Greenpeace alleged in a civil suit, dismissed in both forums without any finding on the merits, that Dow Chemical and CONDEA Vista Company (bought by Sasol Ltd. in 2001 and sued as Sasol North America, Inc.) had, through two public relations firms, subcontracted the private intelligence firm Beckett Brown International to run repeated trash-collection raids on its Washington DC offices between 1998 and 2000, one subcontractor being a District of Columbia police officer engaged off duty and expected to use his badge to reach a locked trash enclosure.
Social Engineering Examples·8 sources
Between 1998 and 2000, according to a civil complaint Greenpeace filed in 2010, Dow Chemical and CONDEA Vista Company funded a multi-year corporate espionage campaign against Greenpeace's Washington, DC office, run through their respective PR firms, Ketchum for Dow and Nichols-Dezenhall for CONDEA Vista, which subcontracted the private intelligence firm Beckett Brown International (BBI). The corporate history matters here and is easy to get backwards. CONDEA Vista was then a wholly owned subsidiary of the German group RWE-DEA AG. Sasol Ltd. bought it on March 1, 2001, roughly a year after the alleged conduct ended, whereupon it became Sasol North America, Inc. and was sued under that name. Both courts called the company "Sasol" throughout as a labeling convenience and said in a footnote that they were doing so.
Two things have to be held apart. That BBI ran trash operations against environmental nonprofits is documented in BBI's own records, which a former investor in the firm gave to Mother Jones in 2008. That Dow or CONDEA Vista knew of or directed BBI's methods was alleged in a complaint and never adjudicated in either forum.
What Greenpeace pleaded was this. BBI conducted what its records called "D-lines": "more than 120 documented D-Lines at Greenpeace's offices" between July 13, 1998 and July 18, 2000, to recover discarded internal documents. Reciting the same complaint, the Court of Appeals gives two separate counts under two separate alleged conspiracies: more than 100 D-lines between September 1998 and October 2000 at the U Street and H Street offices for Dow, and at least 35 between July 13, 1998 and November 12, 1998 for the Lake Charles Project at U Street. A serving District of Columbia police officer, engaged off duty as a paid BBI subcontractor, is alleged to have taken part in at least 55 of them and to have been "expected to use his official police badge to gain access to dumpsters that were enclosed by a locked fence." He was never charged, and no source alleges a bribe. BBI is also alleged to have run office break-ins, an operative posing as a prospective volunteer, infiltration of an allied group, and wiretapping and computer intrusion. Nichols-Dezenhall paid BBI roughly $150,000 (October 1998 to July 1999) for the "U Street Project"; Ketchum paid BBI more than $125,000 (October 1998 to January 2001) for the Dow work; the related "Lake Charles Project" began May 26, 1998. Greenpeace learned of the operation in April 2008 through a Mother Jones investigation and filed a federal RICO and tort suit in DC district court on November 29, 2010. The RICO claims were dismissed in 2011; the state-law claims that followed in DC Superior Court were dismissed or given up with prejudice, and the DC Court of Appeals affirmed on August 21, 2014.
Two corporate clients each retained a PR and crisis-communications firm, which in turn subcontracted a private intelligence firm to run a sustained physical-surveillance and document-recovery operation against a common target. CONDEA Vista Company retained Nichols-Dezenhall, renamed Dezenhall Resources in 2004; Dow Chemical retained Ketchum. Both engaged the same contractor, Beckett Brown International (BBI), which ran the work under project names: the "U Street Project" on the CONDEA Vista and Nichols-Dezenhall side, aimed at Greenpeace's office on U Street NW, a parallel Dow and Ketchum engagement, and a separate "Lake Charles Project" tied to CONDEA Vista's Lake Charles, Louisiana operations. The two conspiracies were pleaded as distinct. Greenpeace never alleged that the two client groups colluded with each other.
BBI's core method was the "D-line": recurring raids on Greenpeace's trash and recycling to recover internal documents, memos and correspondence discarded by staff who believed the material was gone. The physical setup differed by office, and the appellate opinion is precise about it. At 1436 U Street NW, through May 2000, the dumpster sat at ground level abutting the building and the recycling bins on a sheltered elevated loading dock, both on private property. After the May 2000 move to 702 H Street NW, trash and recycling were both inside the building in a locked ground-floor room. The locked fence that dominates most retellings comes from one specific allegation: that BBI engaged a serving District of Columbia police officer, off duty and performing security functions, who "was expected to use his official police badge to gain access to dumpsters that were enclosed by a locked fence." He is alleged to have taken part in at least 55 D-lines. No source states that 55 raids were accomplished by badge. Beyond the trash, BBI is alleged to have run office break-ins, a research consultant who posed as a prospective volunteer to tour and map the U Street office, a second operative she hired who took a board seat at the allied nonprofit CLEAN and forwarded its internal email, and electronic surveillance including wiretapping and computer intrusion. The layered structure, client to PR firm to intelligence contractor, is what let the clients take delivery of the product at a distance from the collection.
