Internet Archive breached again through stolen access tokens

BleepingComputer reports that the Internet Archive was breached after an exposed GitLab authentication token on a development server allowed an attacker to access source code and embedded credentials, which led to database compromise and the theft of user data (reported ~33 million users). The attacker also acquired Zendesk API tokens granting access to 800K+ support tickets and attachments and used them to send authenticated Zendesk emails, demonstrating active misuse of stolen tokens and potential exposure of sensitive personally identifiable information.