I've Been Doxxed: A Step-by-Step Guide to Protecting Yourself

Discovering that someone has published your home address, phone number, or workplace online is terrifying. Doxxing—the malicious publication of personal information—is designed to intimidate, harass, and enable real-world harm. If this has happened to you, here's exactly what to do.

Immediate Actions (First 24 Hours)

1. Document Everything

Before anything gets deleted, capture evidence:

• Screenshot the doxxing post with visible URL and timestamp
• Archive the page using archive.today or the Wayback Machine
• Note the platform, poster's username, and any comments
• Save any threats or harassment that followed

This documentation is crucial for police reports, platform appeals, and potential legal action.

2. Assess the Threat Level

Consider how serious the risk is:

• High threat: Explicit threats of violence, swatting attempts, organized harassment campaign, crowd-sourced harassment (like from hate forums)
• Medium threat: Your info posted to embarrass you, angry individuals but no coordinated campaign, info posted on mainstream platforms
• Lower threat (still serious): Info discoverable but not actively spread, posted by someone you can identify, limited audience

3. If You're in Immediate Danger

For high-threat situations:

• Contact police: Request a welfare check note on your address to prevent swatting
• Notify local emergency services: Explain you may be targeted for false emergency calls
• Consider temporary relocation: Stay with friends/family if threats are credible
• Alert your workplace: Inform security if your employer was named

4. Secure Your Accounts

Doxxers often have more information than they initially post:

• Change passwords on all accounts (use a password manager)
• Enable two-factor authentication everywhere
• Check for unauthorized logins in account activity
• Set up login alerts
• Review connected apps and revoke suspicious access

Getting the Doxxing Removed

Platform Reporting

Most platforms prohibit sharing personal information:

Reddit:

1. Report the post for "Sharing personal information"
2. Message the subreddit moderators
3. Submit a formal request at reddit.com/report
4. Email contact@reddit.com for urgent cases

Twitter/X:

1. Report tweet → "It's abusive or harmful" → "Includes private information"
2. Use help.twitter.com/forms/private_information
3. Select the type of information shared

Discord:

1. Report message → "Sharing private information"
2. Submit detailed report at dis.gd/report
3. Include server name and message links

4chan and similar:

These sites have limited moderation. Focus on:

• Requesting Google to delist the content
• Archive removal requests (though difficult)
• Waiting for the thread to naturally expire

Search Engine Removal

Even if the original post stays up, you can request delisting from search results:

• Google: Use the "Remove personal info" request at support.google.com/websearch/troubleshooter/9685456
• Bing: Submit at bing.com/webmaster/tools/contentremoval
• Google now specifically allows removal requests for doxxing and personal info that creates risk

Data Broker Removal

Doxxers often get your info from data broker sites. Remove yourself from:

• WhitePages: whitepages.com/suppression_requests
• Spokeo: spokeo.com/optout
• BeenVerified: beenverified.com/faq/opt-out
• TruePeopleSearch: truepeoplesearch.com/removal
• FastPeopleSearch: fastpeoplesearch.com/removal

There are 100+ data broker sites. Services like DeleteMe or our protection plans can automate this process.

Legal Options

Police Report

File a police report documenting the doxxing. This:

• Creates an official record
• May trigger investigation if threats are involved
• Supports restraining order applications
• Strengthens platform appeals
• Is required for some legal remedies

State Laws

Many states have laws against doxxing:

• California: Criminalizes sharing personal info with intent to harass
• Washington: Cyber harassment statute covers doxxing
• Illinois: Prohibits publishing personal info to incite harassment
• Kentucky: Doxing explicitly criminalized

Even without specific doxxing laws, harassment, stalking, and intimidation statutes may apply.

Civil Remedies

You may be able to sue the doxxer for:

• Intentional infliction of emotional distress
• Invasion of privacy
• Harassment
• Tortious interference (if it affected your employment)

Long-Term Protection

Lock Down Your Digital Footprint

1. Use a P.O. Box: Keep your home address off public records
2. Register to vote privately: Many states offer address confidentiality programs
3. Use an LLC for property: Hides your name from property records
4. Separate personal/professional identities: Different emails, usernames, profiles

Ongoing Monitoring

• Set Google Alerts for your name, address, and phone number
• Regularly search data broker sites for your info
• Use services like Have I Been Pwned to monitor for breaches
• Check social media periodically for accounts mentioning you

Physical Security

For serious ongoing threats:

• Install security cameras
• Consider a security system with monitoring
• Vary your routines
• Inform trusted neighbors
• Keep documentation of any harassment attempts

Emotional Support

Doxxing is traumatic. The violation of privacy and fear of what could happen takes a real psychological toll.

• Talk to someone: Therapist, counselor, or trusted friends
• Victim advocacy: Organizations like CCRI offer support
• Online communities: Connect with others who've been through this
• Take breaks: You don't have to monitor everything 24/7

Remember: this is not your fault, regardless of why you were targeted.