Air Canada admitted in a sworn Ontario Superior Court affidavit that it hired private investigators who twice took trash from outside the home of WestJet's co-founder and vice-president of strategic planning (a collection his own affidavit says involved the investigators walking onto his driveway, a claim IPSA disputed) and had shredded documents digitally reconstructed by a Houston forensic firm, as part of its corporate-espionage suit against WestJet, a fight that ended in a CAD 15.5 million WestJet settlement and public apology.
Social Engineering Examples·7 sources
In 2003, WestJet management, centered on its co-founder and VP of Strategic Planning, had been covertly logging into a password-protected Air Canada employee website to download proprietary flight-load and revenue data, using it to inform WestJet's own capacity and scheduling decisions. When Air Canada detected the intrusion in early 2004, it sued WestJet in the Ontario Superior Court of Justice (filed/announced in early April 2004; contemporaneous reporting places this on April 6, 2004, though a later Globe and Mail report says April 7) alleging corporate espionage, and simultaneously ran a private, physical investigation to identify and build evidence against the individual(s) responsible. As part of that investigation, Air Canada, through its law firm Lerners LLP, hired private investigation firm IPSA International Inc. IPSA's director of investigations and a colleague traveled to the co-founder's home in Victoria, B.C. and, on March 22 and April 5, 2004, collected the contents of his garbage and recycling bins, later sorting the material away from the property; the lead investigator's affidavit says this was done from the curbside without trespass, but the co-founder's own affidavit says the men walked onto his driveway to take the bins, and WestJet's countersuit alleged unlawful trespass, a dispute never resolved at trial. Shredded and fragmentary paper recovered from the trash was sent first to a document-reconstruction firm in Ottawa and then, when that firm couldn't handle the volume, to Church Street Technology in Houston, Texas, which digitally scanned and reconstructed the shredded pages and returned images on CD. Air Canada disclosed all of this for the first time in a sworn affidavit filed with the Ontario court, made public in reporting on June 30, 2004. WestJet responded with a countersuit alleging unlawful seizure of confidential financial information (draft budgets, expense reports, compensation-committee material) and revealed that its co-founder, upon suspecting surveillance, had planted a fake "TOP SECRET!!!!" WestJet business plan in his own trash as bait. The dispute also involved a separate Air Canada-hired human-surveillance operation: a contracted former RCMP staff sergeant, Robert Stenhouse, posing under the alias "Rob Stanaus" as a fake CSIS-experienced "international corporate intelligence" consultant, sat next to him on a commercial flight to observe him working with confidential Air Canada data. The matter was settled on May 29, 2006, with WestJet publicly apologizing and agreeing to a combined CAD 15.5 million in settlement obligations (CAD 5.5M in Air Canada's costs plus a CAD 10M charitable donation).
Air Canada suspected WestJet management (centered on its co-founder and VP of Strategic Planning) of covertly logging into Air Canada's password-protected internal employee website ("Skybook"/employee travel portal) to pull confidential flight-load and revenue-management data, then using it to plan competing capacity. To build a case, Air Canada's outside law firm, Lerners LLP, retained private investigation firm IPSA International Inc. IPSA's Vancouver-based director of investigations, together with a fellow IPSA investigator (both named alongside IPSA in the Ontario Superior Court case caption) and other IPSA employees, traveled to the co-founder's residence in Victoria, B.C. and, on March 22 and April 5, 2004, collected the contents of his garbage/recycling bins into their truck, telling an inquisitive neighbour they were Oak Bay municipal employees, and sorted the material afterward off-site. The lead investigator swore in his affidavit that they did not trespass onto the property, took only bins already at curbside, and discarded anything that looked purely personal or irrelevant; but this is a disputed account, not a settled fact: the co-founder's own affidavit states the men "got out of the truck and walked onto my driveway and wheeled away my recycling and garbage bins," and WestJet's countersuit formally alleged the investigators "unlawfully and surreptitiously entered onto [his] property... and seized documents"; this factual dispute was never resolved by trial. Recovered shredded and fragmentary paper documents were first sent to a firm in Ottawa, Forensic Document Examination Services, which found it could not handle the reconstruction and referred the material to Church Street Technology of Houston, Texas, a specialist in digitally scanning and reconstructing shredded documents; the lead investigator personally delivered the material to Houston (April 7, 2004, per contemporaneous reporting) and received reconstructed images back on CDs. In parallel, Air Canada also ran a physical human-surveillance operation: a contracted former RCMP staff sergeant, Robert Stenhouse (arranged by IPSA's managing director, a former RCMP colleague who had taught Stenhouse on an undercover course), was seated next to him on a March 2004 Air Canada flight to Florida. Stenhouse introduced himself under the alias "Rob Stanaus," falsely claiming six years' experience as a Canadian Security Intelligence Service (CSIS) agent and presenting himself as a specialist in "international corporate intelligence" with a firm called Eclectic Solutions Inc. (not, as previously stated here, as a fellow airline-industry traveler), in order to draw him into conversation and observe him working with confidential Air Canada load-factor data during the flight.
