Dartmouth Guidelines for Responding to Doxxing

These guidelines contain potential actions targets of doxxing may take to navigate these complex and upsetting situations by leveraging law enforcement, public, and, to the extent possible, campus resources. 

What is Doxxing? 

Doxxing is the unauthorized and intentional disclosure of private, sensitive information about an individual or organization online or otherwise, such as home addresses, phone numbers, email addresses, or other personal records (e.g. social security, driver's license, bank and credit card numbers, etc.). This invasive act may be pursued with the aim to harass, threaten, or incite others to harass the person whose information has been exposed and may be prohibited by criminal and civil law, or institutional policy, particularly when the disclosed information is obtained illegally (i.e. via hacking or invasion of privacy). It can also escalate to threats of violence or criminal harassment.

What should I do if I learn I am being doxxed?

1. Document the doxxing incident as quickly and as best you can.

• While an incident like this may be disturbing, it is extremely important to act quickly to collect and preserve information.
• Take screenshots or screen recordings of the specific posts, comments, or profiles where the content was shared
• Relevant information will include who was targeted, what information was exposed, and what was the objective.
• Dartmouth has created a worksheet to follow to help you collect the information.

  Click for Reporting Worksheet

  It is very important to collect as much of the following information as possible. You may not have all of this information and it is not all required, however, these details will be helpful to the platforms and law enforcement as appropriate.   Have this worksheet available when reporting doxxing or reaching out to resources for support. 

  • Full name

  • Name of platform where doxxing occurred

  • Your user ID or profile name on platform

  • Details of the incident

    • Date and time
    • Description of what happened and context

  • Doxxer Information

    • Username or profile name of person who doxxed you
    • Any known contact information for the doxxer

  • Links and Evidence

    • URLs to the specific posts, comments or profiles where the doxxing content was shared
    • Screenshots or screen recordings that clearly show the doxxing content and interactions.

  • Steps taken

    • Have you tried to remove the content on your own?

    • Who else have you contacted?
      • If reporting to law enforcement, have you contacted the platform?
      • If reporting to the platform, have you reported the incident to law enforcement?
      • Have you contacted a lawyer, your institution’s law enforcement, a lawyer, etc?

  Police report

  The above information is needed for both a police report and reports to platforms. The platform may also ask to see a police report in your request.

  A copy of the police report or case number if you’ve reported the incident to law enforcement.

  Impact statement

  A brief statement summarizing how the doxxing has affected you personally or professionally, to demonstrate the urgency of the situation. Dartmouth has provided an example of how this text may appear.

  Impact Statement Template

  "I am writing to report a serious breach of my privacy where my personal information, including [list specific types of exposed information], has been maliciously disseminated. This unwarranted exposure has not only infringed on my right to privacy but also placed me at significant risk of harm, threatening both my personal safety and my professional reputation.

  [please include additional personally specific examples]

  The urgency of this situation cannot be overstated, as the potential for enduring psychological distress and material consequences is profound. Immediate intervention is necessary to mitigate these risks, and I implore you to act swiftly to remove the content and hold the responsible parties accountable."

  Provide specific examples of how the doxxing incident has affected you personally, including:

          Privacy Infringement: Explain how the exposure of personal information has infringed on your right to privacy and how it has affected your sense of security.

          Risk of Harm: Highlight the potential risks and threats that have arisen due to the doxxing incident, both to your personal safety and your professional reputation.

          Psychological Distress: Describe any psychological distress or emotional impact you have experienced as a result of the incident, including anxiety, fear, or sleep disturbances.

          Online Harassment: If applicable, provide examples of online harassment, including explicit or threatening messages, cyberbullying, or impersonation on social media.

          Physical Incidents: Mention any unauthorized physical access or incidents, such as trespassing, stalking, or the discovery of threatening notes.

          Academic Consequences: Explain how the incident has affected your academic pursuits, including missed classes, assignments, or extracurricular activities.

          Withdrawal from Activities: If you had to withdraw from certain activities or social engagements due to safety concerns, include this information.

  Example Complete Impact Statement

  "I am writing to report a serious breach of my privacy where my personal information, including my private messages, photos, and social media accounts, has been maliciously disseminated. This unwarranted exposure has not only infringed on my right to privacy but also placed me at significant risk of harm, threatening both my personal safety and my emotional well-being.

