Personal Cybersecurity and Privacy / Preventing Doxxing

What is Doxxing?

Doxxing refers to the collection of a user’s private information, across multiple platforms (including social media) by an unauthorized individual, who then publishes the information in an attempt to shame or embarrass the user. Doxxing may be conducted by researching public databases, hacking, or through social engineering.  The term "doxxing" is derived from the phrase "dropping dox (documents)".  

Doxxing often involves hackers attempting to embarrass or shame individuals by publishing confidential information, images or videos obtained from their personal accounts.   Initially, doxxing was used by hackers to "out" the identities of fellow bad actors/hackers.  However, more recently, it has been used to attack users with opposing viewpoints.

How can I protect myself from Doxxing and Online Harassment?

• Work through the Personal Cybersecurity Checklist (linked in right column)
• Adjust your social media settings:
  • Ensure that your profiles, usernames/handles are kept private
  • Remove any addresses, places of work, and specific locations from your accounts
  • Set your posts to “friends only"
  • Avoid discussing personal information that could be used against you, as well as anything that can identify your address, workplace or contact information
• Use secure wi-fi networks such as eduroam, and/or a trusted Virtual Private Network (VPN) available free to students.
  • If you must use public wi-fi, turn off the public network sharing functionality on your device
• Use strong and unique passwords, especially for your most important accounts, e.g. financial, email, government, etc.
• Vary usernames across platforms.
• Create a unique email address for your most important contacts and accounts.
• Hide domain registration information from WHOIS (a database of all registered domain names on the web).

• Monitor and remove your personal data collected by websites and data brokers. Information and Free workbook

• Monitor for leaked accounts on the dark web. 

For more detailed information, consult the U.S. Department of Homeland Security's Guidance on How to Prevent Online Harassment from Doxxing(link is external)

Guidance for campus reporting of doxxing incidents:

• Contact the Privacy Office (privacyoffice@berkeley.edu) or UC Berkeley Cybersecurity Clinic (cybersecurityclinic@ischool.berkeley.edu) for assistance managing a doxxing incident or other release of student or employee information.

• If the incident involves unauthorized access to UC Berkeley electronic accounts or resources, report to security@berkeley.edu(link sends e-mail)

• Information inappropriately shared on campus network resources should also be reported to security@berkeley.edu(link sends e-mail)

• General reporting for incidents and acts contrary to our Principles of Community: https://supportal.berkeley.edu/