Doxxing¶

Doxing or doxxing is the act of providing personally identifiable information about an individual or organization, usually via the Internet and without their consent, and or with the intention of harassing or causing distress to the victim.

Version: v1 · 2026-09-28 · History
Domain-specific #: 9061
Domain group: Professional & Organizational Practice
Origin domain: Security Studies & Intelligence Analysis
Subdomains: Cybersecurity, Hacker Culture → Security Studies & Intelligence Analysis

Core Idea¶

Doxxing is treated here as the recurring social_sciences_humanities_arts identity summarized by this source-grounded definition: Doxing or doxxing is the act of providing personally identifiable information about an individual or organization, usually via the Internet and without their consent, and or with the intention of harassing or causing distress to the victim.

Doxing or doxxing is the act of providing personally identifiable information about an individual or organization, usually via the Internet and without their consent, and or with the intention of harassing or causing distress to the victim. Historically, the term has been used to refer to both the aggregation of this information from public databases and social media websites (like Facebook), and the publication of previously private information obtained through criminal or otherwise fraudulent means (such as hacking and social engineering). The aggregation and provision of previously published material is generally legal, though it may be subject to laws concerning stalking and intimidation.

Doxing may be carried out for reasons such as online shaming, extortion, and vigilante aid to law enforcement. It is, at the very least, an infraction in most US states (for first-time offenders); if multiple attempts are made, the charge increases to a misdemeanor (especially when the intention is harassment-based). While as of the end of 2024 doxing is no specific offense, the laws mentioned are used in cases of online violence.

For Doxxing, the abstraction is narrower than the article's general subject matter: a positive case must preserve Doxing or doxxing is the act of providing personally identifiable information about an individual or organization, usually via the Internet and without their consent, and or with the intention of harassing or causing distress to the victim. Retaining only the name, a familiar example, or a downstream effect is insufficient. The specialist roles and tests remain anchored in social_sciences_humanities_arts, which is why this identity is domain-specific rather than prime.

How would you explain it like I'm…

Telling Secrets to Scare

Doxxing is when someone tells lots of strangers private things about a person, like where they live, without asking. They usually do it to scare or upset that person. It's like shouting a friend's secret address to the whole playground so people can bother them.

Posting Private Info Online

Doxxing means posting someone's personal information, like their real name, home address or phone number, usually on the internet, without their permission. People who do it often want to harass, frighten or embarrass the person. Sometimes they gather bits of information that were already public and put them together in one place; other times they get secrets by hacking or tricking people. Even when each piece was findable, gathering and posting it to upset someone can cause real harm, and laws about stalking or harassment may apply.

Non-Consensual Identity Exposure

Doxxing (or doxing) is providing personally identifiable information about a person or organization, usually online, without their consent and/or with the aim of harassing or distressing them. The term covers two routes: aggregating information already available in public databases and social media, and publishing private information obtained through hacking, social engineering or other fraud. Motives include online shaming, extortion, and vigilante efforts to help law enforcement. Aggregating already-published material is generally legal on its own, but it can fall under laws on stalking and intimidation. What makes something doxxing is the exposure of identifying information against the person's will, not just any sharing of facts about them.

Doxxing is the act of disclosing personally identifiable information about an individual or organization, typically via the internet, without consent and/or with intent to harass or cause distress. Historically the term spans two practices: compiling scattered information from public records and social platforms into a single identifying profile, and releasing previously private information acquired through criminal or fraudulent means such as hacking or social engineering. Motivations range from online shaming and extortion to vigilante assistance to police. The legal picture is uneven: republishing already-public material is generally lawful, yet the conduct can be prosecuted under stalking, intimidation and harassment statutes, and in most US states it is at least an infraction for first offenses, escalating to a misdemeanor with repetition, especially when harassment is the intent. The defining element is the non-consensual, identity-exposing disclosure; merely discussing someone, or a downstream harm alone, does not make a case doxxing.

