What is Doxxing and How to Safeguard Yourself from It
Doxxing is the act of publicly exposing personal information online, often targeting women Discover the reasons behind its name, various examples, reporting mechanisms, legal implications, gender disparities, and effective strategies for self-protection
Editor's Note: This article is part of Systems Error, a series by CNN As Equals that explores the impact of gender on people's online experiences. For information about CNN As Equals' funding and more, please refer to our FAQs.
In 2017, Kyle Quinn, an engineering professor, enjoyed the typical anonymity of his profession until he became the victim of doxxing. Mistakenly identified by angry social media users as having attended a White nationalist rally in Charlottesville, Virginia, Quinn's pictures, home address, and employer's name quickly spread across social networks. This ordeal frightened Quinn and his wife, forcing them to seek refuge at a colleague's home, as reported by the New York Times.
Quinn is one of many victims of doxxing, a form of online invasion of personal privacy that can lead to devastating consequences.
What is doxxing?
According to the International Encyclopedia of Gender, Media, and Communication, doxxing is the intentional revelation of a persons private information online without their consent, often with malicious intent. This includes the sharing of phone numbers, home addresses, identification numbers and essentially any sensitive and previously private information such as personal photos that could make the victim identifiable and potentially exposed to further harassment, humiliation and real-life threats including stalking and unwanted encounters in person.
Why is it called doxxing?
What are other examples of doxxing?
There are various etymologies associated with the term, but according to the cybersecurity company Kapersky, one explanation is that doxxing originated from the expression "dropping documents," which gradually evolved into "dox" and has been used as a verb to describe the practice. Originally a tactic employed by hackers, the firm stated that doxxing has been in existence since the 1990s.
Doxxing can occur through various online and other platforms. In 2014, the gaming industry faced a significant event referred to as Gamergate, which was a year-long conflict instigated by far-right trolls on the internet. This began after Eron Gjoni, the ex-boyfriend of game developer Zoe Quinn, posted a blog accusing her of infidelity and sharing private communications on an online forum. Quinn, along with other female game developers who spoke out, became the targets of doxxing and rape threats, as reported by The Guardian.
One of the victims, American game developer Brianna Wu, wrote in Index on Censorship magazine: "The reality is that there is no freedom of speech when sharing your experiences results in death threats, doxxing, and armed police being sent to your home."
In 2014, Wu tweeted about fleeing her home out of fear for her safety, accompanied by screenshots of death threats sent to her account.
In 2019, journalist and broadcaster Karima Brown inadvertently sent a message meant for her producer to a WhatsApp group run by the political party Economic Freedom Fighters (EFF), where journalists can access media statements from the party, according to the Committee for the Protection of Journalists (CPJ). The party leader, Julius Malema, accused her of spying on the party and responded by sharing her phone number with his 2.3 million followers on Twitter. As a result, Brown reportedly received disturbing threats, including graphic messages of rape and murder. The high court in Johannesburg later ruled that the public sharing of her personal information violated the country's Electoral Act, according to the CPJ. Brown, in response to the court's ruling, stated that it was "a victory for democracy and media freedom, and a blow against misogyny and toxic masculinity."
How and where can you report doxxing?
Meta, the parent company of Facebook, does not explicitly mention "doxxing" in its privacy violations policy. However, the company considers sharing "personally identifiable information" about others to be a breach of its community standards. Meta reviews all content against its standards and may remove private information like home addresses that could cause real harm, unless the information is already publicly available through news coverage, press releases, or other sources. Facebook users have access to a specific reporting channel if they are concerned about their privacy regarding images on the platform.
JC
A sex video was released to shame and silence her, adding her to the list of many women in Myanmar who have been doxxed and abused on Telegram by supporters of the military.
TikTok explicitly defines doxxing in its community guidelines, prohibiting the collection and publication of individuals' personal information for malicious intent. Users can report any violation on the platform and follow the provided instructions.