  The release of my private messages and photos has resulted in severe emotional distress. These personal conversations and images were meant to remain private, and their exposure without my consent has caused me immense anxiety and fear. I have received harassing messages and threats from unknown individuals who gained access to my personal information, causing significant psychological harm.

  Furthermore, this incident has had a profound impact on my academic life. The breach of my private information has disrupted my ability to focus on my studies. I constantly worry about the potential consequences of this breach, which has affected my concentration, sleep patterns, and overall mental well-being. As a student, maintaining academic performance is crucial, and this breach has made it incredibly challenging to meet my academic responsibilities.

  In addition to the emotional toll, this incident has had a detrimental effect on my social life and relationships. I worry that the breach will affect my reputation among my friends and peers, as well as my ability to trust others with my personal information. It has disrupted my sense of security and privacy, making me hesitant to use online platforms for personal communication.

  The urgency of this situation cannot be overstated, as the potential for enduring psychological distress and material consequences is profound. Immediate intervention is necessary to mitigate these risks, and I implore you to act swiftly to remove the exposed information and hold the responsible parties accountable."

2. Report the incident

• In case of emergencies or immediate threats of physical or bodily harm, contact law enforcement for assistance without delay.
• Following this, immediately report your concern to the Department of Safety and Security (DoSS) by calling 603-646-4000, in person at 5 Rope Ferry Road, 3^rd Floor, or via the Report a Concern Form. DoSS can provide support and assistance and investigate the incident, including facilitating contact with law enforcement and coordinating with the Office of Community Standards & Accountability, or other administrative offices as applicable, to ascertain if there's been a potential breach of College policy by a member of the Dartmouth community.
• Please include the information you have been able to collect from the reporting worksheet

​​​​​​3. Report the incident to the involved platforms, and request they remove the content.

• For your reference, here are the instructions posted on the following frequently-used platforms:

  Click for Platform Specific Instructions

  Facebook

  Links

  • Policy: https://transparency.fb.com/policies/community-standards/privacy-violations/
  • Help/Instructions: https://www.facebook.com/help/1753719584844061

  Detailed Instructions

  1. Go to the Post or Profile

  • Navigate to the specific post or profile where your personal information has been shared.

  2. Use the Report Feature

  • For a post: Click on the three dots (...) in the top right corner of the post, then select ‘Find support or report post.’
  • For a profile: Click on the three dots (...) under the profile’s cover photo and select ‘Find support or report profile.’

  3. Follow the Prompts

  • After selecting to report, you'll be presented with various options. Choose the one that best describes the doxxing content, such as ‘Sharing Private Information.’

  4. Provide Details

  • When prompted for more details, explain that your personal information has been shared without consent. Be specific about what kind of information was shared (like a home address or phone number).

  5. Submit the Report

  • Review your report and submit it. Facebook will provide a confirmation that the report has been submitted.

  Instagram

  Links

  • Help: https://www.facebook.com/help/instagram/122717417885747

  Detailed instructions:

  1. Locate the Content

  • Find the post, comment, story, or profile where your personal information has been shared without your consent.

  2. Access the Report Option

  • For a post: Tap the three dots (...) above the post.
  • For a story: Tap the three dots (...) at the bottom of the screen or swipe up while viewing the story.
  • For a comment: Swipe left over the comment, then tap the (!) report icon.
  • For a profile: Tap the three dots (...) in the top right corner of the profile.

  3. Choose the Report Reason

  • After tapping the report option, select ‘Report Inappropriate’ or ‘It's spam or scam’ or 'It's abusive or harmful', depending on the options available.

  4. Select the Specific Issue

  • Follow the prompts until you find a category that best describes the issue of doxxing, like ‘Personal information shared without consent’.

  5. Submit the Report

  • Finalize your choices and submit the report. Instagram will then review the report and take appropriate action.

  TikTok

  Links

  • Policy: https://www.tiktok.com/legal/report/us-privacy
  • Help: https://support.tiktok.com/en/safety-hc/report-a-problem

  Detailed Instructions

  1. Find the Content

  • Navigate to the video, comment, or profile that contains your private information.

  2. Access the Reporting Feature

  • For a video: Tap the share icon (an arrow) and then hit the "Report" button.
  • For a comment: Press and hold the comment you wish to report, then tap "Report."
  • For an account: Go to the profile, tap the three dots in the top right corner, and select "Report."

