Preventing and Responding to Online Discrimination, Harassment and Threats

SDSU is committed to defending the rights of all members of our community to lawfully publish and discuss their ideas, opinions and experiences in forums, whether in person or online. The university is also committed to a safe environment for all and to helping protect the personal safety of every student, faculty and staff member.  

The higher education sector has seen an increase in incidents of online harassment targeting students, faculty, staff, administrators and others. This is often targeted at those who publish articles, provide expert commentary, speak at conferences or who are generally active on social media, whether on private, professional or university-affiliated accounts.

Get Help

If at any time you or someone you know is believed to be in physical danger, immediately contact law enforcement officials by calling or texting 9-1-1. If you are not in immediate danger and need to file a report, you can also call the University Police Department via its non-emergency line at 619-594-1991

Best Practices for Managing Social Media Harassment

The following guidance is meant to help individuals who have become targets of online harassment to navigate these types of situations safely and effectively by leveraging both campus and community resources. It is important to remember the following:

  • No one is under an obligation to publicly respond to social media or other commentary, just as no one has an obligation to be actively engaged on social media.
  • Only those specifically authorized by SDSU are allowed to speak on behalf of the university in an official capacity.
  • Report abuse when you see it. Most reputable social media channels and websites have a “report” feature allowing individuals to share information about behaviors that they believe violate community guidelines or terms of use. Those channels and websites have policies and procedures, including the banning of accounts, to address violations.

Forms of Harassment

Faculty, staff and students are vulnerable to targeted and coordinated forms of social media and online harassment. This may come from individuals or from organized groups in coordinated attacks. 

Individuals or groups behind a social media attack may be members of the university community, the local community or, most often, not have any direct connection to the university or local community. 

Students, faculty and staff will be held to existing university policies as they pertain to harassment and discrimination and, specifically for students, the Code of Conduct. In addition to other forms of harassment and discrimination, the policy of the California State University system and SDSU prohibits discrimination, harassment and retaliation and stalking. Members of the community can report harassment and discrimination via Inclusive SDSU. 

Individuals or groups behind a social media attack may use the following tactics:

Negative comments on social media are common, especially for certain groups and certain topics, including those that may be seen as political or controversial in nature. Any topic, however, can generate negative social media attention and harassment given the hugely diverse range of experiences, backgrounds and perspectives.

Doxxing (sometimes written as “doxing”) is a tactic by which an individual or group reveals personally identifiable information about someone, including home or work address, telephone numbers, place of employment or employment history, other social media accounts, or other information. 

Because individuals and their personal information is identified through doxxing, this form of social media harassment often either invites or results in a person receiving threats of violence. This means doxxing is a possible crime, which is why individuals who experience doxxing should consider reporting it to local law enforcement authorities.

Trolling occurs when individuals or groups deliberately follow and provoke others online, often with offensive content. While most trolling is a nuisance, occasionally trolling attacks can escalate to threats or harassment.

Cyberbullying is willful and repeated harm inflicted through the use of computers, cell phones and other electronic devices. Often, cyberbullying is not limited just to social media, but may also include targeted emails to an individual’s personal and professional accounts.

Large-scale social media attacks may appear to be coordinated, and are often intended to give the illusion that a majority of individuals or platform users are aligned around a single issue. This type of harassment will generally represent a small group, and not reflect majority opinion.

SDSU Resources

Online harassment and cybersecurity threats can come in several forms, to include:

Exposure of sensitive data: If you have or see any information exposed that is FERPA- or HIPAA-protected data, personally identifiable information (PII) (examples include, but are not limited to social security number, driver's license number, or home address), and/or information pertaining to physical or mental health conditions

Suspicious account activity: To include Duo MFA messages that you did not initiate, unauthorized login attempts and unfamiliar devices and locations appearing on your accounts. 

Target attacks, such as phishing emails, texts or calls requesting sensitive information, and also malware, spyware or suspicious downloads

Online harassment tied to your SDSUid, to include doxxing of your SDSU email, profile or campus role and also harassments or impersonations using SDSU platforms. 

