Doxxing, the deliberate disclosure of personal information to bully, harass, or intimidate, poses a persistent challenge. While the perpetrators often utilize legal and accessible means, the onus largely falls on individuals to protect themselves in the absence of robust data privacy legislation. This piece, part one of a series, focuses on prevention and proactive measures to reduce your digital footprint. ### Understanding OSINT for Self-Protection **Open Source Intelligence (OSINT)** is a broad discipline in information security, encompassing tools and methodologies for investigation and information retrieval. While it forms the core of doxxing campaigns, OSINT is equally crucial for preventative self-assessment. It involves piecing together disparate data points to form a comprehensive profile of a subject. Sophisticated tools like **Maltego** or **Lampyre** can aggregate numerous data points into accessible graphs and datasets. While powerful for corporate investigations or penetration tests, mapping details like employee email charts or **LinkedIn** profiles, they may be overkill for individual users. Instead, referring to curated OSINT resource lists can help individuals identify the most relevant tools for their specific needs. ### Leveraging Breach Databases When organizations suffer data breaches, customer data frequently ends up in "breach databases" – troves of personal information available for illicit trade. This sensitive data can be a prime resource for doxxing campaigns. Services like **Have I Been Pwned** allow users to check if their email addresses or phone numbers have been compromised in known breaches. Other platforms, such as **DeHashed**, offer similar tracking, often for a fee. While individuals cannot control a company's security posture, monitoring breach databases offers insight into whether personal information is already exposed. This empowers users to take corrective action, such as changing compromised email addresses or phone numbers, despite the inconvenience. ### Navigating Open Records Public records, including voter records, property records, and business registrations, present a dilemma. While transparency is in the public interest, the accessibility of personally identifiable information can be exploited for malicious purposes. Mirroring sites, such as **VoterRecords.com**, often aggregate this information, making it easily searchable online. Many of these sites offer mechanisms to request the removal of your information, which, while not eliminating the original record, adds a layer of difficulty for those seeking to access it. Additionally, some states offer "Address Confidentiality Programs" that allow individuals to substitute proxy addresses for their actual residences in public records, enhancing privacy. ### Securing Your Social Media Presence Regularly reviewing and tightening the security and privacy settings across all social media accounts is a fundamental step in minimizing your digital footprint. Consider setting account discoverability to "private" or "hidden" to ensure only vetted users can view your profile and content. The specific terminology and options will vary by platform. To gain a quick overview of your online presence, especially if you've been active online for an extended period, username search engines like **What's My Name** or **Namechk** can identify where your chosen usernames are registered. These tools are also useful for detecting potential online impersonation. ### Tackling Data Brokers and Removals Data brokers pose a significant privacy risk by collecting and selling personal, sensitive information. Until this industry faces more stringent regulation, individuals must proactively protect themselves. The most effective method for data removal is to manually file requests with these companies. Projects like **Yael Grauer's BADBOOL project** compile and prioritize major data brokers, providing guidance on how to request data removals. This process can be time-consuming and arduous. While automated services exist, independent reviews have often found them less effective than a DIY approach. However, some services have demonstrated greater efficacy than others. Residents of California can leverage the new **DROP tool** for a more streamlined opt-out process. ### Reverse Image Searching and Facial Recognition Services Services such as **PimEyes** and **Lenso** offer facial recognition as a service, contributing to law enforcement investigations and predictive policing, and unfortunately, also providing tools for abusers and stalkers. These services allow users to upload an image and identify where else that person's image has appeared online. This can be a valuable tool for individuals concerned about their images being shared without consent. Participating in these services does mean having your image mapped, scanned, and stored by their systems. However, for those facing targeted harassment involving the unauthorized sharing of their image, this trade-off may be a necessary step to identify and address the issue. ### Enhanced Automated Monitoring Beyond data minimization, consider implementing extra layers of protection if doxxing or coordinated harassment appears imminent. For users within the **Google** ecosystem, enrolling in their **Advanced Protection Program** offers a suite of enhanced security features to safeguard accounts and personal data.