There was no lure aimed at a human target in the phishing sense; the social engineering here was structural and physical rather than a message-based pretext. The closest analog to a classic pretext is the BBI research consultant who presented as a prospective volunteer to get inside the office, exploiting an advocacy nonprofit's normal openness to new volunteers. Her own report, quoted in the complaint, is the sharpest evidence in the file: "I asked for a tour of all 4 floors in order to assess which divisions were largest, and observe all employees in their work space. The public affairs/public education/writing department was the largest in terms of floor space and number of employees observed." The tell, reconstructed years later by journalists and by the complaint, was the persistence and regularity of the collection across two years and the involvement of a credentialed police officer: access no ordinary scavenger would have. Greenpeace detected none of it at the time. It learned of the operation in April 2008, roughly eight to ten years after the raids, from James Ridgeway's Mother Jones report "Black Ops, Green Groups," which was built on BBI's own company documents. The provenance is specific and worth stating correctly: Mother Jones says the documents were "provided to Mother Jones by a former investor in the firm," and both court opinions describe the source as a former BBI principal seeking to expose its actions. BBI was defunct by the time of the litigation, but no source ties the release of the records to a bankruptcy.
Greenpeace filed a federal RICO and tort lawsuit in the US District Court for DC on November 29, 2010 (Civil Action No. 1:10-cv-02037) against Dow Chemical, Sasol North America, Ketchum, Dezenhall, and four former BBI managers. On September 9, 2011, Judge Rosemary Collyer dismissed the federal RICO claims for failure to plead proximate cause and declined supplemental jurisdiction over the five remaining DC state-law claims: trespass, invasion of privacy by intrusion, conversion, trespass to chattel, and misappropriation of trade secrets. Greenpeace refiled in DC Superior Court on October 7, 2011.
On February 5, 2013, Judge Michael Rankin dismissed trespass to common areas, invasion of privacy, conversion and trespass to chattel, and allowed trespass to Greenpeace's offices and misappropriation of trade secrets to proceed. Those two surviving claims were never adjudicated. After the court refused to certify the dismissed claims for interlocutory appeal and to stay discovery, Greenpeace voluntarily dismissed both with prejudice in order to obtain a final, appealable judgment. Two different trespass claims are in play and are easy to conflate: trespass to common areas, the D-line claim, was dismissed and that dismissal was affirmed, while trespass to the offices survived and was then given up.
The DC Court of Appeals affirmed on August 21, 2014 (No. 13-CV-685; 97 A.3d 1053). It held that Greenpeace, one tenant among several, lacked the possessory interest, meaning the right to exclude, that a trespass claim to the buildings' common trash and recycling areas requires. It held the intrusion claim time-barred by a one-year statute of limitations and added, "thus we need not address Greenpeace's other two arguments." And it held that conversion failed on the independent ground that Greenpeace had no property interest in anything it purposefully threw away, treating intangibility separately and cautiously: "Whatever other protections the law may offer to protect intangible property rights, the common-law tort of conversion is generally ill-suited to that end." The proposition that a corporation has no right to privacy under DC law was one of three alternative grounds the trial judge gave, and the Court of Appeals expressly did not reach it. No defendant was held liable, no damages were awarded, and none of the underlying allegations was ever tested.
This is among the most fully documented accounts of sustained, corporate-funded dumpster diving against a civil-society organization. BBI's own records, surfaced in 2008, show a private intelligence firm treating trash collection against environmental nonprofits as routine paid work, which makes it a budgeted tactic rather than a hypothetical. Everything past that, the six-figure payments, the raid counts, and above all the clients' knowledge of the methods, comes from a complaint that was never tested. The case is worth teaching partly because that line is so easy to lose: it is the same over-attribution that turns a contractor's conduct into a client's conduct. It shows how intermediaries create distance, client to PR firm to private intelligence contractor. It shows that a physical control is only as strong as the credential that opens it, since the bypass alleged here needed no lockpick, only a badge carried by a paid subcontractor. And the litigation outcome carries its own lesson. One intermediate appellate court, in one jurisdiction, held that a tenant has no possessory interest in shared trash areas sufficient to sue for trespass and that discarded documents are abandoned property that cannot be converted. That is narrow law, and the court declined to say anything about corporate privacy rights, but it points one way: after-the-fact recourse for this tactic is thin, so secure destruction and access control, not litigation, are the defenses that work.
