Bluesky Blocks Links to Leaked DHS Employee Data Amid Government Efforts to Takedown

Bluesky, the social media platform, has taken action to block links to a nonprofit's website hosting over 41,000 leaked Department of Homeland Security (DHS) employee records, reported TechCrunch ¹³. This move comes as the government seeks to address the unauthorized sharing of personal information and remove the leaked data from the internet.

The leak, which reportedly includes names, work emails, phone numbers, job titles, and office locations, has been published by the transparency nonprofit Distributed Denial of Secrets (DDoSecrets), according to SecurityWeek ²³. The data was stolen from an Okta single sign-on system used by DHS employees and contractors, revealing key personnel involved in covert and undercover operations within the department ².

DHS is aware of the potential breach and is working to address it, with a takedown notice sent by the department through ZeroFox to remove the leaked data from the internet ¹². The leak includes detailed organizational structure of DHS, including senior leadership and individual immigration agents, providing insight into the inner workings of the department ³.

Bluesky's Chief Operating Officer stated that links to the dataset were blocked due to unauthorized sharing of personal information, aligning with the platform’s community guidelines that prohibit sharing home addresses, personal contact info, financial or medical data, and ID documents ¹³. The leaked records mostly pertain to Customs and Border Protection (CBP), Immigration and Customs Enforcement (ICE), and Homeland Security Investigations (HSI) employees, with approximately 1,000 Cybersecurity and Infrastructure Security Agency (CISA) employees also having their information leaked ².

This incident follows recent cybersecurity breaches, such as the ShinyHunters breach of FBI systems one month prior and the HSIN hack three months ago, highlighting ongoing vulnerabilities in government data security ². The leak was published by DDoSecrets on a Wednesday, with Icepick, a search site for the leaked data, taken offline due to a server hold ³.

Bluesky's decision to block links aims to preserve public discussion and broader access to reporting while adhering to its community guidelines, which prohibit the sharing of certain types of personal information ³. The platform's user base includes 45 million registered accounts and around 10.4 million mobile app users, making it a significant player in the social media landscape ³.

Distributed Denial of Secrets has faced previous issues with social media platforms labeling its website as malicious or restricting access to its publications, indicating a pattern of challenges in disseminating information through these channels ³. X's Grok chatbot directed users to the Icepick website, describing it as a 'cleaned searchable web tool', further emphasizing the importance of accessible data for public scrutiny ³.

What we know

• - Bluesky blocked links to a nonprofit's website hosting leaked DHS employee data ¹³
• - Over 41,000 DHS employee records were leaked online ²³
• - DHS is aware of the potential breach and is working to address it ¹²
• - The data was stolen from an Okta single sign-on system used by DHS employees and contractors ²
• - The leaked data includes names, work emails, phone numbers, job titles, and office locations ²
• - The leak reveals key personnel involved in covert and undercover operations within DHS ²
• - Bluesky's COO stated that links to the dataset were blocked due to unauthorized sharing of personal information ¹
• - A takedown notice was sent by DHS through ZeroFox to remove the leaked data from the internet ¹
• - Bluesky labels the linked pages as 'malicious' due to unauthorized sharing of personal information ³
• - The leak includes detailed organizational structure of DHS, including senior leadership and individual immigration agents ³
• - The leaked data includes professional contact details similar to those found on an employee's business card ¹
• - The hacker's username is 'Department of Peace' ²
• - Okta stated their systems were secure and showed no evidence of compromise ²
• - The leaked records mostly pertain to CBP, ICE, and HSI employees ²
• - Approximately 1,000 CISA employees also had their information leaked ²
• - This incident occurred one month after ShinyHunters breached FBI systems and three months after HSIN was hacked ²
• - Icepick, a search site for the leaked data, was taken offline due to a server hold ¹
• - The leak was published by the transparency nonprofit Distributed Denial of Secrets on a Wednesday ³
• - Bluesky's decision to block links aims to preserve public discussion and broader access to reporting ³
• - Bluesky's community guidelines prohibit sharing home addresses, personal contact info, financial or medical data, and ID documents ³
• - Bluesky's user base includes 45 million registered accounts and around 10.4 million mobile app users ³
• - DDoSecrets faced previous issues with social media platforms labeling its website as malicious or restricting access to its publications ³
• - X's Grok chatbot directed users to the Icepick website, describing it as a 'cleaned searchable web tool' ³