Wed, Jul 15 Late Edition English
USContext.org Uscontext News Pulse
Updated 18:23 16 stories today
Blog Business Local Politics Tech World

What Does Doxxed Mean? Definition, Risks & Prevention

Caleb Mercer Mitchell • 2026-05-12 • Reviewed by Hanna Berg

Ask most people what it means to be “doxxed,” and you’ll get a worried shrug—it’s one of those internet‑age terms that feels serious but fuzzy. In short, doxxing is the public release of someone’s private information—home address, phone number, workplace—often with the intent to harass or intimidate.

Doxxing incidents reported in 2023: over 10,000 cases in the U.S. alone (FBI IC3) ·
Percentage of doxxing victims who experienced harassment: nearly 60% (Pew Research) ·
U.S. states with specific anti-doxxing laws: at least 6 states as of 2024 ·
Average cost of a data breach (IBM report): $4.45 million in 2023

Quick snapshot

1Definition
  • Doxing = publicly releasing private information. (Britannica)
  • Also spelled doxxing. (Britannica)
  • Often includes name, address, phone, workplace. (FIRE)
2Risks
3Legal Status
  • Not always a crime explicitly. (FIRE)
  • Can violate harassment or privacy laws. (FIRE)
  • 6 U.S. states have specific laws. (FIRE)
4Prevention
  • Limit personal info online. (CSG)
  • Use privacy settings. (CSG)
  • Monitor for data breaches. (CSG)

The snapshot above captures four angles on doxxing. One pattern: the same act that can be protected speech under the First Amendment can also cross into criminal harassment depending on intent and location.

Attribute Detail
Definition Doxing (or doxxing) is the act of publicly revealing private personal information about an individual on the internet, often with malicious intent. (FIRE)
Common Information Exposed Full name, home address, phone number, email, workplace, financial details, family members. (Britannica)
Main Motivation Harassment, intimidation, revenge, financial gain, vigilantism. (Kaspersky)
Typical Platform Social media (Twitter, Reddit, Facebook), forums, comment sections.
Legal Status in U.S. Not a standalone federal crime, but may violate state laws against harassment, stalking, or cyberbullying. (NAAG)

What is doxing? What does it mean to dox someone?

Definition of doxing and doxxing

  • Doxing (or doxxing) is the intentional release of an individual’s personal identifying information without permission, usually to retaliate or intimidate. (FIRE, a nonprofit dedicated to free speech)
  • The term derives from “dropping dox,” meaning disclosing documents or personal information. (Britannica)
  • Personal information in doxxing includes home addresses, social security numbers, and employer names. (FIRE)

Examples of doxing in practice

  • Public databasing: An activist posts a politician’s home address on Twitter, leading to protests at their residence.
  • Hacked leaks: A hacker accesses a company’s employee database and publishes the home addresses of all staff on a forum.
  • Social-engineering: Someone calls a utility company pretending to be the victim, obtains the victim’s new address, and shares it in a revenge post.
The upshot

Doxing sits at the intersection of free speech and privacy. The same public information that journalists use for legitimate reporting can become a weapon when released with malicious intent. For the average internet user, the line is blurry—but the harm is real.

Summary: Doxing is the malicious publication of private info such as addresses and phone numbers. Its legality depends on intent and jurisdiction.

What happens if you get doxxed?

Immediate risks and consequences

  • Victims can face harassment, stalking, identity theft, and physical threats. (Tufts University Police, a university law enforcement agency)
  • Nearly 60% of doxxed individuals report experiencing harassment, according to Pew Research.
  • Swatting—a related act where false emergency reports are made using the victim’s address—can lead to armed police responses. (Kaspersky, a global cybersecurity firm)

Common outcomes for victims

  • Loss of privacy: once information is public, it spreads rapidly across sites and archives.
  • Professional repercussions: employers may receive harassing calls, or victims may need to change jobs.
  • Psychological toll: anxiety, paranoia, and in severe cases, PTSD. (CSG)
Why this matters

For victims, the aftermath of doxxing isn’t just digital. The U.S. FBI received over 10,000 doxxing-related complaints in 2023—each one representing a person whose life was upended.

Summary: Getting doxxed can lead to stalking, identity theft, and severe psychological harm. The effects are often permanent.

Is doxing a crime?

Legal status in the United States

  • Doxing itself is not a standalone federal crime, but can violate laws against harassment, stalking, or privacy violations. (NAAG, the National Association of Attorneys General)
  • Texas made doxxing a criminal offense as of September 2023, defining it as posting private address/phone with intent to harm. (NAAG)
  • Washington state defines doxxing as unauthorized publication of personal info with intent or knowledge it will harm the individual. (FIRE)
  • Alabama defines doxxing as electronically publishing personal info with intent to harass or harm, with special provisions for firefighters and police. (FIRE)

When doxing becomes illegal

  • Existing U.S. laws cover doxxing via true threats, incitement, harassment, and public disclosure of private facts tort. (FIRE)
  • In Smith v. Daily Mail Publishing Co. (1979), the U.S. Supreme Court held states cannot punish publication of truthful, lawfully obtained information. (FIRE)
  • Federal law criminalizes doxxing government employees as a conspiracy offense. (Kaspersky)
The paradox

The First Amendment protects publishing truthful information that is lawfully obtained—even if it’s private. That means doxxing isn’t automatically illegal. It crosses the line only when combined with specific intent to harm, harassment, or when the information was obtained unlawfully.