There was no deceptive "lure" aimed at the co-founder personally for the trash collection itself; it was pure physical surveillance/collection, not a social-engineering pretext against the victim directly, though the investigators reportedly told an inquisitive neighbour they were Oak Bay municipal employees collecting garbage, a minor deceptive cover story aimed at a bystander rather than him. Whether the collection method itself crossed into trespass is a disputed, not settled, fact: the lead IPSA investigator's affidavit claims the bins were taken only from curbside without trespassing, while the co-founder's own affidavit says the men "walked onto my driveway" to wheel the bins away, and WestJet's countersuit formally alleged the investigators "unlawfully and surreptitiously entered onto [his] property," an issue the eventual settlement never adjudicated. The closest thing to a "tell" cuts both ways: (1) the operation was only exposed to the public and to WestJet because Air Canada itself had to disclose it in a sworn affidavit filed with the Ontario Superior Court (filed by the lead investigator) as part of the underlying corporate-espionage lawsuit, a first-party litigation admission, not a leak or investigative unmasking (though the co-founder also personally caught the investigators mid-collection, photographed them, and confronted them at the time); (2) once he grew suspicious he was under surveillance, he planted a bogus "WestJet Business Plan" document stamped "TOP SECRET!!!!" in his own trash as bait, which Air Canada's side later took and treated as genuine intelligence, giving WestJet a concrete, provable instance of the spying for its countersuit.
WestJet's countersuit and the public disclosure of the garbage collection and in-flight surveillance operations turned Air Canada's corporate-espionage case into a mutual-embarrassment scandal for both airlines. The dispute (Air Canada et al. v. WestJet Airlines Ltd. et al., Ontario Superior Court of Justice) proceeded through injunction hearings and dueling affidavits through 2004-2006 without ever reaching a full trial verdict on the underlying espionage claims or on the disputed trespass allegations. On May 29, 2006, the companies issued a joint press release (filed as a U.S. SEC exhibit by Air Canada's parent, ACE Aviation Holdings) in which WestJet accepted full responsibility, apologized unreservedly to Air Canada and its CEO Robert Milton, agreed to pay CAD 5.5 million toward Air Canada's investigation/litigation costs, and agreed to make a CAD 10 million donation to Canadian children's charities in both companies' names. Air Canada in turn withdrew its claims and all legal proceedings were terminated. The release records the parties' civil settlement; it does not adjudicate the competing accounts of the trash collection.
This is a rare case where dumpster diving as a corporate-espionage/counter-espionage technique is admitted under oath in open civil court rather than merely alleged, giving researchers an unusually well-documented, if factually contested, account of tradecraft (garbage collection method, chain of custody to a specialized document-reconstruction vendor, and the competing legal theories over curbside pickup versus driveway trespass, which the settlement left unresolved). It also illustrates that dumpster diving is not just a low-budget attacker's tool: Air Canada commissioned professional private investigators and a specialized forensic-reconstruction firm against the co-founder's home, showing the technique's use in high-stakes B2B/competitive-intelligence contexts, not just against consumers or low-level targets. The parallel in-flight operation additionally shows classic pretexting tradecraft (a fabricated identity, false CSIS credentials, and a plausible-sounding cover firm used to draw a target into an unguarded conversation) being professionally deployed by one airline against a competitor executive. The case also demonstrates a defensive countermeasure, planting decoy/bait documents, used by the victim once surveillance was suspected.