Structural Signature¶

Sig role-phrases:

Defining carrier — In a 2018 qualitative study about intimate partner violence, 28 out of 89 participants (both professionals and survivors) reported the exposure of the victim's private information to third parties through digital technologies as a form of humiliation, shaming or harm frequently practiced by abusers, that may include the disclosure of intimate images and impersonation of the victim.
Constitutive relation — These offenses are particularly severe if made by the person responsible of the respective files, media, records or archives or through unauthorized use of personal data, if revealing of the ideology, religion, beliefs, health, racial origin or sexual life of the victim, if the victim is underage or disabled, and if it is made for economic profit.
Operating condition — Pro-Israel NGOs including the Israel on Campus Coalition and Canary Mission have been accused of doxing Palestinian activists by releasing public dossiers documenting their activism.
Recognition evidence — Doxware is a cryptovirology attack invented by Adam Young and further developed with Moti Yung that carries out doxing extortion via malware.
Admissible variation — Doxing is therefore a standard tactic of online harassment and has been used by people associated with the Gamergate and vaccine controversies.
Characteristic consequence — The proposed legislation, which includes a law that makes doxing punishable by jail time, has received bipartisan support, and support from Prime Minister Anthony Albanese.
Failure boundary — In 2021, due to increasing doxing incidents targeting Dutch activists, politicians, journalists and others, a new law against doxing was proposed by then Minister of Justice and Security Ferdinand Grapperhaus.

What It Is Not¶

Not the whole field of social_sciences_humanities_arts. The node requires the specific identity stated by Doxing or doxxing is the act of providing personally identifiable information about an individual or organization, usually via the Internet and without their consent, and or with the intention of harassing or causing distress to the victim.
Not an over-broad reading. However, as one scholar has argued, "[t]hese statutes ... are woefully inadequate to prevent doxing because their terms are underinclusive and they are rarely enforced".
Not an over-broad reading. For example, in response to the Stamp Act 1765 in the Thirteen Colonies, radical groups such as the Sons of Liberty harassed tax collectors and those who did not comply with boycotts on British goods by publishing their names in pamphlets and newspaper articles.
Not an over-broad reading. From March 1, 2020, the People's Republic of China's "Regulations on the Ecological Governance of Online Information Content" has been implemented, clarifying that users and producers of online information content services and platforms must not engage in online violence, doxing, deep forgery, data fraud, account manipulation and other illegal activities.
Not automatically Anonymous Sourcing. Retrieval proximity does not establish equivalence; the two identities must be compared by carrier, operation, and failure boundary.

Scope of Application¶

Doxxing applies literally inside social_sciences_humanities_arts wherever the source-defined carrier and relation can be established. Its documented habitats include:

Etymology. Hackers operating outside the law in that era used the breach of an opponent's anonymity as a means to expose them to harassment or legal repercussions.
History. The practice of publishing personal information about individuals as a form of vigilantism predates the Internet, via physical media such as newspapers and pamphlets.
History. In 2012, when then–Gawker reporter Adrian Chen revealed the identity of Reddit troll Violentacrez as Michael Brutsch, Reddit users accused Chen of doxing Brutsch and declared "war" on Gawker.
History. The person behind the blog accused the Times of threatening his safety and claimed that he started a "major scandal" that resulted in the Times losing hundreds or thousands of subscriptions.
History. In 2022, BuzzFeed News reporter Katie Notopoulos used public business records to identify the previously pseudonymous founders of the Bored Ape Yacht Club.
History. Pro-Israel NGOs including the Israel on Campus Coalition and Canary Mission have been accused of doxing Palestinian activists by releasing public dossiers documenting their activism.

Outside social_sciences_humanities_arts, the name should be retained only when these same operational conditions survive; otherwise the comparison belongs to the broader parent Pattern or should be marked as analogy.

Clarity¶

A clear use of Doxxing names the carrier, the operative relation, and the conditions under which the source treats the identity as present. The minimal definition is Doxing or doxxing is the act of providing personally identifiable information about an individual or organization, usually via the Internet and without their consent, and or with the intention of harassing or causing distress to the victim. The strongest recognition evidence in the frozen account is: Doxware is a cryptovirology attack invented by Adam Young and further developed with Moti Yung that carries out doxing extortion via malware. A report should distinguish that evidence from a proxy, consequence, or common implementation. It should also state the qualification However, as one scholar has argued, "[t]hese statutes ... are woefully inadequate to prevent doxing because their terms are underinclusive and they are rarely enforced". so that a reader can reproduce the classification rather than infer it from topical resemblance.

