Case Library / Phishing / Air Canada v. WestJet: Curbside Garbage Collection From a WestJet Co-Founder's Home

Air Canada v. WestJet: Curbside Garbage Collection From a WestJet Co-Founder's Home

Air Canada admitted in a sworn Ontario Superior Court affidavit that it hired private investigators who twice took trash from outside the home of WestJet's co-founder and vice-president of strategic planning (a collection his own affidavit says involved the investigators walking onto his driveway, a claim IPSA disputed) and had shredded documents digitally reconstructed by a Houston forensic firm, as part of its corporate-espionage suit against WestJet, a fight that ended in a CAD 15.5 million WestJet settlement and public apology.

Share:

Social Engineering Examples·7 sources

What happened

In 2003, WestJet management, centered on its co-founder and VP of Strategic Planning, had been covertly logging into a password-protected Air Canada employee website to download proprietary flight-load and revenue data, using it to inform WestJet's own capacity and scheduling decisions. When Air Canada detected the intrusion in early 2004, it sued WestJet in the Ontario Superior Court of Justice (filed/announced in early April 2004; contemporaneous reporting places this on April 6, 2004, though a later Globe and Mail report says April 7) alleging corporate espionage, and simultaneously ran a private, physical investigation to identify and build evidence against the individual(s) responsible. As part of that investigation, Air Canada, through its law firm Lerners LLP, hired private investigation firm IPSA International Inc. IPSA's director of investigations and a colleague traveled to the co-founder's home in Victoria, B.C. and, on March 22 and April 5, 2004, collected the contents of his garbage and recycling bins, later sorting the material away from the property; the lead investigator's affidavit says this was done from the curbside without trespass, but the co-founder's own affidavit says the men walked onto his driveway to take the bins, and WestJet's countersuit alleged unlawful trespass, a dispute never resolved at trial. Shredded and fragmentary paper recovered from the trash was sent first to a document-reconstruction firm in Ottawa and then, when that firm couldn't handle the volume, to Church Street Technology in Houston, Texas, which digitally scanned and reconstructed the shredded pages and returned images on CD. Air Canada disclosed all of this for the first time in a sworn affidavit filed with the Ontario court, made public in reporting on June 30, 2004. WestJet responded with a countersuit alleging unlawful seizure of confidential financial information (draft budgets, expense reports, compensation-committee material) and revealed that its co-founder, upon suspecting surveillance, had planted a fake "TOP SECRET!!!!" WestJet business plan in his own trash as bait. The dispute also involved a separate Air Canada-hired human-surveillance operation: a contracted former RCMP staff sergeant, Robert Stenhouse, posing under the alias "Rob Stanaus" as a fake CSIS-experienced "international corporate intelligence" consultant, sat next to him on a commercial flight to observe him working with confidential Air Canada data. The matter was settled on May 29, 2006, with WestJet publicly apologizing and agreeing to a combined CAD 15.5 million in settlement obligations (CAD 5.5M in Air Canada's costs plus a CAD 10M charitable donation).

How it worked

Air Canada suspected WestJet management (centered on its co-founder and VP of Strategic Planning) of covertly logging into Air Canada's password-protected internal employee website ("Skybook"/employee travel portal) to pull confidential flight-load and revenue-management data, then using it to plan competing capacity. To build a case, Air Canada's outside law firm, Lerners LLP, retained private investigation firm IPSA International Inc. IPSA's Vancouver-based director of investigations, together with a fellow IPSA investigator (both named alongside IPSA in the Ontario Superior Court case caption) and other IPSA employees, traveled to the co-founder's residence in Victoria, B.C. and, on March 22 and April 5, 2004, collected the contents of his garbage/recycling bins into their truck, telling an inquisitive neighbour they were Oak Bay municipal employees, and sorted the material afterward off-site. The lead investigator swore in his affidavit that they did not trespass onto the property, took only bins already at curbside, and discarded anything that looked purely personal or irrelevant; but this is a disputed account, not a settled fact: the co-founder's own affidavit states the men "got out of the truck and walked onto my driveway and wheeled away my recycling and garbage bins," and WestJet's countersuit formally alleged the investigators "unlawfully and surreptitiously entered onto [his] property... and seized documents"; this factual dispute was never resolved by trial. Recovered shredded and fragmentary paper documents were first sent to a firm in Ottawa, Forensic Document Examination Services, which found it could not handle the reconstruction and referred the material to Church Street Technology of Houston, Texas, a specialist in digitally scanning and reconstructing shredded documents; the lead investigator personally delivered the material to Houston (April 7, 2004, per contemporaneous reporting) and received reconstructed images back on CDs. In parallel, Air Canada also ran a physical human-surveillance operation: a contracted former RCMP staff sergeant, Robert Stenhouse (arranged by IPSA's managing director, a former RCMP colleague who had taught Stenhouse on an undercover course), was seated next to him on a March 2004 Air Canada flight to Florida. Stenhouse introduced himself under the alias "Rob Stanaus," falsely claiming six years' experience as a Canadian Security Intelligence Service (CSIS) agent and presenting himself as a specialist in "international corporate intelligence" with a firm called Eclectic Solutions Inc. (not, as previously stated here, as a fellow airline-industry traveler), in order to draw him into conversation and observe him working with confidential Air Canada load-factor data during the flight.