Twitters app and desktop versions allow you to report other users who tweet private information and media about themselves or somebody else without permission by clicking on the three dots in the corner of an offending tweet, then Report Tweet and following the instructions. Users found in violation of the policy are required to remove the content in question and temporarily locked out of their account. Twitter says permanent suspension may result from a second violation. Users can also file a separate form to report such violations.
Is doxxing illegal and can you be arrested for doxxing?
Laws regarding harassment and doxxing vary by jurisdiction. In Asia, Singapore has outlawed most forms of intentional harassment or distress, including doxxing, since 2014. Violators can be fined up to SGD $5,000 and/or jailed for up to 6 months. In Indonesia, there has been an increase in doxxing cases targeting women human rights defenders and journalists. Although the term "doxxing" is not recognized in the Indonesia legal system, the recently passed Personal Data Protection law punishes individuals who use and share personal information without consent, which may include doxxing. According to activists, doxxing cases are not always taken seriously by the police.
In the UK, there are specific guidelines for prosecutors to handle cases of violence against women and girls, which include threats to share personal information on social media and the unauthorized disclosure of private sexual images. The penalties for these offenses can vary.
In the US, laws to address doxxing differ among states. Nevada recently passed a law prohibiting doxxing and allowing victims to sue the perpetrators. In California, cyber harassment, including doxxing with the intent to endanger others and their immediate family, can result in up to one year in county jail, a fine of up to $1,000, or both.
In 2021, the data privacy law in Hong Kong was updated to criminalize doxxing, with possible penalties including up to five years in jail and fines of up to HK$1 million ($129,000 US). This decision was made after numerous officials and police officers were doxxed during the 2019 protests against the proposed bill to allow extraditions to mainland China. Critics argued that sharing information about government officials can be legally justified if it serves the public interest. Lauren Krapf, the technology policy and advocacy counsel for the Anti-Defamation League in the US, emphasized that the legality of doxxing depends on the intent behind it.
CNN/Adobe Stock/R Jung/G Smith
Systems Error: The Reason CNN Will Cover Gender Inequality Online
According to Krapf, there may be situations where doxxers should be held accountable for their actions, either through criminal or civil liability. She also stressed that doxxing is a complex issue with varying nuances. Krapf pointed out that the sharing of information through doxxing can serve as a means of empowerment for individuals involved in protests, allowing them to expose extremists to the public.
Across the US, "state laws vary greatly and there is no federal statute outlawing doxxing," Krapf told CNN, meaning "there isnt currently one specific standard codified."
Does doxxing affect more women than men?
Experts suggest that while anyone can fall victim to doxxing, women are disproportionately targeted in mass online attacks. This often includes the unauthorized sharing of sensitive media, such as stolen sexually explicit images, and receiving unsolicited sexualized messages. UN Women's 2020 report on India, Malaysia, Pakistan, the Philippines, and South Korea found that women in these countries are subjected to various forms of online violence simultaneously, including trolling, doxxing, and social media hacks.
How can you protect yourself against doxxing?
According to a 2020 global report by The Economist Intelligence Unit (EIU), online violence against women is shockingly widespread in the 51 countries surveyed. The report found that 45% of Generation Z and Millennial women reported being affected, compared to 31% of Generation X women and Baby Boomers. Overall, 85% of women surveyed reported witnessing online violence against women. The study also revealed significant regional differences, with Africa, Latin America and the Caribbean, and the Middle East showing at least 90% of women surveyed having been affected.
The responsibility to prevent doxxing lies with those who would violate another's privacy, not with the victim. However, taking preventative steps to protect yourself online can be useful.
Familiarize yourself with doxxing-related policies on the online platforms you use and learn how to report abuse. Consider making it more difficult for people to track you online by limiting the accessibility of information that can identify you both online and offline. For example, review who can see your personal email, phone number, home address, and other physical locations on your social media accounts.
The University of Berkeley, PEN America and Artist at Risk Connection provide thorough online privacy guides.
