# Work Email or Number Posted on Bluesky After a Leak: Report

> Your work email or mobile number was posted on Bluesky after a data leak? Report each post and account, avoid resharing the file and protect your inbox.

- URL: https://www.awarexone.com/research/bluesky-work-email-or-mobile-number-posted-after-data-leak-report
- Author: Md Shariar Shanaz Shuvon, Founder & CEO, AwareXone
- Published: 2026-11-12
- Topics: Bluesky, Doxxing, Privacy, Content removal
- Related service: Content removal help: https://www.awarexone.com/social-media-recovery/social-media-content-removal

## Short answer

If someone posted your work email or mobile number on Bluesky after a data leak, report each post from its three-dot menu and the account from its profile, choosing the reason closest to personal information. Do not open or reshare the leaked file. Keep links and screenshots of the posts, tell your employer's security team, and watch for phishing.

## Summary

- Bluesky's Community Guidelines say not to share home addresses, personal contact info, financial or medical data, or identification documents.
- Report each post from its three-dot menu and the account from its profile menu, choosing the reason closest to sharing personal information.
- Do not open, download or reshare the leaked file, even to check whether you are in it or to warn colleagues.
- Bluesky has blocked links to a leaked dataset before, but it decides case by case whether to block links or remove posts.
- Expect more spam and phishing to the exposed address or number, and tell your employer's security team about the leak.

A dataset leaked, and now posts on Bluesky are sharing it, or sharing your work email and mobile number pulled from it. Perhaps a stranger quoted your details in a reply, or a thread is linking to a file that includes your name and contact information. You did not consent to any of it, and you are worried about who will use it. This guide covers what Bluesky's rules say about personal information, how to report the posts and accounts, why you should not open or reshare the file, and how to protect yourself while the reports are reviewed. It does not explain where any leaked data can be found.

Last checked: 12 November 2026.

## Quick Answer

If someone posted your work email or mobile number on Bluesky after a data leak, report each post from its three-dot menu and the account from its profile, choosing the reason closest to personal information. Do not open or reshare the leaked file. Keep links and screenshots of the posts, tell your employer's security team, and watch for phishing.

## Why This Is Being Asked Now

On 29 October 2026, [TechCrunch reported](https://techcrunch.com/2026/10/29/bluesky-blocks-links-to-leaked-dhs-employee-data-as-government-seeks-takedowns/) that Bluesky had started blocking links to a leaked dataset of US government employee records after users tried to share it. The report quoted Bluesky's chief operating officer as saying that the Community Guidelines prohibit the unauthorised sharing of personal information, that the files included contact details shared without authorisation, and that Bluesky chose to block the links rather than remove individual posts so that public discussion and reporting could continue. We are not linking to the dataset or listing anyone in it. The case shows that Bluesky does act on leaked contact details, and that the action may be a link block rather than a post removal.

## What Bluesky's Rules Say

Bluesky's [Community Guidelines](https://bsky.social/about/support/community-guidelines) list privacy protection under Safety First. They say Bluesky protects people's privacy by prohibiting unauthorised sharing of personal information and private content, and state: "Do not share home addresses, personal contact info, financial or medical data, or identification documents." They also say not to share sensitive private messages you were not authorised to share, unless sharing is in the public's interest, and not to share real-time location or other information that could pose immediate safety risks.

Work contact details are not named on their own in that list. Your report should explain that the email address or number is yours, that it was taken from a leak, and that it was posted without your consent. That gives the reviewer the context to treat it as personal contact information.

## How to Report on Bluesky

Bluesky's help page on [moderation and custom feeds](https://blueskyweb.zendesk.com/hc/en-us/articles/19002427251981-Moderation-and-Custom-Feeds) says: "You can report posts by clicking on the three-dot menu. You can also report an entire account by visiting their profile and clicking the three-dot menu there." Its [Terms of Service](https://bsky.social/about/support/tos) say you can report posts or users using the in-app reporting tools or a feedback form, and that Bluesky will promptly notify users when it takes enforcement action in response to a report.

1. Before reporting, copy the link to each post and take a screenshot that shows the account handle, the time and the post text. Crop or blur your own details in any copy you share with others.
2. Open each post, tap the three-dot menu and choose the report option.
3. Pick the reason closest to sharing personal information or privacy. Menu wording can change between app versions.
4. In the note, say that the post shares your personal contact details from a data leak without your consent.
5. If one account posts several times, open its profile, tap the three-dot menu and report the account as well.
6. Block the account after you have your evidence, so it cannot reply to you.

If you are not a Bluesky user, Bluesky's [Support](https://www.bsky.social/about/support) page lists a Global Regulatory Compliance Reporting Process for members of the public reporting content under local law, and a general support address, support@bsky.app. Our guide to [Bluesky harassment tools](https://www.awarexone.com/research/bluesky-harassment-block-mute-report-moderation-lists) explains block, mute and moderation lists if replies start piling up.

