The International Meteor Organization suffered a cyberattack that took much of its site offline, causing weeks of partial downtime as it transitions to new infrastructure.
<p>The International Meteor Organization, the nonprofit that coordinates and publishes amateur and professional observations of meteor phenomena, said its infrastructure has suffered a “critical blow” from a cyberattack.</p>
<p>“We recently suffered a cyberattack that dealt a critical blow to aging infrastructure, taking much of our site offline," a static page on its <a href="https://imo.net/">website</a> on Wednesday said. “We expect several weeks of partial downtime as we transition to new infrastructure and services.”</p>
<h2>“I am very sad to see the site down”</h2>
<p>In the meantime, the IMO said it’s prioritizing the reporting of fireball observations, which can be reported <a href="https://fireball.imo.net/members/imo/report_intro">here</a>. The organization is also providing some information on its Facebook page.</p><p><a href="https://arstechnica.com/security/2026/09/nonprofit-that-tracks-meteors-taken-down-by-critical-blow-from-a-cyberattack/">Read full article</a></p>
<p><a href="https://arstechnica.com/security/2026/09/nonprofit-that-tracks-meteors-taken-down-by-critical-blow-from-a-cyberattack/#comments">Comments</a></p>
# Nonprofit that tracks meteors taken down by "critical blow" from a cyberattack
Source: [https://arstechnica.com/security/2026/09/nonprofit-that-tracks-meteors-taken-down-by-critical-blow-from-a-cyberattack/](https://arstechnica.com/security/2026/09/nonprofit-that-tracks-meteors-taken-down-by-critical-blow-from-a-cyberattack/)
The International Meteor Organization, the nonprofit that coordinates and publishes amateur and professional observations of meteor phenomena, said its infrastructure has suffered a “critical blow” from a cyberattack\.
“We recently suffered a cyberattack that dealt a critical blow to aging infrastructure, taking much of our site offline,” a static page on its[website](https://imo.net/)on Wednesday said\. “We expect several weeks of partial downtime as we transition to new infrastructure and services\.”
## “I am very sad to see the site down”
In the meantime, the IMO said it’s prioritizing the reporting of fireball observations, which can be reported[here](https://fireball.imo.net/members/imo/report_intro)\. The organization is also providing some information on its Facebook page\.
The IMO has helped forge unified standards for reporting meteor observations\. Its databases of reported meteor and fireball observations—made up of text, photos, and videos—are also considered essential by many in the field\. The IMO also publishes the bimonthly WGN journal, which in English is short for Working Group News\. The body was formally founded in 1988\.
It’s unclear why an organization that tracks large, fiery space objects hurtling toward Earth would be the target of a damaging cyberattack\. It’s equally unclear why someone would want to steal its data \(assuming that was the motive\), which is mostly public\.
An individual reports being cyberattacked by Tesla, Inc. due to a mistake in their asset discovery process where a CNAME to NTP Pool led to their server being targeted by Assetnote scanners with various exploit attempts, which has been resolved.
U.S., Canadian, and German authorities have dismantled four IoT botnets—Aisuru, Kimwolf, JackSkid, and Mossad—that compromised over three million devices and launched record-breaking DDoS attacks, including against the Department of Defense.
Meta has paused its employee-tracking program, the Model Compatibility Initiative (MCI), after an internal security breach exposed sensitive data collected from workers, following employee protests and privacy concerns.
A coordinated global operation called Operation Endgame disrupted major malware networks (Amadey, Stealc, SocGholish), seizing hundreds of servers and recovering 27 million stolen credentials and $47 million in crypto assets.