Shred sensitive documents with a cross-cut/micro-cut shredder before disposal (Air Canada's investigators were still able to reconstruct "shredded or fragmentary documents," showing basic strip shredding is not sufficient against a determined, funded adversary); treat disposal of confidential documents as a security decision requiring appropriate legal advice; the competing accounts of collection in this case remain disputed; the lead IPSA investigator swore in his affidavit that his team took only bins already at curbside and did not trespass, but the co-founder's own affidavit states the men "got out of the truck and walked onto my driveway and wheeled away my recycling and garbage bins to their truck," and WestJet's countersuit formally alleged the investigators "unlawfully and surreptitiously entered onto [his] property... and seized documents"; the case settled before trial, so the curbside-vs-driveway/trespass question was never judicially decided, and it should not be read as an established legal safe harbor; executives handling competitively sensitive material should treat home trash disposal as a corporate-security surface, not just an office one: burn bags, off-site pulverization, or contracted secure destruction for sensitive personal/work overlap documents; corporate counter-intelligence awareness: the co-founder's own countermove (planting a fake "TOP SECRET!!!!" WestJet business plan in his trash as bait once he suspected surveillance) illustrates that once dumpster diving/surveillance is suspected, canary/decoy documents can help confirm and later prove it evidentially; organizations should have policies restricting private investigators' methods (including bans on impersonating municipal or utility workers to bystanders, which investigators here were accused of doing to a neighbor) and requiring legal sign-off, since the litigation publicly exposed the investigative methods; the settlement records WestJet's apology to Air Canada.
Social Engineering Examples. “Air Canada v. WestJet: Curbside Garbage Collection From a WestJet Co-Founder's Home”. Accessed 3 November 2026. https://socialengineeringexamples.com/air-canada-westjet-curbside-dumpster-diving-2003-2004
Air Canada's corporate security received an internal whistleblower tip (a WestJet employee reportedly saw Air Canada data on a colleague's screen) and, per contemporaneous reporting, traced repeated unauthorized logins to its password-protected employee website back to a residential internet connection in the Victoria area, then cross-referenced Air Canada passenger manifests to place its co-founder on a specific outbound flight, treating him as its primary suspect.
Preserve access logs and investigate suspected unauthorized access; social-engineering countermeasures become directly relevant to the later pretexting stage.
Air Canada's outside counsel, Lerners LLP, retained a licensed private investigation firm, IPSA International, to build a fuller profile of the co-founder (home address, routine, upcoming travel) and plan both a physical surveillance/collection operation and a human-intelligence approach.
Organizations retaining outside investigators should define counsel-approved limits on permissible methods.
IPSA arranged for a contracted former RCMP investigator to adopt a fabricated persona, a false name, an invented multi-year background with Canada's intelligence service, a fictitious corporate-intelligence consulting firm, and matching fake business cards, and had him seated directly next to the co-founder on a booked flight, consistent with classic pretexting tradecraft.
Fabricated professional personas and invented credentials are difficult to verify in the moment; general executive security-awareness training that treats unsolicited seatmates or acquaintances who quickly steer conversation toward one's employer and role with justified skepticism reduces (without eliminating) the chance this stage succeeds.
the investigator struck up an unsolicited conversation with the co-founder mid-flight, used the fabricated credentials and cover story to build rapport and draw the co-founder into discussing his work, and covertly observed and recorded the co-founder entering confidential Air Canada flight-load data into his laptop while seated beside him.
Working on confidential, competitively sensitive data on a laptop in a public or semi-public setting (a commercial flight, in this case) is the concrete point of failure; privacy screens, deferring sensitive analysis to secure settings, and policies discouraging handling market-sensitive material in transit directly counter this stage.
on two separate occasions, IPSA investigators traveled to the co-founder's residence and removed the contents of his curbside garbage and recycling bins, using a minor cover story (posing as municipal workers) when questioned by a neighbor, and sorted the collected material off-site afterward.