Manages Complexity¶

Doxxing compresses multiple social_sciences_humanities_arts details into a stable diagnostic relation. The source shows both the central mechanism—these offenses are particularly severe if made by the person responsible of the respective files, media, records or archives or through unauthorized use of personal data, if revealing of the ideology, religion, beliefs, health, racial origin or sexual life of the victim, if the victim is underage or disabled, and if it is made for economic profit.—and the practical consequence—the proposed legislation, which includes a law that makes doxing punishable by jail time, has received bipartisan support, and support from Prime Minister Anthony Albanese. This compression makes cases comparable while leaving parameters, conventions, exceptions, and evidential quality explicit. It is lossy by design: local history and implementation details may be omitted only when they do not alter the defining relation.

Abstract Reasoning¶

Type the carrier. Identify the social_sciences_humanities_arts entities to which the claim applies.
State the relation. Use the source-grounded identity: Doxing or doxxing is the act of providing personally identifiable information about an individual or organization, usually via the Internet and without their consent, and or with the intention of harassing or causing distress to the victim.
Check operation and conditions. Pro-Israel NGOs including the Israel on Campus Coalition and Canary Mission have been accused of doxing Palestinian activists by releasing public dossiers documenting their activism.
Demand recognition evidence. Doxware is a cryptovirology attack invented by Adam Young and further developed with Moti Yung that carries out doxing extortion via malware.
Test variation. Change an implementation or setting while preserving doxing is therefore a standard tactic of online harassment and has been used by people associated with the Gamergate and vaccine controversies.
Run the collapse test. Remove the defining operation; if the label still seems equally apt, only a topic or correlate was retained.
Reduce cautiously. When the specialist conditions cannot be carried, route the residual comparison to Pattern.

Knowledge Transfer¶

Within the home domain. Knowledge about Doxxing transfers literally when a new case preserves the same carrier type, relation, and recognition test. Hackers operating outside the law in that era used the breach of an opponent's anonymity as a means to expose them to harassment or legal repercussions. The practice of publishing personal information about individuals as a form of vigilantism predates the Internet, via physical media such as newspapers and pamphlets.

Beyond the home domain. No canonical parent is asserted for Doxxing. An outside case receives the specialist name only when the same typed roles and rejection conditions can be filled literally; otherwise the comparison remains an analogy pending later graph densification.

Examples¶

Canonical¶

For example, in response to the Stamp Act 1765 in the Thirteen Colonies, radical groups such as the Sons of Liberty harassed tax collectors and those who did not comply with boycotts on British goods by publishing their names in pamphlets and newspaper articles. This case is canonical because it supplies a concrete carrier and lets the defining relation be checked rather than merely named.

Mapped back: carrier → the entities in the documented case; operation → Doxing or doxxing is the act of providing personally identifiable information about an individual or organization, usually via the Internet and without their consent, and or with the intention of harassing or causing distress to the victim; recognition evidence → Doxware is a cryptovirology attack invented by Adam Young and further developed with Moti Yung that carries out doxing extortion via malware

Applied / In Practice¶

The practice of publishing personal information about individuals as a form of vigilantism predates the Internet, via physical media such as newspapers and pamphlets. The applied case shows how the identity is used under a second setting or qualification while keeping the same operative relation.

Mapped back: changed setting → History; invariant → Doxing or doxxing is the act of providing personally identifiable information about an individual or organization, usually via the Internet and without their consent, and or with the intention of harassing or causing distress to the victim; boundary → the case exits the class when however, as one scholar has argued, "[t]hese statutes ... are woefully inadequate to prevent doxing because their terms are underinclusive and they are rarely enforced"

Structural Tensions¶

T1 — Stable identity versus admissible variation. However, as one scholar has argued, "[t]hese statutes ... are woefully inadequate to prevent doxing because their terms are underinclusive and they are rarely enforced". The tension matters because emphasizing only one side either dissolves the identity or overstates what the evidence and domain conventions warrant.

Diagnostic: Which changes preserve the defining relation, and which replace it?

T2 — Recognition versus proxy. For example, in response to the Stamp Act 1765 in the Thirteen Colonies, radical groups such as the Sons of Liberty harassed tax collectors and those who did not comply with boycotts on British goods by publishing their names in pamphlets and newspaper articles. The tension matters because emphasizing only one side either dissolves the identity or overstates what the evidence and domain conventions warrant.