The lure and the tell

There was no deceptive "lure" aimed at the co-founder personally for the trash collection itself; it was pure physical surveillance/collection, not a social-engineering pretext against the victim directly, though the investigators reportedly told an inquisitive neighbour they were Oak Bay municipal employees collecting garbage, a minor deceptive cover story aimed at a bystander rather than him. Whether the collection method itself crossed into trespass is a disputed, not settled, fact: the lead IPSA investigator's affidavit claims the bins were taken only from curbside without trespassing, while the co-founder's own affidavit says the men "walked onto my driveway" to wheel the bins away, and WestJet's countersuit formally alleged the investigators "unlawfully and surreptitiously entered onto [his] property," an issue the eventual settlement never adjudicated. The closest thing to a "tell" cuts both ways: (1) the operation was only exposed to the public and to WestJet because Air Canada itself had to disclose it in a sworn affidavit filed with the Ontario Superior Court (filed by the lead investigator) as part of the underlying corporate-espionage lawsuit, a first-party litigation admission, not a leak or investigative unmasking (though the co-founder also personally caught the investigators mid-collection, photographed them, and confronted them at the time); (2) once he grew suspicious he was under surveillance, he planted a bogus "WestJet Business Plan" document stamped "TOP SECRET!!!!" in his own trash as bait, which Air Canada's side later took and treated as genuine intelligence, giving WestJet a concrete, provable instance of the spying for its countersuit.

Outcome

WestJet's countersuit and the public disclosure of the garbage collection and in-flight surveillance operations turned Air Canada's corporate-espionage case into a mutual-embarrassment scandal for both airlines. The dispute (Air Canada et al. v. WestJet Airlines Ltd. et al., Ontario Superior Court of Justice) proceeded through injunction hearings and dueling affidavits through 2004-2006 without ever reaching a full trial verdict on the underlying espionage claims or on the disputed trespass allegations. On May 29, 2006, the companies issued a joint press release (filed as a U.S. SEC exhibit by Air Canada's parent, ACE Aviation Holdings) in which WestJet accepted full responsibility, apologized unreservedly to Air Canada and its CEO Robert Milton, agreed to pay CAD 5.5 million toward Air Canada's investigation/litigation costs, and agreed to make a CAD 10 million donation to Canadian children's charities in both companies' names. Air Canada in turn withdrew its claims and all legal proceedings were terminated. The release records the parties' civil settlement; it does not adjudicate the competing accounts of the trash collection.

Why it matters

This is a rare case where dumpster diving as a corporate-espionage/counter-espionage technique is admitted under oath in open civil court rather than merely alleged, giving researchers an unusually well-documented, if factually contested, account of tradecraft (garbage collection method, chain of custody to a specialized document-reconstruction vendor, and the competing legal theories over curbside pickup versus driveway trespass, which the settlement left unresolved). It also illustrates that dumpster diving is not just a low-budget attacker's tool: Air Canada commissioned professional private investigators and a specialized forensic-reconstruction firm against the co-founder's home, showing the technique's use in high-stakes B2B/competitive-intelligence contexts, not just against consumers or low-level targets. The parallel in-flight operation additionally shows classic pretexting tradecraft (a fabricated identity, false CSIS credentials, and a plausible-sounding cover firm used to draw a target into an unguarded conversation) being professionally deployed by one airline against a competitor executive. The case also demonstrates a defensive countermeasure, planting decoy/bait documents, used by the victim once surveillance was suspected.