Treat household trash disposal as a corporate-security surface for any executive who regularly handles sensitive material at home; cross-cut/micro-cut shredding, burn bags, or contracted secure destruction remove the raw material this stage depends on.
shredded and fragmentary paper recovered from the trash was routed to a document-reconstruction firm and, when that firm couldn't handle the volume, on to a specialist digital-reconstruction vendor, which scanned and reassembled the shredded pages into usable document images.
Basic strip-cut shredding, as used here, was not sufficient against a funded adversary willing to pay for specialist digital reconstruction; finer-particle cross-cut/micro-cut shredding or certified off-site destruction defeats the reconstruction technique documented in this case.
the reconstructed documents and in-flight observations were used to support Air Canada's corporate-espionage lawsuit against WestJet and the co-founder, with the collection itself later disclosed in a sworn court affidavit as part of that litigation.
Once collected material has already been used to build a legal case, the target's remaining leverage is procedural: challenging the lawfulness of the collection itself (as the co-founder's trespass claim did) and, as the co-founder did here, planting decoy or canary documents in advance to later prove surveillance occurred and on what terms.
Browse by what this case has in common with others in the library.
TV investigative reporters filmed Rite Aid pharmacy dumpsters nationwide overflowing with readable prescription labels.
P&G-hired competitive-intelligence contractors obtained confidential Unilever hair-care information from discarded garbage before P&G self-disclosed the operation, fired three employees, and…
A nation-state cyberweapon crossed an air gap into Iran's Natanz nuclear facility on infected USB drives, first through a recruited…
A phone-record pretexting incident involving a retired U.S. Army general was followed by FTC enforcement and broader privacy-policy scrutiny.
Fraudsters faked WPP CEO Mark Read on WhatsApp and staged a Teams call with a cloned executive voice. The agency…
A Chinese national entered Mar-a-Lago after a pool-visit pretext and staff's unverified assumption that she was related to a member.…
Fraudsters impersonating FACC's CEO by email convinced finance staff to wire roughly EUR 50M for a fake acquisition project; EUR…
Three separate congressional watchdog engagements, not one campaign. In 2000, GAO agents carrying counterfeit badges declared themselves armed officers and…
Attackers made Microsoft's own Azure Monitor send a fake $459.90 Windows Defender bill that passed SPF, DKIM and DMARC. A…
Between 2006 and 2008 the FTC pursued six civil cases covering 16 data-broker and private-investigation defendants after two dismissals, alleging…
A 2025 campaign faked Portugal's tax authority and asked victims to paste a command to 'enable file preview', starting a…
In 2025 the FBI, FTC and USPIS warned of unordered packages with QR codes that lead to phishing sites or…
Fraudsters impersonating an Ascend Laboratories executive convinced Alkem Laboratories to wire USD 6,161,336 (about Rs 51.30 crore) to a fraudulent…
A fraudster spoofed Wells Fargo's real 800 number nine minutes after a legitimate advisor call, phished a 2FA code from…
The SEC's 2018 Section 21(a) report detailed how fake-executive and fake-vendor BEC emails caused nearly $100 million in combined losses…
A Snap Inc. payroll employee emailed the W-2 and payroll data of roughly 700 current and former employees to an…
A Houston- and California-based ring spoofed or compromised business emails to trick four companies and one New Jersey township into…
North Korea-linked attackers phished Sony staff with fake Apple ID emails, stole data and wiped thousands of PCs in 2014.…
The HP spying scandal began with a hunt for a boardroom leaker. Hewlett-Packard's investigators hired contractors who posed as directors…
Advance Machine Company's West Coast sales manager repeatedly rifled Tennant Company's sealed, covered dumpster in California to steal sales leads.
P&G-hired competitive-intelligence contractors obtained confidential Unilever hair-care information from discarded garbage before P&G self-disclosed the operation, fired three employees, and…
Greenpeace alleged in a civil suit, dismissed in both forums without any finding on the merits, that Dow Chemical and…