DHS Data Breach: 41,000 Employee Records Leaked, Bluesky Blocks Links

Bluesky is now blocking users from opening links to the leaked DHS archive, labeling the pages as "malicious." The company told WIRED it made the decision because the files contain people's contact information shared without authorization, violating its community guidelines.

Bluesky said it chose to block the links rather than remove individual posts "to avoid limiting public discussion or restricting broader access to reporting and commentary." Users who try to open the archive through Bluesky's website or app see a "Blocked Link" warning. At least one third-party app, Klearsky, still opens the links without warning.

DDoSecrets cofounder Emma Best criticized the move, noting that Twitter similarly suspended the group's account in 2020 after it published BlueLeaks, a massive trove of police records. "They can't stop the signal," Best said. Meanwhile, on X, the Grok chatbot has pointed users to a searchable version of the Icepick dataset.

For readers in Tunisia and across the region, this breach is a reminder that even large government agencies can fall victim to identity-related attacks. The DHS hack followed a similar breach at the FBI, showing that no organization is immune.

If you work with or for any US-linked agency, or if your personal data is held by a service provider like Okta, it's worth reviewing your account security. There is no indication that Tunisian agencies or citizens are affected. There is also no announced timeline for when the leaked data might be taken down, and DDoSecrets says it will keep the archive online.

The incident also highlights the growing tension between platforms and transparency groups over how to handle leaked data that contains personal information. Bluesky's decision to block links, while X's Grok promotes them, shows there is no consensus on the right approach.