In the weeks before the new year in 2018, an anonymous account began posting links in a daily countdown, like an advent calendar. Each link revealed private data belonging to German politicians, journalists and other public figures. By early January 2019 the release had exposed personal contact details, messages and documents for roughly a thousand people. A young suspect was arrested soon afterward. The story shocked many readers. Yet the original article gave the right perspective: politicians are people too, and data leaks affect them the way they affect anyone else. This updated look explains what happened, why it matters to ordinary readers and how to protect yourself.
1. What happened
The leak was published through social media and file-sharing links over several weeks. The material included phone numbers, addresses, personal chat histories and documents. Targets came from several parties and from the media and entertainment worlds, and the data varied in sensitivity. Some of it was trivial, while some, such as private messages and identification documents, was deeply personal.
Authorities identified a suspect, a young man living with his parents, who was arrested in early January 2019. Reports at the time said he acted alone and expressed anger at public figures, rather than working for a state or an organized group. Details beyond that should be checked against official sources, and we do not rely on contested reports here.
The incident prompted a broader conversation in Germany about cybersecurity for elected officials and the protection of personal information.
2. It was not a movie-style hack
The popular image of hacking involves breaking into secure systems. Most real intrusions are less dramatic. Reports on the German case indicated that the data came largely from individual accounts, such as email, cloud storage and social media, that were accessed through weak, reused or stolen credentials. In other words, ordinary account hygiene failed.
That pattern is typical.
- Credential reuse. A password leaked in one breach is tried on other services.
- Weak security questions. Answers based on public facts can be guessed.
- Phishing. A convincing message tricks the user into entering a password.
- Missing multi-factor authentication. Without a second factor, a stolen password is enough.
- Linked accounts. Access to one account, usually email, unlocks the rest.
Public figures are exposed to these threats at higher volume, but private citizens face the same techniques. See what a data breach is for how credentials leak.
Curious what’s already out there? Wiperts’ 100% Free Diagnosis shows which data brokers are listing your name, home address and phone number. Check your exposure free — it takes about a minute.
3. What doxxing is and who gets targeted
The German case is a form of doxxing, the publication of private information to harass, intimidate or shame. Doxxing is not limited to politicians. Gamers, streamers, journalists, activists, healthcare workers, teachers, ex-partners and people who lose an argument online are all targeted.
The information used in doxxing tends to come from three sources:
- Account compromise, as in the German case.
- People-search sites, which publish address, phone and relatives openly.
- Old breaches, where leaked data is combined with public records.
Our guide to doxxing can happen to anyone explains the pattern, and harassers and burglars abuse information found online shows how exposure translates into real-world harm. For a related international example, read Canadian doxxer dumps personal data of 3 million people.
4. Why leaders and ordinary people share the risk
Politicians have security teams and press offices, yet the leak still occurred, which tells us something: personal accounts are the weak point for everyone. A person’s private email may sit outside any official system, and a family member’s account may contain forwarded messages and photos.
For ordinary people, the lessons are the same.
- Your email is the master key. Whoever controls it can reset passwords everywhere.
- Cloud backups hold more than you think. Photos, documents and messages are often synced automatically.
- Family accounts are an entry point. A spouse’s or child’s weak password can expose shared information.
- Old accounts linger. An abandoned service with a reused password is an open door.
5. A practical defense against account takeover
- Use a unique password for every account, generated and stored in a password manager.
- Turn on multi-factor authentication, using an authenticator app or security key where possible, especially for email, banking, cloud storage and social media.
- Secure your email first. Check forwarding rules, connected apps and recovery options.
- Avoid security questions with public answers. Use random answers stored in your password manager.
- Review logged-in devices and sessions regularly.
- Be cautious with links and attachments. Verify unexpected messages through another channel.
- Delete accounts you no longer use. See delisting and deleting yourself online.
- Check for exposure. Use breach-notification tools offered by your email or password manager and watch for notices.
6. If your information is published
- Preserve evidence. Take screenshots with dates and URLs.
- Report to the platform. Use the harassment or private information reporting tools.
- Secure accounts. Change passwords and enable multi-factor authentication.
- Alert people at risk. Tell family members and employers if their details are included.
- Contact police if you feel threatened, and report internet-enabled crime to the FBI at ic3.gov.
- Limit the spread. Request removal from people-search sites and search results. See how to stop an online stalker.
- Take care of yourself. Being doxxed is stressful, and support from friends, family or professionals matters.
The Department of Justice’s Office on Violence Against Women offers information on stalking at justice.gov.
7. Cutting the supply of searchable personal details
Doxxers rarely need sophisticated tools if the basics are public. A home address and phone number on a people-search site turn an online quarrel into a physical risk. Removing those listings will not make you invisible, but it raises the effort required and can deter casual harassers. Start with the data broker cleanup guide and read how online information makes stalking easy. For a broader look at consequences, see data leaks continue to increase identity fraud.
