Doxxing

The information may come from data breaches, public records, data broker sites, social media posts or from searches that link separate scraps of public data into a profile. Some doxxing is a targeted attack by someone with a grievance. Some is part of a crowd action after a viral incident, in which people identify a person from a photo or video and publish the results. The published details then invite harassment, threats, calls to the person's employer, or in-person visits.

Whether doxxing is illegal depends on the jurisdiction and the details, such as whether it involves threats, stalking or specific data. Platforms typically prohibit sharing private information in their rules and provide reporting flows.

A hypothetical example: after a video of a dispute at a company's store goes viral, users identify an employee and post the employee's name and profile links along with the store's location. The company must protect the employee while also managing the public story. Another example is the publication of home addresses of executives during a controversy, which links to executive protection.

Doxxing turns a reputation event into a safety event. Staff, executives and board members can be affected, and an organization is expected to support them. Teams should have a plan that covers document preservation, reporting to platforms, contact with security and law enforcement, and support for the person targeted. Monitoring for early signs, such as a person's name being circulated with calls for action, uses the same methods as OSINT and threat intelligence work.

Reducing exposure beforehand matters as well. Executives' personal information is often available on people-search sites, and removal requests can lower the attack surface, though they rarely eliminate it.

The first steps are to preserve evidence, report the posts to the platforms, alert security and the affected person, and consider whether to involve law enforcement. Teams should avoid restating the exposed details in their own statements or replies. Support for the person targeted, such as changes to work arrangements and help with account security, is part of the response and not an afterthought.

Doxxing is not limited to well-known people, and it is not only an online problem, since it leads to real-world contact. Publishing information that is technically public can still be doxxing when it is compiled and shared to enable harassment. And naming a public official in connection with public actions is not doxxing. The difference lies in whether the information is private and the purpose is to intimidate.