Cyber buddy is bullying in public, how do I punish him/her or them for taking out their pig form of activity?

Cyber guy using their capability to doxx in public and show how legitimate they are but they are back firing, should I go for a first offence rule ?