AO3 Returns in Degraded State After Security Outage
The fan fiction archive is back online with some features disabled, and full restoration is predicted to take up to four weeks.
Updated on Nov. 15, 2026 in Cybersecurity
Live Poll
Do you trust online fan platforms to keep your personal data secure?
The Organization for Transformative Works restored limited access to Archive of Our Own (AO3) on November 15, 2026, after shutting the site down on October 29 following a security incident. The return is partial: the site is running in a degraded state with some features still disabled. This is a shipped service being restored, not a new product.
Why it matters
AO3 is a large, volunteer-run fan fiction archive, and the outage shows how a single security incident can take a major online platform offline for weeks. The degraded relaunch illustrates the tradeoff platforms face between restoring access quickly and safely bringing back every feature after an incident.
The organization reported nearly 2.6 million works created and nearly 40 billion page views in 2025, with nearly 2 million accounts created in total. The site was offline about two weeks against a predicted maximum of four weeks for full restoration. The technical cause of the incident and the specific security measures taken have not been detailed.
The players
Organization for Transformative Works
A non-profit volunteer organization that operates the Archive of Our Own fan fiction platform and publishes its usage figures.
The details
AO3 is a non-commercial archive that hosts user-submitted creative works, and its data and service were offline from October 29 until the organization posted a status page announcing a limited return. The relaunch restores core reading and posting but leaves some functions switched off, including user icons and the ability to import works from outside sites. Downloads are currently offered only in HTML format, and the organization said no drafts were deleted and that contributors' works, bookmarks and kudos were unaffected.
Timeline
October 29, 2026: AO3 shut down following a security incident.
November 15, 2026: The organization announced a limited return on its status page.
The Tech Race
The AO3 outage is a reminder that large volunteer-run platforms carry the same security exposure as commercial services without the same resources to absorb a prolonged shutdown. Its restoration path, which brings the site back before every feature, reflects how such platforms weigh availability against the risk of reintroducing a compromised component.
Readers can access AO3 again, but user icons and importing of external works are unavailable and downloads are limited to HTML. Contributors' works, bookmarks and kudos are reported safe, and no drafts were deleted during the outage.
The takeaway
Watch for the organization's status page to confirm when the disabled features return, since that will show how fully the site has recovered. The return of user icons and external work importing will be the clearest signal that the platform is back to normal.
What happens next
The organization has said disabled features, including user icons and external work importing, will ultimately return, with full restoration predicted to take up to four weeks from the shutdown.
Further reading
For more on how platforms respond to security incidents, browse our Cybersecurity coverage.
Live Poll
Do you trust online fan platforms to keep your personal data secure?
