May 1, 2024, 7:05 am | Read time: 7 minutes

The internet offers an almost endless array of possibilities for communication, conducting business, researching information, and much more. Unfortunately, this is not limited to law-abiding citizens, as dubious practices repeatedly highlight. One such practice is known as doxing (or doxxing). TECHBOOK explains the process, the origin of the term, and the intentions behind it.

What Doxing Means

Doxing is derived from the colloquial abbreviation of the English word “documents” to “docs.” “Dox” is simply an alternative spelling. As an action, doxing refers to the compilation and publication of a person’s private information on the internet without their prior consent or even knowledge. Reasons can include motives of vigilante justice or revenge.

This can include any data that can identify a person, such as their real name, address, workplace and its address, phone or mobile number, photos, or financial information.

Origin and History of Doxing

Modern doxing in the virtual realm has its roots in “dropping dox,” a known revenge tactic in the hacking culture of the 1990s. Hackers operating outside the law resorted to publishing sensitive data when a rival angered them.¹ Outside closed hacking circles, circulated lists of alleged neo-Nazis represented an early public form of internet doxing.

The disclosure of personal information itself has a much longer history, extending far before the advent of the World Wide Web. For example, in 1765 in what is now the United States, radical groups reportedly harassed tax collectors and others by publishing their names in pamphlets and newspapers. This was a direct protest reaction to the Stamp Act, a tax law of the British Parliament for the then British colonies in America.²

Why Someone Resorts to Doxing

People may resort to the practice of doxing for various reasons. The motivation can be purely malicious or aim for a form of justice. Someone might dox another person to expose their harmful behavior and hold them accountable.

In this case, the action could be justified according to a study, as long as the specific act aligns with the attitudes and perceptions of the general public. However, in many cases, a malicious intent is behind it.

The goal then is to publicly humiliate, intimidate, threaten, or punish a person. Extortion is also possible in this context. Perpetrators can show a victim that they have information and threaten to publish it.³

Also of interest: The Internet Phenomenon “Review Bombing” Explained

Possible Consequences of Doxing

Once personal information is published, its misuse can vary greatly–theoretically, the imagination of potential perpetrators knows no bounds. Ideas like fake pizza orders or email sign-ups are conceivable and are among the more harmless possibilities.

However, doxing often leads to far more drastic consequences, which may also be intended: harassment not only online but also in real life can result. Victims no longer feel safe when suddenly strangers appear at their doorstep. Relatives can also be affected. Identity theft, threats of violence on various channels, and bullying are also conceivable. Hackers can also use the data for further cybercriminal activities, such as gaining access to accounts.

In the worst case, it even leads to so-called swatting: Armed forces are sent to unsuspecting individuals under false pretenses. At best, this is an expensive prank. However, people have also lost their lives in such incidents.⁴

How Perpetrators Access Sensitive Data

Before various criminal actions can follow, doxing primarily constitutes a violation of privacy and data protection. But how do dubious characters obtain the relevant information?

In the past, detectives, journalists, police officers, and others would rummage through trash to obtain important information from the waste. Nowadays, the trash bins are digital, networked, and found all over the internet. These can be networks or old user profiles that have been forgotten and where various data is stored and remains.⁵ But active accounts are also useful. The internet opens the door to doxing in various ways. In addition to direct hacks, the following are also included:

Tracking Usernames

Those who like to use the same username across multiple platforms make themselves vulnerable to tracking. Perpetrators can gain a comprehensive insight into a person’s interests and activities.

Phishing

A widespread and recurring scam is phishing. It exists in various forms and aims to encourage victims to voluntarily disclose sensitive data.

For example, emails from banks or retailers are convincingly faked, and urgent cases are invented that supposedly require immediate action. There are, however, three quick tips to recognize phishing emails immediately.

Stalking via Social Media

Those whose profile is public must expect to make it very easy for doxers. Depending on how much someone shares on social platforms, people knowingly or unknowingly share details about their place of residence, workplace, hobbies, friends, family, and much more. And what is visible to everyone is a treasure trove for doxers.

Official Documents

Although most private data is not accessible online, a lot can still be found on official sites. This can include business licenses, marriage information, or vehicle registrations, which may contain personal information.

Packet Sniffing

Here, doxers intercept data packets of their targets and search them for useful information such as passwords, bank data, or email messages. Encryptions in message traffic are supposed to protect against this. Using a VPN can also help.

Darknet and Data Brokers

Those who want to dox someone can either go to the darknet and purchase information there or consult data brokers. These are individuals who collect information from publicly accessible sources or receive it from other brokers and then sell it.

Reverse Phone Lookup and Domain Names

These are also options that might not immediately come to mind. Knowing a phone number, there are various websites that can be used to find out the identity of the number’s owner. Additionally, when registering a domain, it is crucial to ensure that personal data is obscured. Otherwise, it can be found through a regular WHOIS search.⁶

More on the topic

Techbook Explains Where does the term phishing actually come from?

What Those Affected Need to Know Deutsche Bank, Postbank, ING, Comdirect: Thousands of Bank Customers Affected by Data Leak

Legal Situation in Germany

Even though the term itself is not explicitly mentioned, doxing was included in the German Penal Code in 2021. Section 126a addresses “endangering the dissemination of personal data.” It is not just about the mere publication of sensitive data but about the potential for endangerment.

The offense carries at least a fine, but up to two years of imprisonment are possible. A stricter sentence awaits perpetrators who disseminate information that is not publicly accessible. In such cases, a fine or even three years in prison may be imposed.⁷

What You Can Do Against Doxing

The Federal Office for Information Security (BSI) recommends being as sparing as possible with your data on the internet as a protective measure. Avoid sharing all details in messages and emails that hackers could intercept. A secure password is essential, especially for customer accounts at banks, social media, online shops, or emails. Always enable two-factor authentication. If you need help managing your passwords, various password managers are available.

Furthermore, it is advisable to set up separate usernames, passwords, and even email accounts for each online platform and purpose. Also, remember to delete unused profiles and accounts in a timely manner. If your information has appeared there, you can have it removed from Google search.⁸