Work Email or Number Posted on Bluesky After a Leak: Report

A dataset leaked, and now posts on Bluesky are sharing it, or sharing your work email and mobile number pulled from it. Perhaps a stranger quoted your details in a reply, or a thread is linking to a file that includes your name and contact information. You did not consent to any of it, and you are worried about who will use it. This guide covers what Bluesky's rules say about personal information, how to report the posts and accounts, why you should not open or reshare the file, and how to protect yourself while the reports are reviewed. It does not explain where any leaked data can be found.

Last checked: 12 November 2026.

#Quick Answer

If someone posted your work email or mobile number on Bluesky after a data leak, report each post from its three-dot menu and the account from its profile, choosing the reason closest to personal information. Do not open or reshare the leaked file. Keep links and screenshots of the posts, tell your employer's security team, and watch for phishing.

#Why This Is Being Asked Now

On 29 October 2026, TechCrunch reported that Bluesky had started blocking links to a leaked dataset of US government employee records after users tried to share it. The report quoted Bluesky's chief operating officer as saying that the Community Guidelines prohibit the unauthorised sharing of personal information, that the files included contact details shared without authorisation, and that Bluesky chose to block the links rather than remove individual posts so that public discussion and reporting could continue. We are not linking to the dataset or listing anyone in it. The case shows that Bluesky does act on leaked contact details, and that the action may be a link block rather than a post removal.

#What Bluesky's Rules Say

Bluesky's Community Guidelines list privacy protection under Safety First. They say Bluesky protects people's privacy by prohibiting unauthorised sharing of personal information and private content, and state: "Do not share home addresses, personal contact info, financial or medical data, or identification documents." They also say not to share sensitive private messages you were not authorised to share, unless sharing is in the public's interest, and not to share real-time location or other information that could pose immediate safety risks.

Work contact details are not named on their own in that list. Your report should explain that the email address or number is yours, that it was taken from a leak, and that it was posted without your consent. That gives the reviewer the context to treat it as personal contact information.

#How to Report on Bluesky

Bluesky's help page on moderation and custom feeds says: "You can report posts by clicking on the three-dot menu. You can also report an entire account by visiting their profile and clicking the three-dot menu there." Its Terms of Service say you can report posts or users using the in-app reporting tools or a feedback form, and that Bluesky will promptly notify users when it takes enforcement action in response to a report.

1. Before reporting, copy the link to each post and take a screenshot that shows the account handle, the time and the post text. Crop or blur your own details in any copy you share with others.
2. Open each post, tap the three-dot menu and choose the report option.
3. Pick the reason closest to sharing personal information or privacy. Menu wording can change between app versions.
4. In the note, say that the post shares your personal contact details from a data leak without your consent.
5. If one account posts several times, open its profile, tap the three-dot menu and report the account as well.
6. Block the account after you have your evidence, so it cannot reply to you.

If you are not a Bluesky user, Bluesky's Support page lists a Global Regulatory Compliance Reporting Process for members of the public reporting content under local law, and a general support address, support@bsky.app. Our guide to Bluesky harassment tools explains block, mute and moderation lists if replies start piling up.

#Do Not Open or Reshare the File

• Do not click links to the dataset, even to check whether your details are in it. Links in leak threads can also carry malware.
• Do not download the file or forward it to colleagues to warn them. Describe the leak in words instead.
• Do not repost the posts that share your details, even to criticise them. It spreads your details further.
• Do not reply to the account that posted your details or ask it to delete them in public.

#Tell Your Employer Early

If the leak involves work contact details, your employer may already know about it, but it may not know your details are being posted on Bluesky. Tell your IT or security team in writing, and give them the post links rather than the file. They may want to warn colleagues, change how your address is shown publicly or watch for phishing aimed at your team. If the leak came from your employer's own systems, it may have its own obligations to deal with, which are separate from anything the platform decides. Keep your own copy of what you sent and when, alongside your record of Bluesky reports.

#Protect Yourself While Reports Are Reviewed

If your details also appear on X, our guide to reporting private information on X covers that route, and our guide to removing personal information from Google Search covers search results.

#What Bluesky Decides

Bluesky decides whether a post breaks its guidelines and what action to take. As the TechCrunch report shows, that may be a link block rather than removal of each post, and Bluesky weighs public discussion as well as privacy. Bluesky does not publish a fixed review time. Copies of a leaked file may exist outside Bluesky, and reporting on Bluesky does not remove them elsewhere.

#When It Is Safer to Get Expert Help

Leaks spread across apps and search results quickly, every post needs its own report, and the people most exposed are often targeted with phishing straight afterwards. Checking the file yourself can make things worse.

If your details keep reappearing or you are worried about your safety, having an experienced team map and report the posts is the safer choice. AwareXone works from the post links you provide, prepares report text for Bluesky and other platforms for you to submit, and tracks each report. We never ask for your password or codes, we never open or share leaked files, and we cannot promise a removal. Apply for case review through our content removal help service, and read how we work on our trust page.

#Frequently Asked Questions