Why is AO3 down — and why does the answer keep getting worse? First it was routine maintenance. Then it was twelve hours. Then two weeks, possibly four. And now the team behind Archive of Our Own has confirmed what tens of millions of fanfiction readers were dreading: this is a security incident.
The fan-run, nonprofit archive went dark early on 29 October, and its status updates have since traced a grim arc from inconvenience to crisis. For a site that hosts more than 18 million works and functions as the evening ritual of fandoms worldwide, this is the longest outage in living memory.
What Happened to Archive of Our Own?
The timeline moved fast. At 07:13 UTC on 29 October, the Organization for Transformative Works announced AO3 was down for maintenance. Two hours later, the estimate was “at least 12 hours”. By that evening, the status account posted the update that went viral — over seven million views and 140,000 likes — warning that full restoration would take around two weeks and “could be up to four”.
Then, in the early hours of 30 October, came the real explanation: “Earlier today, we detected evidence of a security incident on AO3.” The team says it is still in the early stages of its response, determining the scope of what happened, and the site will stay offline while the investigation continues.
Is My Data Safe?
This is the question dominating every fan space right now, and the OTW’s answer is cautiously reassuring. No AO3 data has been deleted — all works, bookmarks and kudos are safe. The team does not currently believe the user database was compromised, but it cannot completely rule that out. That database holds account details including usernames, email addresses and hashed versions of passwords.
Key point: If you reuse your AO3 password anywhere else — especially on an email account — change it now. Hashed passwords resist cracking, but they are not unbreakable, and the OTW itself says compromise cannot be dismissed.
Observers have noted the timing: the outage lands days after major vulnerabilities were discovered in PHP, one of the foundational languages of the web, prompting government-level security demands for sites running it. AO3 is a long-running PHP application. The OTW has not confirmed any connection, and it may be coincidence — but the speculation explains why the shutdown is so thorough.
How Fandom Is Coping
Readers, to put it mildly, are not taking it well. “WE ARE DOOMED” replied one user to the status update; another called it the “worst tweet in the history of this app”. One widely-liked post tagged the CIA, the FBI and New York mayor Zohran Mamdani with a simple plea: “SOMEONE DO SOMETHING”. The timing stings doubly — the outage landed during the final days of Kinktober, one of fandom’s biggest writing events.
“No AO3 data has been deleted. All your works, bookmarks, kudos, etc., are safe.” — Organization for Transformative Works
Communities have mobilised the way communities do. Fans are circulating Google Drive archives of popular fics so readers can still get their fix, and the Wayback Machine can serve cached copies of work pages when fed the right URLs. There is a catch: neither workaround lets authors collect the kudos, hits and comments their writing would normally earn — for a gift economy like fandom, that loss matters.
When Will AO3 Come Back?
The OTW is hopeful it can restore a degraded version of the archive sooner — likely read-only, with some features missing — while full repairs continue. Even then, expect the site to drop offline unexpectedly as recovery work proceeds. The current guidance stands at a minimum of two weeks, a maximum of four.
Worryingly, this is not an isolated blip. In March, AO3 went down for three days following a database server issue, and maintenance windows have grown more frequent over the past year. An archive run by volunteers, on donations, guarding 18 million works against an increasingly hostile internet, was always going to face this kind of test eventually.
The works are safe. The passwords are probably safe. The readers, for the next fortnight at least, are on their own.
