Doxxing Laws: Crimes, Penalties, and Victim Rights

Posting someone's personal information online might feel like a minor act of frustration or retaliation—but it can land you in prison. Doxxing is now a criminal offense under dozens of state laws and several federal statutes, with penalties ranging from misdemeanors to serious felonies. If you're facing a doxxing charge or investigation, understanding what's at stake is critical. This article also covers what victims can do to protect themselves and seek justice.

What Is Doxxing?

The term "doxxing" comes from the hacker community slang for "documents." Today, it refers to the hostile, intentional public release of another person's private information, without that person's consent, usually to harass, intimidate, or harm them.

What Information Do Doxxers Publish? How Do They Find It?

Doxxers research, compile, and publish a wide range of personal details, including:

• full legal name and home address
• phone numbers and email addresses
• photographs and videos, especially compromising ones
• financial account numbers
• workplace information
• pseudonyms
• social media accounts, and
• embarrassing personal history.

Doxxers piece together information from social media profiles, public records databases, data broker websites, old forum posts, and even hacked accounts. A seemingly small digital footprint can be enough. Once information is assembled, it can spread rapidly across platforms.

Are There Laws Against Doxxing?

Yes. The legal landscape prohibiting doxxing has expanded significantly in recent years. Both federal and state laws have stepped up in terms of punishing doxxers through criminal laws and offering victims civil legal remedies to pursue. Most laws make doxxing illegal regardless of whether the doxxer releases information and stands back, leaving it to others to make threats, or makes direct threats on their own.

Federal Doxxing Laws: Key Statutes

There is no single comprehensive federal anti-doxxing statute that covers all victims, but several federal laws could apply depending on the circumstances.

Protection of Covered Federal Employees and Workers

This federal law makes it a crime to knowingly publish "restricted personal information"—such as a home address, phone number, or Social Security number—about “covered persons” and their immediate family when the defendant's intent is to threaten, intimidate, or cause harm or incite others to do so. Covered persons include federal employees and officers, servicemembers, federal jurors, federal informants and witnesses, and state and local employees or officials who participate in a federal criminal investigation. This federal crime carries up to five years in prison. (18 U.S.C. § 119 (2026).)

Federal Stalking

A federal prosecutor may also be able to charge a doxxer under federal stalking law if they used the internet or any electronic communication system to cause or attempt to cause substantial emotional distress to another. This federal felony carries a wide range of penalties depending on the age of the victim and the type of harm done. (18 U.S.C. § 2261A (2026).)

The TAKE IT DOWN Act

The federal Take It Down Act makes it a felony to knowingly and without consent publish or threaten publication of nonconsensual intimate images (NCII)—including AI-generated deepfakes—to harm or cause harm to the person depicted in the image. Although much narrower than the category of "personal identifying information," it covers an insidious type of harassment—revenge and deepfake porn. The law will also require online platforms to remove NCII within 48 hours of receiving a valid takedown notice. (47 U.S.C. §§ 223, 223a (2026).)

State Doxxing Crimes and Penalties

State criminal laws against doxxing activities have advanced dramatically in recent years. While only a few refer to the term “doxxing,” many states have crimes that address the underlying behavior—that is, unlawful sharing of another’s personal identifying information with the intent of intimidating, harassing, or frightening that person or to inciting a third party to do so. Close to half of all states have criminal laws directed at this specific behavior. Other crimes that may cover doxxing behavior include harassment, stalking, and criminal threats.

Protected Persons Under Doxxing Laws

Some state doxxing laws apply generally to all individuals, while others limit their scope to certain professions or public servants. Examples of protected persons include:

• judicial officers
• public officials and employees
• election officials
• law enforcement officers
• medical providers, and
• jurors.

Arkansas appears to be the only state with a law that specifically prohibits doxxing of minors on social media. A couple states extend protections to crime victims.

Criminal Penalties for Doxxing

State penalties range from minor misdemeanors to serious felonies. The most serious felonies generally apply if the doxxing results in death or great bodily harm to a targeted victim. Kentucky, for example, imposes class B, C, or D felony penalties if the doxxing results in death, serious bodily harm, or bodily harm to the victim or a family member. Many states impose misdemeanor penalties for doxxing that doesn’t result in physical harm, and penalties increase to felonies for repeat offenses or offenses resulting in bodily harm. Below are some examples.

Civil Lawsuits: Suing the Doxxer

In addition to criminal law, some state laws provide victims with civil remedies specific to doxxing. Two examples are California and Illinois.

California law allows doxxing victims to file civil lawsuits for damages, including actual harm (physical harm, emotional distress, and property damage). A plaintiff can also seek punitive damages, statutory awards of $1,500 to $30,000, and attorneys' fees and court costs. The court may also order a restraining order that directs the defendant to stop doxxing. Plaintiffs can sue anonymously using a pseudonym.(Cal. Civ. Code § 1708.89 (2026).)

Illinois doxxing victims can also seek remedies in civil court. Under the Civil Liability for Doxing Act, a victim can sue for economic damages, emotional distress, fear of bodily harm, and substantial life disruptions. The law allows recovery of attorney's fees and injunctive relief like the California law. In early 2026, a Will County judge issued the first verdict under the Act, awarding a plaintiff nearly $46,000. (740 ILCS 195/15 (2026).)

Steps to Take If You've Been Doxxed

If you’re a victim of doxxing, consider the following actions to protect yourself and others.

1. Assess the Threat

Start by asking: How sensitive is the information that was published? Is the doxxer making explicit threats? Is your physical safety at risk?

2. Report Threats

If the doxxer has made threats of physical harm, or if others are using your published information to threaten you, go to law enforcement immediately. Bring documentation. If you can identify the doxxer, you can ask the court for a restraining order.

3. Document Everything

Document everything you can related to the doxxing. Take screenshots of every post, message, or website showing the doxxed information. Record the URL, date, and timestamp of each. This documentation is essential for law enforcement, a potential lawsuit, and platform reports.

4. Request Takedowns and Removals

Several social media platforms treat doxxing as a violation of their terms of service. Report the content and demand its removal. Most platforms have built-in reporting tools for privacy violations. Check with public record websites and search engines to see if you can remove your personal data.

5. Tighten Your Digital Security

Change passwords on all exposed accounts and lock or freeze any financial accounts. Audit your social media privacy settings and remove publicly posted personal information. If blocking and reporting haven't stopped the harassment, temporarily reducing or minimizing your online presence might help.

Should I Talk to a Lawyer?

Talk to a criminal defense lawyer if you’re charged with or being investigated for a doxxing crime. A defense attorney can help evaluate your case and see what defenses are possible. Check out this article on Defending Against an Accusation of Stalking to learn about similar defenses and what to do and not to do if accused of a crime.

If you’re a doxxing victim, consider consulting a lawyer to discuss options such as a civil lawsuit for money damages, sending take-down notices, or getting a restraining order. Check out these resources for more tips on how to minimize or prevent harm from doxxing: U.S. Department of Homeland Security, Electronic Frontier Foundation, ACLU, and Cyber Civil Rights Initiative.