Case Library / Physical Social Engineering (Tailgating & Baiting) / Greenpeace v. Dow Chemical / Sasol Corporate Espionage ("D-Lines")

Greenpeace v. Dow Chemical / Sasol Corporate Espionage ("D-Lines")

Dow Chemical and Sasol paid PR firms Ketchum and Dezenhall, who subcontracted private intelligence firm Beckett Brown International to run over 120 dumpster-diving raids on Greenpeace's DC offices between July 1998 and July 2000, including using a bribed/subcontracted DC police officer's badge to bypass a locked trash enclosure.

Share:

Reviewed by the Social Engineering Examples team.

What Happened

Between 1998 and 2000, Dow Chemical and Sasol (then operating as CONDEA Vista) allegedly funded a multi-year corporate espionage campaign against Greenpeace's Washington, DC office, run through their respective PR firms (Ketchum for Dow, Dezenhall for Sasol) which subcontracted private intelligence firm Beckett Brown International (BBI). BBI conducted what its internal records called "D-lines": over 120 documented dumpster/recycling-bin raids at Greenpeace's offices between July 13, 1998 and July 18, 2000, to recover discarded internal documents. At least 55 of those raids allegedly used the badge/credentials of Metropolitan Police Officer James Daron, hired as a paid subcontractor, to bypass a locked fence enclosing the dumpsters. BBI allegedly supplemented the trash raids with office break-ins, an operative posing as a prospective volunteer to surveil the office, infiltration of an allied group, and alleged wiretapping/computer intrusion. Dezenhall paid BBI roughly $150,000 (Oct 1998-July 1999) for the "U Street Project"; Ketchum paid BBI more than $125,000 (Oct 1998-Jan 2001) for the Dow-related work; a related "Lake Charles Project" began May 26, 1998. Greenpeace learned of the operation in April 2008 via a Mother Jones investigation and filed a federal RICO/tort suit in DC district court on November 29, 2010. The RICO claims were dismissed in 2011; the remaining state-law claims were ultimately dismissed, a result the DC Court of Appeals affirmed on August 21, 2014.

How the Attack Worked

Two corporate clients each retained a PR/crisis-communications firm, which in turn subcontracted a private intelligence firm to run a sustained physical-surveillance and document-recovery operation against a common target, Greenpeace. Sasol (then CONDEA Vista) retained PR firm Dezenhall Resources; Dow Chemical retained PR firm Ketchum. Both PR firms engaged the same private intelligence contractor, Beckett Brown International (BBI), which ran the operations under project names ("U Street Project" for the Sasol/Dezenhall side targeting Greenpeace's DC office on U Street NW, and a parallel Dow/Ketchum engagement, plus a separate "Lake Charles Project" tied to Sasol's Lake Charles, Louisiana operations). BBI's core method was "D-lines": recurring, scheduled raids on Greenpeace's trash and recycling receptacles to recover discarded internal documents, memos, and correspondence discarded by staff who reasonably believed the material was destroyed/gone. Greenpeace's dumpsters and recycling bins were physically secured behind a locked fence/enclosure at its offices; BBI defeated that control by subcontracting Washington DC Metropolitan Police Officer James Daron, who used his official police badge/credentials to gain access to the locked enclosure on BBI's behalf on at least 55 of the more than 120 documented raids run between July 13, 1998 and July 18, 2000. Beyond trash collection, BBI allegedly supplemented the dumpster-diving with physical office infiltration/break-ins, an undercover operative who posed as a prospective volunteer to surveil Greenpeace's U Street office, an operative who infiltrated an allied nonprofit (CLEAN) and forwarded internal emails, and alleged electronic surveillance including wiretapping and computer intrusion. The dual-track corporate funding and PR-firm-as-intermediary structure let both Dow and Sasol distance themselves from BBI's direct conduct while receiving the intelligence product.

The Lure & the Tell

There was no lure aimed at a human target in the phishing sense; the "social engineering" here was structural and physical rather than a message-based pretext. The operative posing as a "prospective volunteer" to gain trusted access to Greenpeace's office is the closest analog to a classic pretext lure, exploiting an advocacy nonprofit's normal openness to new volunteers to get a plant inside. The giveaway/tell in hindsight, as later reconstructed by journalists and the complaint, was the sheer persistence and precision of the trash collection (120+ raids between July 1998 and July 2000 on a fixed cadence) and the involvement of a uniformed/credentialed police officer bypassing a locked enclosure: access no ordinary scavenger or homeless dumpster-diver would have. Greenpeace itself did not detect the operation contemporaneously; it only learned of it in April 2008, roughly eight to ten years after the raids, via Mother Jones' investigative report "Black Ops, Green Groups," which drew on BBI internal records that surfaced after the firm's later bankruptcy/dissolution.