What to do Immediately

  • Do not delete suspicious messages or files:  save them as evidence.
  • Report Incident to SDSU IT: [email protected]

What to Report

When sharing information with the Information Technology Division, to include forwarding information to [email protected], be sure to include: 

  • A description of what happened
  • Copies/screenshots of messages
  • Any URLs or accounts involved
  • If sensitive data is exposed, mark your email “Urgent: Data Exposure."

Other Actions to Take 

  • Change your SDSUid password right away using a unique and strong passphrase
  • Disconnect the device from Wi-fi or the campus network. 
  • If online harassment originates from within our community, supportive and disciplinary measures may be available through Title IX and the Center for the Prevention of Harassment and Discrimination.

If you or a faculty or staff member and receive media inquiries and need support with reporters, or if you have questions about social media, employees can contact Strategic Communications and Public Affairs (StratComm) by emailing [email protected].

Protecting Yourself, Your Personal Information

Taking immediate action to protect sensitive and personal information when you experience social media harassment, including doxxing, is crucial to preventing identity theft, financial fraud and personal harm. The following actions may be necessary: 

  • Change Your Passwords: Start by changing the passwords for all of your online accounts, not merely the platform on which you are experiencing harassment. You should especially change passwords for accounts that contain sensitive information or financial data, such as platforms linked to your banking accounts. Choose strong, unique passwords for each account.
  • Monitor Your Accounts: Regularly monitor your bank accounts, credit card statements and other financial accounts for any suspicious activity. Report any unauthorized transactions or unusual charges to your bank or credit card issuer immediately.
  • Contact Your Credit Card Issuers: If you believe your credit card information has been compromised, contact your credit card issuers as soon as possible to report the situation. They can help you cancel your existing cards and issue new ones to prevent further unauthorized charges.
  • Consider Credit Monitoring Services: If you are concerned about identity theft or fraud, consider enrolling in a credit monitoring service. These services can alert you to any changes or inquiries on your credit report, helping you detect suspicious activity early.
  • Use Two-Factor Authentication: Enable and use two-factor authentication on your accounts wherever possible. This adds an extra layer of security by requiring a secondary verification step, such as a text message code or authentication app, in addition to your password. SDSU utilizes DUO multi-factor authentication, as an example.
  • Be Attentive to Phishing Attempts: Be cautious of any emails, messages or phone calls you receive requesting sensitive information or claiming to be from legitimate organizations. Encourage your family members and other loved ones to do the same, as individuals who experience being doxxed sometimes report that those close to them are also then targeted by agitators following the release of their personal information. Do not click on any links or provide personal information unless you can verify the sender's identity.
  • Update Security Settings: Review and update the security settings on your online accounts, including privacy settings and account recovery options. Consider strengthening your privacy settings to limit the amount of personal information visible to others online.
  • Keep Your Devices Updated: Make sure your computers, phones, tablets, and any other connected devices are running the latest software versions. This includes: Operating systems (Windows, macOS, iOS, Android), Web browsers (Chrome, Firefox, Edge, Safari), and Apps and productivity tools.
  • File a Police Report: In addition to the steps above, if you believe you are a victim of cyberharassment or identity theft, consider filing a police report. Provide any evidence or documentation to law enforcement that you have to support your case.

Additional Guidance for Managing Email

If you receive unwanted emails, you can take a number of actions: 

  • Report Spam: Mark the unwanted emails as spam or junk in your email client.
  • Block Senders: Most email providers and platforms offer options to block specific email addresses. Block the senders of unwanted emails to prevent further messages from reaching your inbox.  
  • Use Email Filters: You can set up a filter in your email client to automatically move emails to separate folders or delete them based on specific keywords, senders or other criteria. 
  • In Gmail: Go to Settings → Filters and Blocked Addresses → Create a new filter. Choose criteria (like sender or keywords) and what you want Gmail to do (delete, archive, label, etc.). More details online: Create rules to filter your emails.

