Case Library / Physical Social Engineering (Tailgating & Baiting) / Greenpeace v. Dow Chemical / Sasol Corporate Espionage ("D-Lines")

Greenpeace v. Dow Chemical / Sasol Corporate Espionage ("D-Lines")

Greenpeace alleged in a civil suit, dismissed in both forums without any finding on the merits, that Dow Chemical and CONDEA Vista Company (bought by Sasol Ltd. in 2001 and sued as Sasol North America, Inc.) had, through two public relations firms, subcontracted the private intelligence firm Beckett Brown International to run repeated trash-collection raids on its Washington DC offices between 1998 and 2000, one subcontractor being a District of Columbia police officer engaged off duty and expected to use his badge to reach a locked trash enclosure.

Share:

Social Engineering Examples·8 sources

What happened

Between 1998 and 2000, according to a civil complaint Greenpeace filed in 2010, Dow Chemical and CONDEA Vista Company funded a multi-year corporate espionage campaign against Greenpeace's Washington, DC office, run through their respective PR firms, Ketchum for Dow and Nichols-Dezenhall for CONDEA Vista, which subcontracted the private intelligence firm Beckett Brown International (BBI). The corporate history matters here and is easy to get backwards. CONDEA Vista was then a wholly owned subsidiary of the German group RWE-DEA AG. Sasol Ltd. bought it on March 1, 2001, roughly a year after the alleged conduct ended, whereupon it became Sasol North America, Inc. and was sued under that name. Both courts called the company "Sasol" throughout as a labeling convenience and said in a footnote that they were doing so.

Two things have to be held apart. That BBI ran trash operations against environmental nonprofits is documented in BBI's own records, which a former investor in the firm gave to Mother Jones in 2008. That Dow or CONDEA Vista knew of or directed BBI's methods was alleged in a complaint and never adjudicated in either forum.

What Greenpeace pleaded was this. BBI conducted what its records called "D-lines": "more than 120 documented D-Lines at Greenpeace's offices" between July 13, 1998 and July 18, 2000, to recover discarded internal documents. Reciting the same complaint, the Court of Appeals gives two separate counts under two separate alleged conspiracies: more than 100 D-lines between September 1998 and October 2000 at the U Street and H Street offices for Dow, and at least 35 between July 13, 1998 and November 12, 1998 for the Lake Charles Project at U Street. A serving District of Columbia police officer, engaged off duty as a paid BBI subcontractor, is alleged to have taken part in at least 55 of them and to have been "expected to use his official police badge to gain access to dumpsters that were enclosed by a locked fence." He was never charged, and no source alleges a bribe. BBI is also alleged to have run office break-ins, an operative posing as a prospective volunteer, infiltration of an allied group, and wiretapping and computer intrusion. Nichols-Dezenhall paid BBI roughly $150,000 (October 1998 to July 1999) for the "U Street Project"; Ketchum paid BBI more than $125,000 (October 1998 to January 2001) for the Dow work; the related "Lake Charles Project" began May 26, 1998. Greenpeace learned of the operation in April 2008 through a Mother Jones investigation and filed a federal RICO and tort suit in DC district court on November 29, 2010. The RICO claims were dismissed in 2011; the state-law claims that followed in DC Superior Court were dismissed or given up with prejudice, and the DC Court of Appeals affirmed on August 21, 2014.

How it worked

Two corporate clients each retained a PR and crisis-communications firm, which in turn subcontracted a private intelligence firm to run a sustained physical-surveillance and document-recovery operation against a common target. CONDEA Vista Company retained Nichols-Dezenhall, renamed Dezenhall Resources in 2004; Dow Chemical retained Ketchum. Both engaged the same contractor, Beckett Brown International (BBI), which ran the work under project names: the "U Street Project" on the CONDEA Vista and Nichols-Dezenhall side, aimed at Greenpeace's office on U Street NW, a parallel Dow and Ketchum engagement, and a separate "Lake Charles Project" tied to CONDEA Vista's Lake Charles, Louisiana operations. The two conspiracies were pleaded as distinct. Greenpeace never alleged that the two client groups colluded with each other.

