Archive of Our Own (AO3) remains in a major outage as of Wednesday, November 4, 2026, after its nonprofit operator, the Organization for Transformative Works (OTW), said it detected evidence of a security incident.
AO3’s homepage describes the service as a nonprofit, non-commercial archive for transformative fanworks and lists 83,000 fandoms, 12 million users and 18.8 million works. That scale makes the outage a major disruption for readers, writers and fan communities that rely on the archive for publishing, bookmarking, search and access to existing works.
What OTW has confirmed
OTW’s public status page shows the outage began on October 29. All times below are UTC.
October 29, 07:13: OTW reported that AO3 was down for maintenance.
October 29, 09:03: OTW said maintenance was in progress and expected to take at least 12 hours.
October 29, 17:41: OTW estimated service restoration would take around two weeks, with four weeks possible, and said a degraded version of the site might return sooner.
October 30, 01:27: OTW said it had detected evidence of a security incident and was still determining the scope.
The organization says AO3 will remain down while it investigates and addresses what has been found.
The same status page shows a separate AO3 incident on October 23 and 24 involving delayed emails, history, search, challenge matching, work and bookmark listings, and other background functions. That earlier issue was marked resolved. OTW has not publicly connected it to the current security incident, so the two should not be treated as the same event without further confirmation.
No content deletion reported, but account risk remains unresolved
The clearest reassurance from OTW is about content loss. The organization says no AO3 data has been deleted and that works, bookmarks and kudos are safe.
The unresolved question is account data. OTW says it does not currently believe the user database was stolen, but it cannot rule that out. If that database was exposed, the information may include usernames, email addresses, IP addresses and hashed passwords.
OTW says AO3 passwords are stored in a scrambled form that cannot easily be reversed. Even so, weak or reused passwords can still create risk if attackers obtain hashed passwords and try to crack them.
OTW also says AO3 does not collect real names, so real names could not be exposed through the AO3 database. Donor information is held in a separate system and is not linked to AO3, according to the organization.
The practical security lesson is password reuse
If an AO3 password was reused on another service, OTW recommends changing it there while AO3 remains unavailable. The Canadian Centre for Cyber Security gives the same general guidance for compromised accounts: use a unique password or passphrase for every account, enable multi-factor authentication where possible and use a password manager if needed.
Credential-stuffing attacks do not require a fresh breach at every service. If attackers get a working email and password pair from one site, they can try the same combination elsewhere.
Account actions should stay inside official AO3 and OTW channels. OTW has directed users to its official outlets for updates and has not announced an alternate login process. Any email, direct message or search result claiming to offer a separate AO3 login path should be treated cautiously unless OTW confirms it.
Recovery may arrive in stages
OTW has said AO3 may come back in a degraded state, which could mean missing features, read-only access or further downtime while recovery continues.
Measured from the October 30 security update, the two-week mark falls on November 13 and the four-week mark falls on November 27. That calculation is only a reading of OTW’s public estimate. The organization could revise the timeline as the investigation develops.
Get new small business insights by email
Practical ideas and useful articles to help you make better business decisions.
Tech Help Canada Staff researches, writes, and reviews practical content for business owners and professionals. Our coverage spans business, marketing, SEO, technology, and the tools and systems people use to grow and operate online. We focus on clear, useful information backed by research, hands-on experience, and editorial review. Learn more about our team and editorial standards. Need help with something? Contact Us