8. Myths about leaks and doxxing
“Only famous people get doxxed.” Ordinary users are targeted every day. “It was a sophisticated attack, so nothing could have prevented it.” Basic account protections would have blocked many routes. “Once it is posted, nothing can be done.” Takedown requests, platform reports and removal of listings limit the spread. “The police will handle everything.” They may help, but your own steps matter most in the first hours.
9. Securing a family’s shared digital life
Doxxing often reaches a person through someone around them. A teenager’s gaming account, a spouse’s cloud photo album or a parent’s email can all hold the details a harasser wants. Hold a short household meeting and agree on a baseline: every adult and teenager uses a password manager, every important account has multi-factor authentication, nobody shares codes or reuses passwords, and shared devices are updated automatically. Review who has access to shared calendars, location sharing and photo albums, and remove people who no longer need it. Our guide to keeping your family’s digital privacy safe provides a checklist.
10. Government guidance you can use
The Cybersecurity and Infrastructure Security Agency offers plain-language advice on strong passwords, multi-factor authentication and phishing at cisa.gov. The Federal Trade Commission explains how to recover a hacked account at consumer.ftc.gov. Both are good places to send relatives who want trustworthy instructions rather than another set of opinions.
11. Three scenarios
Scenario 1: A coworker’s account is hacked and your messages are posted. Change your passwords, notify your employer and review which sensitive information you share in work chats.
Scenario 2: You are in a heated online dispute. Lock down social profiles, remove people-search listings and avoid sharing location details. If threats appear, document and report.
Scenario 3: You are a public figure or volunteer. Use separate emails for public and private life, enable security keys and ask family members to adopt the same measures.
12. What to expect: a realistic timeline
| Step | Typical timing |
|---|---|
| Password and MFA hardening | 1 to 3 hours |
| Platform takedown after a report | Hours to days |
| People-search removals | Days to 4 weeks |
| Search result updates | Days to several weeks |
| Emotional recovery | Varies; seek support |
13. Common mistakes
- Using one password across personal and work services.
- Skipping multi-factor authentication because it is inconvenient.
- Leaving old devices signed in.
- Replying to harassers, which escalates the situation.
- Forgetting family members’ accounts.
14. How Wiperts helps reduce doxxing risk
Wiperts scans more than 100 data brokers and people-search sites for your name, address and phone number, submits removal requests, requests removal of personal results from Google and Bing, blurs your home on maps and monitors 24/7 so relisted data is removed again. It does not secure your accounts, but it takes away the easiest sources of private information for harassers.
Check what a stranger could find about you.
100% Free Diagnosis: Check Your Exposure
Find out what data brokers have on you. Enter your details in the free scanner on the Wiperts homepage:
- First Name
- Last Name
- Select State
- Email Address
- Website
Scan Databases Now — no payment is needed to see your exposure report.
15. Key takeaways
- The 2018 to 2019 German leak showed that weak account security can expose anyone.
- Doxxing combines account compromise, old breaches and people-search data.
- Use unique passwords, multi-factor authentication and secure your email.
- Remove public listings to make you harder to target.
Pick the Wiperts plan that fits your household
| Plan | Covers | One-time deep scrub | Then |
|---|---|---|---|
| Individual | 1 person | $89 | $14/month |
| Couples (most popular) | 2 people | $149 | $24/month |
| Family | Up to 4 people | $199 | $39/month |
Every plan includes removal of your name, date of birth, salary, home address and phone number from 100+ data brokers and people-search sites, Google and Bing search-result removal, home blurring on maps, and 24/7 monitoring that re-removes your data if it reappears. See plans and start your removal
16. Frequently Asked Questions
What was the German politicians data leak?
Between December 2018 and early January 2019, personal information belonging to roughly 1,000 German politicians and public figures was posted online in daily installments, including contact details, private messages and documents. A young suspect was arrested in January 2019.
How did the attacker get the data?
Reports indicated that much of it came from compromised online accounts, including email and cloud services, where credentials were weak, reused or phished, rather than from a single breach of government systems.
Why does this matter to ordinary people?
Ordinary accounts face the same tactics. Reused passwords, missing multi-factor authentication and exposed personal details enable account takeover and doxxing for anyone.
What is doxxing?
Doxxing is the publication of private information, such as a home address, phone number or personal messages, with the aim of harassing or intimidating a person.
How can I protect against account takeover?
Use a unique password for every account, a password manager and multi-factor authentication, secure your email first and review logged-in devices regularly.
What should I do if my information is published?
Document it, report to the platform, change passwords, enable multi-factor authentication, notify local police if you feel threatened and remove listings from people-search sites to limit further spread.
Sources
Related Reading
- The Desjardins Insider Leak: What the Canadian Doxxing Case Teaches Us
- Doxxing Can Happen to Anyone: How to Prevent It and What to Do
- How Harassers and Burglars Use Information Found Online
- Can People Cause Problems With Data They Find Online?
- Why Data Leaks Keep Fueling Identity Fraud
- What Is a Data Breach? Causes, Risks and What To Do
- How Can I Stop an Online Stalker? Legal and Practical Options
- How Online Information Makes Stalking Easy and What to Do
Ready to erase your footprint?
Stop letting data brokers profit from your personal life. Start your removal today.
Start Removing