Diagnostic: Does the cited evidence establish the identity or only a correlated sign?

T3 — Definition versus implementation. From March 1, 2020, the People's Republic of China's "Regulations on the Ecological Governance of Online Information Content" has been implemented, clarifying that users and producers of online information content services and platforms must not engage in online violence, doxing, deep forgery, data fraud, account manipulation and other illegal activities. The tension matters because emphasizing only one side either dissolves the identity or overstates what the evidence and domain conventions warrant.

Diagnostic: Is the observed implementation constitutive, optional, or merely common?

T4 — Scope versus overextension. Since then, the publication of freely accessible data is punishable by a prison sentence of up to two years or a fine, and the publication of data that is not freely accessible is punishable by a prison sentence of up to three years or a fine. The tension matters because emphasizing only one side either dissolves the identity or overstates what the evidence and domain conventions warrant.

Diagnostic: Can every claimed application fill the same typed roles without metaphor?

T5 — Transfer versus domain accent. In a 2018 qualitative study about intimate partner violence, 28 out of 89 participants (both professionals and survivors) reported the exposure of the victim's private information to third parties through digital technologies as a form of humiliation, shaming or harm frequently practiced by abusers, that may include the disclosure of intimate images and impersonation of the victim. The tension matters because emphasizing only one side either dissolves the identity or overstates what the evidence and domain conventions warrant.

Diagnostic: Does the receiving case instantiate Doxxing literally, co-instantiate Pattern, or only resemble it?

T6 — Autonomy versus reduction. These offenses are particularly severe if made by the person responsible of the respective files, media, records or archives or through unauthorized use of personal data, if revealing of the ideology, religion, beliefs, health, racial origin or sexual life of the victim, if the victim is underage or disabled, and if it is made for economic profit. The tension matters because emphasizing only one side either dissolves the identity or overstates what the evidence and domain conventions warrant.

Diagnostic: What does Doxxing distinguish that the broader parent Pattern leaves together?

Structural–Framed Character¶

Doxxing is mixed or framed-leaning. Its structural side is the repeatable organization summarized by Doxing or doxxing is the act of providing personally identifiable information about an individual or organization, usually via the Internet and without their consent, and or with the intention of harassing or causing distress to the victim. Its framed side is the social_sciences_humanities_arts vocabulary that fixes the carrier, evidence, exceptions, and admissible transformations.

Evaluative weight: the identity can be stated descriptively even when applications carry practical stakes. Human-practice dependence: the source-grounded carrier determines whether the relation exists independently or is constituted by a practice. Institutional origin: disciplinary conventions stabilize the name and test. Vocabulary portability: Pro-Israel NGOs including the Israel on Campus Coalition and Canary Mission have been accused of doxing Palestinian activists by releasing public dossiers documenting their activism. Import versus recognition: literal transfer requires the same mechanism; shape alone is analogy.

Its portable skeleton is Pattern. Its character: a recurring specialist identity whose thin organization can be abstracted, while its operational meaning remains domain-bound.

Structural Core vs. Domain Accent¶

What is skeletal. Doxing or doxxing is the act of providing personally identifiable information about an individual or organization, usually via the Internet and without their consent, and or with the intention of harassing or causing distress to the victim. The stable skeleton is the typed relation expressed in that definition and the entry's recognition and collapse tests. The source identifies these operative conditions: In a 2018 qualitative study about intimate partner violence, 28 out of 89 participants (both professionals and survivors) reported the exposure of the victim's private information to third parties through digital technologies as a form of humiliation, shaming or harm frequently practiced by abusers, that may include the disclosure of intimate images and impersonation of the victim. These offenses are particularly severe if made by the person responsible of the respective files, media, records or archives or through unauthorized use of personal data, if revealing of the ideology, religion, beliefs, health, racial origin or sexual life of the victim, if the victim is underage or disabled, and if it is made for economic profit. It further constrains recognition and variation through: Pro-Israel NGOs including the Israel on Campus Coalition and Canary Mission have been accused of doxing Palestinian activists by releasing public dossiers documenting their activism. Doxware is a cryptovirology attack invented by Adam Young and further developed with Moti Yung that carries out doxing extortion via malware.

