# Internet Archive Users Get Emails from Hackers Criticizing Unfixed Security Flaw! 📧 **URL:** \ **Category:** News & Articles\ **Tags:** hacking\ **Created:** [October 22, 2024, 2:35am UTC](https://onehack.st/t/internet-archive-users-get-emails-from-hackers-criticizing-unfixed-security-flaw/294194 "2024-10-22T02:35:17Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![TheJoker](https://onehack.st/user_avatar/onehack.st/thejoker/32/22660_2.png) [@TheJoker](https://onehack.st/u/TheJoker)\ **Post date:** [October 22, 2024, 2:35am UTC](https://onehack.st/t/internet-archive-users-get-emails-from-hackers-criticizing-unfixed-security-flaw/294194/1 "2024-10-22T02:35:17Z")
**Summary:** 1. **Email Communication from Hackers** Users of the Internet Archive started receiving emails that appear to come from hackers, criticizing the organization for not fixing a security vulnerability related to stolen API tokens. 2. **Breached Security Details** The hackers claim they accessed a Zendesk token that allows them to view over 800,000 support tickets dating back to 2018, affecting users’ private information. 3. **History of the Breach** The breach began with an exposed GitLab configuration file on the Internet Archive’s server, allowing hackers to download the source code and access sensitive credentials. 4. **Massive Data Theft** The threat actor claims to have stolen 7TB of data, including the user database, and has expressed frustration at the Internet Archive’s lack of response and action regarding security issues. 5. **Concerns Over Future Security** The incident raises concerns about ongoing vulnerabilities, as the hackers indicate that the stolen data is likely being shared within hacking communities and could be leaked publicly in the future. **Read more at:** [BleepingComputer](https://www.bleepingcomputer.com/news/security/internet-archive-breached-again-through-stolen-access-tokens/)