Dow Chemical and Sasol paid PR firms who subcontracted a private intelligence firm to run over 120 dumpster-diving raids on Greenpeace's DC offices.
Social Engineering Examples·8 sources
Between 1998 and 2000, Dow Chemical and Sasol (then operating as CONDEA Vista) allegedly funded a multi-year corporate espionage campaign against Greenpeace's Washington, DC office, run through their respective PR firms (Ketchum for Dow, Dezenhall for Sasol) which subcontracted private intelligence firm Beckett Brown International (BBI). BBI conducted what its internal records called "D-lines": over 120 documented dumpster/recycling-bin raids at Greenpeace's offices between July 13, 1998 and July 18, 2000, to recover discarded internal documents.
At least 55 of those raids allegedly used the badge/credentials of Metropolitan Police Officer James Daron, hired as a paid subcontractor, to bypass a locked fence enclosing the dumpsters. BBI allegedly supplemented the trash raids with office break-ins, an operative posing as a prospective volunteer to surveil the office, infiltration of an allied group, and alleged wiretapping/computer intrusion.
Dezenhall paid BBI roughly $150,000 (Oct 1998-July 1999) for the "U Street Project"; Ketchum paid BBI more than $125,000 (Oct 1998-Jan 2001) for the Dow-related work; a related "Lake Charles Project" began May 26, 1998. Greenpeace learned of the operation in April 2008 via a Mother Jones investigation and filed a federal RICO/tort suit in DC district court on November 29, 2010. The RICO claims were dismissed in 2011; the remaining state-law claims were ultimately dismissed, a result the DC Court of Appeals affirmed on August 21, 2014.
Two corporate clients each retained a PR/crisis-communications firm, which in turn subcontracted a private intelligence firm to run a sustained physical-surveillance and document-recovery operation against a common target, Greenpeace. Sasol (then CONDEA Vista) retained PR firm Dezenhall Resources; Dow Chemical retained PR firm Ketchum. Both PR firms engaged the same private intelligence contractor, Beckett Brown International (BBI), which ran the operations under project names ("U Street Project" for the Sasol/Dezenhall side targeting Greenpeace's DC office on U Street NW, and a parallel Dow/Ketchum engagement, plus a separate "Lake Charles Project" tied to Sasol's Lake Charles, Louisiana operations).
BBI's core method was "D-lines": recurring, scheduled raids on Greenpeace's trash and recycling receptacles to recover discarded internal documents, memos, and correspondence discarded by staff who reasonably believed the material was destroyed/gone. Greenpeace's dumpsters and recycling bins were physically secured behind a locked fence/enclosure at its offices; BBI defeated that control by subcontracting Washington DC Metropolitan Police Officer James Daron, who used his official police badge/credentials to gain access to the locked enclosure on BBI's behalf on at least 55 of the more than 120 documented raids run between July 13, 1998 and July 18, 2000. Beyond trash collection, BBI allegedly supplemented the dumpster-diving with physical office infiltration/break-ins, an undercover operative who posed as a prospective volunteer to surveil Greenpeace's U Street office, an operative who infiltrated an allied nonprofit (CLEAN) and forwarded internal emails, and alleged electronic surveillance including wiretapping and computer intrusion.
The dual-track corporate funding and PR-firm-as-intermediary structure let both Dow and Sasol distance themselves from BBI's direct conduct while receiving the intelligence product.
There was no lure aimed at a human target in the phishing sense; the "social engineering" here was structural and physical rather than a message-based pretext. The operative posing as a "prospective volunteer" to gain trusted access to Greenpeace's office is the closest analog to a classic pretext lure, exploiting an advocacy nonprofit's normal openness to new volunteers to get a plant inside.
The giveaway/tell in hindsight, as later reconstructed by journalists and the complaint, was the sheer persistence and precision of the trash collection (120+ raids between July 1998 and July 2000 on a fixed cadence) and the involvement of a uniformed/credentialed police officer bypassing a locked enclosure: access no ordinary scavenger or homeless dumpster-diver would have.
Greenpeace itself did not detect the operation contemporaneously; it only learned of it in April 2008, roughly eight to ten years after the raids, via Mother Jones' investigative report "Black Ops, Green Groups," which drew on BBI internal records that surfaced after the firm's later bankruptcy/dissolution.
Greenpeace filed a federal RICO and tort lawsuit in the US District Court for DC on November 29, 2010 (Civil Action No. 1:10-cv-02037) against Dow Chemical, Sasol, Ketchum, Dezenhall, BBI, and individuals. On September 9, 2011, Judge Rosemary Collyer dismissed the federal RICO claims and declined supplemental jurisdiction over the remaining DC state-law claims (trespass, invasion of privacy, conversion), which Greenpeace then re-filed in DC Superior Court.
