Skip to main content
Privacy Privacy
  1. HOME
  2. Guidance & Resources
  3. Doxxing

Doxxing

What is Doxxing?

Doxxing (or doxing) is the act of publicly revealing a person's private information, such as their home address, phone number, or other personal details, without their consent. Private information, images and videos can be collected from multiple platforms (including social media) and published by an unauthorized individual in an effort to intimidate, embarrass, or shame the user. Doxxing may be conducted by researching public databases, hacking, phishing, or through social engineering. 

The consequences of doxxing can be severe and may include identity theft, damage to one's reputation, and even physical harm. Additionally, doxxing may also be considered a form of harassment or intimidation, which can lead to disciplinary actions.

According to the UCSD IT Resources Acceptable Use Policy, unauthorized disclosure of personal or confidential information may result in charges of Invasion of Privacy.

How can I protect myself from Doxxing?

Limit personal information online:

  • Be cautious about what personal information you share on social media, forums, or other online platforms.
  • Avoid posting sensitive details like your home address, phone number, or other identifying information.
  • Limit participation in online quizzes and surveys that collect personal data.

 Adjust your social media settings:

  • Adjust the privacy settings on your social media accounts to limit who can see your profile and posts.
  • Restrict access to your personal information, such as contact details and location.
  • Ensure that your profiles and usernames/handles are kept private.
  • Remove any addresses, places of work, and specific locations from your accounts.
  • Set your posts to “friends only."
  • Avoid geotagging, which attaches location data to photos or posts. Disable geotagging features on devices and social media platforms.
  • Vary usernames across platforms to prevent cross-referencing.

Monitor your online presence:

  • Regularly search for your name, email addresses, and other personal information online to detect any activity or information you would not be comfortable making public.
  • Set up Google Alerts or similar services to be notified of new mentions of your name or personal details.
  • Review and delete old posts, comments, and media that might expose personal details.
  • Opt out of data broker websites manually or by using services like DeleteMe, Kanary, or Optery.

Secure your accounts:

  • Use strong, unique passwords for all online accounts.
  • Enable two-factor or multi-factor authentication whenever possible.
  • Create a unique email address for your most important contacts and accounts.
  • Use encrypted messaging apps like Signal for private conversations.

Be cautious about connecting online:

  • Be selective about who you interact with online and the information you share.
  • Avoid engaging with suspicious or threatening individuals or groups.
  • Be wary of unsolicited messages asking for sensitive information.
  • Recognize and avoid phishing attempts.
  • Never give out your personal information to someone you do not know.

 Maintain offline privacy:

  • Limit the amount of personal information you share in the physical world.
  • Compartmentalize your identity: use separate accounts or devices for work, personal use, and activism.

Use secure Wi-Fi and VPN:

  • Use a trusted, secure Wi-Fi networks or a reliable VPN.
  • If you must use a public Wi-Fi network, turn off the public network sharing functionality.

What to do if you're a victim of Doxxing

Take the following proactive actions:

  • If you believe you’re being targeted, temporarily deactivate or delete accounts to reduce exposure.
  • Request the removal of false, abusive, or threatening content.
  • Document everything: keep records of the doxing incident, including screenshots, timestamps, and all relevant information.  

Report the incident:

  • Report to campus authorities, law enforcement, and/or relevant online platforms.
  • If related to UC San Diego:
    • If the information exposed is student or employee data, personally identifiable information (i.e., Social Security Number, Driver’s License Number, or home address), and/or information pertaining to UC San Diego work or community, notify the Campus Privacy Office at ucsdprivacy@ucsd.edu. If the information exposed is patient or student health data, notify the UCSD Health Privacy Office at hscomply@health.ucsd.edu.
    • Report unauthorized access to UC San Diego electronic accounts or resources to security@ucsd.edu.
    • Contact campus police if threats are made. Reach the UC San Diego Police Department at (858) 534-HELP (4357) or call 911 in emergencies.
    • Report inappropriate sharing on campus network resources to security@ucsd.edu.

Seek support:

Reach out to campus counseling services, employee assistance programs, or other support resources.

Consider legal options:

Consult with an attorney regarding potential actions such as cease and desist letters or formal complaints.

Resources

U.S. Department of Homeland Security's Guidance on How to Prevent Online Harassment from Doxxing

Resources for removing your online information

How to scrub your personal information from Google searches