---
title: "AO3 Outage: Why Is AO3 Down, and Is Your Account Safe?"
url: https://syntaxradar.com/radar/ao3-outage-why-is-ao3-down
author: "Abdul Rehman, Lead Systems Architect and Technical Director"
publishedAt: 2026-10-30T17:00:00.000Z
dateModified: 2026-10-30T17:00:00.000Z
category: "#DEV-SYSTEMS"
topic: "ao3 outage"
primarySource: https://www.otwstatus.org/incidents/g12jnxck9g6h
summary: "The AO3 outage explained: why AO3 is down, OTW's 2 to 4 week estimate, what the security incident means for your data and which passwords to change now."
---


# AO3 Outage: Why Is AO3 Down, and Is Your Account Safe?

**Short answer:** AO3 went offline on Oct 29, 2026 under a maintenance notice, and OTW estimated 2 to 4 weeks to restore it. On Oct 30 OTW said it had detected evidence of a security incident, that no AO3 data was deleted, and advised changing reused passwords.

**Takeaway:** OTW says no AO3 data was deleted, but until it finishes investigating, anyone who reused their AO3 password on another site should change it there now.

**Key figures (as reported by the source):**
- Outage first logged: Oct 29, 07:13 UTC
- Security incident disclosed: Oct 30, 01:27 UTC
- OTW restoration estimate: 2 to 4 weeks

The AO3 outage began on October 29, 2026, when Archive of Our Own went dark under a status notice titled "AO3 Down for Maintenance." If you have spent the past day asking "is AO3 down?" or wondering why AO3 is down for this long, the story changed overnight. In an update posted at 01:27 UTC on October 30, the Organization for Transformative Works (OTW), which runs the archive, said it had detected evidence of a security incident.

As of October 30 the site is still offline. OTW's estimate for bringing it back is around two weeks, possibly up to four, and it says the scope of the incident is still being determined and its response is in the early stages.

Here is the short version for worried readers. OTW says no AO3 data was deleted, so works, bookmarks and kudos are safe. It says it does not currently believe the user database was stolen but cannot rule it out. And if you used your AO3 password anywhere else, OTW's advice is to change it on those sites.

### Why is AO3 down?

AO3 has been offline since October 29, and OTW has not given a technical cause. It first logged the outage under an AO3 maintenance notice and later said it had detected evidence of a security incident. The [OTW incident log](https://www.otwstatus.org/incidents/g12jnxck9g6h) shows the order of events. The first entry, at 07:13 UTC on October 29, called it "AO3 Down for Maintenance" with a status of Investigating. At 09:03 UTC, OTW said maintenance was in progress and expected to take at least 12 hours, possibly longer.

At 17:41 UTC the estimate jumped to around two weeks, perhaps up to four, with staff hoping to bring back a degraded version of the site sooner. Writing that day, [Books of Brilliance](https://booksofbrilliance.com/2026/10/29/ao3-down-extended-outage/) pointed out that the public update still gave no technical cause and no reopening date. The words "security incident" first appear on the status page in the 01:27 UTC update on October 30.

What OTW has not said matters as much as what it has. In the status page updates, it has not described what kind of incident this is, how it happened, who is responsible, or whether any data was actually accessed or copied. It also has not said whether the original maintenance and the security incident are the same event.

[TechCrunch](https://techcrunch.com/2026/10/29/fan-fiction-site-archive-of-our-own-could-be-offline-for-up-to-4-weeks/) added one useful piece of context. It notes that AO3 runs on Ruby on Rails, so the PHP vulnerabilities reported on October 21 are unlikely to be the cause. That is TechCrunch's reading; OTW has said nothing about cause.

### Is AO3 still down?

Yes, AO3 is still down as of October 30, 2026. The main [AO3 status page](https://www.otwstatus.org/), run by OTW, lists the archive as a major outage, so if you want to know whether AO3 is down right now, check that page or the @AO3_Status account before trusting a screenshot passed around on social media.

