Bluesky blocks links to leaked DHS employee data as government seeks takedowns

Following a sizable leak of unit information astir employees who enactment for the U.S. Department of Homeland Security, societal web Bluesky is present blocking its users from accessing a nonprofit’s website that hosts the leaked data.

Users reported that the links to nonprofit transparency corporate DDoSecrets were marked arsenic “malicious” soon aft TechCrunch and different media outlets broke the news that Homeland Security had been hacked.

A screenshot showing Bluesky blocking links to DDoSecrets.Image Credits:TechCrunch /

TechCrunch reported connected Wednesday that a hacker obtained implicit 40,000 idiosyncratic relationship records from Homeland Security’s login system, including the names and interaction information, specified arsenic work-issued telephone numbers and email addresses, of employees and agents moving for its assorted agencies similar Customs and Border Protection (CBP) and Immigration and Customs Enforcement (ICE).

The information included accusation that was akin to that connected an employee’s concern card. DDoSecrets, which publishes leaked information sets successful the nationalist interest, besides made the hacked information publically available. Researchers who are investigating abuses by the Trump medication accidental that the information volition beryllium invaluable for seeking records from the authorities nether nationalist entree laws.

A spokesperson for Homeland Security told TechCrunch connected Wednesday that it was “aware of a imaginable breach and is actively moving to code the concern swiftly and effectively.” 

Bluesky did not respond to a petition for remark extracurricular of U.S. West Coast concern hours astir the blocks. A Bluesky spokesperson told Wired that the exposed information violates its community line rules, but chose to artifact the nexus alternatively than taking down the posts. (We’ll update if we perceive back.)

DDoSecrets co-founder and writer Emma Best told TechCrunch that portion Bluesky’s presumption of work prohibit sharing location addresses and idiosyncratic interaction information, Best said that neither of these is successful the leaked dataset.

“The information contains nonrecreational interaction accusation for authorities employees astatine a clip erstwhile the nationalist involvement successful that nonstop accusation has ne'er been higher. By requiring the nationalist to supply it for [Freedom of Information Act] requests, the authorities has made that nonstop accusation a important portion of the transparency channels they privation the nationalist to prosecute in,” said Best.

Homeland Security sends takedown notices

Best told TechCrunch that a website hosting a searchable transcript of the stolen information was taken down by its domain registrar, efficaciously knocking the website offline for now.

A search site made by journalist, maia arson crimew, nary longer loads arsenic of Thursday morning. An net grounds associated with the domain says it has been placed connected “serverHold,” which generally means that the domain registrar locked oregon closed the domain for immoderate reason.

Homeland Security filed a takedown announcement via a information vendor called ZeroFox, which has authorization to enactment connected the department’s behalf until 2028 to question the removal of information from the internet. TechCrunch has seen a transcript of the takedown announcement for the hunt site, which asks that the domain registrar “stop serving the idiosyncratic interaction and determination information of individuals who did not consent to its publication.” 

CentralNic, which hosts the domain name, did not respond to a petition for remark from TechCrunch astir the takedown oregon whether it was instructed to bash truthful by a authorities demand. ZeroFox besides did not respond to a petition for comment. 

The Homeland Security spokesperson did not respond to a follow-up regarding the takedown announcement affecting Icepick’s website.

Crimew besides made a locally hosted mentation of the data, allowing anyone to entree it connected their ain computer.