Doxxing

What it is

Published material can include home address, phone, workplace, family names, or private photos. Sources range from data brokers and old forum posts to hacking and social engineering.

Even when some details were once public, bundling and amplifying them can create real-world risk. It is both a privacy harm and sometimes a precursor to swatting, stalking, or identity misuse.

How it works

1. Collect — OSINT, brokers, breaches, or insiders gather PII.
2. Bundle — A dossier is assembled.
3. Publish — Posts on social media, paste sites, or hostile forums.
4. Amplify — Others reshare; harassment campaigns follow.
5. Offline harm — Unwanted visits, swatting, or fraud using the exposed data.
6. Prevention overlaps with limiting public PII and locking down accounts.

Red flags

• Strangers suddenly reference your home address, employer, or family
• Paste sites or social posts listing your private contact details
• Coordinated harassment after a public disagreement
• People-search profiles updating faster than you can remove them
• Account takeover attempts following a doxx
• Delivery of unordered food/packages as harassment

What to do if you’re targeted

• **Document URLs and screenshots**; report posts to platforms for privacy/harassment violations.
• **Consider law enforcement** if threats are credible; do not confront harassers alone.
• **Harden accounts**, change passwords, and enable MFA; review what remains public.
• **Opt out** of data-broker / people-search listings; ask hosts to remove doxx posts.
• **Alert work/school security** if your workplace was published.
• **Optional:** identity monitoring and a free scan if the dossier included financial identifiers; insurance up to $1M is subject to policy terms.

Related terms

• Personally identifiable information (PII)
• Data broker
• Identity theft