Dumpster diving is a physical social engineering technique where attackers search through discarded materials to obtain sensitive information. Despite strong digital controls, improperly disposed documents and media can expose individuals or organizations to significant security risks.
Threat actors look for printed emails, financial records, HR documents, network diagrams, access badges, password notes, backup media, or improperly discarded hard drives. Even small pieces of information can support larger attacks such as phishing, identity theft, credential compromise, or corporate espionage.
Security is everyone’s responsibility, hence all employees should play a role in preventing this threat. Sensitive documents must be destroyed using cross-cut shredders or secure disposal services. Storage media should be wiped according to company policy or physically destroyed. Locked disposal bins and clean desk policies further helps to reduce exposure.
Thanks