Bluesky Blocks Links to Major Leak of DHS Employee Records

Bluesky has taken action to block users from accessing links to a substantial archive of records belonging to over 41,000 Department of Homeland Security (DHS) employees and contractors. The social media platform labels these pages as "malicious," citing the presence of individuals' contact information shared without authorization, which it states violates its community guidelines.

The newly leaked data, dubbed "Icepick" and published by the transparency nonprofit Distributed Denial of Secrets (DDoSecrets) and journalist maia arson crimew, includes names, email addresses, phone numbers, and details on internal group memberships, some linked to surveillance and undercover operations within agencies like ICE and CBP. A WIRED investigation found that the files offer a comprehensive look into DHS's organizational structure, from senior leadership down to individual immigration agents, and indicate access to specific technologies.

Bluesky's rationale for blocking the links is centered on its community guidelines, which prohibit sharing personal contact details. The company informed WIRED that it opted to block the links globally rather than removing individual posts, in an effort "to avoid limiting public discussion or restricting broader access to reporting and commentary." However, the same guidelines also explicitly protect "factual reporting" on matters of public interest concerning government transparency and public officials. An expert noted that the contact information in the leak preview appeared to be work-related, akin to details found on a business card.

When Bluesky users attempt to open a link to the archive via the platform's app or website, they are redirected to a "Blocked Link" page, which states the URL has been identified as "malicious." Bluesky did not comment on whether this block was automated or if any government agency had requested the restriction. Interestingly, DDoSecrets' main website remains accessible on Bluesky, and at least one third-party Bluesky application, Klearsky, allows unimpeded access to the DHS archive links.

This incident is not DDoSecrets' first encounter with social media platforms restricting access to its publications. Cofounder Emma Best highlighted that Twitter previously suspended DDoSecrets' account and blocked links to its website in 2020 after the organization released "BlueLeaks," an extensive collection of internal police records. Best contends that tech platforms frequently succumb to government pressure but insists that such measures ultimately fail to prevent information dissemination, stating, "They can’t stop the signal."

Bluesky, which originated as a Twitter research initiative in 2019 before becoming an independent entity and opening to the public in February 2024, now boasts 45 million registered accounts and an estimated 10.4 million monthly active users. The platform's open protocol allows third-party developers to create their own apps and determine which of Bluesky's moderation labels to implement. Toni Schneider, former founding CEO of Automattic, took the helm as CEO after cofounder Jay Graber stepped down in March.

In stark contrast to Bluesky's approach, competitor X (formerly Twitter) appears to handle the leak differently. X's AI-powered Grok chatbot openly directed users to the "Icepick" website, describing it as a "cleaned searchable web tool" and indicating that the complete dataset is available via DDoSecrets' website or torrent. X has yet to comment on its position regarding the leak.

This episode underscores the ongoing tension between content moderation policies aimed at protecting personal data and the public's right to access information of significant public interest, especially when it involves government operations and personnel.

FAQ

Q: What is the DHS employee records leak that Bluesky is blocking?

A: The leak, known as "Icepick," consists of records for over 41,000 Department of Homeland Security (DHS) employees and contractors, including individuals from ICE and CBP. It contains names, contact information like email addresses and phone numbers, and details on internal groups, some associated with surveillance and undercover operations. It also reveals aspects of DHS's organizational structure.

Q: Why is Bluesky blocking links to this information?

A: Bluesky states that it is blocking the links because the archive contains people’s contact information, which was shared without their authorization. The platform deems these links "malicious" and claims their sharing violates its community guidelines, which prohibit the dissemination of personal contact details.

Q: How does Bluesky's action compare to other social media platforms?

A: Bluesky's approach contrasts with X (formerly Twitter), where its Grok chatbot has actively pointed users to the "Icepick" leak website. Historically, DDoSecrets, the group that published the leak, has faced similar content restrictions from platforms like Twitter for previous government data releases, suggesting a pattern of social media companies navigating content moderation, public interest, and potential government pressure differently.