Defenses

Shred sensitive documents with a cross-cut/micro-cut shredder before disposal (Air Canada's investigators were still able to reconstruct "shredded or fragmentary documents," showing basic strip shredding is not sufficient against a determined, funded adversary); treat disposal of confidential documents as a security decision requiring appropriate legal advice; the competing accounts of collection in this case remain disputed; the lead IPSA investigator swore in his affidavit that his team took only bins already at curbside and did not trespass, but the co-founder's own affidavit states the men "got out of the truck and walked onto my driveway and wheeled away my recycling and garbage bins to their truck," and WestJet's countersuit formally alleged the investigators "unlawfully and surreptitiously entered onto [his] property... and seized documents"; the case settled before trial, so the curbside-vs-driveway/trespass question was never judicially decided, and it should not be read as an established legal safe harbor; executives handling competitively sensitive material should treat home trash disposal as a corporate-security surface, not just an office one: burn bags, off-site pulverization, or contracted secure destruction for sensitive personal/work overlap documents; corporate counter-intelligence awareness: the co-founder's own countermove (planting a fake "TOP SECRET!!!!" WestJet business plan in his trash as bait once he suspected surveillance) illustrates that once dumpster diving/surveillance is suspected, canary/decoy documents can help confirm and later prove it evidentially; organizations should have policies restricting private investigators' methods (including bans on impersonating municipal or utility workers to bystanders, which investigators here were accused of doing to a neighbor) and requiring legal sign-off, since the litigation publicly exposed the investigative methods; the settlement records WestJet's apology to Air Canada.

Sources
  • News Release dated May 29, 2006. U.S. SEC EDGAR filing (ACE Aviation Holdings Inc. exhibit 99.1) (primary). Primary-source settlement text: CAD 5.5M costs + CAD 10M charity donation, WestJet's apology to Air Canada and Robert Milton, termination of all legal proceedings.
  • [Air Canada et al. v. WestJet Airlines Ltd. et al., [2005] O.T.C. 1092 (SC)](https://ca.vlex.com/vid/air-can-v-westjet-681543553). Ontario Superior Court of Justice (hosted via vLex) (primary). Court decision in the underlying litigation referencing the affidavits and factums.
  • Air Canada sifted WestJet garbage. The Globe and Mail (secondary). June 30, 2004 report detailing the lead investigator's IPSA affidavit: exact dates (March 22 and April 5, 2004), the WestJet co-founder's Victoria residence, Forensic Document Examination Services and Church Street Technology of Houston; also the source of the 'suit launched April 7' date, which conflicts with other contemporaneous reporting.
  • Bitter air carrier dogfight heads to court. The Globe and Mail (secondary). July 8, 2004 report quoting the co-founder's own affidavit describing investigators walking onto his driveway to take the bins, and WestJet's countersuit language alleging investigators 'unlawfully and surreptitiously entered onto his property', the primary basis for treating the trespass/curbside question as disputed rather than settled.
  • WestJet alleges Air Canada scavenged highly sensitive data. The Globe and Mail (secondary). July 22, 2004 report on WestJet's allegations of what was actually recovered from the trash, and the co-founder's planted decoy 'TOP SECRET' business plan.
  • WestJet admits to spying. The Globe and Mail (secondary). Coverage of the May 29, 2006 settlement and apology.
  • The gumshoe and his target at 30,000 feet. The Globe and Mail (secondary). December 6, 2006 investigative feature detailing the parallel in-flight surveillance of the WestJet co-founder by investigator Robert Stenhouse under the alias 'Rob Stanaus' (falsely claiming ex-CSIS background, posing as an 'international corporate intelligence' consultant with Eclectic Solutions Inc.); also names the two IPSA investigators who removed his trash on March 22, 2004, and gives April 6, 2004 as the lawsuit-filing date.
Cite this case

Social Engineering Examples. “Air Canada v. WestJet: Curbside Garbage Collection From a WestJet Co-Founder's Home”. Accessed 3 November 2026. https://socialengineeringexamples.com/air-canada-westjet-curbside-dumpster-diving-2003-2004

Attack Chain & Defense
1Reconnaissance and suspect identification
What happened

Air Canada's corporate security received an internal whistleblower tip (a WestJet employee reportedly saw Air Canada data on a colleague's screen) and, per contemporaneous reporting, traced repeated unauthorized logins to its password-protected employee website back to a residential internet connection in the Victoria area, then cross-referenced Air Canada passenger manifests to place its co-founder on a specific outbound flight, treating him as its primary suspect.

The control that would have stopped it

Preserve access logs and investigate suspected unauthorized access; social-engineering countermeasures become directly relevant to the later pretexting stage.

2Retention of professional investigative resources
What happened

Air Canada's outside counsel, Lerners LLP, retained a licensed private investigation firm, IPSA International, to build a fuller profile of the co-founder (home address, routine, upcoming travel) and plan both a physical surveillance/collection operation and a human-intelligence approach.

The control that would have stopped it

Organizations retaining outside investigators should define counsel-approved limits on permissible methods.

