Despite the Internet Archive's assurances it's back on its feet after a recent infosec incident, the org still appears to be in trouble after parties unknown claimed to hold access tokens to its Zendesk implementation and to have used them to send a mass email blast.

Hackers who breached the Internet Archive earlier this month continue to exploit the organization’s security vulnerabilities, now using exposed Zendesk access tokens to send unauthorized email blasts.

The Internet Archive has been slowly coming back online after the attacks and has resumed some services, including its website archive called the Wayback Machine. But its vast inventory of data, which is comprised of countless books, software, images, videos, audio, and even the digital archives of the island nation of Aruba, remains inaccessible.

The Internet Archive was breached again, this time on their Zendesk email support platform after repeated warnings that threat actors stole exposed GitLab authentication tokens.

The digital library's website was defaced earlier this month with a message boasting its theft of Internet Archive users' sensitive records. The nonprofit said it's working to bolster security.