Archive of Our Own is investigating a security incident that could keep the fanfiction site offline for up to four weeks, while users are urged to change reused passwords.