BBI's core method was the "D-line": recurring raids on Greenpeace's trash and recycling to recover internal documents, memos and correspondence discarded by staff who believed the material was gone. The physical setup differed by office, and the appellate opinion is precise about it. At 1436 U Street NW, through May 2000, the dumpster sat at ground level abutting the building and the recycling bins on a sheltered elevated loading dock, both on private property. After the May 2000 move to 702 H Street NW, trash and recycling were both inside the building in a locked ground-floor room. The locked fence that dominates most retellings comes from one specific allegation: that BBI engaged a serving District of Columbia police officer, off duty and performing security functions, who "was expected to use his official police badge to gain access to dumpsters that were enclosed by a locked fence." He is alleged to have taken part in at least 55 D-lines. No source states that 55 raids were accomplished by badge. Beyond the trash, BBI is alleged to have run office break-ins, a research consultant who posed as a prospective volunteer to tour and map the U Street office, a second operative she hired who took a board seat at the allied nonprofit CLEAN and forwarded its internal email, and electronic surveillance including wiretapping and computer intrusion. The layered structure, client to PR firm to intelligence contractor, is what let the clients take delivery of the product at a distance from the collection.

The lure and the tell

There was no lure aimed at a human target in the phishing sense; the social engineering here was structural and physical rather than a message-based pretext. The closest analog to a classic pretext is the BBI research consultant who presented as a prospective volunteer to get inside the office, exploiting an advocacy nonprofit's normal openness to new volunteers. Her own report, quoted in the complaint, is the sharpest evidence in the file: "I asked for a tour of all 4 floors in order to assess which divisions were largest, and observe all employees in their work space. The public affairs/public education/writing department was the largest in terms of floor space and number of employees observed." The tell, reconstructed years later by journalists and by the complaint, was the persistence and regularity of the collection across two years and the involvement of a credentialed police officer: access no ordinary scavenger would have. Greenpeace detected none of it at the time. It learned of the operation in April 2008, roughly eight to ten years after the raids, from James Ridgeway's Mother Jones report "Black Ops, Green Groups," which was built on BBI's own company documents. The provenance is specific and worth stating correctly: Mother Jones says the documents were "provided to Mother Jones by a former investor in the firm," and both court opinions describe the source as a former BBI principal seeking to expose its actions. BBI was defunct by the time of the litigation, but no source ties the release of the records to a bankruptcy.

Outcome

Greenpeace filed a federal RICO and tort lawsuit in the US District Court for DC on November 29, 2010 (Civil Action No. 1:10-cv-02037) against Dow Chemical, Sasol North America, Ketchum, Dezenhall, and four former BBI managers. On September 9, 2011, Judge Rosemary Collyer dismissed the federal RICO claims for failure to plead proximate cause and declined supplemental jurisdiction over the five remaining DC state-law claims: trespass, invasion of privacy by intrusion, conversion, trespass to chattel, and misappropriation of trade secrets. Greenpeace refiled in DC Superior Court on October 7, 2011.

On February 5, 2013, Judge Michael Rankin dismissed trespass to common areas, invasion of privacy, conversion and trespass to chattel, and allowed trespass to Greenpeace's offices and misappropriation of trade secrets to proceed. Those two surviving claims were never adjudicated. After the court refused to certify the dismissed claims for interlocutory appeal and to stay discovery, Greenpeace voluntarily dismissed both with prejudice in order to obtain a final, appealable judgment. Two different trespass claims are in play and are easy to conflate: trespass to common areas, the D-line claim, was dismissed and that dismissal was affirmed, while trespass to the offices survived and was then given up.

The DC Court of Appeals affirmed on August 21, 2014 (No. 13-CV-685; 97 A.3d 1053). It held that Greenpeace, one tenant among several, lacked the possessory interest, meaning the right to exclude, that a trespass claim to the buildings' common trash and recycling areas requires. It held the intrusion claim time-barred by a one-year statute of limitations and added, "thus we need not address Greenpeace's other two arguments." And it held that conversion failed on the independent ground that Greenpeace had no property interest in anything it purposefully threw away, treating intangibility separately and cautiously: "Whatever other protections the law may offer to protect intangible property rights, the common-law tort of conversion is generally ill-suited to that end." The proposition that a corporation has no right to privacy under DC law was one of three alternative grounds the trial judge gave, and the Court of Appeals expressly did not reach it. No defendant was held liable, no damages were awarded, and none of the underlying allegations was ever tested.

