Its usually form a number of different ways, everyone has their own way, but victims are usually social engineered into giving somewhat information about them to the attacker through which the attacker can leverage the search for the person in different osint tools, people don't usually value their privacy, posting literally everything about themselves in social media and such can also help a doxxer connect dots and eventually know a lot about you, (you name, dob, parents name, address) etc