Meaning
Doxxing refers to the deliberate collection and public disclosure of a person’s private or identifying information, usually without consent and often with the intention of intimidating, harassing or exposing them.
The information disclosed may include:
- home address;
- phone number;
- personal email;
- workplace details;
- family information;
- financial details;
- identity documents;
- real-time location;
- private photographs or records.
The term originated from the phrase “dropping documents”, or “docs”, on an individual.
Methods
Doxxing may involve information obtained from:
- social-media profiles;
- public databases;
- leaked databases;
- data brokers;
- hacked accounts;
- online forums;
- domain-registration records;
- photographs containing location information;
- social engineering.
A person may combine several individually harmless pieces of publicly available information to identify someone’s home, workplace or family.
Doxxing should therefore be distinguished from ordinary publication of information that is genuinely relevant to public-interest journalism.
Risks and Consequences
Doxxing can cause both digital and physical harm.
Its consequences may include:
- online harassment;
- stalking;
- threats of violence;
- identity theft;
- financial fraud;
- reputational damage;
- workplace harassment;
- swatting or false emergency complaints;
- physical attacks.
Women, journalists, activists, public officials and members of vulnerable communities may face particularly serious risks when identifying information is weaponised against them.
Even when the disclosed information was originally available in public records, compiling and circulating it with malicious intent can substantially increase the danger to the individual.
Legal Position in India
India does not have a single criminal offence specifically titled “doxxing”. Depending on the circumstances, the conduct may attract provisions relating to:
- stalking;
- criminal intimidation;
- identity theft;
- cheating by personation;
- violation of privacy;
- obscene or sexually explicit publication;
- unauthorised access to computer systems;
- misuse of personal data.
Relevant legal frameworks may include the Bharatiya Nyaya Sanhita, 2023, the Information Technology Act, 2000, and data-protection law.
The constitutional right to privacy recognised under Article 21 also provides an important basis for protection against unjustified disclosure of personal information.
However, liability depends on the nature of the information, manner of acquisition, intention behind disclosure and resulting harm.
Prevention and Response
Individuals can reduce exposure by:
- limiting publication of addresses and phone numbers;
- reviewing privacy settings;
- removing location metadata from photographs;
- using separate emails for public activities;
- enabling multi-factor authentication;
- monitoring data breaches;
- avoiding public sharing of identity documents.
Platforms should provide:
- rapid reporting mechanisms;
- removal of malicious personal information;
- account action against repeat offenders;
- preservation of evidence for investigation;
- stronger controls against scraping and mass disclosure.
A victim should preserve screenshots and links, report the content to the platform, secure compromised accounts and approach law-enforcement authorities where threats, stalking, fraud or physical danger are involved.
Conclusion
Doxxing transforms personal information into a tool of intimidation and harassment. Effective protection requires privacy-conscious digital behaviour, responsible platform governance and legal action against malicious disclosure that creates real risks to safety, dignity and autonomy.
