Doxxing is the malicious publication of personal information, such as your address, phone number, workplace or family details, to intimidate, harass or encourage violence. Depending on the facts, this can involve criminal offences and privacy violations in France. Preserve evidence, report the content to the platform, request removal where appropriate and secure your accounts. Do not publish someone else's information in retaliation.
At a glance
- First priority: save screenshots, timestamps and URLs. Avoid escalating the situation publicly.
- Removal: report the content to the platform, then consider Google removal if necessary. See personal information in search results.
- Information already public elsewhere: run a scan and request broker removal.
- Immediate physical danger: contact the police on 17 in France, or 112.
Recognising doxxing
It is more than somebody searching your name or finding a namesake or professional profile. Warning signs include:
- publishing your home address or phone number with an invitation to target you;
- combining sensitive details, such as your employer, children's details and phone number;
- sharing contact information on Discord, X, forums or Telegram in a hostile context.
Doxxing may overlap with online harassment, which has its own reporting and complaint procedures. Read how to remove your traces online to reduce information that can be exploited.
Immediate steps
- Document the content: keep complete screenshots with the URL, author, date and surrounding context. Export evidence where possible.
- Avoid an angry public response that may increase exposure or complicate the situation.
- Report it on the platform, using the harassment or privacy reporting route.
- Secure your accounts: use unique passwords and two-factor authentication. Review known breaches and compromised passwords.
- Tell someone you trust. In France, 3018 provides support for online violence and 116 006 offers victim support. Service-Public explains these support and reporting routes.
Removing the content online
Choose the route that matches where it was posted:
- Social network or forum: report the post and request removal from moderators.
- Website: contact the site operator or relevant hosting provider and, where appropriate, its data protection officer. Explain the personal data involved and applicable GDPR rights.
- Google: if the page appears in searches for your name, review delisting and removing your name from Google.
If your address was already listed in a directory or broker database, doxxing may reuse that information. Address the original source too, such as Pages Jaunes or people search sites.
Legal and reporting routes
You can report illegal public content through PHAROS. A PHAROS report is not a criminal complaint. To file a complaint, contact the police or gendarmerie. For unlawful personal data processing within its remit, you can also complain to the CNIL.
A lawyer can advise on urgent court action or compensation. The appropriate legal route depends on the facts; this guide provides general information.
Prevention over time
- Reduce your public footprint: use the digital footprint guide.
- Separate work and personal identities where practical.
- Limit location details in social posts and activity apps such as Strava.
- Review your exposure regularly with a scan.
Data Knight is not an emergency or legal assistance service. We help map online exposure and request removal from brokers and public websites under applicable data protection rights. Reducing exposure limits information that is readily available for misuse; it cannot guarantee safety or erase every copy.
See also: Personal information on Google · Data breaches and passwords · Remove your name from Google · Follow up with brokers and the CNIL · Remove a social profile from search