Why it matters

This is among the most fully documented accounts of sustained, corporate-funded dumpster diving against a civil-society organization. BBI's own records, surfaced in 2008, show a private intelligence firm treating trash collection against environmental nonprofits as routine paid work, which makes it a budgeted tactic rather than a hypothetical. Everything past that, the six-figure payments, the raid counts, and above all the clients' knowledge of the methods, comes from a complaint that was never tested. The case is worth teaching partly because that line is so easy to lose: it is the same over-attribution that turns a contractor's conduct into a client's conduct. It shows how intermediaries create distance, client to PR firm to private intelligence contractor. It shows that a physical control is only as strong as the credential that opens it, since the bypass alleged here needed no lockpick, only a badge carried by a paid subcontractor. And the litigation outcome carries its own lesson. One intermediate appellate court, in one jurisdiction, held that a tenant has no possessory interest in shared trash areas sufficient to sue for trespass and that discarded documents are abandoned property that cannot be converted. That is narrow law, and the court declined to say anything about corporate privacy rights, but it points one way: after-the-fact recourse for this tactic is thin, so secure destruction and access control, not litigation, are the defenses that work.

Defenses

Greenpeace's own after-the-fact defenses were limited because at the time it did not know it was being targeted; it only discovered the operation via the 2008 Mother Jones investigative report. Practical lessons drawn from this case for organizations handling sensitive documents: (1) shred all discarded documents rather than relying on bin-bag disposal, since paper trash is legally "abandoned" once curbside and carries no expectation of privacy in most US jurisdictions; (2) secure trash and recycling enclosures with access control that cannot be defeated by a single credential, and audit who holds keys, since the bypass alleged here needed only a badge carried by a paid off-duty officer; (3) treat outside contractors, temp volunteers, and unknown visitors with vetting given BBI's use of an operative posing as a prospective volunteer to gain office access; (4) recognize that corporate-funded opposition research/PR firms may subcontract private intelligence firms for multi-year human-source and physical operations against advocacy targets, so counter-surveillance awareness (varying disposal patterns, controlling document retention, secure destruction contracts) is a legitimate control; (5) note the legal aftermath: the DC Court of Appeals held that a tenant has no possessory interest in shared trash areas for trespass purposes and that discarded material is abandoned and cannot be converted, and it affirmed the privacy dismissal on the one-year limitations period alone, expressly declining to decide whether a corporation has a privacy right at all. Recourse after the fact is thin either way, which makes prevention the only real defense.

