Bluesky experienced a major outage in mid-August 2026 that lasted about 24 hours, the company confirmed Monday. According to Bluesky officials, the disruption was caused by a large-scale distributed denial-of-service (DDoS) attack that flooded the platform with junk traffic, prompting the company to upgrade its defenses.

The disruption began in mid-August 2026, with Bluesky users reporting widespread inability to access the platform and interruptions to normal functionality over a roughly 24-hour period. The company publicly confirmed the outage on Monday, August 17, attributing the downtime to a large-scale distributed denial-of-service (DDoS) attack that flooded its site with junk traffic. In response, the company stated it had upgraded its defenses and continued to monitor the situation closely, though it did not disclose specific technical details about the mitigation measures or the source of the attack.

Bluesky officials said the attack overwhelmed the platform’s servers, rendering the service unavailable for about a day.

Security researchers discussing the incident in public forums linked the August outage to Iran-backed threat actors, who reportedly claimed responsibility for the campaign. These researchers connected the attack to a broader pattern of Iranian operations targeting U.S. businesses in 2026, coinciding with heightened geopolitical tensions following the U.S.–Israel conflict earlier in the year. Some reports referenced groups using “DiamWall-based DDoS-for-hire infrastructure” and a collective known as 313 Team, including a subgroup called Iraq-313 Team, which has been associated with previous hostile campaigns in the region. However, Bluesky’s official statement did not confirm any specific threat actor or state sponsorship, leaving attribution based on external analysis and attacker claims rather than company confirmation.

The August attack was characterized as a sophisticated DDoS campaign, similar to an earlier incident in April 2026. During that prior event, Bluesky engineers identified a complex assault targeting the platform’s API—the system responsible for data exchange between users’ devices and Bluesky’s servers—resulting in intermittent interruptions to feeds, notifications, threads, and search functions. That attack began on the evening of April 15 and lasted approximately 24 hours, during which Bluesky publicly acknowledged the ongoing cyberattack and provided regular status updates. Officials emphasized that the April incident did not result in unauthorized access to private user data, framing it as an availability attack rather than a data breach.

The August outage, like the April event, involved persistent waves of malicious traffic that effectively jammed communication channels and prevented legitimate users from connecting. Bluesky described the attacks as involving more than simple volumetric flooding, suggesting exploitation of weaknesses in networking or application-layer handling. Security reporting indicated the use of industrialized DDoS-for-hire services, which allow attackers to rent capacity to overwhelm targets. The repeated nature of these attacks has prompted Bluesky to enhance its defensive posture, although the company has not specified whether these improvements involve network-level filtering, application-layer protections, or changes to its decentralized infrastructure.

Users affected by the August outage experienced a platform-wide service disruption lasting about a day, during which they were effectively locked out or faced broken timelines and difficulty interacting with posts. Bluesky acknowledged the impact on its application and noted that engineers were responding in real time to stabilize the platform. The company’s communications have consistently stressed continuous monitoring and adaptive defensive measures in light of the recurring attacks, while refraining from releasing detailed technical information that could potentially aid attackers.

Bluesky’s decentralized architecture, which relies on personal data servers (PDS) and distributed APIs, has not shielded the platform from these large-scale DDoS campaigns. Analysts have noted that even decentralized services remain vulnerable to platform-wide disruption if key components or central infrastructure are overwhelmed. The repeated day-long outages in April and August have raised questions about the resilience of Bluesky’s infrastructure and its ability to withstand sustained traffic floods targeting critical systems.

The August 2026 DDoS attack occurred amid a broader increase in cyberattacks targeting U.S. companies, with researchers highlighting a surge in activity from Iranian-aligned threat actors. Bluesky’s leadership has previously acknowledged that some DDoS incidents may arise from third-party misconfigurations or unintended causes, while others appear to be deliberate, politically motivated, or criminal campaigns. The company continues to emphasize the importance of ongoing vigilance and infrastructure investment to address evolving threats.

Bluesky’s response to the August attack included upgrading its defenses and maintaining active incident response operations, though the company has remained cautious about disclosing specific technical countermeasures. The repeated major DDoS events in 2026 underscore the challenges faced by social media platforms in defending against sophisticated cyberattacks designed to disrupt service availability and degrade user experience.

Bluesky surpassed 10 million users in September 2024, the company announced, following a surge in new accounts primarily from Brazil. The growth accelerated after Brazil’s top court banned X, prompting more than 85% of new Bluesky users to join the platform, according to Bluesky officials.

The milestone was reached as Bluesky’s user base grew from 9 million to over 10 million in September 2024, a surge driven largely by the shutdown of X, formerly known as Twitter, in Brazil. According to Bluesky officials, more than 85% of the new users joining the platform following the ban were from Brazil, resulting in a rapid influx of approximately 3 million accounts within days. The company highlighted this growth on its official channels, posting, “If you’re reading this, you’re one of the first 10 million users on Bluesky!”

More than 85% of the new users joining the platform following the ban were from Brazil, resulting in a rapid influx of approximately 3 million accounts within days.

Brazil’s top court ordered the ban on X, instituting fines for users who accessed the platform through virtual private networks (VPNs). This legal action prompted a significant migration of social media users to alternative platforms, including Bluesky and Meta’s Threads. Both apps quickly rose in popularity, ranking among the top 10 social media applications on Brazil’s App Store and Play Store during the period following the shutdown, according to app market data.

Bluesky’s recent feature updates contributed to the platform’s appeal amid this user migration. The company introduced a “detach quote” function that allows users to separate quote posts from the original content. When a quote is detached, the original post displays a message stating “Deleted by the poster,” according to Bluesky’s official feature release notes. This tool is designed to enable users to limit unwanted attention and reduce instances of harassment or dogpiling. Users can access the feature by clicking the ‘…’ icon on a quote post and selecting “Detach quote.”

Additional safety and moderation tools were launched in version 1.90 of the platform, which included a followers-only reply setting to help users keep conversations within trusted networks. Moderation lists were also introduced to simplify the sharing of content preferences across the platform. Furthermore, users gained the ability to hide replies to their posts and to mute specific words for set durations, features aimed at enhancing user control over their interactions, Bluesky representatives said.

The platform also expanded its capabilities by launching video posting functionality in the last week of the reporting period. Bluesky had operated in an invite-only mode for nearly a year before opening access to all users in February 2024. The company reported record activity levels during the surge in new accounts, though it also faced technical challenges. Server glitches and performance issues occurred as a result of the bulk signups, particularly due to the influx of Brazilian users. Bluesky officials confirmed that infrastructure improvements were implemented to address the strain and maintain platform stability.

In the broader competitive landscape, Bluesky remains a rival to Meta-owned Threads, which had grown to over 200 million users by September 2024. Both platforms sought to attract users displaced by the X ban in Brazil. Bluesky’s decentralized approach and recent feature rollouts, including the quote post functionality mirroring that of X, represent strategic efforts to differentiate the service in the crowded social media market, according to industry analysts.

As Bluesky continues to scale its operations, the company is expected to focus on enhancing technical infrastructure and expanding its feature set to support its growing global user base. The rapid growth following regulatory actions in Brazil underscores the platform’s increasing presence in the social media ecosystem.