Summary: Doxing is not a federal crime on its own, but many states criminalize it when done with intent to harm. The First Amendment offers a narrow shield.

How to protect yourself from doxxing?

Best practices for personal cybersecurity

  1. Use strong, unique passwords and enable two-factor authentication on every account. (CSG)
  2. Limit personal information shared on social media—avoid posting your home address, phone number, or workplace publicly.
  3. Monitor for data breaches using services like Have I Been Pwned, and change passwords immediately if compromised.

Steps to reduce your digital footprint

  1. Use privacy-focused search engines (DuckDuckGo) and browsers that block trackers.
  2. Remove yourself from people-search sites like Whitepages and Spokeo by opting out.
  3. Use a VPN when browsing to mask your IP address. (Kaspersky)
What to watch

No single tool guarantees total safety. The most effective defense is a habit of digital minimalism: share less, lock down your accounts, and regularly audit what’s publicly visible about you.

Summary: Preventing doxxing requires strong passwords, limited social sharing, and regular privacy audits. No tool is foolproof.

What to do if you’ve been doxed?

Immediate steps to take after a doxing incident

  1. Secure your accounts: change passwords, revoke third-party app access, and enable two-factor authentication. (CSG)
  2. Document everything: take screenshots of posts, URLs, and any threatening messages before they are removed.
  3. Contact the platform where the information was posted and request removal under their terms of service (doxxing violates most platform policies). (Kaspersky)

Legal and support resources

  • If you receive threats of violence, contact local law enforcement immediately. Doxxing that includes threats can be prosecuted as stalking or harassment. (Tufts University Police)
  • Consult a lawyer who specializes in privacy or cyber law. Some states allow civil lawsuits for damages caused by doxxing.
  • Reach out to support organizations like the Cyber Civil Rights Initiative (CCRI) or the National Cybersecurity Alliance for guidance and emotional support.
The catch

Once your information is out, you cannot fully erase it from the internet. The goal shifts from prevention to damage control: limit spread, protect your accounts, and preserve evidence for legal action.

Summary: After a doxing, act quickly to secure accounts, document evidence, and contact law enforcement if threats are made. Complete removal is impossible.

Clarity check

Confirmed facts

  • Doxing is a recognized form of online harassment. (FIRE)
  • It can lead to real-world harm including stalking and identity theft. (Tufts University Police)
  • Laws vary by jurisdiction; some states have specific statutes. (NAAG)
  • Prevention methods include using privacy settings and avoiding oversharing. (CSG)

What’s unclear

  • The exact number of doxing incidents is underreported. (FBI notes only reported cases)
  • Legal outcomes for doxers vary significantly by case. (FIRE)
  • Effectiveness of anonymity tools against determined attackers may vary.

Quotes from experts

“Doxxing involves gathering info from social media, public databases, hacking, or social engineering.”

— Tufts University Police

“Doxing can involve info from public databases or criminal means like hacking.”

— Britannica

“Doxxing violates many websites’ terms of service, leading to bans.”

— Kaspersky

Doxing isn’t a niche hacker tactic—it’s an everyday risk for anyone who lives, works, or engages online. The legal landscape is patchwork: what’s protected speech in one state can be a crime in another. For the ordinary internet user, the implication is clear: treat your personal data like a key to your house, because once it’s posted publicly, there is no digital locksmith who can get it back. Prevention beats cure, and swift action after an incident can mean the difference between a bad week and a life derailed.

Additional sources

en.wikipedia.org, csg.org

Frequently asked questions

What does ‘doxxed’ mean in slang?

In internet slang, being “doxxed” means your private information—like your real name, address, or workplace—has been posted publicly online without your consent, often as a form of retaliation or harassment.

Can you get doxxed through social media?

Yes. Social media is a primary source for doxxing. Attackers scrape public profiles for personal details (location, employer, family members) or trick you into revealing them through direct messages or phishing links. (Kaspersky)

Is doxing a form of cyberbullying?

When done with intent to harass, humiliate, or intimidate, doxing is considered a form of cyberbullying. Many school and workplace anti-bullying policies specifically include doxing. (CSG)

What should I do if I witness doxing online?

Do not repost or amplify the information. Report the post to the platform (most prohibit doxing in their terms of service), and if the victim appears to be at risk of physical harm, consider reporting it to local law enforcement. (Kaspersky)

Are there apps that can protect me from doxing?

Apps like Have I Been Pwned alert you to data breaches, and privacy-focused browsers (Firefox, Brave) block tracking. However, no app can guarantee protection; the most effective defense is careful online behavior and privacy settings. (CSG)

How long does it take to recover from doxing?

Recovery time varies. Basic account security can be restored in hours, but the psychological impact and removal of information from the internet can take months—some data may never fully disappear. (CSG)

Related reading



Caleb Mercer Mitchell

About the author

Caleb Mercer Mitchell

Our desk combines breaking updates with clear and practical explainers.