Speaking to Infosecurity, a Zendesk spokesperson said that Internet Archive did not secure its authentication tokens, which enabled unauthorized access to their Zendesk instance. The Zendesk team has since worked with Internet Archive to secure the non-profit’s account.

Hackers who breached the Internet Archive earlier this month continue to exploit the organization’s security vulnerabilities, now using exposed Zendesk access tokens to send unauthorized email blasts.

Despite the Internet Archive's assurances it's back on its feet after a recent infosec incident, the org still appears to be in trouble after parties unknown claimed to hold access tokens to its Zendesk implementation and to have used them to send a mass email blast.

Because the hacker just responded to Mashable's email that we went to the Internet Archive to find out more about the hack. The hacker was able to respond via Internet Archive's Zendesk, an online service that helps companies respond to users' support queries.

The Internet Archive was breached again, this time on their Zendesk email support platform after repeated warnings that threat actors stole exposed GitLab authentication tokens.

Those behind the hack chastise the Internet Archive for not rotating API keys, giving them access to the organization's Zendesk ticketing system.

The Internet Archive has been slowly coming back online after the attacks and has resumed some services, including its website archive called the Wayback Machine. But its vast inventory of data, which is comprised of countless books, software, images, videos, audio, and even the digital archives of the island nation of Aruba, remains inaccessible.

A threat actor claimed to get hold of an exposed GitLab configuration file containing Zendesk API access tokens

The digital library's website was defaced earlier this month with a message boasting its theft of Internet Archive users' sensitive records. The nonprofit said it's working to bolster security.