run infrastructure. AO3 offers an unusually large archive without the corporate incentives that shape mainstream content feeds. Its continued availability matters to gaming, anime and book fandoms alike. For now, there is no confirmed date or final breach report. We will update this article from OTW's direct statements rather than from social-media countdowns.
