Bluesky blocks links to leaked DHS employee data as government seeks takedowns

Links to leaked government employee contact information are blocked by social media platforms.

Following a significant leak of data pertaining to U.S. Department of Homeland Security (DHS) employees, the social media platform Bluesky has begun blocking links to a nonprofit website, DDoSecrets, which hosted the compromised information. The leak reportedly contains over 40,000 user account records, including names, work phone numbers, and email addresses of DHS employees and agents across various agencies like CBP and ICE. DDoSecrets, which publishes leaked datasets, made the data publicly accessible, with researchers noting its potential value for Freedom of Information Act requests. Homeland Security acknowledged the breach and stated it was actively addressing the situation. Bluesky cited violations of its community guidelines regarding sensitive personal information as the reason for blocking links, opting for link blocking over post removal. Concurrently, a website that provided a searchable copy of the stolen data has been taken offline, with its domain registrar placing it on 'serverHold' following a takedown notice filed by Homeland Security through a security vendor.

Bluesky's decision to block links, rather than remove posts containing the leaked DHS employee data, highlights a nuanced approach to content moderation in response to significant data breaches. This action, prompted by a leak of over 40,000 employee records, indicates a platform prioritizing user safety and data privacy by preventing direct access to sensitive information, while still allowing discussion around the breach.

The government's proactive takedown notices, facilitated by security vendors like ZeroFox, demonstrate an increasing effort to control the dissemination of compromised data online. This move, coupled with domain registrar actions, suggests a coordinated strategy to limit the accessibility of sensitive information, particularly when it impacts national security or employee privacy, and raises questions about the long-term availability and archival of such datasets.