Doxxing

What is doxxing?

“Doxxing” is online slang for “dropping documents” – exposing another person’s private information online without their permission. It’s a form of harassment that originated in the 1990s, when hackers would reveal the identity of a rival. But today, it can happen to anyone. It is a serious invasion of privacy that can have serious real-world consequences. 

Why do people dox others? Sometimes out of revenge, to harass, or even just to expose someone they don’t like. Whatever the motive behind doxxing, the fallout can be severe – from annoying pranks, like unwanted pizza deliveries, to really dangerous situations like harassment, SWATting, or identity theft. And businesses are not immune, either. A disgruntled employee or competitor can publicly share private information about company executives on social media or online forums. This could be done to intimidate or harass, or even to influence 

How does doxxing work?

Doxxers operate by piecing together small bits of information scattered across the internet to reveal someone’s real identity. Known as “breadcrumbs”, tiny pieces of data like names, addresses, emails, or phone numbers can be found in various places online – from social media profiles, the dark web, and public records to WHOIS databases for domain registrations. While each of these breadcrumbs may seem harmless individually, when combined with contact info they can paint a powerful picture. 

How, specifically, do doxxers gather sensitive information? Some common methods include:

• Phishing – Doxxers trick people into revealing personal information by creating fake websites, emails, or links that look legitimate.
• Data breaches – Doxxing can use company and personal information illicitly obtained via hacking and other cyberattacks.
• WHOIS – When someone registers a domain, their personal details are listed in the public WHOIS database. Doxxers can easily exploit this information.
• Government records – Public databases are a treasure trove for doxxers. There is a wealth of information from government records like property deeds, court cases, and voter registrations. 
• IP tracking – Every device connected to the internet has a unique IP address, which can reveal a person’s location, online activity, and frequently visited sites. Doxxers can use IP tracking to gather this information.
• Social media stalking – Social media platforms are rich sources of personal information. Doxxers scour these platforms or even create fake profiles to gather data.
• Packet sniffing – Sophisticated doxxers can intercept and analyze data packets exchanged over a network and extract sensitive information.
• Reverse lookups – Online reverse lookup tools can reveal personal details from something as simple as a phone number or email address.
• Data brokers – Doxxers can purchase information from companies that collect, process, and sell personal data.

There are numerous ways for doxxers to get personally identifiable information 

Types of information the doxxers commonly expose

Doxxing can expose a wide range of personal information. Some of the most common types of data targeted by doxxers include:

• Phone numbers – With a phone number, a doxxer can harass or scam victims via calls or texts.
• Sensitive company documents – Marketing plans, pricing schemes, development roadmaps and other sensitive organizational dataץ
• Home addresses – Doxxers can breach a victim’s privacy by revealing their home address.
• Bank account details – A doxxer can cause serious financial harm to a victim by gaining access to banking information and conducting unauthorized transactions.
• Credit card details – A doxxing website can collect credit card information to make fraudulent purchases or simply sell the card data on the dark web.
• Social Security numbers – Social Security numbers can be used for identity theft that enables fraud like taking out fake loans.
• Personal communications – Emails and messages can reveal intimate details about the victim’s life, relationships, and behavior, which doxxers can use to manipulate or embarrass him or her.
• Prior legal offenses – Exposing legal troubles, especially when taken out of context, can damage a victim’s reputation.
• Personal imagery – Photos and videos can be used for blackmail or to tarnish a victim’s reputation.
• Private life incidents – Personal stories or embarrassing moments can be weaponized to humiliate or harm the victim.

This information is available to the public if you know where to look and are persistent. 

It’s worth noting that much of the information targeted by doxxers is sensitive yet actually publicly available. For example, home addresses, phone numbers, legal records and more can be found in public databases. Social media platforms reveal personal details like birthdays, family connections, or daily activities. While these details are technically public, they are sensitive because they can be easily exploited when pieced together.

Motivations Behind Doxxing

The motives behind doxxing vary widely. 

Revenge is a common driver of doxxing, when a doxxer feels personally wronged by the victim. Political agendas are another clear motive – activists or their opponents often use doxxing to expose and discredit those with differing views. Cyberbullying is another motive, and dox sites have been known to intimidate or humiliate targets just because they are vulnerable.

Online arguments can also escalate into doxxing when one side decides to “win” by exposing the other’s identity and personal details. Public figures like celebrities, politicians, and journalists are frequent targets of doxxing because of their visibility. Yet regardless of the motive, doxxing is a severe breach of privacy, with potentially devastating consequences for the victim.

Impact of doxxing

Far from an innocuous online prank, doxxing can pose significant dangers to its victims. 

When personal information is leaked, victims can face harassment, threats, and even physical danger if their home addresses, phone numbers, or other sensitive data regarding their physical whereabouts gets into the hands of malicious actors. 

The psychological toll of doxxing on victims can be severe, too. For public figures, the damage can extend to their careers and reputations, while ordinary individuals may experience identity theft, financial fraud, or cyberbullying.

How to prevent doxxing? 

The harmful impact of illegal doxxing can be mitigated with awareness and prevention. It is crucial for everyone to understand how personal information can be exploited online. Users should adopt strong privacy practices, be cautious about sharing personal details, be aware of anti-doxxing laws, and employ tools like VPNs to further mitigate risks. 

The bottom line

Doxxing is a serious threat that goes far beyond simple online harassment. Doxxers can cause real-world harm, from emotional distress to physical danger and financial ruin. Yet by practicing good digital hygiene and staying vigilant, individuals can reduce their vulnerability to doxxing and better safeguard their privacy against this threat.