You are far from the only person refreshing. TechCrunch reports that OTW's status posts reached millions of views within two hours.

The same status page lists OTW's other services, including Fanlore, the journal Transformative Works and Cultures and the OTW website, as operational.

Two earlier entries on that page are easy to mix up with this one. Fanlore went offline on October 21 while it waited for PHP patches and was back the same day. AO3 emails, history and search updates were delayed from October 23 to 24, a problem marked resolved early on October 24. No source connects either one to the current outage.

![AO3 outage timeline from the OTW status page: site down on Oct 29 at 07:13 UTC, an estimate of about two weeks at 17:41 UTC, a security incident disclosed on Oct 30 at 01:27 UTC, and an estimate of two to four weeks](/uploads/blog/ao3-outage-why-is-ao3-down/img1.webp)

### Is AO3 safe? What OTW says about your data

Your AO3 data is safe from deletion, according to OTW: it says no AO3 data was deleted, which means works, bookmarks and kudos are intact. Whether the user database was copied is a separate question, and OTW's answer is careful. It says it does not currently believe the user database was stolen, but it cannot rule that out.

OTW also listed what that database may include:

- usernames
- email addresses
- IP addresses
- hashed passwords

Some things sit outside it. AO3 does not collect real names, OTW says, and donor information is stored separately and was not exposed. If you have donated to OTW, your donor details fall under that statement.

In general, it is hard to prove that something was never copied: it means reviewing logs and systems one by one. OTW has said the scope is still being determined.

### Should you change your AO3 password while AO3 is down?

OTW's advice is direct: if you reuse your AO3 password elsewhere, change it on those sites. That makes the first job, while AO3 is down, finding every other site where you used your AO3 password.

"Hashed" sounds reassuring, and hashed passwords are far safer than plain text. A hash is a one-way scramble. The site stores only the scrambled result, and when you log in it scrambles what you typed and checks whether the two match. Nobody can simply run the scramble backwards.

The weak spot is guessing. Someone holding a list of hashes can take common passwords, scramble each one the same way and look for matches. A short password, or one that already appeared in an old leak, falls quickly. A long, unique one can take impractically long. [Bleeding Cool](https://bleedingcool.com/pop-culture/archive-of-our-own-could-be-down-for-the-next-2-4-weeks/) reports that OTW's notice makes this same point: weak or reused passwords can be cracked even when hashed.

Reuse is what turns one leak into many. If the same email and password open your AO3 account, your inbox and a shopping site, a cracked AO3 hash becomes a key to all three. Attackers routinely try leaked email and password pairs on other popular sites, a technique called credential stuffing.

OTW's own advice is the first step below. The rest is general good practice, not an OTW instruction.

- Change the password anywhere you reused your AO3 one, starting with your email account, because email is how every other password gets reset.
- Turn on two-factor authentication on those sites where it is offered.
- Use a password manager so each site gets its own long password.
- Be wary of unexpected emails claiming to be from AO3, since email addresses may be in the database. Do not click links in them; go to the official channels instead.

OTW says staff may not answer individual inquiries and will post updates on its official channels. For a bigger example of how one weak link can open a much larger door, see our [Binance hacked](/radar/binance-hacked-engineer-laptop-theft) explainer.

![Is AO3 safe? What OTW says about your data during the AO3 outage: no AO3 data deleted, user database not believed stolen but cannot be ruled out, and reused passwords should be changed on other sites](/uploads/blog/ao3-outage-why-is-ao3-down/img2.webp)

### How long is AO3 down?

AO3 could be down for about two weeks and possibly up to four, according to OTW's estimate. It first gave that range at 17:41 UTC on October 29 and repeated it after disclosing the security incident, now calling two weeks a minimum.

That is a long time for a website people use every day. OTW's status updates do not explain why its estimate runs to weeks, so what follows is how recovery after a security incident generally works, not a description of AO3's plan.

