The criticism here should be that the starting point is 'name & state' (wouldn't 'doxing' normally be determining name/identity or more from believed-anonymous online interactions?) but otherwise yes whatever you think of how important it is that is doxing?

But it's more than you cherry-picked anyway:

> The file included the names and birth years of their relatives. It listed the target’s mobile phone numbers and provider, as well as personal email addresses. Finally, the file contained information from their drivers’ license, including its unique identification number.

Plus 'sometimes' Social Security Number as you said.