Doxbin Data Scrape Reportedly Exposes 93,482 User Dossiers

HEROIC analysts reviewed a file connected to Doxbin, reportedly scraped in 2024 and later shared on Telegram. The file holds 93,482 records of personal dossiers, each built from names, contact details, and identifying numbers tied to specific individuals. Because the scrape has not been independently verified, HEROIC treats it as a reported collection rather than a confirmed fact. The only way to know if your own information appears in it is to scan your email.

Why a Dossier File Carries Real Risk

This kind of dossier is dangerous because it combines contact details with identifiers that are hard to change, not just a password that can be reset. Each entry pairs a name with a phone number, IP address, birthday, and in many cases a Social Security number, giving an attacker enough to impersonate someone or pass identity checks. Combined with a social media handle, the same data can be used to track down and contact a specific person directly.

Information Found in the Doxbin File

• Email Address: ties the record to a specific inbox for phishing or account recovery attempts.
• Username: links the record to other accounts using the same handle.
• First Name: identifies the individual behind the record.
• Last Name: combined with a first name, confirms identity for impersonation.
• Phone Number: enables SIM swap attempts and unsolicited contact.
• IP Address: can help narrow down a person's general location or internet provider.
• Social Security Numbers: usable for identity theft and fraudulent account openings.
• Birthday: often used as a security question answer or identity verification detail.
• Social Media: links the record to a public profile, making the person easier to find.

Why Identity Theft Risk Runs High Here

Because this file mixes government style identifiers like Social Security numbers with everyday contact details, it creates real exposure to identity theft and targeted fraud, not just account takeover. Someone holding a full dossier can open credit lines, pass basic identity checks, or contact a victim and their known social accounts directly. The risk sits with the specific people named in the file rather than with the public at large, so a calm, targeted check is the right next step.

How a Dossier Scrape Like This Comes Together

A scrape like this is typically pulled together by collecting dossiers that were already posted publicly on a site, then packaging them into one searchable file. It does not require breaking into a server, it just requires gathering and organizing content that already existed on the platform. According to HEROIC analysts, this kind of collection is common wherever a site lets users publish personal information about other people.

Does This Doxbin File Mention You?

The clearest way to find out is to scan your email and compare it against this file and HEROIC's wider breach records. If you get a match, treat your Social Security number and phone number as exposed and watch for unfamiliar credit activity. This applies whether the email on file is one you use personally or for work, so check both.