What is domain-bound. social sciences humanities arts supplies the operative entities, technical vocabulary, warrants, and exceptions that make Doxxing literal. Its documented scope includes the condition that Hackers operating outside the law in that era used the breach of an opponent's anonymity as a means to expose them to harassment or legal repercussions. Another bounded application condition is that The practice of publishing personal information about individuals as a form of vigilantism predates the Internet, via physical media such as newspapers and pamphlets. These are not decorative examples; they determine which carrier and evidence can fill the abstraction's roles.

Why no parent is asserted. Removing those specialist details does not currently yield one live catalog node that is a necessary genus for every instance. The entry is therefore approved as unparented rather than attached by topical resemblance. Its collapse evidence remains specific—Doxing is therefore a standard tactic of online harassment and has been used by people associated with the Gamergate and vaccine controversies.—and future graph densification may discover a defensible relation only if it preserves that boundary.

Approved unparented node. No current live node supplies a defensible necessary genus or structural prerequisite for Doxxing. The reviewed identity is: Doxing or doxxing is the act of providing personally identifiable information about an individual or organization, usually via the Internet and without their consent, and or with the intention of harassing or causing distress to the victim. The accelerated suggestion was declined because topical or lexical similarity does not establish hierarchy; the node is admitted without a parent pending later graph densification.
Related reasoning operations. Evidence, representation, comparison, classification, transformation, or evaluation may participate in particular cases, but participation does not make any one of them a necessary parent of every instance.

Neighborhood in Abstraction Space¶

Doxxing sits in a sparse region of the domain-specific corpus (62^nd percentile for distinctiveness): few abstractions share its structure, so a faithful description tends to retrieve it precisely.

Family — Unclustered & Miscellaneous (2551 abstractions)

Nearest neighbors

Computed from structural-signature embeddings · 2026-10-08

Not to Be Confused With¶

Pattern. The parent omits the specialist differentia. Tell: Can the case establish Doxing or doxxing is the act of providing personally identifiable information about an individual or organization, usually via the Internet and without their consent, and or with the intention of harassing or causing distress to the victim?
Anonymous Sourcing. Publish information with the source's identity hidden from the audience but known to and vouched for by a reputation-staking intermediary, so the intermediary's verification procedure substitutes for the source's named credibility in the audience's trust calculus. Tell: Which entry's carrier, operation, and failure condition are satisfied?
Whisper Network. An informal, access-bounded communication network through which people privately circulate person-specific allegations or warnings so recipients can avoid risk, corroborate experiences, or coordinate possible reporting. Tell: Which entry's carrier, operation, and failure condition are satisfied?
Obfuscation. Obfuscation denotes intentionally confusing wording to confuse people apart from an intended audience in rhetoric. Tell: Which entry's carrier, operation, and failure condition are satisfied?
A measurement, proxy, or consequence. Those may provide evidence without being the identity. Tell: Would Doxxing remain present if the detector or downstream effect changed?
A metaphorical analogue. A similar shape outside social_sciences_humanities_arts lacks the specialist mechanism. Tell: Do the native roles transfer literally, or only the parent Pattern?

References¶

Frozen Wikipedia discovery revision: https://en.wikipedia.org/wiki/Doxing (revision 1368237740).
Preserved source candidate: https://www.economist.com/blogs/economist-explains/2014/03/economist-explains-9
Preserved source candidate: https://www.schneier.com/blog/archives/2016/07/the_security_of_11.html
Preserved source candidate: http://www.thetechherald.com/articles/The-FBIs-warning-about-doxing-was-too-little-too-late
Preserved source candidate: https://web.archive.org/web/20121031002418/http://www.thetechherald.com/articles/The-FBIs-warning-about-doxing-was-too-little-too-late
Preserved source candidate: https://www.bbc.co.uk/news/blogs-echochambers-26477417
Preserved source candidate: https://www.theguardian.com/us-news/2018/aug/16/anti-fascist-protesters-antifa-police-doxing-twitter-mugshots
Preserved source candidate: http://www.technewsdaily.com/17590-what-is-doxing.html
Preserved source candidate: https://web.archive.org/web/20141029095609/http://www.technewsdaily.com/17590-what-is-doxing.html

The frozen Wikipedia revision is discovery provenance. The retained source set was reviewed for identity, formal or operational relation, and scope. The encyclopedia's structural synthesis is bounded to those claims; a thin authority surface is recorded as a nonblocking source-strengthening repair rather than concealed.