Greenpeace's own after-the-fact defenses were limited because at the time it did not know it was being targeted; it only discovered the operation via the 2008 Mother Jones investigative report. Practical lessons drawn from this case for organizations handling sensitive documents: (1) shred all discarded documents rather than relying on bin-bag disposal, since paper trash is legally "abandoned" once curbside and carries no expectation of privacy in most US jurisdictions; (2) secure trash and recycling enclosures with access control that cannot be defeated by a single credential, and audit who holds keys, since the bypass alleged here needed only a badge carried by a paid off-duty officer; (3) treat outside contractors, temp volunteers, and unknown visitors with vetting given BBI's use of an operative posing as a prospective volunteer to gain office access; (4) recognize that corporate-funded opposition research/PR firms may subcontract private intelligence firms for multi-year human-source and physical operations against advocacy targets, so counter-surveillance awareness (varying disposal patterns, controlling document retention, secure destruction contracts) is a legitimate control; (5) note the legal aftermath: the DC Court of Appeals held that a tenant has no possessory interest in shared trash areas for trespass purposes and that discarded material is abandoned and cannot be converted, and it affirmed the privacy dismissal on the one-year limitations period alone, expressly declining to decide whether a corporation has a privacy right at all. Recourse after the fact is thin either way, which makes prevention the only real defense.
Social Engineering Examples. “Greenpeace v. Dow Chemical / Sasol Corporate Espionage ("D-Lines")”. Accessed 3 November 2026. https://socialengineeringexamples.com/greenpeace-dow-sasol-dline-dumpster-espionage-1998
Per the Greenpeace complaint (recounted in the 2011 memorandum opinion), BBI identified Greenpeace as a "target" and, in a 1998 internal memorandum, described monitoring "environmental activist groups" to gain insight into protest scheduling, corporate targets, and the group's internal politics, the kind of campaign-monitoring dossier a private intelligence contractor would typically compile before running a physical operation against an advocacy target.
Advocacy organizations cannot fully suppress an adversary's interest in their public campaign activity and structure; the realistic control is treating any external party's unusually detailed interest in campaign scheduling or donor structure as a signal to tighten internal information compartmentalization, rather than trying to eliminate public visibility altogether.
Greenpeace's complaint alleges that BBI cased its U Street office, and the September 9, 2011 federal opinion recites the allegation that BBI investigators reached trash containers "located in a secure area at the rear of the buildings in which Greenpeace located its office." No site-survey document specific to Greenpeace is in the public record. The detailed BBI casing emails often quoted alongside this case, the ones describing key-card entrances, iron alley gates and a night guard, survey three other nonprofits on a separate Ketchum job, not Greenpeace.
Physical casing of a building's public-facing entrances and alley access is very hard to prevent outright; the practical control sits at the next stage, hardening the specific access points, such as locked and monitored waste enclosures and controlled entry logs, that a casing effort would identify as weak.
BBI hired a serving District of Columbia police officer as a paid subcontractor, described in the federal opinion as off duty and performing security functions. Per the complaint he "was expected to use his official police badge to gain access to dumpsters that were enclosed by a locked fence," trading on the credibility a law-enforcement credential carries with anyone who might otherwise question the access. He was never charged, and no source alleges a bribe.
Because the alleged bypass ran on a legitimate credential rather than a broken lock, the effective control is not trusting any single credential type for access; enclosures holding sensitive discarded material should require verified, logged, contract-specific access (or a dedicated secure-shredding pickup) rather than assuming a police or municipal credential is sufficient authorization on its own.
A BBI research consultant posed as a prospective campaign volunteer to obtain a guided tour of Greenpeace's office, using the organization's normal openness to new volunteers to map staff, departments, and floor layout. Her own report, quoted in the complaint: "I asked for a tour of all 4 floors in order to assess which divisions were largest, and observe all employees in their work space."
Limiting unsupervised building access for walk-in volunteers or visitors, escorted tours only, no unsupervised multi-floor access, would have reduced what a fake-volunteer pretext could observe.
That same consultant hired a second operative, who posed as a concerned citizen, won election to the board of Greenpeace's allied nonprofit CLEAN, and forwarded its internal communications about Greenpeace back through her to BBI, per the complaint more than 65 narrative reports and at least 150 confidential emails between August 1998 and November 1999. The federal court noted the emails belonged to CLEAN rather than to Greenpeace, which is why the wire-fraud theory failed.
Governance vetting for allied and partner organizations, background checks and reference verification before granting a new board member access to internal communications, raises the cost of this kind of ally infiltration.
