Speaking to Infosecurity, a Zendesk spokesperson said that Internet Archive did not secure its authentication tokens, which enabled unauthorized access to their Zendesk instance. The Zendesk team has since worked with Internet Archive to secure the non-profit’s account.

Despite the Internet Archive's assurances it's back on its feet after a recent infosec incident, the org still appears to be in trouble after parties unknown claimed to hold access tokens to its Zendesk implementation and to have used them to send a mass email blast.

Because the hacker just responded to Mashable's email that we went to the Internet Archive to find out more about the hack. The hacker was able to respond via Internet Archive's Zendesk, an online service that helps companies respond to users' support queries.

Hackers who breached the Internet Archive earlier this month continue to exploit the organization’s security vulnerabilities, now using exposed Zendesk access tokens to send unauthorized email blasts.

The Internet Archive was breached again, this time on their Zendesk email support platform after repeated warnings that threat actors stole exposed GitLab authentication tokens.

Those behind the hack chastise the Internet Archive for not rotating API keys, giving them access to the organization's Zendesk ticketing system.

The digital library's website was defaced earlier this month with a message boasting its theft of Internet Archive users' sensitive records. The nonprofit said it's working to bolster security.

Users on the Internet Archive subreddit are reporting getting the replies, as well. Here is the message I received: It’s dispiriting to see that even after bein