Doxxing.

Publishing or threatening to publish a person's private identifying information online with the intent to harass, intimidate, or facilitate harm. It belongs to the Attacks & Threats category of cybersecurity.

Publishing or threatening to publish a person's private identifying information online with the intent to harass, intimidate, or facilitate harm.

Doxxing (also spelled doxing) is the deliberate exposure of someone's real-world identity, home address, workplace, phone number, family members, or other private details by aggregating data from breaches, social media, public records, and OSINT. Attackers use doxxing for harassment campaigns, extortion, stalking, or as a precursor to swatting or physical threats. The technique fuels many real-world security incidents and can cause severe psychological, professional, and physical consequences. Defences include strict privacy hygiene (data minimisation, separate aliases for sensitive accounts), opt-outs from data brokers, locked-down social profiles, MFA on email and phone, rapid takedown procedures with platforms, and engagement with law enforcement when threats escalate.

Defences for Doxxing typically combine technical controls and operational practices, as detailed in the full definition above.

Common alternative names include: Doxing, Document dropping.