Cyberattack Cripples International Meteor Organization's Infrastructure

A cyberattack has inflicted significant damage on the International Meteor Organization, the nonprofit body responsible for collecting and publishing observations from both amateur and professional meteor watchers. According to a statement posted on its website Wednesday, the organization's aging systems sustained what it described as a "critical blow," resulting in substantial portions of the site going offline.

We recently suffered a cyberattack that dealt a critical blow to aging infrastructure, taking much of our site offline. We expect several weeks of partial downtime as we transition to new infrastructure and services.

International Meteor Organization statement

"I am very sad to see the site down"

The IMO is currently focusing its recovery efforts on maintaining the ability to receive reports of fireball observations, which can still be submitted through a dedicated reporting channel. Additional updates and information are being shared through the organization's Facebook page during the outage.

The organization has played a crucial role in establishing consistent methodologies for documenting meteor observations. Its extensive repositories of meteor and fireball sightings—containing written reports, photographs, and video footage—are widely regarded as invaluable resources by researchers and professionals in the field. The IMO also produces the bimonthly publication WGN, which stands for Working Group News. The organization was formally established in 1988.

The motivation behind targeting the IMO remains unclear. The organization's data, which consists largely of publicly available information, would seem an unlikely target for theft. Similarly, it is puzzling why attackers would focus on an entity dedicated to monitoring large celestial objects approaching Earth.

I am very sad to see the site down. It's really useful. I don't have any personal connections there.

Sam Lawler, associate professor of astronomy at Campion College

Cyberattacks targeting organizations involved in space observation, travel, and research are uncommon relative to incidents affecting other sectors. However, such attacks have occurred in the past, including several notable incidents:

• A 2011 case involving a Romanian man accused of compromising NASA systems
• A breach affecting the National Science Foundation's Noirlab facility
• A cyberattack on the Atacama Large Millimeter Array observatory located in Chile

In 2023, U.S. agencies issued warnings that both private and public organizations operating in the space sector could become targets of state-sponsored hackers. Russia has also indicated that commercial satellites could be considered legitimate military objectives. That same year, reports emerged that Russia was conducting surveillance on communications satellites operated by NATO.

The American Meteorological Society fell victim to a ransomware attack in 2023. The IMO incident differs in that no groups or individuals have publicly claimed responsibility for the attack, and there are no indications that ransom demands have been made.