Skip to content

Major DHS employee records leak, Bluesky blocks links to archive

newsOct 29, 2026222,093

Bluesky is blocking links to a leaked archive called Icepick that lists records on more than 41,000 Department of Homeland Security employees and contractors, labeling the URLs "malicious". Distributed Denial of Secrets published the files, which include email addresses, phone numbers, work addresses, membership in internal groups, and references to undercover and surveillance programs; a WIRED analysis found the archive maps DHS organization from senior leaders to individual agents. Bluesky told WIRED the contact information was shared without authorization and violated its community guidelines, and that the company chose to block links rather than remove posts to avoid limiting public discussion or reporting. Users who click the archive links in Bluesky land on a "Blocked Link" page; Bluesky declined to say whether the block was automated or requested by any government agency. The DDoSecrets homepage itself still loads on Bluesky, and at least one third-party Bluesky app, Klearsky, opens the DHS archive without a warning. Emma Best, cofounder of DDoSecrets, said social platforms have previously labeled the organization malicious and asserted platforms cannot prevent the information from spreading. Because Bluesky runs on an open protocol, outside developers can build apps that apply different moderation labels, which has allowed some clients and desktop browsers to access the archive despite the companywide block.

dell cameron
@dell.bsky.social

NEW: Bluesky is blocking links to a leaked archive of records on 41,000+ DHS employees, citing the contact information inside. The company says it chose to block links, rather than remove posts, “to avoid limiting public discussion or restricting broader access to reporting and commentary.”

8365h ago
Andrew Couts
@couts.bsky.social

NEW: Bluesky won’t let you click links to the leak of DHS employee data published by @ddosecrets.org and @crimew.gay because it says it’s a violation of its rules. @dmehro.bsky.social, @regret.bsky.social, & @dell.bsky.social report: www.wired.com/story/bluesk...

5505h ago
hikikomorphism
@hikikomorphism.bsky.social

I just confirmed and I would really like some transparency on why @bsky.app is doing this. If I'm being charitable, I think we can assume they pull from some upstream database and some automated job included icepi.cx, but if not: I would love to know exactly who was responsible for this decision

1097h ago
1 source