What is Doxing? Examples and Prevention

Doxing (also spelled “doxxing”) is the act of publicly revealing or publishing private information about an individual without their consent. This information can include home addresses, phone numbers, email addresses, workplace details, or other personal data. The term originated from the phrase “dropping docs” (documents) and is often used as a form of online harassment or revenge.

Doxing can have serious consequences for the victim, including threats to their safety, privacy violations, and emotional distress. It is generally considered an unethical and illegal activity, and many online platforms have policies against doxing to protect users’ privacy and safety.

Doxing typically involves several steps to gather and then publicly share someone’s private information. Here’s a breakdown of how it works:

Information Gathering:

• Social Media: Scouring social media profiles for personal details such as addresses, phone numbers, email addresses, family members, and workplace information.
• Public Records: Accessing publicly available records, such as property records, voter registrations, and court documents.
• Data Breaches: Exploiting leaked databases from data breaches to find personal information.
• Search Engines: Using search engines to find mentions of the target in forums, blogs, news articles, and other online content.
• Hacking: In some cases, doxers may hack into accounts or devices to retrieve sensitive information.

Cross-Referencing Data:

Compiling and cross-referencing information from various sources to build a comprehensive profile of the target. This can include combining details from different social media accounts or matching public records with online profiles.

Verification:

Ensuring the accuracy of the collected information to avoid mistakes that could lead to targeting the wrong person.

Public Exposure:

• Posting Online: Sharing the gathered information on public forums, social media platforms, or dedicated doxing websites.
• Direct Harassment: Sending the information to the target’s contacts, employers, or other relevant parties to cause distress or damage.
• Swatting: In extreme cases, doxers may call emergency services to report a fake emergency at the victim’s address, leading to a potentially dangerous police response.

Prevention and Protection

To protect against doxing, individuals can take several precautions:

• Privacy Settings: Adjust privacy settings on social media to limit who can see personal information.
• Minimize Sharing: Avoid sharing sensitive information online and be cautious about what is posted publicly.
• Strong Passwords: Use strong, unique passwords and enable two-factor authentication to secure accounts.
• Monitoring: Regularly monitor online presence to identify and address any exposed personal information.
• Legal Actions: If doxed, victims can report the incident to the relevant platform and, in some cases, law enforcement agencies.

Examples of doxing involve the unauthorized release of personal information, often leading to harassment, threats, or other harmful consequences. Here are some notable examples:

1. Journalists and Activists:

Brianna Wu: A game developer and outspoken critic of sexism in the gaming industry, Brianna Wu was doxed during the GamerGate controversy. Her personal information, including her home address, was published online, leading to threats and harassment.

Leslie Jones: The actress and comedian faced severe harassment and was doxed in 2016. Hackers released personal photos, identification documents, and private information online.

2. Public Figures and Politicians:

Nancy Pelosi: In 2021, following the Capitol riot, the personal information of several politicians, including House Speaker Nancy Pelosi, was published online. This led to harassment and threats against them.

CNN Reporters: During periods of intense political controversy, several CNN reporters have been doxed, resulting in harassment and threats to their safety.

3. Private Individuals:

Gamergate Controversy: Numerous women in the gaming industry, including developers, journalists, and critics, were doxed during the GamerGate controversy. Their personal information was shared online, leading to widespread harassment.

Random Individuals: In some cases, private individuals who get involved in high-profile events or internet controversies find themselves doxed by those who disagree with them or seek revenge.

4. Swatting:

Andrew Finch: In one of the most tragic cases, Andrew Finch was a victim of “swatting,” a severe form of doxing where someone calls in a fake emergency to get a SWAT team sent to the victim’s house. Finch was killed by police responding to a false report of a hostage situation.

5. Celebrities:

Taylor Swift: In 2014, Taylor Swift’s personal information, including phone numbers and addresses, was leaked online by hackers. This led to significant breaches of her privacy.

Emma Watson: After giving a speech on gender equality, actress Emma Watson was threatened with doxing. A website was created with a countdown, claiming it would release her private photos and information, though it was later revealed to be a hoax.

Doxing can ruin lives, exposing targeted individuals and their families to both online and real-world harassment. But is it illegal?

The answer varies: doxing is often not explicitly illegal if the exposed information lies within the public domain and was obtained using legal methods. However, depending on your jurisdiction, doxing may violate laws designed to combat stalking, harassment, and threats. For example, in the U.S., doxing a government employee can fall under federal conspiracy laws and is treated as a federal offense.

The legality of doxing also depends on the specific information revealed. Disclosing someone’s real name is generally less serious than revealing their home address or telephone number, which can pose direct threats to personal safety. Many countries have privacy laws that could apply to such disclosures, making the act of doxing prosecutable under different statutes.

