Bluesky blocks DHS leak links amid takedown push
After a breach exposed more than 40,000 DHS account records, Bluesky restricted links to the dataset as Homeland Security sought removals.
Bluesky has started blocking links to a website hosting leaked personnel data tied to the U.S. Department of Homeland Security after a breach exposed records of thousands of employees and agents. The move puts a spotlight on a familiar tension for online platforms: how to handle material that may be newsworthy while also containing personal information. At the same time, Homeland Security is trying to force copies of the data offline through takedown requests.
The leaked dataset has drawn attention because it appears to include work-related contact details for government staff, even as it becomes part of a wider public debate over the breach itself. According to the source, researchers investigating abuses by the Trump administration say the material could help them seek government records under public records laws. That makes this about more than a leak — it also touches on access to information, privacy, and the limits of public-interest publishing.
Bluesky blocks links to the dataset
Users reported that links to DDoSecrets, a nonprofit transparency collective that hosts leaked datasets, were labeled “malicious” shortly after the breach was reported by TechCrunch and other outlets.
Bluesky chief operating officer Rose Wang said in a statement to TechCrunch that the company’s Community Guidelines prohibit unauthorized sharing of personal information and other content that could create safety risks. Because the files include email addresses and phone numbers of individuals shared without their authorization, Bluesky decided to block links to the dataset.
Wang said Bluesky chose to block the links rather than remove individual posts. She said that approach was meant to avoid limiting public discussion or restricting broader access to reporting and commentary.
Later, Wang said in a Bluesky post that the wording of the block message would be changed. She added that the company should have updated it sooner.
The leaked DHS records and the public-interest dispute
TechCrunch reported on Wednesday that a hacker obtained more than 40,000 user account records from Homeland Security’s login system. The data reportedly included names and contact information, such as work-issued phone numbers and email addresses, for employees and agents across agencies including Customs and Border Protection and Immigration and Customs Enforcement.
As IT-PUB News notes, the source says the information resembled what might appear on an employee’s business card. That detail sits at the center of the dispute: whether the leak should be treated as sensitive personal data, or as professional contact information that some argue should remain accessible in the public interest.
DDoSecrets co-founder and journalist Emma Best told TechCrunch that Bluesky’s terms of service prohibit sharing home addresses and personal contact information, but argued that those categories were not part of the leaked dataset. Best said the files contain professional contact information for government employees and described that information as especially important at a time when public interest in it is high.
Homeland Security seeks to remove copies online
Homeland Security said on Wednesday that it was aware of a potential breach and was working to address it “swiftly and effectively,” according to a spokesperson quoted by TechCrunch.
The department is also taking steps to remove the dataset from the internet. Best told TechCrunch that a website hosting a searchable copy of the stolen data was taken down by its domain registrar, leaving the site offline for now.
A search site called Icepick, created by journalist maia arson crimew, was no longer loading on Thursday morning. An internet record linked to the domain showed it had been placed on “serverHold,” which generally means the registrar locked or closed the domain.
TechCrunch also reviewed a takedown notice filed by Homeland Security through a security vendor called ZeroFox. The vendor has authority to act on the department’s behalf until 2028 and to seek removal of data from the internet. The notice asked the domain registrar to stop serving the personal contact and location data of individuals who did not consent to its publication.
A wider clash over privacy, access and moderation
The episode quickly turned from a breach into a broader fight over access to information. On one side are platform rules and privacy concerns, especially when leaked files contain phone numbers and email addresses. On the other are transparency advocates who say the same data can matter for public accountability and for public records requests.
There is still no final resolution. DDoSecrets remains part of the controversy because it publishes leaked datasets in the public interest, while Homeland Security is trying to suppress access to the material through takedown notices and registrar action. Bluesky, for its part, is trying to limit distribution of the links without cutting off discussion of the reporting itself.
Crimew also created a locally hosted version of the data, allowing people to access it on their own computer. So the material has not disappeared entirely, even as domain-level blocking and takedown efforts make it harder to reach through ordinary web links.
What remains is an uneasy balance. A dataset that may help journalists and researchers also contains information that a platform considers unsafe to share. How companies and agencies handle that balance in cases like this can shape how future leaks are distributed, discussed, and removed online.