Sources
  • Greenpeace, Inc. v. The Dow Chemical Company, et al. Memorandum Opinion (Sept. 9, 2011), CourtListener copy. U.S. District Court for the District of Columbia (primary). Corrected label: this is the Sept. 9, 2011 Memorandum Opinion (Civil Action No. 10-2037 (RMC)) dismissing the RICO claims, mirrored on CourtListener's storage host, not the original complaint. Re-fetched and read in full on 2026-09-02: the $150,000 Dezenhall and $125,000-plus Ketchum figures, the CONDEA Vista corporate history and the "During the time periods relevant to the Complaint the entity was CONDEA Vista Company" note at footnote 1, the Nichols-Dezenhall renaming at footnote 2, the police-subcontractor allegation at footnotes 4 and 10, the five state-law claims, and the volunteer and CLEAN infiltration allegations are all in the opinion text.
  • Greenpeace, Inc. v. The Dow Chemical Company et al. Memorandum Opinion (Sept. 9, 2011). U.S. District Court for the District of Columbia (primary). Dismisses federal RICO claims; declines supplemental jurisdiction over state claims. Verified: loads and contains the Greenpeace opinion text, though this Harvard Caselaw Access Project scan also includes trailing/adjacent text from an unrelated case (Chen v. District of Columbia) that shares the same bound-reporter page, a normal artifact of scanned-volume mirrors rather than a wrong source.
  • Greenpeace, Inc. v. The Dow Chemical Company, et al. (No. 13-CV-685; 97 A.3d 1053). District of Columbia Court of Appeals (primary). August 21, 2014 opinion affirming dismissal of trespass, privacy, and conversion claims. Re-fetched and read in full on 2026-09-02: case number, decision date and panel confirmed, along with the footnote 4 corporate history, the footnote 2 voluntary dismissal with prejudice, the two disaggregated D-line counts, and the office descriptions. Note what the holding is: the intrusion claim falls on the one-year limitations period, and the court says it "need not address" the other two arguments, so this opinion is not authority for the corporate-privacy proposition.
  • Black Ops, Green Groups. Mother Jones (secondary). 2008 investigative report that first exposed the BBI/Ketchum/Dezenhall operation to Greenpeace and the public. Re-fetched 2026-09-02: author James Ridgeway, April 2008. It is the source for the provenance of BBI's internal records, "According to company documents provided to Mother Jones by a former investor in the firm." It says nothing about a bankruptcy.
  • Greenpeace Sues Dow and Other Companies Over Espionage. CNBC (secondary). Verified: loads, dated Nov 29 2010, confirms lawsuit filing, defendants, and allegations.
  • Greenpeace says Dow Chemical dug through its trash. Reuters (secondary). Verified: loads, dated Nov 29 2010, confirms lawsuit filing.
  • Spygate. Chronology of the Spygate Litigation. Greenpeace USA (secondary). Greenpeace's own litigation timeline, so an interested party's account. Re-fetched 2026-09-02: it supports the November 29, 2010 filing, the September 2011 federal dismissal, the October 2011 refiling in Superior Court and the February 5, 2013 ruling by Judge Michael Rankin, and nothing further. Its chronology stops in October 2013, so it carries no entry for the August 21, 2014 decision, no D-line dates and no payment figures, and it misnames the deciding court as the "DC Circuit Court of Appeals" when it was the District of Columbia Court of Appeals. Do not lean on it for procedural detail.
  • Spooky Business: Corporate Espionage Against Nonprofit Organizations. Gary Ruskin / Essential Information (secondary). November 20, 2013 report. It quotes the Greenpeace complaint for the "more than 120 documented D-Lines" figure, the July 13, 1998 to July 18, 2000 range, the officer's participation in "at least 55" D-lines, the May 26, 1998 start of the Lake Charles Project and the volunteer's tour report. It does not independently verify any of them, and nothing here should be written up as if it did. Re-fetched 2026-09-02 on its publisher host. One trap for future editors: its detailed BBI casing emails, the ones describing key-card entrances, iron alley gates and a night guard, concern the Center for Food Safety, Friends of the Earth and GE Food Alert on a separate Ketchum job, not Greenpeace.
Cite this case

Social Engineering Examples. “Greenpeace v. Dow Chemical / Sasol Corporate Espionage ("D-Lines")”. Accessed 3 November 2026. https://socialengineeringexamples.com/greenpeace-dow-sasol-dline-dumpster-espionage-1998

Attack Chain & Defense
1Reconnaissance and target selection
What happened

Per the Greenpeace complaint (recounted in the 2011 memorandum opinion), BBI identified Greenpeace as a "target" and, in a 1998 internal memorandum, described monitoring "environmental activist groups" to gain insight into protest scheduling, corporate targets, and the group's internal politics, the kind of campaign-monitoring dossier a private intelligence contractor would typically compile before running a physical operation against an advocacy target.

The control that would have stopped it

Advocacy organizations cannot fully suppress an adversary's interest in their public campaign activity and structure; the realistic control is treating any external party's unusually detailed interest in campaign scheduling or donor structure as a signal to tighten internal information compartmentalization, rather than trying to eliminate public visibility altogether.