Greenpeace pleaded "more than 120 documented D-Lines at Greenpeace's offices" between July 13, 1998 and July 18, 2000. Reciting the same complaint, the Court of Appeals gives two separate counts under two separate alleged conspiracies: more than 100 D-lines between September 1998 and October 2000 at both the U Street and H Street offices for Dow, and at least 35 between July 13, 1998 and November 12, 1998 for the Lake Charles Project at U Street. The officer is alleged to have participated in at least 55. What the raids recovered, per the complaint, was internal memos, donor records and financial documents that staff believed were disposed of.
Cross-cut shredding or contracted secure destruction of all discarded documents before disposal, rather than relying on a locked enclosure alone, is the single highest-leverage defense here, since it removes the value of the trash regardless of who can physically reach it.
BBI is alleged to have supplemented the trash raids with office break-ins, wiretapping and computer intrusion, to obtain higher-value material such as personnel and legal records that would not turn up in ordinary trash. The door codes are the least firm element and the sourcing is hedged: a handwritten list of Greenpeace door codes was found among BBI's documents, and BBI "apparently tried to determine the security codes for Greenpeace office doors, and may well have used these codes to enter Greenpeace offices."
Standard technical and physical security controls, door-code rotation, wiretap detection, endpoint security, and break-in monitoring and alarms, address this stage, though a well-funded, badge-enabled adversary is difficult to fully deter with these alone.
BBI is alleged to have compiled the material and surveillance findings into intelligence reports and briefings delivered to Ketchum and Nichols-Dezenhall, which passed them to Dow and CONDEA Vista respectively, giving the corporate clients advance insight into Greenpeace's campaign plans, funding and strategy. The trial court held only that the complaint pleaded a plausible civil conspiracy well enough to survive dismissal on vicarious liability. It never found that any of this happened.
There is no practical control once stolen intelligence has already reached the paying client; the only real defense is preventing the upstream collection stages, especially Stage 3 (credentialed access) and Stage 6 (document destruction), since by this final stage the objective is already complete.
Browse by what this case has in common with others in the library.
P&G-hired competitive-intelligence contractors obtained confidential Unilever hair-care information from discarded garbage before P&G self-disclosed the operation, fired three employees, and…
Three separate congressional watchdog engagements, not one campaign. In 2000, GAO agents carrying counterfeit badges declared themselves armed officers and…
Air Canada admitted in a sworn Ontario Superior Court affidavit that it hired private investigators who twice took trash from…
Fraudsters faked WPP CEO Mark Read on WhatsApp and staged a Teams call with a cloned executive voice. The agency…
A phone-record pretexting incident involving a retired U.S. Army general was followed by FTC enforcement and broader privacy-policy scrutiny.
Fake finance "directors" in WhatsApp groups steered 18+ US investors to NanoBit, a crypto platform that never traded. The SEC…
Attackers made Microsoft's own Azure Monitor send a fake $459.90 Windows Defender bill that passed SPF, DKIM and DMARC. A…
Toronto firm CoHost spent two months interviewing a candidate it now believes was a fabricated persona with fake references. The…
Between 2006 and 2008 the FTC pursued six civil cases covering 16 data-broker and private-investigation defendants after two dismissals, alleging…
A phone-record pretexting incident involving a retired U.S. Army general was followed by FTC enforcement and broader privacy-policy scrutiny.
A 12-person ring watched hacked inboxes for big payments, then redirected them with fake emails. Trial evidence put losses above…
Fraudsters spoofing the French CEO's "personal" email talked Pathé's Dutch management into wiring €19.2M for a fake secret Dubai acquisition,…
Task scams start with a job text and end with crypto deposits to unlock fake earnings. FTC: reports rose from…
A 12-person ring watched hacked inboxes for big payments, then redirected them with fake emails. Trial evidence put losses above…
Attackers hijacked a staff email account and used fake solar-panel invoices to trick the US charity into wiring $997,400 to…
A Rapid7 penetration tester tailgated into a client's building using door-holding reciprocity and a cloned-looking badge, rode an elevator up…
DOJ prosecutions of FIN7 members Fedir Hladyr, Andrii Kolpakov, and Denys Iarmak produced guilty pleas and prison sentences. The records…
An infected USB flash drive introduced onto a U.S. military laptop in 2008 let the agent.btz worm cross onto classified…
P&G-hired competitive-intelligence contractors obtained confidential Unilever hair-care information from discarded garbage before P&G self-disclosed the operation, fired three employees, and…
Air Canada admitted in a sworn Ontario Superior Court affidavit that it hired private investigators who twice took trash from…
Advance Machine Company's West Coast sales manager repeatedly rifled Tennant Company's sealed, covered dumpster in California to steal sales leads.
The HP spying scandal began with a hunt for a boardroom leaker. Hewlett-Packard's investigators hired contractors who posed as directors…