Cyberattack sends International Meteor Organization crashing back to Earth

The International Meteor Organization (IMO) is watching for fireballs again, but much of its website remains offline after a cyberattack that it says will take weeks to recover from.

The Belgium-based nonprofit, which coordinates meteor observations and brings together amateur and professional astronomers worldwide, is currently serving visitors a stripped-down holding page explaining the outage.

"We recently suffered a cyberattack that dealt a critical blow to aging infrastructure, taking much of our site offline," the organization said.

"We expect several weeks of partial downtime as we transition to new infrastructure and services." IMO has not disclosed when the attack occurred, how the attackers gained access, or whether they accessed or encrypted any data.

The organization collects reports from people who spot unusually bright meteors, or fireballs, and uses those observations to help document and analyze events.

Its notice says it prioritized restoring that capability after the attack.

"We prioritized restoring fireball reporting, and it is available again," IMO said.

"If you saw a fireball or a bright light in the sky, you can still submit your observation." Other parts of the site remain unavailable while the organization rebuilds its infrastructure.

IMO's warning that the process will take several weeks suggests this is more than a case of simply restoring a compromised web server, although the organization has not disclosed the extent of the damage.

The incident also leaves some unanswered questions about the data held on the affected systems.

IMO operates services used by meteor observers and members around the world, but has not said whether information belonging to users or contributors was exposed during the attack.

The Register asked IMO when the attack occurred, which systems were affected, whether any data was compromised, and whether it has identified who was responsible, but has not yet received a response.

IMO is used to documenting things that burn up spectacularly.

It probably didn't expect its IT infrastructure to join them. ®