They didn't need to hack anything. Your home address, mobile number, family members, and property value were already published — by data brokers you never heard of, aggregating records you never consented to share. This is doxxing. And it is happening to high-net-worth individuals at scale.
Doxxing is not hacking. It is the aggregation and publication of personal information from publicly accessible sources — property records, corporate filings, data broker databases, court records, and social media — assembled into a profile that enables targeting.
For high-net-worth individuals, the publicly available picture is far more detailed than most people realize. The card on the right shows what a motivated actor can find about a typical executive in a single afternoon using only free, legal tools.
Batten Black's first step is always to show you exactly what that picture looks like. For most clients, that afternoon changes the conversation permanently.
See what's findable about youIllustrative composite. All names and details are fictional.
Data brokers aggregate, repackage, and resell personal information from public records, purchase histories, social media, and leaked datasets. Most operate with no notification and limited opt-out obligations. Removal requires knowing they exist — and most people don't.
All broker names shown are real companies operating in the United States. Removal from each requires a separate opt-out request — or a coordinated removal program.
A motivated actor does not need to breach anything. Every step below uses freely available, legal tools. The danger is in the aggregation — each piece harmless alone, devastating combined.
A professional profile, a press mention, or a board filing gives a confirmed full name tied to a company and role. This is the starting point for everything that follows.
Property records are public in most US states. A data broker aggregates the county assessor file and publishes it with the owner's name. The address is found in under two minutes.
Data brokers cross-reference the name and address against phone records and purchase data to surface a mobile number and personal email — often with a $1 trial subscription.
The spouse's public Instagram links to the home address via a location tag on a post. Children's school is visible from a photo caption. The family becomes part of the dossier.
Corporate filings, Form D disclosures, and political contribution records confirm approximate net worth. The target is now quantified — worth the investment of a sophisticated attack.
With a confirmed name, address, mobile, family structure, and financial profile, a threat actor can launch any of several high-conversion attacks: a voice-cloned emergency call impersonating a child, vendor impersonation targeting a wire transfer, or a physical approach at a predictable time and location.
The reason doxxing is dangerous is not that any single piece of information is sensitive. It is that aggregated public data crosses a threshold — from inconvenience to operational threat. The meter on the right shows where that threshold is.
Batten Black's assessment maps which layers are active for you. Most clients discover they are further up the ladder than they assumed.
Find out where you standProfessional presence, LinkedIn profile, basic public record. Common and manageable with standard privacy practices.
Primary residence indexed on Whitepages, Spokeo, and related platforms. Physical location is now one search away for anyone.
Personal contact details and family network exposed. Social engineering attacks become precision instruments rather than mass attempts.
Net worth quantifiable from public filings. Credentials circulating in breach datasets. The target is now both findable and worth the investment of a sophisticated attack.
All layers combined: confirmed identity, address, family, financial profile, and contact data. A motivated actor has everything needed to execute wire fraud, a voice-cloned emergency call, or a physical approach.
Automated services alert you after your data appears somewhere. Batten Black coordinates a structured removal and monitoring program across every identified source — and maintains it as new listings emerge.
We map your full data broker profile, breach exposure, public record visibility, and property linkage using the same open-source methods a threat actor would employ. You see the complete picture first.
Opt-out requests, suppression filings, and removal coordination across every identified data broker and public record source. We manage the process — not you.
Exposure reduction extends to spouse, children, and household members whose visibility creates an indirect path to the principal. The family is part of the dossier — so they are part of the solution.
Data brokers re-list removed profiles. New breach datasets appear. Ongoing monitoring catches re-appearances and emerging exposures before they become operational intelligence for a threat actor.
Beyond removal, we structure account security, communication hygiene, and personal device protocols that reduce the attack surface data brokers feed from in the first place.
Data exposure does not exist in isolation. Doxxing protection is one component of a coordinated strategy covering all six domains — because the threat actors targeting your profile don't stop at your email address.
How a founder or executive's exposure profile changes after a liquidity event — and what a coordinated protection strategy looks like.
Executive security →How doxxing risk extends across principals, entities, and staff in a family office structure — and why the attack surface is larger than most offices realize.
Family office security →The assessment, remediation, and ongoing advisory process that turns a full exposure picture into a coordinated protection strategy.
See the process →
A confidential assessment maps your full data exposure — what is findable, where it lives, and what it would take to dismantle it.
Book a Confidential Assessment Discreet. No obligation. Initial findings typically delivered within two weeks.