  3. Select the Reason for Reporting

  • Choose the issue that most closely relates to doxxing. You might have to select "Privacy violation" or a similar option.

  4. Provide Details of the Report

  • TikTok may ask for additional information about the report. Be as specific as possible, indicating that your personal information has been shared without your consent.

  5. Submit the Report

  • Once you have followed the prompts and provided the necessary details, submit your report for review.

  Fizz

  Links

  • Fizz App Guidelines: https://fizzsocial.notion.site/Fizz-Community-Guidelines-3e93dfc446dd4eadabf009120281a0e2

  Detailed instructions:

  1. Locate the Content

  • Identify the specific post, message, or profile that contains the doxxing information.

  2. Access the Report Option

  Look for the reporting feature within the Fizz app. It might be accessible through:

  • The offending content itself (often via a "Report" or "Flag" option).
  • User profile settings.
  • In-app support or help sections.

  3. Choose the Report Reason

  • Choose the category that best fits the issue, such as "Harassment," "Privacy Violation," or "Inappropriate Content.”

  4. Select the Specific Issue

  Describe the situation accurately in the provided text box. Include:

  • Specific details of the doxxing incident.
  • Why it violates Fizz's community guidelines or terms of service.
  • Any supporting evidence (screenshots, timestamps, etc.) if possible.

  5. Submit the Report

  • Follow the prompts to submit your report. Ensure all necessary information is included.

  X (formerly twitter)

  Links

  • Policy https://help.twitter.com/en/rules-and-policies/personal-information
  • Help: https://help.twitter.com/en/rules-and-policies/x-report-violation

  Detailed Instructions

  1. Locate the Content

  • Identify and navigate to the specific tweet or account where your personal information has been shared.

  2. Report the Tweet or Account

  • For a tweet: Click or tap the "Share" icon (which looks like an upward-pointing arrow) and then select "Report Tweet."
  • For an account: Visit the profile, click or tap the three dots (…) icon, and then choose "Report."

  3. Select the Reason for the Report

  • When prompted, select "It’s abusive or harmful."

  4. Choose the Type of Abuse

  • On the next screen, choose "Includes private information."

  5. Specify the Issue

  • Twitter will then ask for more details about the privacy issue. Select the appropriate option that indicates someone is sharing your private information.

  6. Provide Additional Context (if necessary)

  • If given the option, explain that the tweet includes doxxing or the sharing of your personal information without consent, and emphasize the need for urgent action.

  7. Submit the Report

  • After confirming the details, submit your report. Twitter will typically send you a confirmation that they've received the report.

  Bing (Microsoft) Search

  Links

  • https://www.microsoft.com/en-us/concern/bing
  • https://msrc.microsoft.com/report/

  Email addresses: abuse@microsoft.com (digital crimes unit) Detailed Instructions

  Bing allows users to request the removal of content from Bing search results under certain circumstances, including the exposure of personal data. Here's a general guide on how to report:

  1. Content Removal Request

  • To initiate a request to remove content, you need to access Bing's content removal tool. You can do this by searching for "Bing content removal request" or visiting the Bing Webmaster Tools page directly.

  2. Locate the Content

  • Before you can submit a request, you need to find the URLs of the Bing search result pages that link to or display your personal information.

  3. Complete the Removal Form

  • You will be asked to provide specific information about the content and your reasons for wanting it removed. Choose the options that describe your situation best, clearly stating that it involves personal information shared without consent.

  4. Provide Details

  • In the form, you will need to specify the nature of the content, the specific URLs you are reporting, and any additional details that clarify why the information should be considered for removal. Be clear that this is a case of doxxing.

  5. Submit the Request

  • After you have filled out the form, submit your request for review. Bing's team will then evaluate your submission and determine whether the content should be removed based on their policies.

  It is important to remember that removing links from Bing's search results does not remove the content from the web; it only makes it harder to find through Bing. You may also need to contact the host site directly to request content removal from the website itself.

  If you encounter difficulty with the form or need additional support, you may need to contact Microsoft Support directly for further assistance.

  For privacy issues that require a more immediate response, or if you're unsure how to proceed, you can try reaching out to Microsoft's support at [abuse@microsoft.com]

  Google Search

  Links

  • https://support.google.com/websearch/troubleshooter/3111061?hl=en
  • Relevant email addresses: legal@google.com

  Detailed instructions:

  Reporting doxxing to Google typically involves requesting the removal of your personal information that appears in Google's search results. Google may remove personal information that creates significant risks of identity theft, financial fraud, or other specific harms. Here's how you can report it:

  1. Search Removal Request Form

  • Begin by visiting Google's "Legal Removal Requests" page where you can submit a request to remove content. You can find this by searching for "Google legal removal request" or going directly to Google's support page concerning the removal of personal information.