A routine outage can often be fixed by restarting a service or rolling back a bad update. After a security incident, teams typically have to work out how it happened, close that path, check what was touched and confirm nothing was left behind. That often means rebuilding servers from a known-clean state and restoring data carefully, because reopening too early risks letting the same problem back in. Each step has to finish before the next one can be trusted, which is how incident recoveries stretch into weeks.

### When will AO3 be back?

OTW has not given a firm date for when AO3 will be back. Its range is two to four weeks, and it has said staff hope to restore a degraded service before a full one.

OTW also warns that the site may return in a degraded or read-only state and could go down unexpectedly during recovery. In general, read-only means you can browse and read while anything that writes new data, such as posting, commenting or leaving kudos, stays switched off. Degraded generally means some features are slow or missing. OTW's status updates do not say which features would come back first.

So if the archive flickers back and then drops again, that would fit what OTW warned could happen.

### AO3 status updates: what to watch next

Four things will tell you the most over the coming days:

- **The scope.** OTW says it is still determining the extent of the incident. Any update on what was affected is the most important one.
- **The database question.** Watch for OTW to confirm or rule out whether the user database was copied. Until that answer arrives, the password advice above is the safe default.
- **The timeline.** The two to four week range is an estimate, and OTW may revise it as the investigation moves.
- **The first version back.** OTW has said the site may return degraded or read-only, so watch for which of those arrives first.

For live AO3 status updates, use the [OTW status page](https://www.otwstatus.org/), the @AO3_Status account and OTW's own [update on the AO3 downtime](https://www.transformativeworks.org/update-on-ao3-downtime-october-30-2026/). Until OTW says more, the AO3 outage leaves fans with one useful job: retire any password they have used in more than one place.

## Frequently asked questions

### Why is AO3 down?
AO3 went offline on October 29, 2026 under a maintenance notice. In a status update at 01:27 UTC on October 30, the Organization for Transformative Works said it had detected evidence of a security incident. OTW has not said what kind of incident it was, how it happened or who is responsible, and says its response is still in the early stages.

### Is AO3 down right now?
As of October 30, 2026, yes. The OTW status page lists AO3 as a major outage, while Fanlore, Transformative Works and Cultures and the OTW website are listed as operational. Status can change quickly, so check otwstatus.org or the @AO3_Status account for the latest word rather than relying on screenshots shared elsewhere.

### When will AO3 be back?
OTW has not given a firm date. It estimates a minimum of two weeks and possibly up to four, and says staff hope to restore a degraded service sooner. The site may first return in a degraded or read-only state and could go down unexpectedly during recovery, so a brief return followed by another drop would not be unusual.

### Is my AO3 data safe?
OTW says no AO3 data was deleted, so works, bookmarks and kudos are safe. It does not currently believe the user database was stolen but cannot rule it out; that database may hold usernames, email addresses, IP addresses and hashed passwords. OTW advises changing your AO3 password on any site where you reused it. Donor information is stored separately and was not exposed.

### Was AO3 hacked?
OTW's status updates do not say whether AO3 was hacked. It says it detected evidence of a security incident and that the scope is still being determined. It has not said what kind of incident it was, how it happened, who is responsible or whether any data was accessed or copied. It does not currently believe the user database was stolen but cannot rule it out.

### What is Archive of Our Own (AO3)?
Archive of Our Own, or AO3, is the fan-fiction archive run by the Organization for Transformative Works. Bleeding Cool, a secondary source, puts the archive at more than 18,820,000 works across over 83,250 fandoms and says it was founded in 2008. As of October 30, 2026 it is offline, and OTW estimates two to four weeks to restore it.

## Source
Based on OTW status updates, Oct 29 to 30. https://www.otwstatus.org/incidents/g12jnxck9g6h

---
Published on SyntaxRadar (https://syntaxradar.com). Canonical URL: https://syntaxradar.com/radar/ao3-outage-why-is-ao3-down. Last modified 2026-10-30T17:00:00.000Z.