## Do Not Open or Reshare the File

- Do not click links to the dataset, even to check whether your details are in it. Links in leak threads can also carry malware.
- Do not download the file or forward it to colleagues to warn them. Describe the leak in words instead.
- Do not repost the posts that share your details, even to criticise them. It spreads your details further.
- Do not reply to the account that posted your details or ask it to delete them in public.

## Tell Your Employer Early

If the leak involves work contact details, your employer may already know about it, but it may not know your details are being posted on Bluesky. Tell your IT or security team in writing, and give them the post links rather than the file. They may want to warn colleagues, change how your address is shown publicly or watch for phishing aimed at your team. If the leak came from your employer's own systems, it may have its own obligations to deal with, which are separate from anything the platform decides. Keep your own copy of what you sent and when, alongside your record of Bluesky reports.

## Protect Yourself While Reports Are Reviewed

*Exposure checklist by AwareXone. Plain safety steps; your employer's policy may add more.*

| Risk | What to do | Who to tell |
| --- | --- | --- |
| Phishing to your work email | Treat unexpected links and attachments with suspicion, and check senders carefully | Your employer's IT or security team |
| Calls or texts to the exposed number | Do not share codes or confirm details to callers; let unknown numbers go to voicemail | Your mobile provider if the contact is abusive |
| Your details reposted elsewhere | Report each copy on that platform; search engines have their own removal routes | The platform where it appears |
| Threats or harassment | Keep records and report them; contact the police if you feel unsafe | Police where you live |

If your details also appear on X, our guide to [reporting private information on X](https://www.awarexone.com/research/x-private-information-posted-doxxing-report) covers that route, and our guide to [removing personal information from Google Search](https://www.awarexone.com/research/remove-personal-information-from-google-search) covers search results.

> Warning: **Scam warning.** After a leak, people often receive messages claiming to be from the platform, the employer or a data protection service, offering to remove their details for a payment or asking them to confirm their login. Bluesky's reporting tools are free. Do not share passwords, codes or account access with anyone who contacts you about the leak.

> Note: **Reporting is free.** Reporting posts and accounts on Bluesky costs nothing. You do not need to pay anyone to report.

## What Bluesky Decides

Bluesky decides whether a post breaks its guidelines and what action to take. As the TechCrunch report shows, that may be a link block rather than removal of each post, and Bluesky weighs public discussion as well as privacy. Bluesky does not publish a fixed review time. Copies of a leaked file may exist outside Bluesky, and reporting on Bluesky does not remove them elsewhere.

## When It Is Safer to Get Expert Help

Leaks spread across apps and search results quickly, every post needs its own report, and the people most exposed are often targeted with phishing straight afterwards. Checking the file yourself can make things worse.

If your details keep reappearing or you are worried about your safety, having an experienced team map and report the posts is the safer choice. AwareXone works from the post links you provide, prepares report text for Bluesky and other platforms for you to submit, and tracks each report. We never ask for your password or codes, we never open or share leaked files, and we cannot promise a removal. Apply for case review through our [content removal help](https://www.awarexone.com/social-media-recovery/social-media-content-removal) service, and read how we work on our [trust page](https://www.awarexone.com/trust).

## Frequently Asked Questions

### Does Bluesky allow people to post my contact details?

No. Bluesky's Community Guidelines say not to share personal contact info, home addresses, financial or medical data, or identification documents.

### How do I report a post on Bluesky?

Open the post's three-dot menu and choose the report option. Report the whole account from its profile menu if it posts repeatedly.

### Should I check the leaked file to see if I am in it?

No. Do not open or download it. Report the posts and tell your employer's security team.

### Will Bluesky delete every post with my details?

Bluesky decides each case. In one recent leak it blocked links to the dataset rather than removing individual posts.

### Can I report if I do not have a Bluesky account?

Bluesky's Support page lists a reporting process for members of the public and a support email address.

## Official sources

- [Official: Community Guidelines - Bluesky (read 12 November 2026)](https://bsky.social/about/support/community-guidelines)
- [Official: Moderation and Custom Feeds - Bluesky (read 12 November 2026)](https://blueskyweb.zendesk.com/hc/en-us/articles/19002427251981-Moderation-and-Custom-Feeds)
- [Official: Terms of Service - Bluesky (read 12 November 2026)](https://bsky.social/about/support/tos)
- [Official: Support - Bluesky (read 12 November 2026)](https://www.bsky.social/about/support)

---

AwareXone is an independent provider serving clients worldwide, not affiliated with any platform. The platform makes the final decision on every account. AwareXone never asks for passwords, OTP codes, backup codes or session cookies.
