What to Do If You've Been Doxxed
A calm, practical action plan for the first hours and days after being doxxed: lock down accounts, preserve evidence, get content removed, and stay safe.
Being doxxed — having your private information exposed to intimidate or harass you — is frightening, but the first hours are when clear, calm action matters most. Work through this list in order.
1. Preserve evidence before anything disappears
Screenshot everything: the posts, the URLs, the usernames, timestamps, and any threats. Save full-page captures and, where possible, the page URL and the account handle. This record is what makes platform reports, police reports, and any future legal action possible. Do this before you report, because content often gets deleted once you complain.
2. Lock down your accounts
Assume your passwords may be exposed. Change passwords on your email, financial, and social accounts, turn on two-factor authentication (prefer an authenticator app over SMS), and review active sessions and connected apps. Freeze your credit with the three bureaus if financial data was leaked.
3. Report to the platforms
Most major platforms explicitly prohibit sharing private information. Use their harassment or “private information” report flow and reference the exact posts. Doxxing that includes threats, a home address, or calls to harass usually violates the rules and can be removed quickly.
4. Get the underlying data removed
Doxxers often pull from people-search sites. Opt out of the major data brokers so the information is harder to re-share, and send removal demands to any site hosting the leaked details. Removing the source shrinks the harasser’s ammunition.
5. Consider law enforcement
If there are credible threats, a pattern of stalking, or the release of information intended to incite harm, file a police report and bring your evidence package. Doxxing tied to threats or NCII may be criminal depending on your jurisdiction. A documented report also strengthens any protective-order or civil case.
6. Protect yourself day-to-day
Tell trusted people what’s happening, tighten privacy settings, and be alert for follow-on scams and impersonation. If your home address was posted, notify anyone who shares your home and consider a temporary stay elsewhere if threats are specific.
Don’t engage the harasser
Responding usually escalates it and can compromise a future case. Document, report, remove, and route serious threats to law enforcement instead.
Doing this yourself is slow and the sites make it deliberately hard. Novam Legal can send the removal demands and takedowns for you — and follow up until it’s gone. See plans and get started →