Bluesky Phishing Attack Compromised More Than 4,500 Accounts
Bluesky confirmed a phishing attack involving a fake government payment offer. It temporarily suspended the affected accounts.
The Bluesky phishing attack compromised more than 4,500 user accounts, the platform announced on October 17, 2026. According to Bluesky, the attack spread through posts promoting a fake government payment offer. The company did not announce a breach of its own infrastructure or a data leak from the platform.
The Bluesky Phishing Attack Used a Fake Government Payment
According to a statement from Bluesky, the phishing attack spread through posts featuring a fake government payment as bait. The company did not disclose technical details about the phishing site, the campaign’s timeframe, or the exact number of affected accounts.
Compromised user accounts may increase the credibility of further fraudulent posts among their contacts and followers. However, Bluesky has not yet provided details about any further use of the affected accounts.
Bluesky Temporarily Suspended the Affected Accounts
Bluesky said it temporarily suspended the affected accounts. It is working with their owners to secure the accounts and restore access. The platform did not announce a software fix; it described the incident as a phishing attack, not an exploitation of a vulnerability in its service.
The company confirmed that more than 4,500 accounts were affected, but did not disclose the exact number. It is not known how many users may have lost money or data outside their Bluesky accounts as a result of the campaign.
The Attackers and Damage Outside Bluesky Are Unknown
The attackers’ identity, motivation, and geographic origin have not been confirmed. Bluesky also did not disclose whether the campaign led to financial losses or the collection of personal data outside the platform.
- Bluesky may publish a more detailed analysis of the attack or revise the number of affected accounts.
- The company may confirm further use of the compromised accounts in other campaigns.
- The platform may clarify the pace at which legitimate owners regain access to suspended accounts.
Sources
- Bluesky Safety – Official confirmation of the phishing attack, more than 4,500 compromised accounts, the fake government payment lure, and the temporary account suspensions.
- Bluesky Support – The official Bluesky platform support channel, relevant to affected users.
Verified and updated: October 18, 2026 06:24