3Pretext development for the in-flight approach
What happened

IPSA arranged for a contracted former RCMP investigator to adopt a fabricated persona, a false name, an invented multi-year background with Canada's intelligence service, a fictitious corporate-intelligence consulting firm, and matching fake business cards, and had him seated directly next to the co-founder on a booked flight, consistent with classic pretexting tradecraft.

The control that would have stopped it

Fabricated professional personas and invented credentials are difficult to verify in the moment; general executive security-awareness training that treats unsolicited seatmates or acquaintances who quickly steer conversation toward one's employer and role with justified skepticism reduces (without eliminating) the chance this stage succeeds.

4Execution of the in-flight social-engineering approach
What happened

the investigator struck up an unsolicited conversation with the co-founder mid-flight, used the fabricated credentials and cover story to build rapport and draw the co-founder into discussing his work, and covertly observed and recorded the co-founder entering confidential Air Canada flight-load data into his laptop while seated beside him.

The control that would have stopped it

Working on confidential, competitively sensitive data on a laptop in a public or semi-public setting (a commercial flight, in this case) is the concrete point of failure; privacy screens, deferring sensitive analysis to secure settings, and policies discouraging handling market-sensitive material in transit directly counter this stage.

5Physical collection via dumpster diving
What happened

on two separate occasions, IPSA investigators traveled to the co-founder's residence and removed the contents of his curbside garbage and recycling bins, using a minor cover story (posing as municipal workers) when questioned by a neighbor, and sorted the collected material off-site afterward.

The control that would have stopped it

Treat household trash disposal as a corporate-security surface for any executive who regularly handles sensitive material at home; cross-cut/micro-cut shredding, burn bags, or contracted secure destruction remove the raw material this stage depends on.

6Forensic exploitation of the collected material
What happened

shredded and fragmentary paper recovered from the trash was routed to a document-reconstruction firm and, when that firm couldn't handle the volume, on to a specialist digital-reconstruction vendor, which scanned and reassembled the shredded pages into usable document images.

The control that would have stopped it

Basic strip-cut shredding, as used here, was not sufficient against a funded adversary willing to pay for specialist digital reconstruction; finer-particle cross-cut/micro-cut shredding or certified off-site destruction defeats the reconstruction technique documented in this case.

7Objective completion, evidentiary use
What happened

the reconstructed documents and in-flight observations were used to support Air Canada's corporate-espionage lawsuit against WestJet and the co-founder, with the collection itself later disclosed in a sworn court affidavit as part of that litigation.

The control that would have stopped it

Once collected material has already been used to build a legal case, the target's remaining leverage is procedural: challenging the lawfulness of the collection itself (as the co-founder's trespass claim did) and, as the co-founder did here, planting decoy or canary documents in advance to later prove surveillance occurred and on what terms.

Quick Facts
Victim
WestJet Airlines' co-founder and Vice-President of Strategic Planning
(targeted at his personal residence in Victoria, B.C.)
Location
Victoria
(Oak Bay area), British Columbia, Canada: the WestJet co-founder's residence, where the trash was taken; forensic work performed in Ottawa, Ontario and Houston, Texas; litigation venued at the Ontario Superior Court of Justice, Toronto
Date
2003-2004
(garbage collections confirmed March 22 and April 5, 2004); Air Canada's lawsuit against WestJet was filed/announced in early April 2004: contemporaneous Globe and Mail reporting (April 8, 2004) and a later retrospective (December 6, 2006) place the filing/announcement on April 6, 2004, while a separate June 30, 2004 Globe and Mail report states the suit "was launched April 7"; the exact date is disputed across contemporaneous sources and is best stated as "early April 2004"; the garbage-collection admission surfaced in the lead investigator's affidavit, disclosed in reporting on June 30, 2004; case settled May 29, 2006
Impact
Confirmed via the joint press release filed as a U.S. SEC exhibit (May 29, 2006): WestJet agreed to pay Air Canada's investigation and litigation costs of CAD 5.5 million, plus agreed to make a CAD 10 million donation to children's charities across Canada in the name of both airlines, for a combined CAD 15.5 million.
BasismeasuredCAD 15.5 million combined, from the joint press release filed as an SEC exhibit
The release describes a negotiated civil settlement and termination of proceedings between the parties; it does not establish completed payments.
Status
Documented incident
Case Type
Real-World Incident
Sector
Legal Services, Professional & Business Services, Transportation & Logistics
Threat Actor
Corporate / Competitive Intelligence
Explore more

Related Cases

Browse by what this case has in common with others in the library.