Understanding how personal information is uncovered online—and what individuals can do to protect themselves
The amount of personal information available online can be difficult to comprehend. Names, phone numbers, addresses, usernames, old passwords, social-media accounts, and other pieces of information can exist across dozens of databases and platforms, often without users realizing how easily those fragments can be connected.
Today, we spoke with 68Sosa, an OSINT researcher, developer, and a founder of Syndicate, a group focused on online intelligence, cybersecurity awareness, and identifying threats across internet communities.
With years of experience developing OSINT tools and databases, 68Sosa has made understanding the modern digital footprint a central part of his work. Through Syndicate, he and other members of the group have focused on researching online threats, documenting publicly available information, and helping communities better understand the risks associated with exposure online.
Our conversation focused on how individuals are able to uncover personal information, how doxxing works at a high level, and what ordinary users can do to reduce their exposure.
How Personal Information Gets Connected
According to 68Sosa, much of the information used in online investigations comes from a combination of publicly available records, data aggregators, leaked information, and social-engineering techniques.
“It all really boils down to public-record search engines, aggregators, and a bit of social engineering. That’s the concept behind how these people do what they do.”
He explained that large-scale data breaches can contribute significantly to the problem. When companies experience data leaks, stolen information can subsequently circulate among malicious actors and potentially be incorporated into searchable databases.
“When data leaks on big companies happen, threat actors will download the leaks and index them into a searchable database, giving them the ability to search through your passwords and potential data leaks.”
For ordinary users, this highlights the importance of maintaining good password hygiene and monitoring whether their information has appeared in known breaches.
The Role of Public Records
Not every piece of information used in a doxxing attempt comes from a data breach.
Public-record and people-search services can also provide significant amounts of information based on relatively basic identifying details.
68Sosa points to services such as Whitepages, Cyber Background Checks, and Endato as examples of platforms that aggregate information from public and commercial sources.
“People will use these tools to pull more sensitive information using your name or number. It’s important to be careful about who you’re sending revealing information to online.”
The broader lesson, he says, is that information that appears insignificant in isolation can become much more revealing when combined with other data.
A username can potentially lead to a social-media account. A phone number can be associated with a name. A name can potentially lead to public records. Once multiple pieces are connected, an individual’s digital footprint can become considerably easier to map.
Syndicate and Online Threat Intelligence
Much of this work falls under the broader umbrella of Syndicate, a group that 68Sosa is one of the founders of and continues to work with.
Syndicate’s stated focus is the research and documentation of online threats, with particular attention paid to malicious actors, exposed information, and communities where vulnerable users may be targeted.
The group combines OSINT research with cybersecurity awareness to examine how information moves across the internet and how seemingly disconnected pieces of data can be brought together.
For 68Sosa, the purpose is not simply to demonstrate what can be found about someone. He believes understanding these techniques can help people recognize their own vulnerabilities before someone with malicious intentions exploits them.
That philosophy has also influenced the development of the tools associated with his work, which are intended to make information about digital exposure more accessible to ordinary users.
Fear as a Weapon
While the technology and information-gathering techniques behind doxxing can be intimidating, 68Sosa argues that fear itself is often one of the most effective tools used by people attempting to intimidate their targets.
“If somebody wants to do something to you, they’ll just do it. They aren’t going to sit there and try to convince you they’re going to do it.”
He describes repeated threats, intimidation, and attempts to demonstrate access to personal information as a form of fearmongering intended to make the target feel powerless.
“It’s fearmongering, and it’s used to make you subservient.”
For individuals being threatened online, 68Sosa recommends avoiding unnecessary engagement and cutting off communication rather than allowing an aggressor to dictate the interaction.
Blocking an account, preserving evidence of threats, reporting abusive behavior to the relevant platform, and contacting law enforcement when threats are credible or specific are among the steps users can consider.
Children and Online Manipulation
The risks become particularly serious when children are involved.
Through his work with Syndicate, 68Sosa has also focused attention on the dangers children can encounter across social-media and online communication platforms.
He warns that young users may be especially susceptible to manipulation because they may not fully understand how much information can be derived from seemingly harmless conversations or online interactions.
Threats and intimidation can further compound the problem, particularly when a child believes that an online stranger has access to their home address, family information, school, photographs, or other personal details.
For parents, he recommends taking an active role in understanding the platforms their children use and discussing online privacy, manipulation, and information sharing with them.
Rather than relying solely on restrictions, parents can help children recognize warning signs—including strangers requesting personal information, attempting to isolate them from friends or family, making threats, or using private information to gain control over them.
Understanding OSINT
At the center of 68Sosa’s work is open-source intelligence, or OSINT—the process of collecting and analyzing information from publicly available sources.
He has spent years developing OSINT-related tools and databases intended to help users understand their digital exposure and investigate publicly available information. Through Syndicate, that work has expanded into a broader effort focused on researching online threats and increasing public awareness of how easily information can be connected.
His philosophy is that knowledge can serve as a form of protection.
The more individuals understand about how information is collected, indexed, and connected, the less mysterious—and potentially less frightening—the process becomes.
In an environment where personal information can travel rapidly across the internet, digital security increasingly depends not only on strong passwords and privacy settings, but also on understanding the information people voluntarily place into the public sphere.
For 68Sosa and Syndicate, that awareness is the foundation of better online security: know what is available about you, understand how it can be connected, and be deliberate about what you choose to reveal.
