Doxxing: what an adversary can find.

Back to Insights

Doxxing is the assembly and publication of personal information to enable harassment, fraud or physical approach. It rarely depends on hacking. It depends on patience, and on the fact that ordinary life produces data in many places that were never designed to be read together.

The trail is made of ordinary things

Property and company records, electoral and professional registers, old forum accounts, family members' social media, event photographs, fitness apps and data brokers all hold fragments. Taken singly, each is harmless. Combined, they can reveal where a person lives, what they drive, when they leave, and who they trust. The people most at risk are often not those who share the most themselves, but those whose relatives, staff and business contacts share on their behalf.

Why the weakest link is rarely you

A principal with careful habits can still be exposed by a spouse's holiday photographs, a child's school page, or an employee's professional profile. Effective protection therefore considers the whole household and the whole circle, not only the individual who commissions it.

How an exposure audit works

An audit reverses the adversary's process. Our analysts collect from open sources, as an opponent would, then assess what the findings reveal and how serious they are. The output is a prioritised list: what to remove, what to change, and what to leave alone because the cost of removal outweighs the risk. Removal from data brokers and public listings follows, along with changes to routines that cannot be deleted.

What you can do now

Check what appears when you search your own name, address and phone number. Review the privacy settings on accounts held by your family. Separate the details you use for deliveries, registrations and public filings from your home address wherever the law allows. Small changes made early are far cheaper than the response to an incident.

Request a confidential consultation