Cyber security Photo: IC

Beijing's cyber police recently uncovered a large-scale criminal network engaged in "doxxing," the illegal harvesting and online exposure of personal data. Authorities have cracked down on the illicit industrial chain behind the infringement of citizens' personal information in accordance with the law, CCTV News reported on Sunday.

All five defendants involved in the case were convicted on Friday in a first-instance verdict by a local court. Four were found guilty of infringing citizens' personal information and illegally using information networks, while one was convicted of personal information infringement. Sentences ranged from seven years in prison to one year and six months, along with fines between 70,000 yuan ($9,700) and 15,000 yuan. The five suspects had been apprehended between April 11 and May 13, 2025.

During the investigation of a case involving the illegal use of information networks, authorities from the Beijing public security cyberspace division discovered a large-scale underground black-market network involved in "doxxing" and the illegal trade of citizens' personal information. Through sustained operations targeting multiple related nodes, police gradually identified five suspects who were allegedly responsible for illegally obtaining large volumes of citizens' personal data. They set up so-called "social engineering database" websites and illegally provided citizens' personal information in more than 1,000 instances, including doxxing individuals involved in high-profile social incidents. The websites recorded over 300,000 visits in total.

"Doxxing" refers to the act of illegally acquiring and publicly releasing an individual's private information online, often accompanied by incitement to harassment. Such actions, police warned, can lead to severe real-world consequences for victims, including sustained online abuse, offline harassment and psychological distress.

Authorities emphasized that China's laws provide detailed provisions regarding acts related to online "doxxing" and their legal consequences from civil, administrative and criminal perspectives. Victims have the right to demand the cessation of the infringement, an apology, and compensation for the harm under China's Civil Code.

Those who engage in peeping, secret photographing, eavesdropping, or disseminating others' private information shall face administrative penalties, including detention and fines, under China's Law on Penalties for Administration of Public Security and the Cybersecurity Law. In serious cases of infringing personal information, offenders shall face criminal charges under the Criminal Law, with sentences of up to seven years.

In addition, a joint guideline issued by judicial and law enforcement authorities clarifies that organizing "human flesh searches," a form of crowdsourced doxxing, may constitute a criminal offense if it involves the illegal collection and dissemination of personal data.

Cyber police urged the public to strengthen personal data protection by avoiding the disclosure of sensitive information online and respecting others' privacy. Victims of doxxing are advised to promptly preserve evidence, report incidents to online platforms, and contact police if harassment escalates. Legal action through the courts remains an option for pursuing accountability and compensation, as authorities continue to intensify crackdowns on online abuse and related illicit data trading.

Global Times