Summary of the attack on Bluesky in April 2026

The social media platform Bluesky experienced a prolonged server outage. This summary is based on the official announcement following the incident. ᝰ✍🏻

◆ Overview of the cyberattack on Bluesky (What happened)

• Time of occurrence: Approximately 23:40 on 15 April (PDT) (15:40 on 16 April, Japan Standard Time) • Nature of the attack: Sophisticated distributed denial-of-service (DDoS) attack • A large number of bots (infected PCs and IoT devices) scattered across the globe sent a massive volume of requests to Bluesky • As a result, the servers were unable to handle the load, blocking access for legitimate users

◆ What were the effects?

According to reports from Bluesky, TechCrunch and Cybernews, the following issues occurred: • Feeds could not be loaded • Notifications were not received or were delayed • Threads could not be opened • Searches returned errors • Messages such as ‘Temporarily unavailable due to high traffic’ and ‘Rate Limit Exceeded’ were displayed. It is reported that the attack intensified throughout 16 April, with intermittent disruptions continuing.

◆ Why was it described as a ‘sophisticated’ DDoS attack?

Media reports have described it as ‘sophisticated’. Possible reasons include: • The attack persisted for an extended period (lasting several days) • The volume of traffic was extremely high, breaching standard defences • It may have combined multiple routes and methods • Load patterns that appeared to specifically target certain functions (feeds, notifications, search)

🍀*゜（These are inferences drawn from media reports; details regarding the attacker or their methods have not been disclosed.）

◆ Is user data safe?

Bluesky has explicitly stated that there is ‘no evidence of unauthorised access’. In other words, this attack is believed to have been an ‘attack aimed at disrupting the service’, rather than an intrusion-type attack intended to steal data.

Afterword

It appears the attacks on Bluesky are still ongoing, and an official announcement is expected later today, 18 April (as of the morning of 18 April, no announcement has yet been made).

Thank you for reading 🙏

by Bluesky Account  @mitte13.bsky.social