On February 5, 2013, Judge Michael Rankin allowed trespass and trade-secret-misappropriation claims to proceed but dismissed the other four claims; the case was ultimately fully dismissed, and the DC Court of Appeals affirmed dismissal of the state claims on August 21, 2014 (No. 13-CV-685; 97 A.3d 1053), holding: Greenpeace lacked the possessory/exclusive interest in the shared trash/recycling area needed for a trespass claim; the invasion-of-privacy claim was time-barred and, separately, DC law does not recognize that privacy tort for a corporation; and conversion did not apply to abandoned, intangible information taken from the trash.
No defendant was held liable and no damages were ever awarded; the case ended on legal/procedural grounds without a merits trial on the underlying espionage allegations.
This is one of the most thoroughly documented real-world cases of sustained, multi-year corporate-funded dumpster diving against a civil-society organization, illustrating that "trash raids" are not a low-stakes hypothetical but a proven, budgeted corporate-intelligence tactic (six-figure payments, 100+ raids, dedicated project codenames). It shows how organizations layer intermediaries (client -> PR firm -> private intelligence contractor) to create deniability while directing sustained physical surveillance.
It also demonstrates that a physical access control (a locked dumpster enclosure) is only as strong as the credentials that can open it; a corrupted/subcontracted police officer defeated it repeatedly. Finally, the litigation outcome is itself an important lesson: US courts held that discarded trash in shared/common areas generally is not protected by trespass or conversion law and that corporations cannot claim certain privacy torts, meaning victims of this exact tactic have very limited after-the-fact legal recourse, reinforcing that secure destruction and access control, not litigation, are the effective defenses.
Greenpeace's own after-the-fact defenses were limited because at the time it did not know it was being targeted; it only discovered the operation via the 2008 Mother Jones investigative report. Practical lessons drawn from this case for organizations handling sensitive documents: (1) shred all discarded documents rather than relying on bin-bag disposal, since paper trash is legally "abandoned" once curbside and carries no expectation of privacy in most US jurisdictions; (2) physically secure trash/recycling enclosures with access control that cannot be defeated by a single credential (badge) and audit who has keys, since a corrupt insider with legitimate physical-access credentials (an off-duty police officer) defeated a locked fence; (3) treat outside contractors, temp volunteers, and unknown visitors with vetting given BBI's use of an operative posing as a prospective volunteer to gain office access; (4) recognize that corporate-funded opposition research/PR firms may subcontract private intelligence firms for multi-year human-source and physical operations against advocacy targets, so counter-surveillance awareness (varying disposal patterns, controlling document retention, secure destruction contracts) is a legitimate control; (5) note the legal aftermath: DC courts held that corporations generally lack standing for privacy-tort claims and that discarded (abandoned) materials in common/shared trash areas are not protected by trespass or conversion law, meaning legal recourse after the fact is weak, which makes prevention (destruction and access control) the only real defense.
Social Engineering Examples. “Greenpeace v. Dow Chemical / Sasol Corporate Espionage ("D-Lines")”. Accessed 19 September 2026. https://socialengineeringexamples.com/greenpeace-dow-sasol-dline-dumpster-espionage-1998
Per the Greenpeace complaint (recounted in the 2011 memorandum opinion), BBI identified Greenpeace as a "target" and, in a 1998 internal memorandum, described monitoring "environmental activist groups" to gain insight into protest scheduling, corporate targets, and the group's internal politics, the kind of campaign-monitoring dossier a private intelligence contractor would typically compile before running a physical operation against an advocacy target.
Advocacy organizations cannot fully suppress an adversary's interest in their public campaign activity and structure; the realistic control is treating any external party's unusually detailed interest in campaign scheduling or donor structure as a signal to tighten internal information compartmentalization, rather than trying to eliminate public visibility altogether.
BBI operatives cased Greenpeace's U Street office and its surrounding block; recovered internal BBI emails (later published in Gary Ruskin's Spooky Business report) describe entrance security, key-card doors, alley gates, guard routines, and dumpster locations at candidate targets, a standard pre-operation site survey before attempting physical entry.
Physical casing of a building's public-facing entrances and alley access is very hard to prevent outright; the practical control sits at the next stage, hardening the specific access points, such as locked and monitored waste enclosures and controlled entry logs, that a casing effort would identify as weak.
BBI subcontracted a sitting Metropolitan Police Department officer, James Daron, paying him to use his official badge to defeat the locked fence securing Greenpeace's trash and recycling enclosure, trading on the credibility a uniformed law-enforcement credential carries with anyone who might otherwise question the access.
Because a legitimate badge is what defeated the lock, the effective control is not trusting any single credential type for access; enclosures holding sensitive discarded material should require verified, logged, contract-specific access (or a dedicated secure-shredding pickup) rather than assuming a police or municipal credential is sufficient authorization on its own.
