Doxxing

What doxxing is, who it affects, and what a child should learn — a free entry from the Digital Guardians Threat Dictionary.

Target age range: Teenagers (around ages 13+), and any minors who maintain an online presence. Doxxing (the malicious exposure of personal information) tends to become a concern as children grow into teens and use social media, forums, or online gaming more independently. Middle school and high school students are the primary group here, since they begin to have social media profiles, engage in online debates, gaming communities, etc., where conflicts can arise. Younger children (under 12) typically don’t have enough public personal data to be doxxed, though exceptions exist if, say, parents overshare their info or if a child is involved in online contests/groups with older kids. The content in this section is aimed at both teens and their parents, but the strategies can apply to anyone active online. It’s about creating safe habits before a problem occurs and knowing what to do if it does. We also acknowledge that doxxing can affect entire families – so parents of teens should also be mindful of their own privacy online, as that can indirectly affect their kids.

Learning objective: (child or other family member) – addressing feelings of violation, fear, or embarrassment that can result from having personal info leaked.

Threat definition

DOXXING (ALSO SPELLED DOXING)

Doxxing is a type of online harassment where an individual’s private personal information is publicly exposed without their consent, typically with malicious intent. This personal information might include things like full name, home address, phone number, email, workplace or school, photos of the person or their family, and even sensitive data like Social Security numbers or financial details. The term “doxxing” comes from “dropping dox (documents)” – essentially dropping documents about someone online for all to see.

Key aspects of doxxing to understand:

MOTIVATIONS

Doxxing is often done to intimidate, embarrass, or harm the targeted person. For example, a cyberbully might dox a teen they have a grudge against, hoping others will join in harassing them. Some doxxers act out of revenge (an argument in a game or forum leads to “I’m going to expose you”). Others might do it for ideological reasons (attacking someone who voiced an opinion by revealing their identity). Sometimes it’s used as a form of social vengeance – e.g., leaking a classmate’s secrets or personal info after a fallout. In any case, the goal is to make the victim feel unsafe or shamed by stripping away their privacy and anonymity.

METHODS

• SEARCHING SOCIAL MEDIA PROFILES Many people accidentally share addresses or phone numbers, or post pictures that reveal locations like a house number or school name.
• REVERSE PHONE OR EMAIL LOOKUP TOOLS Using reverse phone or email lookup tools to tie a stray contact detail back to a real identity.
• HACKING WEAK ACCOUNTS If they obtain your email, they might try to get into your account for more data.
• SOCIAL ENGINEERING Tricking you or a friend into giving info.
• IP LOGGING & “SW” More advanced doxxers might use IP logging (getting your IP address through an online game or click, then correlating it to a city or internet provider) and then “SW” (social engineering with internet services) to get more data.
• BLACK-MARKET DATA & LEAKED DATABASES In extreme cases, they might pay for data from black market sources or exploit leaked databases.

IMPACT

When someone is doxxed, the consequences range from annoying to downright dangerous. On the mild end, they might get a flood of spam calls or prank pizza deliveries to their home. On the severe end, doxxing can lead to harassment or threats from strangers – e.g., dozens of people sending hate messages, or even “swatting” (where someone sends police to the victim’s address by making a false report, extremely dangerous). Doxxing victims often feel exposed and vulnerable knowing their personal details are out there. It can cause real fear – imagine a teen knowing that their harasser posted their address publicly, they might worry about someone actually coming to their home. There can be reputational damage if, say, embarrassing info or false rumors are spread along with the dox. And for marginalized individuals, doxxing has been used as a tool of hate or persecution (e.g., doxxing someone for their LGBTQ identity or political views to encourage others to target them).

LEGALITY

Doxxing exists in a bit of a legal gray area. Simply sharing public information isn’t always illegal. However, if the info was obtained through illegal means (hacking) or if it’s used to incite stalking, harassment, or threats, then laws can come into play (cyberstalking laws, harassment, etc.). Some jurisdictions have specific anti-doxxing laws, especially if it leads to tangible harm. Regardless of legality, major platforms treat doxxing as a violation of terms of service – e.g., posting someone’s private info is typically against Facebook, Twitter, etc. rules. Schools may treat it as a form of bullying or abuse if students do it to each other. For the victim and family, the focus is usually on safety and mitigation rather than lawsuits, but it’s important to know that authorities can be involved if threats accompany the dox.

In short, doxxing is like someone publishing your personal diary or home address on a billboard for revenge or laughs. It’s a serious invasion of privacy and can escalate into real-world safety concerns. The good news is, by controlling what info is out there and knowing how to respond, families can greatly reduce the threat of doxxing and its impact.

The full chapter is in Pillar 4: Identity Attacks, Response, Recovery & Support Systems and the Complete Edition.