Outcome

Greenpeace filed a federal RICO and tort lawsuit in the US District Court for DC on November 29, 2010 (Civil Action No. 1:10-cv-02037) against Dow Chemical, Sasol, Ketchum, Dezenhall, BBI, and individuals. On September 9, 2011, Judge Rosemary Collyer dismissed the federal RICO claims and declined supplemental jurisdiction over the remaining DC state-law claims (trespass, invasion of privacy, conversion), which Greenpeace then re-filed in DC Superior Court. On February 5, 2013, Judge Michael Rankin allowed trespass and trade-secret-misappropriation claims to proceed but dismissed the other four claims; the case was ultimately fully dismissed, and the DC Court of Appeals affirmed dismissal of the state claims on August 21, 2014 (No. 13-CV-685; 97 A.3d 1053), holding: Greenpeace lacked the possessory/exclusive interest in the shared trash/recycling area needed for a trespass claim; the invasion-of-privacy claim was time-barred and, separately, DC law does not recognize that privacy tort for a corporation; and conversion did not apply to abandoned, intangible information taken from the trash. No defendant was held liable and no damages were ever awarded; the case ended on legal/procedural grounds without a merits trial on the underlying espionage allegations.

Why It Matters

This is one of the most thoroughly documented real-world cases of sustained, multi-year corporate-funded dumpster diving against a civil-society organization, illustrating that "trash raids" are not a low-stakes hypothetical but a proven, budgeted corporate-intelligence tactic (six-figure payments, 100+ raids, dedicated project codenames). It shows how organizations layer intermediaries (client -> PR firm -> private intelligence contractor) to create deniability while directing sustained physical surveillance. It also demonstrates that a physical access control (a locked dumpster enclosure) is only as strong as the credentials that can open it; a corrupted/subcontracted police officer defeated it repeatedly. Finally, the litigation outcome is itself an important lesson: US courts held that discarded trash in shared/common areas generally is not protected by trespass or conversion law and that corporations cannot claim certain privacy torts, meaning victims of this exact tactic have very limited after-the-fact legal recourse, reinforcing that secure destruction and access control, not litigation, are the effective defenses.

Defenses

Greenpeace's own after-the-fact defenses were limited because at the time it did not know it was being targeted; it only discovered the operation via the 2008 Mother Jones investigative report. Practical lessons drawn from this case for organizations handling sensitive documents: (1) shred all discarded documents rather than relying on bin-bag disposal, since paper trash is legally "abandoned" once curbside and carries no expectation of privacy in most US jurisdictions; (2) physically secure trash/recycling enclosures with access control that cannot be defeated by a single credential (badge) and audit who has keys, since a corrupt insider with legitimate physical-access credentials (an off-duty police officer) defeated a locked fence; (3) treat outside contractors, temp volunteers, and unknown visitors with vetting given BBI's use of an operative posing as a prospective volunteer to gain office access; (4) recognize that corporate-funded opposition research/PR firms may subcontract private intelligence firms for multi-year human-source and physical operations against advocacy targets, so counter-surveillance awareness (varying disposal patterns, controlling document retention, secure destruction contracts) is a legitimate control; (5) note the legal aftermath: DC courts held that corporations generally lack standing for privacy-tort claims and that discarded (abandoned) materials in common/shared trash areas are not protected by trespass or conversion law, meaning legal recourse after the fact is weak, which makes prevention (destruction and access control) the only real defense.

