What is Doxxing?

The term itself originates from the phrase “dropping docs” and was later shortened to “docs” and then “doxx”. As the original term suggests, doxxing is when someone collects and then shares information about another person or an organization. 

There are numerous reasons someone might doxx someone else or be the victim of doxxing. It could be for revenge or a personal grudge; a disgruntled ex-employee might target their previous employer (eg. in 2014, Sony was the victim of a doxxing attack backed by, experts believe, the North Korean government after they released a film which made fun of their leader). Other motivations include - harassment, cyber-bullying, and vigilante justice (for example, exposing neo-Nazi’s), as well as doxxing for financial gain. 

Organizational doxxing is on the rise and can be immensely damaging, exposing company secrets and customer data, or more directly exposing executives to new levels of threats. The fallout is generally reputational with the victim suffering from online abuse such as death threats to them and their family in lieu of the new information shared. However, on occasion, the fallout can be significantly worse. There have been examples of mobs dishing out physical vigilante justice after a person's information, such as an address, was shared online. 

There are numerous ways you can be identified online. By following ‘breadcrumbs’ of information a dedicated doxxer can assemble an accurate picture of a person - even if they are using an alias. The details a doxxer might look for include - full name, current address, email address, phone number etc. Additionally, some doxxers might buy information from data brokers.

While doxing tools are readily available online if you know where to look, one doesn’t have to be technically savvy in order to doxx someone. All that is needed is an internet connection and enough money to pay for someone else to do it for you.

Doxing Strategies and Goals

Just like other forms of crime, doxing too has a modus operandi.

High Profile Doxxing

High-profile doxxing refers to the doxxing of people with a public platform or wealth. These frequently include executives, celebrities, presenters/journalists, lecturers, and politicians. 

The reason for their doxxing is most commonly due to having controversial acts and opinions. These often manifest into acts of violence.

Our analysts have detected executives and their family's home addresses being doxxed online. This has then led to events such as stalking, arson, and even attempted homicide.

Swatting Doxxing

Doxxing doesn't just occur to executives. A widespread phenomenon in internet culture is ‘swatting’. 

During a live stream game, the opponent will call a swat team to the opponent's house while filming. The opponent will doxx and provide the address to the authorities. This is often done by anonymously alerting authorities to fake intelligence such as kidnapping, hostage, or domestic abuse situations.

Platforms such as Reddit and 8Kun are popular to discuss such incidents. 

An example of how fatal these ‘pranks’ can be is the case of Andrew Finch. Mr Finch was the victim of a swatting attempt in which the authorities were called due to a fake domestic violence issue. Andrew Finch was fatally shot during the raid.

Accidental Doxxing

This is done by accidentally posting information eluding to locations. 

Accidental doxxing is an issue frequently detected by Signal. 

Examples of this include not erasing metadata and posting photos with the location listed. 

Often, the executives are not leaking sensitive information themselves, but rather their family and friends do by accident. 

Another common culprit of executive doxxing is ‘people search’ websites.

An example of accidental doxxing is the case of Kyle Quinn. Mr Quinn was a professor who was fired due to the accusation he is a Nazi and that he participated in a racist violent rally. His image was shared thousands of times which lead to job loss. Doxxers then harassed his employers.

Revenge Doxxing

Revenge doxxing occurs when an individual targets another under the belief that they have harmed them in some way. To retaliate they then doxx the individual online.

Revenge doxxing can go one of two ways. 

Often the first type of revenge doxxing is where the individual leaks personal details such as bank account numbers and addresses. 

The second falls under the umbrella of revenge porn.

In 2012 it was reported that a group of Russian hackers targeted 12 high profile celebrities and politicians. They proceeded to leak personal details such as credit card numbers, car loan and mortgage details.

One of the first and most publicized cases was in 1996 the Pamela Anderson and Tommy Lee video leak. The couple's private video was stolen by a disgruntled ex-employee and then leaked online. At the time of the incident the term revenge porn did not exist. 

Doxware

Doxware refers to a form of extortion in which an attacker threatens to release sensitive or identifying information unless a demand is met, typically financial. Unlike traditional doxxing, where information is immediately exposed, doxware relies on the threat of disclosure as leverage.

Attackers may claim to possess personal data such as private communications, financial records, or browsing history. In some cases, this material is genuine; in others, it is fabricated or exaggerated to pressure the victim into compliance.

Doxware attacks are increasingly common in corporate environments, where threat actors target executives or employees with access to sensitive systems.

Ideological Doxxing

Ideological doxxing occurs when an individual is targeted because of their perceived political, social, or cultural beliefs. This form of doxxing is often driven by attempts to silence, punish, or discredit the victim.

Targets may include academics, journalists, executive, or private individuals. Personal information is exposed in order to instigate harassment or damage the victim's reputation.

This type of doxxing is frequently amplified through coordinated online communities, where information is disseminated and used to support a particular narrative.

Vigilante Doxxing

Vigilante doxxing involves individuals or groups exposing the victim’s personal information under the belief that they are serving justice. This can happen as a response to alleged wrongdoing or where formal legal action is viewed as insufficient.

Doxxers may justify their actions as a form of accountability. The information shared can not always be accurate and could lead to significant harm for innocent parties.

Vigilante doxxing campaigns can escalate quickly, resulting in harassment, reputational damage, loss of employment, and in some cases, threats to personal safety.