A BBI-linked operative, Mary Lou Sapone, posed as a prospective campaign volunteer to obtain a guided tour of Greenpeace's office, using the organization's normal openness to new volunteers to map staff, departments, and floor layout.
Limiting unsupervised building access for walk-in volunteers or visitors, escorted tours only, no unsupervised multi-floor access, would have reduced what a fake-volunteer pretext could observe.
A separate BBI-linked operative, identified in the complaint as "Dick Rogers," gained a board seat at Greenpeace's allied nonprofit CLEAN under false pretenses and used that trusted position to forward CLEAN's internal emails concerning Greenpeace back to BBI.
Governance vetting for allied and partner organizations, background checks and reference verification before granting a new board member access to internal communications, raises the cost of this kind of ally infiltration.
Over more than 120 documented raids between July 13, 1998 and July 18, 2000, BBI personnel and Officer Daron systematically collected Greenpeace's discarded trash and recycling, recovering internal memos, donor records, and financial documents that staff reasonably believed had been securely discarded.
Cross-cut shredding or contracted secure destruction of all discarded documents before disposal, rather than relying on a locked enclosure alone, is the single highest-leverage defense here, since it removes the value of the trash regardless of who can physically reach it.
BBI allegedly supplemented the trash raids with direct office break-ins, including attempts to determine door security codes, plus wiretapping and computer intrusion, to obtain higher-value material such as personnel and legal records that would not turn up in ordinary trash.
Standard technical and physical security controls, door-code rotation, wiretap detection, endpoint security, and break-in monitoring and alarms, address this stage, though a well-funded, badge-enabled adversary is difficult to fully deter with these alone.
BBI compiled the stolen material and surveillance findings into intelligence reports and briefings delivered to Ketchum and Dezenhall, which passed them on to Dow and Sasol respectively, completing the objective of giving the corporate clients advance insight into Greenpeace's campaign plans, funding, and strategy.
There is no practical control once stolen intelligence has already reached the paying client; the only real defense is preventing the upstream collection stages, especially Stage 3 (credentialed access) and Stage 6 (document destruction), since by this final stage the objective is already complete.
Browse by what this case has in common with others in the library.
P&G-hired competitive-intelligence contractors retrieved roughly 80 unshredded confidential Unilever hair-care documents from the trash before P&G.
Between 2000 and 2009, GAO undercover investigators repeatedly used fake law-enforcement badges (and, in a related 2009 test.
Air Canada admitted in a sworn Ontario Superior Court affidavit that it hired private investigators who twice took trash from…
A blogger paid $89.95 to an online data broker (CellTolls.com) to buy retired Gen. Wesley Clark's cell-phone call log obtained…
Fraudsters built a fake WhatsApp profile of WPP CEO Mark Read and staged a Microsoft Teams call using an AI…
Scheme participants posed as veteran finance professionals inside private WhatsApp investment groups to lure at least 18 U.S. retail investors…
JLR's five-week production halt and record £1.9bn UK economic hit were first blamed on helpdesk-vishing by a criminal collective calling…
Chinese state-linked hackers used spear-phishing links and an unpatched Internet Explorer zero-day to breach Google, Adobe.
A phishing email tricked Unatrac's CFO into surrendering his Office365 credentials on a fake Microsoft login page.
Evaldas Rimasauskas ran a five-year, $120M fraud against Google and Facebook using forged Quanta Computer invoices.
A mass-phishing malware infection at Target's small HVAC contractor harvested vendor-portal credentials that attackers reused to pivot.
Fraudsters posing as Tecnimont's group CEO, other executives, and a fictitious Swiss lawyer used spoofed emails and a staged series…
A phishing email tricked Unatrac's CFO into surrendering his Office365 credentials on a fake Microsoft login page.
A compromised Constant Contact account let Russia-linked Nobelium send USAID-spoofed phishing emails to 150-350 government and NGO organizations.
Hornetsecurity documented a QR-phishing (quishing) email sent to a single employee at a US-based MSP that spoofed an MFA-reactivation notice…
A Mattel finance executive wired $3M to China on a forged email from her brand-new CEO.
Vidoc Security Lab, a Polish-founded, US-headquartered cybersecurity startup.
A Chicago hairstylist wired $20,000 of her own money to scammers after a caller impersonating Bank of America.
P&G-hired competitive-intelligence contractors retrieved roughly 80 unshredded confidential Unilever hair-care documents from the trash before P&G.
To unmask a boardroom leaker, HP's leak investigators and their hired data brokers impersonated directors and journalists to trick phone…
Advance Machine Company's West Coast sales manager repeatedly rifled Tennant Company's sealed, covered dumpster in California to steal sales leads.
Air Canada admitted in a sworn Ontario Superior Court affidavit that it hired private investigators who twice took trash from…