Take Care of Yourself

Online harassment of any kind can be unsettling and stressful. In addition to the support services offered at SDSU, the following actions may help individuals respond to a difficult situation that has occurred online:

  • Consider temporarily disabling your social media accounts, or switching them to private if they are public. 
  • Ignore social media agitators. In many cases, trolls move on if you ignore them or do not give them a reaction. 
  • Mute conversations or profiles. Normally, account owners are not notified when you have muted them, and you can ignore their comments. 
  • Block accounts to avoid seeing content, as several social media platforms allow you to selectively prevent others from following you, seeing your posts or commenting on your content, and vice versa. You can also block or filter email. (Note that, depending on the platform, when you block someone, they may receive a notification or they may be able to see that you have blocked their account.) 
  • Report users to social media platforms when they violate community guidelines and could result in their account being suspended. Keep in mind, however, that some posts might be harassing in nature but not violate specific platform guidelines, which means some platforms will choose not to take any action even if you submit a report. 

Advice for Others Wishing to Show Support

When there is news of a colleague or student being harassed online, other members of the community may wish to express their support. The following guidelines are meant for you:

  • Avoid posting public statements of support, as that can exacerbate the situation and draw additional attention to the harassment. 
  • Take the time to contact the individual privately to show support and inclusion in the community. Encourage other friends and colleagues to do the same.
  • Encourage the individual to take a break from technology. 
  • Be empathetic and supportive. Listen to concerns and provide resources as needed. 
  • If you supervise someone who has experienced online harassment, explore with that individual alternative pathways to accomplishing responsibilities if their work email is inundated.

Frequently Asked Questions

A: Online harassment or cyberbullying is defined as uninvited, intimidating, offensive comments or replies, photos, videos, direct messages or other content used to personally attack, intimidate, threaten or upset a person. Targeted online harassment can involve repeated, malicious behavior aimed at a specific individual or group. Signs include persistent negative comments, threats or stalking behavior. Trolling is when an individual/entity posts inflammatory or provocative comments on digital platforms, often directed at individuals, with the intention of starting arguments.

A: You should report fake profiles to the relevant social media platforms, as follows:

If you need additional support or guidance related to social media, or if you begin receiving media inquiries and need support, contact Strategic Communications and Public Affairs (StratComm) by emailing [email protected].

A: Document the harassment, block the harasser if possible, report the incidents to the appropriate platform and seek support from trusted colleagues or university resources.

A: It can be uncomfortable and unsettling when individuals begin sharing personal and private information related to you, your family and other loved ones online. There are a number of considerations. Foremost, be cautious about sharing or exposing personal information online and regularly review privacy settings on social media platforms. Consider using privacy-enhancing tools or services.

A: Immediately take steps to secure your personal information, report the incident to the social media platform and consider contacting law enforcement (local law enforcement or the University Police Department) if necessary. Always dial 9-1-1 in the event of an emergency, including a threat of personal harm.

A: Generally, it's best to ignore trolls and not engage with them, as they often seek attention and conflict. It is encouraged that you focus on productive interactions and constructive dialogue with others instead.

A: Legitimate criticism is typically constructive, respectful, and focused on specific issues. Harassment, on the other hand, involves personal attacks, threats, or abusive language. It is always encouraged to report harassment to the social media channels and to local law enforcement when you are concerned about a potential or actual threat.

A: Yes, it's important to report such incidents to appropriate university authorities, who can provide support, guidance and identify those who can take appropriate action.

A: The university offers support services, including counseling services for students and an Employee Assistance Program for faculty and staff. Faculty and staff can also contact the Center Human Resources and Faculty Advancement with questions or for support.

A: Use strong, unique passwords, change your passwords regularly and consider using a password manager app. Enable two-factor authentication when possible. You should also review privacy settings regularly. Also, be cautious about sharing personal information online, including when you are contacted directly by individuals you do not know.

A: It is important to offer empathy, listen without judgment and provide information about available resources. Also, encourage them to report the harassment to social media platforms and to public or university authorities.

A: Consider reviewing the Stop Bullying and Cyberbullying.org websites. Both have information related to cyberbullying, prevention, how to respond, federal laws and other useful information.

A: If you suspect suspicious activity or need assistance with account security, contact the SDSU IT Security Office at [email protected] or submit a ServiceNow request at the Report a Problem page.  The team can help you secure your account, investigate issues, and provide guidance on protecting your information.