跳至主要內容
KidsKnowRights

Doxxing: when your private information gets posted publicly

Having your address, school, or phone number posted is frightening and fast-moving. The useful response is a sequence, and the order matters.

作者 John Stavropoulos

Co-Founder and Vice President of KidsKnowRights5 分鐘閱讀

等待法律專業人士審閱

主題:doxxingharassmentdigital privacyonline safety

本文提供的是一般教育資訊,並不是針對個人的法律意見。KidsKnowRights 不是律師事務所,閱讀本文亦不會建立律師與當事人關係。法律因州份、年齡及情況而異,並會隨時間改變。如需就真實情況取得意見,請諮詢持牌律師或法律援助機構。

本頁全文尚未翻譯,因此以下以英文顯示。上方的摘要、標籤及安全資訊已經翻譯。

Doxxing means publishing someone's private identifying information — home address, phone number, school, workplace, family members' names — usually to invite harassment. There is no single federal anti-doxxing law, and whether a specific incident is a crime depends on state law and on what accompanied the posting. What is more useful than the legal classification is knowing the order of operations, because the first hours matter most.

First: document, then report, then remove

The instinct is to get the post taken down immediately, but a deleted post is also deleted evidence. Screenshot first — the post, the account, the URL, the timestamp, and any replies — and only then report it to the platform. Every major platform prohibits posting private information and has a specific report category for it.

Then tell an adult, and if there is any threat attached, contact law enforcement with the documentation already in hand. A threat of violence changes the situation from a platform-policy problem into a criminal one, and that distinction is what determines who can actually act.

Then: close the doors that are still open

重要

Doxxing is often followed by attempts to get into accounts, because the same personal details that were posted are frequently the answers to security questions. Change passwords on the important accounts, turn on two-factor authentication, and check whether any account recovery details are now public — a birthday and a childhood street name posted together are exactly what a recovery flow asks for.

Much of the underlying information often came from data brokers rather than from anyone who knew you, which our article on data brokers covers, including the opt-out routes that exist in some states. Locking down account privacy settings after an incident is worth doing even though it does not undo the posting.

If it came from someone at school

When the person responsible is a classmate, this is simultaneously a platform problem and a school problem, and the school route often moves faster. Our articles on cyberbullying and on what happens after you report bullying cover how a school's anti-bullying policy applies to off-campus conduct with a genuine connection to school life, which posting a classmate's address generally has.

Report it to the school in writing as well as to the platform. The two processes run independently, and the school's does not wait for the platform's.

記住這些

  • Screenshot everything before reporting — a removed post is also removed evidence.
  • There's no single federal anti-doxxing law; whether it's a crime depends on state law and what accompanied the post.
  • A threat attached to it changes it into a criminal matter — contact law enforcement with your documentation.
  • Secure accounts immediately, since posted personal details are often the answers to recovery questions.

資料來源

本文提供的是一般教育資訊,並不是針對個人的法律意見。KidsKnowRights 不是律師事務所,閱讀本文亦不會建立律師與當事人關係。法律因州份、年齡及情況而異,並會隨時間改變。如需就真實情況取得意見,請諮詢持牌律師或法律援助機構。