2Physical site surveying
What happened

Greenpeace's complaint alleges that BBI cased its U Street office, and the September 9, 2011 federal opinion recites the allegation that BBI investigators reached trash containers "located in a secure area at the rear of the buildings in which Greenpeace located its office." No site-survey document specific to Greenpeace is in the public record. The detailed BBI casing emails often quoted alongside this case, the ones describing key-card entrances, iron alley gates and a night guard, survey three other nonprofits on a separate Ketchum job, not Greenpeace.

The control that would have stopped it

Physical casing of a building's public-facing entrances and alley access is very hard to prevent outright; the practical control sits at the next stage, hardening the specific access points, such as locked and monitored waste enclosures and controlled entry logs, that a casing effort would identify as weak.

3Paid law-enforcement subcontractor for access
What happened

BBI hired a serving District of Columbia police officer as a paid subcontractor, described in the federal opinion as off duty and performing security functions. Per the complaint he "was expected to use his official police badge to gain access to dumpsters that were enclosed by a locked fence," trading on the credibility a law-enforcement credential carries with anyone who might otherwise question the access. He was never charged, and no source alleges a bribe.

The control that would have stopped it

Because the alleged bypass ran on a legitimate credential rather than a broken lock, the effective control is not trusting any single credential type for access; enclosures holding sensitive discarded material should require verified, logged, contract-specific access (or a dedicated secure-shredding pickup) rather than assuming a police or municipal credential is sufficient authorization on its own.

4Pretext infiltration by a fake volunteer
What happened

A BBI research consultant posed as a prospective campaign volunteer to obtain a guided tour of Greenpeace's office, using the organization's normal openness to new volunteers to map staff, departments, and floor layout. Her own report, quoted in the complaint: "I asked for a tour of all 4 floors in order to assess which divisions were largest, and observe all employees in their work space."

The control that would have stopped it

Limiting unsupervised building access for walk-in volunteers or visitors, escorted tours only, no unsupervised multi-floor access, would have reduced what a fake-volunteer pretext could observe.

5Ally-organization infiltration
What happened

That same consultant hired a second operative, who posed as a concerned citizen, won election to the board of Greenpeace's allied nonprofit CLEAN, and forwarded its internal communications about Greenpeace back through her to BBI, per the complaint more than 65 narrative reports and at least 150 confidential emails between August 1998 and November 1999. The federal court noted the emails belonged to CLEAN rather than to Greenpeace, which is why the wire-fraud theory failed.

The control that would have stopped it

Governance vetting for allied and partner organizations, background checks and reference verification before granting a new board member access to internal communications, raises the cost of this kind of ally infiltration.

6Recurring document exfiltration ("D-lines")
What happened

Greenpeace pleaded "more than 120 documented D-Lines at Greenpeace's offices" between July 13, 1998 and July 18, 2000. Reciting the same complaint, the Court of Appeals gives two separate counts under two separate alleged conspiracies: more than 100 D-lines between September 1998 and October 2000 at both the U Street and H Street offices for Dow, and at least 35 between July 13, 1998 and November 12, 1998 for the Lake Charles Project at U Street. The officer is alleged to have participated in at least 55. What the raids recovered, per the complaint, was internal memos, donor records and financial documents that staff believed were disposed of.

The control that would have stopped it

Cross-cut shredding or contracted secure destruction of all discarded documents before disposal, rather than relying on a locked enclosure alone, is the single highest-leverage defense here, since it removes the value of the trash regardless of who can physically reach it.

7Supplementary intrusion and technical surveillance
What happened

BBI is alleged to have supplemented the trash raids with office break-ins, wiretapping and computer intrusion, to obtain higher-value material such as personnel and legal records that would not turn up in ordinary trash. The door codes are the least firm element and the sourcing is hedged: a handwritten list of Greenpeace door codes was found among BBI's documents, and BBI "apparently tried to determine the security codes for Greenpeace office doors, and may well have used these codes to enter Greenpeace offices."

The control that would have stopped it

Standard technical and physical security controls, door-code rotation, wiretap detection, endpoint security, and break-in monitoring and alarms, address this stage, though a well-funded, badge-enabled adversary is difficult to fully deter with these alone.

