What is doxxing?

What is doxxing: a complete guide to protecting your personal information

Doxxing (or doxing) is the act of publicly revealing someone’s personally identifiable information online without their consent. This can include details such as:

• Full name

• Home address

• Workplace

• Email address

• Phone number

• Criminal record

• Intimate photos

Doxxing is often used as a form of harassment, blackmail, or intimidation, and it can have serious consequences for victims. Understanding how doxxing works and how to protect yourself is crucial in today’s digital world.

How does doxxing work?

The term doxxing originates from "dropping dox" (documents), referring to the practice of gathering and publishing someone’s sensitive information. Cybercriminals use various methods to obtain this data, including:

1: Cyberstalking and social media scraping

Many people share personal details on social media, often without realizing how much information they are making public. Doxxers can collect data about a person’s:

• Location

• Friends and family

• Family members

• Hobbies and interests

• Work or school details

This information may seem harmless, but hackers can use it to guess passwords, security questions, or even impersonate the victim.

2: Public databases and records

Certain records are publicly available online and can be exploited by doxxers, including:

• Business licenses

• Regional and local government records

• Marriage licenses

• Government websites

• Online search histories

While sensitive data like medical records are usually protected, other types of personal data are often freely accessible.

3: Hacking and phishing attacks

Hackers may gain access to private information through direct cyberattacks, such as:

• Phishing emails that trick victims into revealing login credentials.

• Data breaches where large amounts of personal data are leaked online.

• Wi-Fi hacking on unsecured networks, where attackers can monitor browsing activity and capture login details.

Securing private data is crucial to prevent identity theft and doxxing, as relying solely on passwords can expose individuals to significant risks. Want to understand how phishing scams work and how data breaches expose sensitive information? Learn more about phishing and explore how data breaches happen.

4: IP address tracking

Doxxers can uncover a person’s IP address, which is linked to their physical location. They may then use social engineering techniques to manipulate an Internet Service Provider (ISP) into providing additional private information.

Is doxxing illegal?

Doxxing laws vary depending on the country. In many places, sharing publicly available information is not illegal. However, doxxing becomes a crime when used for:

• Stalking

• Harassment

• Blackmail

• Threats of violence

In the U.S., doxxing a government official is a federal crime, often classified as conspiracy, which carries severe legal consequences.

Notorious examples of doxxing

Doxxing has been used in high-profile cases to intimidate, harass, or expose individuals. Some notable incidents include:

• Gamergate (2014): A hate campaign targeting female game developers, including Zoë Quinn, who received death threats after her personal details were leaked.

• Anonymous vs. KKK (2015): The hacktivist group Anonymous released personal data of alleged Ku Klux Klan members.

• Ashley Madison hack (2015): Cybercriminals leaked data of millions of users from a dating site for extramarital affairs, leading to personal and professional consequences for those involved.

• Boston Marathon bombing (2013): Online users falsely identified an innocent Brown University student as a suspect, leading to widespread misinformation and harassment.

How to protect yourself from doxxing

To safeguard your personal information, follow these essential cybersecurity practices:

1. Limit personally identifiable information online

Search for your name on Google to see what’s publicly available about you. Remove unnecessary or sensitive information from social media and online profiles. Data brokers compile and sell extensive personal information, including browsing habits and financial histories, making it crucial to request the removal of your data from these brokers to enhance your privacy and security.

2: Use a VPN to hide your IP address

A Virtual Private Network (VPN) secures your internet connection by encrypting your data and hiding your IP address, making it harder for doxxers to track your physical location.

3: Use unique usernames and passwords

Avoid using the same username or password across multiple platforms. A password manager can help you generate and store strong passwords securely. Explore how a password manager can help you generate and store strong passwords securely.

4: Create separate email accounts

Consider using different email accounts for professional, personal, and promotional purposes. Keep your private email confidential and avoid using it for online sign-ups.

5. Be wary of data brokers and data-harvesting websites

Some websites collect extensive personal data through surveys and sign-ups. Be mindful of where you enter personal details and use disposable email addresses for non-essential registrations.

