Malinformation is genuinely true information deliberately deployed to cause harm — through selective release, stripping of context, invasion of privacy, or weaponized timing. It is the third and most counterintuitive category in the Wardle–Derakhshan (2017) framework: where disinformation is false-and-intended-to-harm and misinformation is false-but-unintentional, malinformation is true-and-intended-to-harm. Because the underlying facts are accurate, the usual defense — “that’s not true” — does not apply, which is exactly what makes it so effective and so hard to counter. Common forms include doxxing (publishing private information to enable harassment), leaks and hacked-material dumps released for maximum damage, decontextualized quotes or records, and opposition research timed to detonate at a decisive moment.
The mechanism is framing and context rather than falsehood. A true fact can profoundly mislead when the surrounding context that would reframe it is removed — a phenomenon adjacent to context collapse, where information meant for one setting is transplanted into another where it reads very differently. Selective disclosure spotlights one accurate detail while the balancing record stays hidden. Timing weaponizes truth further: the same fact that would be inert on an ordinary day does maximum harm surfaced hours before a vote, a hire, or a decision. And the harm is often aimed at a person — intimidation, discrediting, or triggering a harassment mob — rather than at informing the public. Because each individual claim is verifiably true, the content survives fact-checking, spreads with an air of legitimacy, and resists the corrections that would neutralize a falsehood.
The line between malinformation and legitimate disclosure is genuine and important: authentic whistleblowing and investigative reporting also release true, sometimes private, information — but in the service of accountability and public interest, not to harm an individual. That distinction — intent and public value — is the first defensive question. Because the facts are true, the defense shifts from accuracy to context, relevance, and intent: restore the missing context and ask how it changes the reading; interrogate why this fact is surfacing now and who benefits from the timing; judge whether the information is actually relevant and fair to the decision at hand, not merely accurate; and, critically, protect privacy by refusing to amplify exposed personal data, since doxxing and leak-driven harassment depend on onward spread to do their damage.