FRONTLINEPRIVACY
Doxxing

Portland federal-officer doxxing wave — 38 officers' personal info posted online during 2020 protests

2020-07-21·Portland, Oregon

During the summer 2020 protests in Portland, the Department of Homeland Security publicly stated that 38 federal law enforcement officers had been doxxed — names, photos, and personal information posted online. The wave coincided with the BlueLeaks data dump, which exposed 269 GB of internal police-department files going back to 1996, and prompted CBP and federal agencies to authorize officers to cover their name tags.

What happened

Beginning in June 2020 and through the summer of that year, federal law enforcement officers deployed to Portland during the protests following the murder of George Floyd were the targets of a sustained doxxing campaign. On July 21, 2020, a Department of Homeland Security official publicly stated that 38 federal officers had been doxxed — their names, photographs, and in some cases home addresses, family members, or other personal details posted online. CBP Commissioner Mark Morgan stated separately that federal officers were authorized to cover their name tags during operations because of the doxxing risk. The doxxing wave coincided with BlueLeaks, a release of approximately 269 GB of internal law-enforcement files from more than 200 US police agencies, published on June 19, 2020 by Distributed Denial of Secrets after a hack attributed to Anonymous. The BlueLeaks files contained internal documents, training material, and in many cases personnel information dating from 1996 through June 2020. Federal authorities later attributed parts of the Portland-specific officer doxxing to coordinated efforts by activist accounts, and DHS issued multiple intelligence bulletins on the threat to federal officers' safety. No federal prosecutions of the Portland 2020 doxxing campaign have publicly resulted.

What happened

In the summer of 2020, federal law enforcement officers deployed to Portland during the post-George-Floyd protests were the targets of a sustained doxxing campaign. On July 21, 2020, a Department of Homeland Security official publicly stated that 38 federal officers had been doxxed — names, photos, and in some cases home addresses or family information posted online. CBP Commissioner Mark Morgan stated that federal officers were authorized to remove or cover name tags because of the doxxing risk.

The campaign continued through the summer and into the fall. No comprehensive federal prosecutions were brought.

How it started

The Portland 2020 doxxing wave drew on at least three distinct channels. The first was BlueLeaks — a roughly 269 GB release of internal documents from more than 200 US police agencies, published on June 19, 2020 by Distributed Denial of Secrets after a hack attributed to Anonymous. BlueLeaks contained personnel rosters, internal communications, training material, and other identifying records.

The second channel was face-to-name matching. Activists used photos of officers in tactical gear during protests, ran reverse-image and social-media searches, and identified officers by name even when name tags had been covered. Several officers were named publicly through this process.

The third channel — and the one that mattered most for the home-address step — was the standard people-search broker page. Once an officer's name was known, converting that name into a home address required nothing more than a free or paid query against the same broker pages that aggregate property records, voter records, and adjacent public sources. The broker step was the silent constant under the more visible BlueLeaks and reverse-image moments.

Why this case matters

Portland 2020 is the modern reference case for the federal-LE side of the doxxing problem. It established the operational pattern that recurred in 2025 with ICE officers in Portland and elsewhere: protest cycle starts, officers get identified by face, names get published, broker pages convert names to home addresses, harassment and threats follow.

The Lefkow and Salas cases drove judicial-security legislation. The Portland 2020 case did not produce comparable federal protection for federal LE. The federal Lieu Act covers federal judges. Federal officers, agents, and federal prosecutors are not covered by name in most state Daniel's Law analogs.

What this means for you

If you're a federal officer, agent, or other federal LE: the Portland pattern is the working model for how the doxxing chain runs against you specifically. The first two channels (large-scale leaks, face-to-name matching) are protest-cycle dependent. The third (broker pages converting your name into your home address) is on every day, regardless of what's happening on the news.

The Lieu Act helps if you're a judge. It does not help most federal LE. The structural fix is removal: identify the broker pages that have your name and address, demand removal, and re-demand it when the listing comes back. State analogs to Daniel's Law sometimes cover federal officers and sometimes don't — check the specific state.

For more on the doxxing threat shape and what to do if you've been doxxed, see /doxxing and /doxxing/recovery.

Editorial rules: Only public, already-reported incidents. Never name a non-public victim. Always end with the prevention takeaway tied to our service. Cite at minimum one public source per claim.

What would have prevented this

Federal officers in Portland in 2020 were doxxed through a mix of channels: BlueLeaks-derived personnel files, social-media reverse-image searches that matched faces to names, and standard people-search broker pages that converted those names into home addresses. The first two channels are catastrophic but episodic. The third — broker pages that resell home addresses by name — is the constant. It runs every day, on every officer, regardless of whether a hack is happening that month. The federal [Lieu Act](/laws/lieu-act) covers federal judges, not federal LE. State analogs to [Daniel's Law](/laws/daniels-law) vary widely on whether federal officers count. The structural protection federal officers have today is whatever broker removal they pay for or run themselves — and continuing to run it after the protest cycle ends.

Run a free scan. No signup.

Public sources