The six-letter term for publicly sharing someone’s personal information online without consent is “doxing.” Also spelled “doxxing,” it usually involves publishing personally identifiable information—such as a home address, phone number, workplace, or legal name—with the potential to harass, intimidate, or distress the target.
The word comes from “docs,” short for “documents,” and the hacker expression “dropping dox.” In 1990s hacker culture, exposing an opponent’s identifying information could destroy their anonymity and invite harassment or legal consequences. Doxing can involve compiling material from public records and social media, or releasing information obtained through hacking or social engineering.
The practice predates the modern Internet. Political groups and activists historically published names and addresses in pamphlets and newspapers as a form of pressure or vigilantism. On Internet forums, prominent examples appeared on Usenet in the late 1990s, including lists targeting suspected neo-Nazis and racists.
Doxing is not the same as phishing, which tricks people into surrendering information, or swatting, which involves a dangerous false emergency report. Publishing information that is technically public can still become doxing when the context, intent, or presentation facilitates harassment.