P&G-hired competitive-intelligence contractors obtained confidential Unilever hair-care information from discarded garbage before P&G self-disclosed the operation, fired three employees, and settled with Unilever in September 2001.
Social Engineering Examples·8 sources
P&G hired outside contractors who obtained confidential information about Unilever's hair-care business. Contemporary reporting alleged that contractors searched discarded paperwork and posed as market analysts to question Unilever employees; P&G admitted a breach of its own rules but denied misrepresentation and said it had not broken the law. CNN and The Independent reported that P&G discovered the operation and voluntarily notified Unilever in April 2001. The companies announced an out-of-court settlement on September 6, 2001. Its terms were undisclosed. BBC described press expectations of a payment of up to $10 million, not confirmation of an agreed or completed payment.
P&G's competitive-intelligence function hired outside contractors to collect information about Unilever's hair-care business. BBC attributed allegations of searching Unilever's rubbish and posing as market analysts to a Fortune report, while a source familiar with negotiations described a web of contractors and agents. The Independent reported that P&G admitted activities breached its rules but denied misrepresentation. The dumpster collection and the disputed employee-questioning allegation should therefore be distinguished, rather than presented as a court finding of trade-secret misappropriation.
Contemporaneous reporting alleged two different methods: retrieving discarded confidential documents and posing as market analysts to solicit information from employees. P&G denied the misrepresentation allegation. CNN reported that senior management discovered contractors had obtained information using methods that breached P&G's rules, stopped the project and notified Unilever. The cited reporting does not establish what Unilever employees believed about the sensitivity of discarded paperwork.
P&G said it stopped the project, notified Unilever, returned the information and fired three employees. CNN reported the voluntary disclosure as April 2001. The companies announced an out-of-court settlement on September 6, 2001 without disclosing its terms. P&G chairman John Pepper said the activities were not in keeping with the company's principles and policies and that the information would not be used in its plans. Unilever chief executive Charles Strauss said the settlement protected its confidential information. BBC reported an expected payment of up to $10 million. The cited reports do not confirm payment or the final inclusion of independent monitors.
The incident illustrates that physical collection of discarded material and alleged pretexting can expose business information without a network intrusion. It also illustrates the need for secure document disposal and oversight of external information-gathering contractors.
Cross-shred or use certified destruction vendors for documents containing sensitive business information before disposal. Treat exterior dumpsters and recycling bins as part of the security perimeter through locked or monitored disposal and on-site destruction where appropriate. Require legal and ethics sign-off with a written scope of work before engaging a competitive-intelligence contractor, and audit the contractor's methods, not just deliverables. Train staff who field unsolicited "market researcher" or "analyst" inquiries to verify identity and affiliation before discussing strategy, pricing, or roadmaps.
Social Engineering Examples. “P&G's 'Bad Hair Day': Dumpster-Diving Corporate Espionage on Unilever's Hair-Care Business”. Accessed 3 November 2026. https://socialengineeringexamples.com/procter-gamble-unilever-dumpster-diving-2001
P&G's business information-gathering project focused on Unilever's hair-care marketing information.
Identifying which office or business unit holds sensitive plans is hard to prevent since org structure, office locations, and press coverage are often public or easily inferred; the realistic control sits downstream, at the point sensitive paperwork actually leaves the building (Stage 4), rather than at this reconnaissance stage.
P&G hired outside competitive-intelligence contractors. BBC attributed the description of a web of contractors and agents to a source familiar with the negotiations; P&G said the methods breached its rules.
Require legal and ethics sign-off with a written scope-of-work before engaging any competitive-intelligence contractor or vendor, and audit the contractor's actual methods on an ongoing basis, not just the intelligence deliverables; a professional code such as SCIP's, which bars trespass, theft, and misrepresentation, gives a concrete standard to contract against.
Contractors reportedly searched discarded Unilever garbage for information.
Treat exterior dumpsters and recycling/waste-collection areas as inside the security perimeter, with locked or monitored disposal enclosures, rather than as an unmonitored public space once trash leaves the building.
