Justin
Justin8mo ago

i got doxxed

I was in a discord server and they found out my whole full name. They were able to go on facebook and find out what fraternity I am in. I am just worried they will find out my workplace and my home address. WOrse my SSN. What do I do?
23 Replies
DirtyJ
DirtyJ8mo ago
A large number of services/entities you either currently use or previously used (e.g. ISP, the state, cell carrier, literally anything you've ever entered data into) has either been pwned or will be pwned one day. Yeah it's scary to see that happen, but realistically a large amount of PII and other data is retrievable by anyone that knows where to look. (I think a whole state's records recently got dumped iirc) Best thing is to stay alert (regardless of someone doxxing you) and if you see any indicators of identity theft, reach out to the appropriate government entities as soon as you see that. In the meantime, using an identity monitoring service is a good way of keeping track of what/where stuff is when it's found
Justin
Justin8mo ago
is my employer public information?
DirtyJ
DirtyJ8mo ago
Probably
Justin
Justin8mo ago
is there a website i can use to look myself up that they possibly can be using to see what is visible
DirtyJ
DirtyJ8mo ago
Google
Search the world's information, including webpages, images, videos and more. Google has many special features to help you find exactly what you're looking for.
Justin
Justin8mo ago
but is there something that isnt so surface level
DirtyJ
DirtyJ8mo ago
I mean maybe like searx or some OSINT tools (or an identity monitoring service that reads through a bunch of data breaches) but realistically Google will find a lot if you do some good explicit searches
Justin
Justin8mo ago
is that what most doxxers use? just google
DirtyJ
DirtyJ8mo ago
It's a good place to start
DirtyJ
DirtyJ8mo ago
Here's a good one for emails/passwords https://haveibeenpwned.com/
Have I Been Pwned: Check if your email has been compromised in a da...
Have I Been Pwned allows you to search across multiple data breaches to see if your email address or phone number has been compromised.
w33t
w33t8mo ago
Here is the thing. Doxxing is a scare tactic. In all reality, it's likely that nothing will come of it. Even if they do something, whoopdeedoo, there isn't anything horrible or permanent that can really be done. My public information is out there, but I'm not worried about it. For my threat profile, the only threat actors I'm worried about can find me no matter what I do because they have those resources, but they're not gonna give a shit about me unless I do something to warrant their attention. Here are some privacy guides. The personal security checklist is pretty good. https://github.com/pluja/awesome-privacy https://github.com/Lissy93/awesome-privacy https://github.com/Lissy93/personal-security-checklist
Justin
Justin8mo ago
what is the most harm they can do with just my name real full name?
{R3D_B34RD}
{R3D_B34RD}8mo ago
In short, yes, google is by far the most prominent tool if someone knows how to use google dorks correctly. @weet and @DirtyJ beat me to the tools I was gonna share as well.
w33t
w33t8mo ago
w33t
w33t8mo ago
Define harm? With just a name and nothing else? Nothing. If they can tie you to your personal social media, maybe harass family? But why would they. Did you give them a reason to?
Justin
Justin8mo ago
its a toxic discord server, like dark humor, hateful, edgy, etc. so they would do it for shits and giggles tbh
w33t
w33t8mo ago
Most people aren't going to spend much time messing with people, if at all. It's boring. Anyone with the time, skill, and money to do any real damage isn't going to waste it on small fish, so to speak. Just leave and don't associate with skids and you won't have a problem.
{R3D_B34RD}
{R3D_B34RD}8mo ago
If you make sure that your socials are locked down to followers only for the most part (things like birthday, family, relationships, etc.) no more information can be gathered.
w33t
w33t8mo ago
That's why we don't allow it here at all, it's annoying and stupid. But I don't blame you for freaking out at all, I know the first time it happens to anyone makes them panic. I know I did, but from experience and seeing others, unless there is a real reason or you've done something to them, you'll be fine. Anything they do isn't going to cause permanent damage or ruin your life. Hell, get a credit monitoring service that doesn't suck anyway. Your SSN has already probably been breached a billion times over. I know mine has thanks to the federal government. Multiple times, Uncle Sam. Multiple times...
Justin
Justin8mo ago
best thing to do is lock my socials and ignore it, ok. if i go to work and nothing happens. i think im, in the clear
{R3D_B34RD}
{R3D_B34RD}8mo ago
Most they can when it comes to work related things is harass your employer or make a false complaint that can be totally dismissed if it comes up if you’re up front about your information being exposed.
Justin
Justin8mo ago
i have some peace of mind now thank u guys
w33t
w33t8mo ago
Even if they contact your place of work, I doubt anything will come of it. Just explain what's going on, and if your boss/company doesn't suck, they'll realize it's just harassment, like {R3D_B34RD} said. Any time, I'm glad we could help!