Fanlore Account Data Allegedly Circulates After OTW Reports Unauthorized Access
Summary
OTW said it identified unauthorized access in August 2026. Forum actor 584 claims to be selling Fanlore[.]org account data affecting about 145,000 email addresses; the posted copy remains unverified.
Key points
- OTW said it identified unauthorized access in August 2026 and self-reported the incident.
- Forum actor 584 claims to be selling Fanlore[.]org account data.
- The alleged data reportedly covers about 145,000 unique email addresses.
- The sample reportedly includes usernames, real names, password hashes, verification tokens and authentication tokens.
- The published copy has not been verified; the article advises affected users to assume their wiki identity and email may be linked publicly.
Article Details
- Victim Organization
- Organization for Transformative Works
- Victim Domain
- Fanlore.org
- Incident Type
- Unauthorized access with alleged account-data exposure
- Data Types Exposed
- Email addresses
- Usernames
- Real names
- Password hashes
- Verification tokens
- Authentication tokens
- Affected Records
- About 145,000 unique email addresses reportedly represented; the posted data copy remains unverified.
- Operational Impact
- OTW said it identified unauthorized access. No further operational impact was reported; the published data copy remains unverified.
- Ransom Or Extortion
- None reported.
- Claim Status
- confirmed