There is an interesting phenomenon, which is that a lot of people use the same online identity over and over again. My Bluesky handle is the same as my Twitter handle. It’s often also their email address, and they’ve registered an email address with us, and so we can figure out who the clan member is.
And then it becomes a question of looking at server logs. Who is in the clan with this person? Do we know who the people are in that clan? That results in an internal person. That’s very likely to be our guy.
Stupid leaker is stupid.
Good leakers know to stay anonymous and avoid looking for the spotlight.
So, basically: Don’t tell your friends! Unless you know them for a long time and they have a proven track record of keeping their mouth shut.
Good friend make throw away accounts for friends leaks