Bluesky Recovers After Multi-Day DDoS Attack by Pro-Iran Hacking Group Bluesky, the decentralized social media platform, restored full service on 20 April 2026 following a Distributed Denial-of-Service (DDoS) attack that disrupted operations for nearly five days. The incident began at 11:40 PM PDT on 15 April, when users reported feeds failing to refresh, followed by widespread outages including broken notifications, search functions, and thread access. Bluesky confirmed the attack targeted its API, overwhelming servers with junk traffic to sever communication between the app and its backend. While the platform initially described the issue as "service interruptions," it later acknowledged a "sophisticated DDoS attack" that escalated throughout 16 April. The company provided updates via its status page and X (formerly Twitter), stating no evidence of unauthorized data access was found. The attack was claimed by the 313 Team (Islamic Cyber Resistance in Iraq), a pro-Iran hacking collective known for targeting entities perceived as aligned with the U.S. or Israel. The group, which has recently disrupted Bahraini government websites, prioritizes disruption over data theft, often publicizing its attacks on Telegram. On 20 April, the same group briefly targeted Mastodon.social, though the federated platform’s distributed infrastructure mitigated the impact. With 43.7 million users, Bluesky’s outage raised concerns about data security, but the company reiterated that DDoS attacks do not compromise user information. By 9 PM PDT on 16 April, the platform stabilized, and a final update on 20 April declared the incident resolved. The attack highlights the persistent threat of ideologically motivated cyber disruptions, particularly from groups leveraging social media platforms as high-profile targets.