Sources
  • Greenpeace, Inc. v. The Dow Chemical Company, et al. Memorandum Opinion (Sept. 9, 2011), CourtListener copy. U.S. District Court for the District of Columbia Primary. Corrected label: this is the Sept. 9, 2011 Memorandum Opinion (Civil Action No. 10-2037 (RMC)) dismissing the RICO claims, mirrored on CourtListener's storage host, not the original complaint. Verified: loads correctly, content confirmed to match (Dezenhall $150k, Ketchum $125k+, Daron badge access, Sapone/Rogers infiltration all present in the opinion text).
  • Greenpeace, Inc. v. The Dow Chemical Company et al. Memorandum Opinion (Sept. 9, 2011). U.S. District Court for the District of Columbia Primary. Dismisses federal RICO claims; declines supplemental jurisdiction over state claims. Verified: loads and contains the Greenpeace opinion text, though this Harvard Caselaw Access Project scan also includes trailing/adjacent text from an unrelated case (Chen v. District of Columbia) that shares the same bound-reporter page, a normal artifact of scanned-volume mirrors rather than a wrong source.
  • Greenpeace, Inc. v. The Dow Chemical Company, et al. (No. 13-CV-685; 97 A.3d 1053). District of Columbia Court of Appeals Primary. August 21, 2014 opinion affirming dismissal of trespass, privacy, and conversion claims. Verified: loads correctly, content matches claimed facts exactly (case number, decision date, judges, holding).
  • Black Ops, Green Groups. Mother Jones Secondary. 2008 investigative report that first exposed the BBI/Ketchum/Dezenhall operation to Greenpeace and the public. Verified: loads, author James Ridgeway, April 2008, content matches.
  • Greenpeace Sues Dow and Other Companies Over Espionage. CNBC Secondary. Verified: loads, dated Nov 29 2010, confirms lawsuit filing, defendants, and allegations.
  • Greenpeace says Dow Chemical dug through its trash. Reuters Secondary. Verified: loads, dated Nov 29 2010, confirms lawsuit filing.
  • Spygate. Chronology of the Spygate Litigation. Greenpeace USA Secondary. Greenpeace's own litigation timeline, confirming Feb. 5 2013 DC Superior Court ruling by Judge Michael Rankin and the case chronology. Verified: loads, content matches every date in the case file.
  • Spooky Business: Corporate Espionage Against Nonprofit Organizations. Gary Ruskin / Essential Information Secondary. Added during this verification pass. November 20, 2013 report quoting the Greenpeace complaint directly; confirmed as the source for the 'more than 120 documented D-Lines' figure, the July 13, 1998-July 18, 2000 date range, Officer Daron's participation in 'at least 55' raids, and Mary Lou Sapone's undercover-volunteer role. Verified: loads on its official publisher host (corporatepolicy.org).
Attack Chain & Defense
The sequence the attacker ran
How it could have been stopped
1
Reconnaissance and target selection: Per the Greenpeace complaint (recounted in the 2011 memorandum opinion), BBI identified Greenpeace as a "target" and, in a 1998 internal memorandum, described monitoring "environmental activist groups" to gain insight into protest scheduling, corporate targets, and the group's internal politics, the kind of campaign-monitoring dossier a private intelligence contractor would typically compile before running a physical operation against an advocacy target.
Countering Stage 1: Advocacy organizations cannot fully suppress an adversary's interest in their public campaign activity and structure; the realistic control is treating any external party's unusually detailed interest in campaign scheduling or donor structure as a signal to tighten internal information compartmentalization, rather than trying to eliminate public visibility altogether.
2
Physical site surveying: BBI operatives cased Greenpeace's U Street office and its surrounding block; recovered internal BBI emails (later published in Gary Ruskin's Spooky Business report) describe entrance security, key-card doors, alley gates, guard routines, and dumpster locations at candidate targets, a standard pre-operation site survey before attempting physical entry.
Countering Stage 2: Physical casing of a building's public-facing entrances and alley access is very hard to prevent outright; the practical control sits at the next stage, hardening the specific access points, such as locked and monitored waste enclosures and controlled entry logs, that a casing effort would identify as weak.
3
Insider recruitment for access: BBI subcontracted a sitting Metropolitan Police Department officer, James Daron, paying him to use his official badge to defeat the locked fence securing Greenpeace's trash and recycling enclosure, trading on the credibility a uniformed law-enforcement credential carries with anyone who might otherwise question the access.
Countering Stage 3: Because a legitimate badge is what defeated the lock, the effective control is not trusting any single credential type for access; enclosures holding sensitive discarded material should require verified, logged, contract-specific access (or a dedicated secure-shredding pickup) rather than assuming a police or municipal credential is sufficient authorization on its own.
4
