# Doxxing The deliberate publication of identifying information about a target so that other actors can use that information to harass, intimidate, or attack the target. The act itself is informational — a list, a screenshot, a Pastebin dump, a thread — but the strategic purpose is to *outsource* the consequences. The publisher rarely follows up personally; the leak is a permission slip handed to anyone who already disliked the target. ## Etymology Origin in 1990s hacker and warez / IRC subculture: *docs* (documents about a person, gathered from open-source intelligence or breached databases) → *dox*. Early uses targeted other hackers exposing each other in feud sequences. The first generation of doxxing was peer-to-peer and largely contained inside the subculture. The mass-audience promotion of the verb came in three waves: 1. **Anonymous (2008–2011)** — Project Chanology against Scientology, the HBGary Federal email release (2011), and the LulzSec / AntiSec campaigns made *dropping docs* a public tactic with media coverage. The targets were institutions, executives, or law-enforcement-adjacent figures; the framing was hacktivist accountability 2. **GamerGate (2014)** — the watershed pivot to mass online harassment of named individual women (Zoë Quinn, Anita Sarkeesian, Brianna Wu, journalists, academic critics) by a distributed crowd that used doxxing as the entry point and rape/death threats, employer pressure, and swatting as the follow-on phases. The tactical playbook documented in 2014–2015 was reused intact in subsequent harassment campaigns 3. **2016+ political harassment** — both far-right and far-left use of doxxing against the other side; the right-wing doxxing of antifascist researchers and progressive activists, and the left-wing doxxing of attendees of the August 2017 Charlottesville [[Unite the Right]] rally, are the canonical examples of the partisan-asymmetry argument 4. **2024+ oligarch-as-publisher** — the [[Musk Federal Employee Doxxing]] episode marks the migration of the tactic from anonymous crowds to the platform owner himself: [[Elon Musk]] reposting the names and titles of four individual climate-related federal employees as "fake jobs" to 200M+ followers, weaponizing the cascade as an instrument of federal workforce attrition ahead of DOGE cuts ## What information typically appears in a dox The standard package varies but typically aggregates: - **Legal name** — especially for targets who used pseudonyms - **Home address** — the most operationally dangerous element; enables swatting, in-person harassment, vandalism - **Workplace** — enables employer-pressure campaigns (writing the boss to demand firing) - **Phone numbers** — enables harassment calls, social-engineering of accounts - **Family members** — siblings, parents, children, often with their workplaces and addresses - **Financial information** — bank-account fragments, credit-report data - **Photos** — including photos of children, partners, residences - **Medical or sexual history** — when available from breaches or social-engineering Not all of this is from breaches; much of it is open-source intelligence (OSINT) — voter registration databases, property records, court filings, social-media oversharing, data-broker sites like Spokeo, Whitepages, Intelius, FastPeopleSearch. ## The downstream harassment cascade A successful dox typically triggers a known cascade: 1. **Public posting** on a coordinating platform (chan boards, Kiwi Farms, [[Telegram]] channels, Twitter/X threads) 2. **Harassment calls and messages** to the target and their employer, partner, family 3. **Pressure campaigns** to get the target fired, expelled, deplatformed 4. **Swatting** — calling a fake hostage or active-shooter report to police using the target's address, with the goal of armed-police-raid escalation. Multiple swatting cases have resulted in death (Andrew Finch, Wichita 2017; Mark Herring, 2020) 5. **In-person harassment or violence** — stalkers, protesters at the target's home, occasional physical attacks 6. **Long-tail digital harassment** — fake accounts impersonating the target, fake reviews of their business, fake police reports, fake social-services calls The cascade does not require coordination by the original poster. The point of the technique is that *posting the dox is sufficient to set the cascade in motion* — the publisher has plausible separation from each downstream act. ## Legal and platform status Doxxing itself is not uniformly illegal in the United States — most of the *information* is from public records or open social media, and the act of aggregation and publication is generally First-Amendment-protected speech. Specific downstream uses (swatting, stalking, harassment via interstate communications) are criminal. A handful of states (California, Maryland, New York) have passed targeted anti-doxxing statutes covering law-enforcement officers, judges, or public health workers; federal protection remains limited. Major platforms (Twitter/X, Facebook, Reddit) have policies prohibiting doxxing but enforcement is widely-criticized as inconsistent and reactive. Kiwi Farms operated as an explicit doxxing-and-harassment platform from 2013 until a sustained Cloudflare-deplatforming campaign in 2022, and resurfaced under multiple infrastructure providers thereafter. ## Doxxing as information-warfare instrument State-actor and state-adjacent use of doxxing is documented but less-discussed than the chan-culture form. Examples include: - **Russian GRU / Fancy Bear** publication of DCCC and DNC documents through [[Guccifer 2.0]] and [[DCLeaks]] (2016) — a strategic doxxing of an entire political party - **Anonymous Sudan / pro-Russian hacktivist** publication of Western-government-employee identity data (2022+) - **Chinese MSS-linked** publication of Hong Kong protest organizer identities through Telegram channels (2019–) The tactical structure is the same as chan-culture doxxing — release identifying information and let downstream actors do the work — but the strategic objective is intelligence operation, deterrence, or pre-positioning of harassment infrastructure for later activation. ## See Also - [[Gamergate]] — the case study that transferred chan-culture doxxing tactics into mainstream political-harassment use - [[Musk Federal Employee Doxxing]] — the platform-owner-as-publisher case; doxxing as federal workforce policy - [[Stochastic Terrorism]] — the broader incitement-to-random-violence mechanism; doxxing is one of its preferred lubrications - [[Swatting]] — the most dangerous downstream-of-dox act - [[Sockpuppet Accounts]] — the offensive-end-of-the-platform counterpart - [[Troll Farms]] — the industrialized version of distributed harassment - [[Disinformation Hub]] — Subject hub - [[Disinformation Lexicon]] — alphabetical MOC