Contractors retrieved roughly 80 confidential Unilever documents, covering three-year hair-care launch plans, pricing, and margins, because the paperwork had been discarded intact rather than shredded or otherwise destroyed.
Mandate cross-cut shredding or bonded/certified destruction for any document containing pricing, launch-timeline, or margin data before it ever reaches a dumpster; this is the single highest-leverage control in the case, since intact paperwork in the trash is what made the whole operation possible.
Contractors are alleged, an allegation P&G disputed, to have directly approached Unilever hair-care employees while posing as neutral market analysts, using a non-threatening false identity to elicit strategic detail beyond what the trash alone provided.
Train staff who field unsolicited inquiries from "market researchers," "analysts," or similar unknown contacts to verify the requester's identity and affiliation, for example via a callback to a known organizational number, before discussing strategy, pricing, or roadmaps.
The retrieved documents were compiled and passed into P&G's competitive-intelligence function to inform its own hair-care business planning, until P&G senior leadership, including chairman John Pepper, reviewed the project's methods in spring 2001, halted it, and quarantined the material before Unilever itself detected anything.
Build a standing internal escalation path where legal or ethics review of a competitive-intelligence program's methods (not just its outputs) happens on a routine schedule rather than relying on an informal leadership review to catch an in-flight program before its intelligence gets operationalized, which is what worked here only because P&G's own chairman happened to look closely at the methods in spring 2001.
Browse by what this case has in common with others in the library.
Three separate congressional watchdog engagements, not one campaign. In 2000, GAO agents carrying counterfeit badges declared themselves armed officers and…
Greenpeace alleged in a civil suit, dismissed in both forums without any finding on the merits, that Dow Chemical and…
Air Canada admitted in a sworn Ontario Superior Court affidavit that it hired private investigators who twice took trash from…
Fake finance "directors" in WhatsApp groups steered 18+ US investors to NanoBit, a crypto platform that never traded. The SEC…
Censys traced a USPS 'package awaiting action' smishing kit to 682 lookalike sites that streamed card numbers as victims typed.…
A fraudster spoofed Wells Fargo's real 800 number nine minutes after a legitimate advisor call, phished a 2FA code from…
DOJ prosecutions of FIN7 members Fedir Hladyr, Andrii Kolpakov, and Denys Iarmak produced guilty pleas and prison sentences. The records…
A civil complaint alleges that a retired New Jersey man lost $390,000 in two days after a fake Norton/PayPal refund…
A Chicago hairstylist lost $20,000 to a Phantom Hacker scam. A caller claiming to be Bank of America said a…
A Mattel finance executive wired $3M to China on a forged email from her brand-new CEO, and the company clawed…
TV investigative reporters filmed Rite Aid pharmacy dumpsters nationwide overflowing with readable prescription labels.
A victim searching for the AnyDesk remote-access tool hit a typosquatted site with a fake Cloudflare Turnstile that, instead of…
A fake IT text and phone call got a Retool employee's MFA codes in 2023. Google Authenticator sync did the…
A civil complaint alleges that a retired New Jersey man lost $390,000 in two days after a fake Norton/PayPal refund…
California's Attorney General and six county DAs found more than 10,000 paper patient records and hazardous/medical waste in unsecured.
In June 2025 the DOJ filed to forfeit $225.3M in USDT tied to pig butchering scams, after Tether and OKX…
A phishing attack resulted in disclosure of 2015 W-2 data for several thousand US employees, exposing SSNs and earnings to…
A Pennsylvania shredding-business owner's 2010 qui tam suit alleged that Shred-It, Iron Mountain.
Greenpeace alleged in a civil suit, dismissed in both forums without any finding on the merits, that Dow Chemical and…
The HP spying scandal began with a hunt for a boardroom leaker. Hewlett-Packard's investigators hired contractors who posed as directors…
Air Canada admitted in a sworn Ontario Superior Court affidavit that it hired private investigators who twice took trash from…
Advance Machine Company's West Coast sales manager repeatedly rifled Tennant Company's sealed, covered dumpster in California to steal sales leads.