We just want to clarify that we have no reason to believe AO3 has suffered a data breach at any point. If AO3 was aware that our site data had been breached, we would report it and notify users as is legally mandated.
If you're receiving a message that your password was breached, this is not due to a data breach on AO3 but due to a breach of another site. You can refer to our Tumblr post on the topic for more information: What to Do If Your Password Is Insecure.
Security vulnerabilities are given priority for immediate fixes when reported and will always be included in our release notes when posted.
Comment on 2026 Candidate Q&A and Chat Round Up
OTW_News_Post_Moderation (Official) Mon 03 Aug 2026 09:12AM UTC
Comment Actions