6: Adjust privacy settings on social media

Most social media platforms offer privacy controls that allow you to restrict who can see your information. Regularly review and update these settings. Securing your social media accounts is crucial to protect against doxxing, as doxxers can exploit publicly available information to gather sensitive details about individuals.

7: Exercise your right to be forgotten

Under GDPR (General Data Protection Regulation), you have the right to request companies to delete your personal data if it is no longer relevant or if you withdraw your consent. Not sure how GDPR protects your personal data? Learn about GDPR in just five minutes and understand your rights.

Domain registration and doxxing

Domain registration information can be a treasure trove for doxxers, as it often contains sensitive information such as physical addresses, phone numbers, and email addresses. To protect yourself from doxxing, it’s essential to hide your domain registration information from WHOIS lookup. This can be done through your domain registrar, and it’s a straightforward process. By making your domain registration information private, you can prevent doxxers from accessing your sensitive information.

Additionally, you can also use a domain privacy service, which can help to mask your personal information and replace it with generic information. This can provide an extra layer of protection against doxxers. It’s also important to note that some domain registrars may offer free domain privacy services, so it’s worth checking with your registrar to see if this is an option.

Financial protection

Financial information is a prime target for doxxers, as it can be used to steal identities, drain bank accounts, and commit other forms of financial fraud. To protect your financial accounts from doxxing, it’s essential to take steps to secure them. This can include:

• Using strong, unique passwords for your online banking and credit card accounts

• Enabling two-factor authentication (2FA) to add an extra layer of security

• Monitoring your accounts regularly for suspicious activity

• Keeping your financial information up to date and accurate

• Being cautious when sharing financial information online or over the phone

If you suspect that your financial information has been compromised, it’s essential to act quickly. Contact your bank or credit card provider immediately to report the incident and request that they take steps to secure your accounts. You may also want to consider closing or securing your accounts to prevent further damage.

Reporting and consequences

If you’ve been doxxed, it’s essential to report the incident to the relevant authorities. This can include:

• Reporting the incident to the platform or website where the doxxing occurred

-Contacting your local law enforcement agency to report the incident

• Filing a complaint with the Federal Trade Commission (FTC) if you believe that your personal information has been compromised

The consequences of doxxing can be severe, and can include:

• Identity theft and financial fraud

• Online harassment and bullying

• Physical harm or threats

• Emotional distress and trauma

In some cases, doxxing can also lead to legal consequences, including fines and imprisonment. If you’ve been doxxed, it’s essential to take steps to protect yourself and seek support from law enforcement and other authorities.

Educators and doxxing

Educators are particularly vulnerable to doxxing, as they often have a public profile and may be targeted by students, parents, or other individuals. To protect themselves from doxxing, educators can take steps such as:

• Keeping their personal and professional lives separate online

• Using strong, unique passwords for their online accounts

• Enabling two-factor authentication (2FA) to add an extra layer of security

• Monitoring their online presence regularly for suspicious activity

• Being cautious when sharing personal information online or over the phone

Educators can also take steps to protect their students from doxxing, such as:

• Educating students about the risks of doxxing and how to protect themselves online

• Encouraging students to use strong, unique passwords and enable 2FA

• Monitoring online activity and reporting any suspicious behavior to authorities

• Providing support and resources to students who have been doxxed or are at risk of being doxxed

By taking these steps, educators can help to protect themselves and their students from the risks of doxxing.

What to do if you’ve been doxxed or faced online harassment

If you become a victim of doxxing, act quickly to minimize damage:

1. Document the evidence: Take screenshots of the doxxed information in case legal action is necessary.

2. Report the doxxing: Contact social media platforms and websites where the information has been shared to request its removal.

3. Secure your accounts: Change your passwords, enable multi-factor authentication (MFA), and review security settings.

4. Consider changing key information: If sensitive data such as phone numbers or usernames have been exposed, consider updating them.

Final thoughts

Doxxing is a serious invasion of privacy that can have lasting consequences. By taking proactive steps to safeguard your online presence, you can reduce the risk of becoming a target. Stay informed, use strong cybersecurity measures, and be mindful of the information you share online.