Digital Harassment in the Workplace: When It Becomes a Security Event
Sustained online harassment campaigns against employees are increasingly used as a destabilisation tactic against organisations. The threat is personal and operational simultaneously.
Sustained digital harassment directed at individual employees is no longer solely a personal welfare concern. It is increasingly deployed as a deliberate tactic to destabilise organisations by targeting the individuals within them. When a senior analyst, communications lead, or operations director is subject to a coordinated harassment campaign, the organisation's capacity in that function is directly degraded, regardless of whether the campaign ever touches the organisation's technical infrastructure.
The relationship between personal harassment and organisational exposure is well-documented in state-sponsored operations but is now equally common in corporate competitive intelligence, activist campaigns, and organised reputational attacks. The individual is targeted specifically because of their role. The damage intended is both personal and institutional.
Most organisations have a welfare response to harassment but no security response. They treat the individual as a victim requiring support, which is appropriate, but fail to treat the situation as an active threat to the organisation requiring investigation and countermeasures. These two responses are not mutually exclusive. Both are necessary.
The security dimensions of a workplace harassment campaign include: identifying the origin and coordination structure of the campaign; assessing whether the harassment is designed to elicit a specific response (resignation, retraction, public statement); evaluating what information about the target and their role has been gathered by the harassing parties; and determining whether the campaign is being conducted in conjunction with any technical intrusion activity.
Custodia One works with organisations to build a dual-track response capability: welfare protocols that protect and support affected individuals, alongside security protocols that treat coordinated digital harassment as the threat intelligence event it represents.
"A harassment campaign that forces a senior employee out of a role has achieved its objective without ever touching your network. The security cost is identical to a successful intrusion."
Custodia One Advisory Perspective
What Your Organisation Should Do
Establish a harassment response protocol that includes both welfare and security tracks running in parallel
Train security teams to treat coordinated digital harassment as a threat intelligence event requiring investigation
Create clear escalation paths from HR to security when harassment patterns suggest coordination or organisational targeting
Document campaigns systematically from first contact: evidence quality determines investigative options later
Advisory Enquiries
Facing this issue in your organisation?
Custodia One advises on all of the issues covered in our Intelligence Library. Contact us to discuss your specific situation in confidence.