8Intelligence packaging and payout
What happened

BBI is alleged to have compiled the material and surveillance findings into intelligence reports and briefings delivered to Ketchum and Nichols-Dezenhall, which passed them to Dow and CONDEA Vista respectively, giving the corporate clients advance insight into Greenpeace's campaign plans, funding and strategy. The trial court held only that the complaint pleaded a plausible civil conspiracy well enough to survive dismissal on vicarious liability. It never found that any of this happened.

The control that would have stopped it

There is no practical control once stolen intelligence has already reached the paying client; the only real defense is preventing the upstream collection stages, especially Stage 3 (credentialed access) and Stage 6 (document destruction), since by this final stage the objective is already complete.

Quick Facts
Victim
Greenpeace Inc. (and, per the complaint, its ally organization CLEAN)
Company
Greenpeace Inc.
Location
Washington, DC
(Greenpeace offices at 1436 U Street NW through May 2000, then 702 H Street NW); related "Lake Charles Project" tied to CONDEA Vista Company's Lake Charles, Louisiana chemical operations
Date
1998 to 2000
(alleged D-line operations; the complaint gives July 13, 1998 to July 18, 2000); lawsuit filed November 29, 2010; D.C. Court of Appeals ruling August 21, 2014
Impact
Alleged espionage spending only.
BasisallegedPayment figures are pleaded claims; the court found no compensable damages
No harm figure to Greenpeace exists in the record: the D.C. Superior Court found Greenpeace's inability to allege "even one dollar of actual, compensable damages" fatal to its privacy claim, and the Court of Appeals recorded that Greenpeace's counsel "was unable to proffer any specific examples of harm to any Greenpeace campaign or mission resulting from appellees' actions." The payment figures are pleaded claims recited in the September 9, 2011 federal opinion, not measured amounts: Nichols-Dezenhall paid BBI approximately $150,000 between October 1998 and July 1999 for the "U Street Project," which supplied CONDEA Vista Company; Ketchum paid BBI more than $125,000 between October 1998 and January 2001 for work for Dow Chemical; and CONDEA Vista paid BBI directly for the separate "Lake Charles Project." No damages were awarded and no claim was tried: the RICO counts were dismissed in 2011, the state-law claims were dismissed or voluntarily dismissed with prejudice, and the D.C. Court of Appeals affirmed on August 21, 2014.
Status
Reported/alleged incident
Case Type
Real-World Incident
Sector
Manufacturing & Industrial, Media & Entertainment, Nonprofit & NGO, Professional & Business Services
Threat Actor
Corporate / Competitive Intelligence
Explore more

Related Cases

Browse by what this case has in common with others in the library.

P&G's 'Bad Hair Day': Dumpster-Diving Corporate Espionage on Unilever's Hair-Care Business

P&G-hired competitive-intelligence contractors obtained confidential Unilever hair-care information from discarded garbage before P&G self-disclosed the operation, fired three employees, and…

Incident 2000Read →

GAO Covert Testers Use Counterfeit Law-Enforcement Credentials and Forged Building Passes to Breach Federal Buildings (2000-2009)

Three separate congressional watchdog engagements, not one campaign. In 2000, GAO agents carrying counterfeit badges declared themselves armed officers and…

Incident 2000Read →

Air Canada v. WestJet: Curbside Garbage Collection From a WestJet Co-Founder's Home

Air Canada admitted in a sworn Ontario Superior Court affidavit that it hired private investigators who twice took trash from…

Incident 2003Read →

WPP deepfake scam: a fake Mark Read, a cloned voice, and a target who said no (2024)

Fraudsters faked WPP CEO Mark Read on WhatsApp and staged a Teams call with a cloned executive voice. The agency…

Incident 2024Read →

Retired General's Phone Records Pretexting Incident (2005-2006)

A phone-record pretexting incident involving a retired U.S. Army general was followed by FTC enforcement and broader privacy-policy scrutiny.

Incident 2005Read →

WhatsApp pig butchering scam: SEC v. NanoBit (2023 to 2026)

Fake finance "directors" in WhatsApp groups steered 18+ US investors to NanoBit, a crypto platform that never traded. The SEC…

Incident 2023Read →