  2. Select the Type of Content

  • You'll be presented with options regarding the type of content you want to report. Select the appropriate option that describes your situation, such as "doxxing" or "involuntary fake pornography" if applicable.

  3. Complete the Form

  • Fill out the form with as much detail as possible. This includes providing URLs (links) to the pages that contain your personal information, describing the content, and explaining why it should be removed.
  • You'll be asked to specify which type of personal information is included and why its removal is necessary. Be clear that this is a case of doxxing and that the information posted without your consent could lead to harm.

  4. Verification

  • You may need to verify your identity to Google by providing identification or other documentation that shows the information is indeed about you.

  5. Submit the Request

  • After filling in all the necessary details, submit the request to Google for review.

  Reddit

  Links

  • Policy: https://www.redditinc.com/policies/content-policy
  • Help: https://www.reddit.com/report 
  • Email: contact@reddit.com

  Detailed Instructions

  1. Locate the Content

  • Find the post, comment, or message where your personal information has been disclosed.

  2. Use the Report Feature

  • For a post or comment: Click on the "report" button (usually represented by a flag icon) located underneath the post or comment.
  • For a private message: Click on the "report" link next to the message in your inbox.

  3. Choose the Report Reason

  • Select the reason for reporting. For doxxing, you would typically select something like "It's personal and confidential information."

  4. Fill Out the Report Form

  • If prompted, provide additional details for the report. Clearly state that the content includes doxxing or the sharing of your personal information without consent.

  5. Submit the Report

  • After filling out the form and including all necessary details, submit your report to Reddit for review.

  Reddit also has a dedicated support team for handling sensitive issues which can be contacted via contact@reddit.com if the matter needs further attention.

  4Chan

  Links

  • Help: https://www.4chan.org/faq
  • Policy: https://www.4chan.org/rules

  Detailed Instructions

  Reporting a doxxing incident on 4chan can be a bit different from other social media platforms due to its unique structure and the transient nature of its content. Here’s how you can report doxxing on 4chan:

  1. Locate the Post

  Find the specific post where your personal information has been shared. Because 4chan threads expire quickly, it's important to act fast.

  2. Report the Content

  • Click on the small triangle (▶) next to the post number to expand the post if it's not already expanded.
  • Click on the “Report” link located at the bottom of the post.

  3. Select the Reason for Reporting

  • Choose the appropriate option for reporting, which would typically be "illegal content" or a similar category that can cover doxxing, as it involves sharing personal information without consent.

  4. Submit the Report

  • After selecting the reason, submit your report. There's no need to provide personal contact information when submitting a report on 4chan.

  Web Hosting Services

  In addition to reporting abuse directly on social media platforms and online communities, you can also contact web hosting services that host websites with abusive content. These services often have their own community standards and acceptable use policies. If you come across harmful content on a website, here's how you can report it to the web hosting service:

  1. Identify the Hosting Service

  • First, determine which web hosting service is hosting the website with the abusive content. You can often find this information by doing a domain lookup or using online tools.

  2. Visit the Hosting Service's Website

  • Go to the official website of the hosting service. Look for their "Contact Us" or "Support" section.

  3. Check for Reporting Options

  • Explore the hosting service's website to see if they have specific instructions or forms for reporting abusive content. Some hosting services provide dedicated channels for abuse reports.

  4. Provide Details

  • When reporting, be sure to provide specific details about the abusive content and why it violates the hosting service's policies. Attach any evidence or screenshots if possible. Consider using the impact statement prepared earlier.

  5. Follow Their Process

  • Follow the reporting process outlined by the hosting service. They may require you to fill out a form or send an email to their abuse department.

  6. Document Your Report

  • Keep a record of your report, including any reference numbers or email correspondence. This can be useful for follow-up.

  Harmful Domains

  If you encounter a harmful domain name or believe that a domain name is being used for malicious purposes, you can take steps to report and potentially de-register it. Here's what you can do

  1. Contact the Domain Registrar

  • Look up the domain registrar responsible for the domain name in question. You can typically find this information through a WHOIS lookup. Reach out to the registrar's support or abuse department and report your concerns.

