The AO3 cyberattack has kept Archive of Our Own, the world’s largest fan fiction library, offline since Thursday 29 October 2026, leaving more than 11 million registered users locked out of nearly 18 million stories. The nonprofit Organization for Transformative Works, which runs the archive, said it found evidence of a security incident and expects the site to stay down for two to four weeks while it rebuilds.
The outage is now into its second week, and the archive’s own status page still lists the site as down for maintenance. Recovery work is under way, but no firm return date has been given, and the organisation has said it cannot rule out that its user database was stolen.
AO3 Cyberattack — Quick Reference Summary Table
| Item | Detail |
|---|---|
| Site affected | Archive of Our Own (AO3), fan fiction library |
| Incident | Security incident described as a cyberattack, detected 29 October 2026 |
| Offline since | Thursday 29 October 2026 |
| Expected downtime | Two to four weeks, per the Organization for Transformative Works |
| Earliest possible return | Thursday 12 November 2026 (two weeks); latest estimate Thursday 26 November 2026 |
| Registered users | More than 11 million |
| Works hosted | Nearly 18 million |
| Operator | Organization for Transformative Works (OTW), a nonprofit |
| Data lost | None, per OTW — works, bookmarks and kudos are safe |
| User database | Theft not believed, but cannot be ruled out |
| Latest update | 6 November 2026 — recovery progressing well, original estimate stands |
How the Archive of Our Own Outage Started on 29 October
AO3 first went dark in the early hours of Thursday 29 October 2026, when the site was taken offline for what was described as routine maintenance expected to last about 12 hours. By that afternoon the estimate had grown sharply. The Organization for Transformative Works said it had detected evidence of a security incident and was still in the early stages of working out its scope.
The archive’s maintenance page replaced the whole site, and readers who tried to reach their stories found only a notice pointing to the organisation’s status page. The scale of the disruption became clear quickly: AO3 is the main home for fan fiction on the internet, hosting nearly 18 million works, as reported by AFP. Its readers and writers span every major fandom, from Harry Potter to Twilight.
What the Organization for Transformative Works Has Confirmed
The OTW’s update on 30 October 2026 gave users the first firm facts. It said no AO3 data had been deleted, and that all works, bookmarks and kudos were safe. The organisation added that it did not believe its user database had been stolen, but it could not rule that possibility out.
That database holds usernames, email addresses and encrypted passwords. The uncertainty is what makes the incident more serious than a simple outage, because readers cannot yet be told their account details are definitely safe. Rebecca Tushnet, a co-founder of the OTW and a Harvard Law School professor, told the New York Times there had been “an intrusion” and that an all-volunteer crew was working to find the path the attacker used and make sure it had been removed.
The OTW has not said who was behind the incident or how the attacker got in. Its investigation is still in its early stages, and the organisation has said it will share updates only when verified information becomes available.
The Two-to-Four-Week Recovery Timeline
In its latest update, posted on 6 November 2026, the OTW said work to restore AO3 and make changes to prevent future incidents was ongoing and proceeding well. It said its original return time estimate remained accurate, which puts the earliest possible return at Thursday 12 November and the latest at Thursday 26 November.
The organisation has suggested the site could come back first in a limited or read-only state, with some features missing, and that temporary shutdowns may still be needed during recovery. It has also been clearing a backlog of queued notification emails, such as subscription updates and kudos announcements, that built up while the site was down.
The OTW has told users it is actively working to ensure drafts are not deleted during the outage. That matters to writers who had unpublished work saved on the site when it went down, and who have had no way to reach it since.
The ao3.life Clone That Lasted a Single Day
The vacuum left by the outage was quickly filled by a copycat. A site called ao3.life appeared during the downtime, reposting AO3 stories without their authors’ permission and selling machine-narrated audiobook versions of them. Its creator said the content had been gathered by “a swarm of AI Agents controlling 40 virtual machines” scraping the internet for copies of AO3 works.
The clone drew 126,592 unique visitors in its first 24 hours, according to 404 Media, and sold 11 audiobooks. Then the authors whose work had been taken fought back. The site’s creator said more than 2,000 takedown requests arrived in a single day, and the site went down on the evening of Monday 2 November 2026.
The creator left an apology note signed by a self-described 17-year-old from India, saying it had never been the intention to hurt so many authors. That identity has not been independently verified. The episode showed how fast an unofficial copy can spread when a trusted archive goes dark, and how quickly the writers whose work was copied can organise against it.
Why the Outage Matters Beyond Fan Fiction
The AO3 cyberattack is the latest in a run of incidents that show how much of daily life now depends on internet-connected systems. The UK’s National Cyber Security Centre warned on 3 November 2026 that AI-powered malware is highly likely to feature in an attack on UK critical infrastructure by 2028, in its State of the Cyber Nation report. The AO3 incident is a smaller-scale version of the same problem: a single point of failure taking a whole community offline.
The same week also saw supermarket freezers across six European countries hit by a suspected cyberattack, with refrigeration systems remotely switched into defrost mode and large quantities of food thrown away. In both cases the immediate damage was disruption and lost trust rather than a confirmed casualty count, and in neither case has anyone been publicly identified as responsible.
For fan fiction, the stakes are cultural as well as technical. AO3 is run by a nonprofit and built by volunteers, and it holds two decades of work by millions of writers. Its outage has pushed readers towards shared drives, older archives and social media threads to keep reading, but none of those replaces a single searchable library of nearly 18 million works.
What AO3 Users Should Do While the Site Is Down
The OTW’s advice is practical. Anyone who used the same password on AO3 as on another site should change it on that other site now, rather than waiting for the investigation to finish. Users should also be wary of unofficial copies of the archive, which may ask for personal details to process takedown requests or payments.
Readers looking for their stories in the meantime should use only sources they trust, and should not hand over email addresses or account details to sites claiming to offer AO3 content. The OTW has said it is taking action over the ao3.life clone, but has asked for patience because the legal system moves far more slowly than online life.
The archive itself is not gone. The OTW’s message to its users has been consistent since the first day: no data has been lost, and the site will return. For 11 million readers and writers, the wait is now measured in weeks rather than hours.
Frequently Asked Questions
When did Archive of Our Own go offline? AO3 went offline on Thursday 29 October 2026, first for maintenance and then because the Organization for Transformative Works found evidence of a security incident.
How long will AO3 be down? The OTW expects the site to be down for a minimum of two weeks and possibly up to four, which means a return between Thursday 12 November and Thursday 26 November 2026. It may come back first in a limited or read-only state.
Has any fan fiction been lost? No. The OTW has said no AO3 data has been deleted, and that all works, bookmarks and kudos are safe.
Was the AO3 user database stolen? Not publicly verified. The OTW says it does not believe the database was stolen, but it cannot rule it out. The database holds usernames, email addresses and encrypted passwords.
What was ao3.life? A copycat site that appeared during the outage, reposting AO3 stories without permission and selling AI-narrated audiobooks. It drew 126,592 visitors in 24 hours, received more than 2,000 takedown requests in a single day, and shut down on the evening of Monday 2 November 2026.
Myth-busting: A maintenance page does not mean a site has closed for good. AO3’s page is a holding notice while the OTW rebuilds after a security incident, and the organisation has said the archive will return.
Myth-busting: A clone site is not a safe substitute for the real archive. ao3.life copied stories without authors’ permission, charged for audiobook versions, and asked authors for personal details to remove their work, which is why its own creator took it down after a day.
