Bluesky restricts links to leaked Department of Homeland Security staff database

Social network Bluesky has started blocking user access to web pages hosting a leaked trove of Department of Homeland Security personnel records. The breach exposed over 40,000 user account records—reported by other outlets as over 41,000—originating from Homeland Security login systems and containing names and contact details, such as work email addresses and work-issued phone numbers, for personnel across divisions like Customs and Border Protection and Immigration and Customs Enforcement. [1][2][3]

Instead of removing user posts, Bluesky marked links pointing to nonprofit transparency collective DDoSecrets as malicious, explaining to Wired that the data violated platform guidelines against sharing unconsented contact information. Meanwhile, Homeland Security enlisted security vendor ZeroFox to send takedown demands to domain registrars, successfully disabling a searchable copy hosted by journalist maia arson crimew. [1][3]

DDoSecrets co-founder Emma Best pushed back on the enforcement, noting that the dataset mirrors professional business card details rather than private residential addresses. Best and external researchers emphasized that these work contacts are essential for the public to file Freedom of Information Act requests and scrutinize administration activities. [1]