Additionally, doxing is a relatively recent phenomenon, and laws around it are constantly evolving. Legal responses can be ambiguous, and enforcement may vary widely based on the context and jurisdiction. Despite this, doxing violates the terms of service of most websites and platforms. Engaging in doxing can result in account bans and other penalties because it is typically viewed as unethical, often carried out with malicious intent to intimidate, blackmail, or control others.

The consequences of doxing can be severe, including potential harassment, identity theft, humiliation, loss of employment, and strained relationships with family and friends. The act of doxing can expose victims to significant risks and long-lasting impacts, highlighting the importance of robust legal and policy measures to address and mitigate this harmful practice.

If you become a victim of doxing, it’s crucial to take immediate steps to protect yourself and mitigate the damage. Here are some actions you should consider:

Document the Incident

Take screenshots of the doxed information and any related threats or harassment. Record URLs and dates to create a detailed record of the incident.

Report to Platforms

Report the doxing to the platforms where the information was shared. Most social media sites, forums, and websites have policies against doxing and will take action to remove the content and ban the users responsible.

Contact Law Enforcement

If the doxing includes threats or harassment, contact your local law enforcement agency. Provide them with all the documentation you have gathered. In some jurisdictions, doxing is illegal, and law enforcement may be able to help protect you and take action against the perpetrators.

Alert Friends and Family

Inform your close friends and family about the situation so they can be vigilant and supportive. They may also help monitor for further incidents and protect their own information.

Change Passwords and Security Settings

Immediately change the passwords for your online accounts, especially those that may have been compromised. Enable two-factor authentication (2FA) on all accounts that offer it for added security.

Remove Personal Information

Use online services or contact websites to remove your personal information from public databases. Websites like PrivacyRights.org and others can guide you through the process of opting out from data broker sites.

Consider Professional Help

If the situation is severe, consider hiring a cybersecurity professional or a reputation management service to help you remove your information from the internet and secure your online presence.

Seek Legal Advice

Consult with a lawyer to understand your legal options and rights. They can help you determine if any legal action can be taken against the doxer or the platforms hosting the information.

Protecting yourself from doxing involves taking several proactive measures to safeguard your personal information and online presence. Here are some key steps you can take:

Limit Personal Information Sharing

Be cautious about the personal details you share online, including your full name, address, phone number, and other sensitive information. Use pseudonyms or screen names where possible.

Privacy Settings

Adjust the privacy settings on your social media accounts to limit who can see your posts and personal information. Make your profiles private and only accept friend or follow requests from people you know.

Use Strong, Unique Passwords

Create strong, unique passwords for each of your online accounts and use a password manager to keep track of them. Enable two-factor authentication (2FA) for added security.

Be Wary of Phishing Scams

Be cautious of emails, messages, or websites that ask for personal information. Verify the authenticity of the sender before clicking on links or providing any details.

Secure Your Devices

Use antivirus software and keep your devices updated with the latest security patches. Avoid using public Wi-Fi networks for sensitive activities, and consider using a virtual private network (VPN) for added security.

Monitor Your Online Presence

Regularly search for your name and other personal details online to see what information is available about you. Set up Google Alerts for your name to be notified of new mentions.

Opt-Out of Data Broker Websites

Many data broker websites collect and sell personal information. Opt-out of these websites to reduce the amount of available data about you. Websites like PrivacyRights.org can help you with this process.

Remove Personal Information from Public Records

Where possible, request that your personal information be removed from public records. This might involve contacting government agencies or other organizations that hold your data.

Be Mindful of What You Post

Think carefully before posting anything online that could be used to identify or locate you. This includes photos, location check-ins, and personal updates.

Doxing is a serious online threat where personal information is exposed without consent, leading to harassment and potential danger. High-profile cases show how damaging it can be, from celebrities to private individuals. To protect yourself, limit the sharing of personal details, use strong passwords, and adjust privacy settings on social media. Always be vigilant about your online presence and take immediate action if you become a victim. Staying informed and proactive is key to staying safe in the digital age.

What is doxing someone?

Doxing is the act of revealing personal information about someone online without their consent. It can include information such as the victim’s real name, home address, workplace, phone number, financial information, and other personal details.

What is an example of doxxing?

One typical example is when someone posts unsolicited personal information, such as a home address, phone number, email address, or other sensitive data online. This is often done by creating fake social media accounts specifically designed to target individuals for harassment and humiliation purposes.

Is doxxing actually illegal?

Although doxxing itself is not illegal, it could contribute to another criminal offense like harassment, stalking, intimidation, identity theft, or incitement to violence. For those sentenced to jail time, doxxing is usually part of a larger scheme involving multiple criminal offenses.

What if I get doxxed?

Involve law enforcement: Depending on the severity of the doxxing and the nature of threats you receive, it might be necessary to contact the police or other law enforcement agencies. They can advise on further steps and start an investigation if required.