Doxing describes the malicious disclosure of individuals’ personal information on the internet. While existing literature recognizes that online platforms greatly facilitate the aggregation, disclosure, and dissemination of personal information, the specific mechanisms through which these platforms influence interactions among doxing actors, and consequently the progression of doxing incidents, remain unclear. To explore the dynamics—i.e., patterns of activities among actors—shaping doxing events in online environments, we conducted a qualitative multi-case study analyzing six real-world doxing incidents. Our findings reveal complex interaction patterns among human (doxers, doxees, and human audiences) and institutional actors (online platform operators and affiliated organizations). Additionally, we delineate the distinct roles of online platform types in facilitating doxing activities, including information research, communication, collaboration, and auxiliary functions. Our study holds significant implications for researchers investigating online platform-empowered adversarial social movements like doxing and offers valuable insights for practitioners aiming to mitigate its impacts.