Pretext infiltration by a fake volunteer: A BBI-linked operative, Mary Lou Sapone, posed as a prospective campaign volunteer to obtain a guided tour of Greenpeace's office, using the organization's normal openness to new volunteers to map staff, departments, and floor layout.
Countering Stage 4: Limiting unsupervised building access for walk-in volunteers or visitors, escorted tours only, no unsupervised multi-floor access, would have reduced what a fake-volunteer pretext could observe.
5
Ally-organization infiltration: A separate BBI-linked operative, identified in the complaint as "Dick Rogers," gained a board seat at Greenpeace's allied nonprofit CLEAN under false pretenses and used that trusted position to forward CLEAN's internal emails concerning Greenpeace back to BBI.
Countering Stage 5: Governance vetting for allied and partner organizations, background checks and reference verification before granting a new board member access to internal communications, raises the cost of this kind of ally infiltration.
6
Recurring document exfiltration ("D-lines"): Over more than 120 documented raids between July 13, 1998 and July 18, 2000, BBI personnel and Officer Daron systematically collected Greenpeace's discarded trash and recycling, recovering internal memos, donor records, and financial documents that staff reasonably believed had been securely discarded.
Countering Stage 6: Cross-cut shredding or contracted secure destruction of all discarded documents before disposal, rather than relying on a locked enclosure alone, is the single highest-leverage defense here, since it removes the value of the trash regardless of who can physically reach it.
7
Supplementary intrusion and technical surveillance: BBI allegedly supplemented the trash raids with direct office break-ins, including attempts to determine door security codes, plus wiretapping and computer intrusion, to obtain higher-value material such as personnel and legal records that would not turn up in ordinary trash.
Countering Stage 7: Standard technical and physical security controls, door-code rotation, wiretap detection, endpoint security, and break-in monitoring and alarms, address this stage, though a well-funded, badge-enabled adversary is difficult to fully deter with these alone.
8
Intelligence packaging and payout: BBI compiled the stolen material and surveillance findings into intelligence reports and briefings delivered to Ketchum and Dezenhall, which passed them on to Dow and Sasol respectively, completing the objective of giving the corporate clients advance insight into Greenpeace's campaign plans, funding, and strategy.
Countering Stage 8: There is no practical control once stolen intelligence has already reached the paying client; the only real defense is preventing the upstream collection stages, especially Stage 3 (credentialed access) and Stage 6 (document destruction), since by this final stage the objective is already complete.
Quick Facts
Victim
Greenpeace Inc. (and, per the complaint, its ally organization CLEAN)
Location
Washington, DC (Greenpeace offices at 1436 U Street NW through May 2000, then 702 H Street NW); related "Lake Charles Project" tied to Sasol/CONDEA Vista's Lake Charles, Louisiana chemical operations
Date
1998-2000 (D-line operations, July 13 1998 - July 18 2000); Lawsuit filed November 29, 2010; D.C. Court of Appeals ruling August 21, 2014
Impact
Alleged espionage spending only (no financial harm figure to Greenpeace itself was quantified in the litigation, which was dismissed before any damages phase): Dezenhall allegedly paid Beckett Brown International (BBI) approximately $150,000 between October 1998 and July 1999 for the "U Street Project" (on behalf of Sasol/CONDEA Vista); Ketchum allegedly paid BBI more than $125,000 between October 1998 and January 2001 for work on behalf of Dow Chemical. Sasol allegedly also paid BBI directly for the separate "Lake Charles Project." No damages were ever awarded; the case was dismissed on procedural/legal grounds (RICO dismissed 2011; remaining state tort claims dismissed, affirmed by DC Court of Appeals in 2014) before reaching a merits trial or damages determination.
Status
Confirmed
Case Type
Real-World Incident
Sector
Manufacturing & Industrial, Media & Entertainment, Nonprofit & NGO, Professional & Business Services
Threat Actor
Corporate / Competitive Intelligence
Related

Related Cases

P&G's 'Bad Hair Day': Dumpster-Diving Corporate Espionage on Unilever's Hair-Care Business

P&G-hired competitive-intelligence contractors retrieved roughly 80 unshredded confidential Unilever hair-care documents from the trash before P&G self-disclosed the operation, fired…

Incident 2000Read →

GAO Covert Testers Use Fake Law-Enforcement Badges and Driver's Licenses to Breach Federal Buildings, Including an IRS Facility (2000-2009)

Between 2000 and 2009, GAO undercover investigators repeatedly used fake law-enforcement badges (and, in a related 2009 test, ordinary driver's…

Incident 2000Read →

Air Canada v. WestJet: Curbside Garbage Collection From Co-Founder Mark Hill's Home

Air Canada admitted in a sworn Ontario Superior Court affidavit that it hired private investigators who twice took trash from…

Incident 2003Read →