Glossary
Dumpster Diving
Old-school but effective: criminals literally search through your trash. Discarded documents can contain passwords written on sticky notes, financial statements, customer lists, or technical manuals. Shredding isn't paranoia - it's basic security.
What is Dumpster Diving?
The practice of searching through trash to find sensitive information that can be used for attacks, identity theft, or competitive intelligence.
Why Should You Care?
Dumpster diving is a low-cost, low-detection attack vector that yields immediate access to organizational secrets without sophisticated tools or technical skills. A single discarded document—containing passwords, employee directories, or system architecture diagrams—can grant attackers initial access to networks, aid in bypassing authentication, or enable social engineering attacks that would otherwise require extensive reconnaissance. Organizations often underestimate this threat because it feels outdated, yet it remains effective because physical security and document disposal discipline lag far behind cybersecurity investments.
Is your business exposed?
Real-World Example
An attacker searching the dumpsters behind an office building can recover unshredded documents containing account numbers, customer names, internal phone lists, or printouts with system credentials and network diagrams. These materials can be used directly for identity theft or to make social-engineering pretexts far more convincing—an attacker who can cite a real project name or manager's name is far harder to challenge. The risk persists wherever companies dispose of sensitive paper without shredding it.
How to Protect Against Dumpster Diving
- 1.
Cross-cut shred all sensitive documents
- 2.
Secure trash bins and dumpsters
- 3.
Establish clear desk and document disposal policies
Related Terms
Is your business exposed?
Check if your company data is circulating on the dark web
Free scan • No credit card required