  2. Provide Evidence

  • When reporting the domain, be sure to provide evidence of the harmful activity or misuse. This may include screenshots, email communications, or any other relevant information.

  3. Request Action

  • Clearly state your request for action, explain why you believe such action is necessary. Consider using impact statement provided.

  4. Follow Up

  • Keep track of your communication with the registrar and follow up if necessary. Some registrars may have specific procedures for handling abuse reports.

  Other Platforms

  We are here to help you. Please don’t hesitate to call Dartmouth ITC's Client Technology Consulting team at (603) 646-2999 | toll-free 1-855-764-2485 or email help@dartmouth.edu for help. 

  If you have been doxxed on a platform not specifically listed in our guide, the first step is to locate the platform's Help Center or Support section, which is typically found at the bottom of the homepage or within the settings menu. Once there, search for terms such as "privacy," "harassment," "safety," or "reporting abuse." Most platforms will have a reporting mechanism for abuse or privacy violations. Look for options such as "Report a Problem," "Contact Us," or "Safety Center" to find specific instructions on how to report the issue you are facing.

  If the platform's direct resources do not provide a clear solution, consider looking for community forums, FAQs, or user support pages where you might find advice from other users who have faced similar issues. As a last resort, use the general contact form or support email address provided by the platform to explain your situation. Include any relevant details (such as usernames, URLs to the offending content, screenshots of the doxxing incident) to help the support team understand and address your problem. Remember, it's crucial not to engage with the perpetrator, as this may escalate the situation. Instead, document all interactions and await instructions from the platform's support team.

4. Other Actionable Steps to Take If You Have Been Doxxed

In addition to the steps above, you may need to consider taking other steps to protect yourself and mitigate the harm caused by the exposure of your personal information. The following suggested steps are provided with the understanding that the unique facts and circumstances of particular situations may require different or additional measures.

• Protect Your Financial Accounts & Private Information - If your bank or credit card information was revealed, contact your financial institutions immediately to report the breach and take steps to increase security, such as changing passwords, credit freeze at the credit bureaus.
• Review your privacy settings on your social networks - Choose what you share. Regularly review and adjust your privacy settings on social networks to align with your comfort level for public visibility and data sharing.
• Protect other accounts - Review other data that may have been exposed like Cell phone and Utilities.
• Account security - Change password for all of your accounts and setup two factor authentication. 
• Secure and backup your device(s) 

5. Doxxing can be upsetting and stressful. Dartmouth offers numerous support resources, or you may choose to seek additional support services. (Other Resources)

• Dartmouth provides the following resources.
• Dartmouth Mental Health Services
• Faculty/Employee Assistance Program
• Dartmouth Policies
  • Principle of Community
  • Nondiscrimination and Anti-Harassment Policy and Resolution Procedures
  • Standards of Conduct
• Legal Resources
  • Dartmouth’s Office of the General Counsel (OGC) does not, as a general matter, represent individual members of the Dartmouth community in personal legal matters such as doxxing.  However, the Referrals for Personal Legal Services page on OGC’s website provides links to legal resources available to our community.  You may also wish to consider contacting an organization that offers resources and referrals to attorneys specializing in this particular area, such as the Cyber Civil Rights Initiative (CCRI). 
• Immigration Status and Visa Related Concerns
  • Office of Visa and Immigration Services (OVIS)
• The following third-party sites are informational, and you may find them helpful. 
  • CNN: What is doxxing and what can you do if you are doxxed?
  • Electronic Frontier Foundation (EFF) - Online Harassment
  • Without My Consent
  • Crash Override Network
  • Cyber Civil Rights Initiative
• Reputational Resources (third party)
  • Reputation Defender
  • BrandYourself
  • deleteme
• Identity Theft Protection (third party)
  • LifeLock
  • IdentityForce
  • IdentityWorks (Experian)

For more help with this process 

We understand that this experience may be difficult. Please don’t hesitate to call Dartmouth ITC's Client Technology Consulting team at (603) 646-2999 | toll-free 1-855-764-2485 or email help@dartmouth.edu for help.

The information provided in these guidelines does not, and is not intended to, constitute legal advice; instead, the guidelines are provided for general informational purposes only. The guidelines contain links and references to third-party websites which are provided for the convenience of the reader and are not expressly endorsed by Dartmouth College.