Archive of Our Own (AO3) returned online on November 15, 2026, following a shutdown that began on October 29. The fanfiction platform was inaccessible for approximately 17 days after its operator, the Organization for Transformative Works (OTW), identified evidence of a security incident.
The site reopened at 08:28 UTC on Sunday, earlier than the upper end of OTW’s two-to-four-week recovery estimate. Most functions are available again, although user icons, external work imports and downloads in formats other than HTML remain temporarily disabled.
- AO3 was offline from October 29 until November 15, when OTW confirmed that the platform had resumed service.
- The site reopened with limited functionality, while an external cybersecurity firm continues investigating the incident.
- No archived content or drafts were deleted during the outage. Automatic draft deletion remains suspended until November 29.
OTW confirmed that archived works and user-created content were preserved. However, the organization has not completely ruled out unauthorized access to its user database.
Why AO3 went offline on October 29
AO3 initially announced a maintenance shutdown on October 29 that was expected to last approximately 15 hours.
The maintenance period was subsequently extended after OTW discovered evidence of a security incident. The organization revised its recovery estimate to approximately two weeks, warning that restoration could take as long as four weeks.
OTW also indicated that the archive might return earlier with reduced functionality.
During the interruption, users encountered errors including “Bad Gateway” when attempting to access the website.
The platform remained offline through November 12, as reflected in status reports published that day. Those reports became outdated when AO3 reopened three days later.
The October 29 shutdown lasted approximately 17 days, within OTW’s revised two-to-four-week recovery window.
OTW has not disclosed the technical cause of the incident, the initial point of unauthorized access or whether any particular vulnerability was exploited.
No hacker or cybercriminal group has been publicly identified as responsible, and there is no confirmed attribution to ransomware or a specific attack method.
The organization has engaged an external cybersecurity firm to investigate the incident and assess security improvements.
AO3 restores service on November 15 with limited functionality
OTW confirmed the website’s return at 08:28 UTC on November 15, shortly after AO3’s seventeenth anniversary.
The restoration allowed users to resume accessing the archive without waiting for every feature to become operational. User and collection icons remain hidden, although OTW confirmed they have not been deleted.
Importing works from external websites is temporarily unavailable, and downloads are restricted to HTML files.
The organization has not announced a date for restoring these functions.
AO3 reopened before the four-week maximum recovery estimate by temporarily disabling selected features.
The return prompted widespread reactions from readers and writers who had been unable to access their usual collections, subscriptions and published works for more than two weeks.
AO3 confirms archived content is safe and extends draft deadline
OTW stated that no AO3 content was deleted during the shutdown, including published works, bookmarks, kudos and other user activity.
The organization also suspended automatic draft deletion to protect unpublished material while users could not access their accounts.
That suspension will continue for two weeks after the November 15 reopening.
Normal draft deletion is scheduled to resume on November 29, when drafts that have reached the usual 30-day age limit may be removed.
Importantly, the deletion dates shown on individual drafts may still display the original 30-day deadline rather than the temporary extension.
Users should therefore review, publish or save their drafts before November 29.
What is known about the AO3 security incident?
As of November 15, OTW has not reported confirmed compromise of its user database. However, the organization said it cannot completely exclude the possibility that account information was accessed during the incident. It has recommended that users consider changing their AO3 passwords, verify their account email addresses and update credentials on other services where the same passwords were reused.
OTW has not publicly established whether attackers accessed account credentials or other personal information.
The platform’s return confirms that service has been restored, but it does not mean the security investigation has concluded.
OTW said it would withhold details of specific security measures while mitigation work continues.
AO3 outage affects a major global fanfiction archive
Archive of Our Own is a nonprofit, open-source platform operated by OTW, hosting more than 18 mn fan-created works. Its content includes fiction and other creative projects inspired by books, television, films, anime and video games.
Popular communities include Harry Potter, Heated Rivalry and numerous anime fandoms.
According to OTW’s 2025 activity figures, approximately 2.6 mn works were created during that year, while the site recorded nearly 40 bn page views.
The prolonged outage prompted reactions across social media from readers and writers who use the archive to publish stories, follow authors and participate in fandom communities.
Reports published before November 15 reflected uncertainty about when the platform would return. The official reopening announcement resolved that question, although complete restoration remains pending.
OTW has committed to further updates as remaining services are restored and its external security review progresses.
