dumpster diving (noun) [Word Notes]

Key takeaways

Dumpster diving is the search of organizational trash for sensitive documents or devices, and the information found can enable phishing, identity theft, fraud, and other attacks.
A 2020 case involved a threat actor taking taxpayers’ information from tax preparers’ dumpsters, selling it on criminal forums, and enabling stimulus-check fraud and COVID-19-themed phishing.
Organizations can reduce dumpster-diving risk by shredding sensitive papers and thoroughly wiping devices before disposal.
The Better Call Saul example uses Jimmy McGill’s search of Sandpiper’s trash to show how discarded material can expose evidence of elder abuse and fraud.
Jimmy’s exchange with Sandpiper’s lawyer distinguishes routine shredding from alleged evidence destruction, summed up in his line, “You say potato, I say spoliation.”
Avanti’s advertised approach is to use verified-data-driven autonomous IT to identify and resolve endpoint issues proactively rather than relying on manual endpoint management.
Zage Security’s advertised zero-trust model treats vendors, machines, applications, workloads, and AI agents as identities whose access and actions must be governed.

Summary

The episode opens with cybersecurity event and endpoint-autonomy ads

The episode begins with an ad for the Aspen Cyber Summit, scheduled for November 18 in Washington, D.C. The event is presented as a meeting point for leaders from government, industry, and civil society, with the goal of addressing urgent cybersecurity and technology-policy questions and advancing practical solutions across sectors. Listeners are directed to aspencybersummit.org to learn more and register. A second ad argues that IT teams should not have to spend most of their time manually managing endpoints, particularly as AI-driven threats accelerate. Avanti’s autonomous IT tools are said to identify and resolve endpoint problems proactively, helping teams scale while reducing disruption and risk. The ad emphasizes that Avanti’s endpoint autonomy is grounded in verified data and therefore “doesn’t go rogue,” directing listeners to avanti.com/future.

“Dumpster diving” is defined as a physical security breach

The Word Notes episode introduces “dumpster diving,” defined as searching through an organization’s trash for discarded sensitive material. The explanation stresses that this is not merely looking for something of value in rubbish; it is a physical security breach in which an attacker searches discarded documents or devices for information that can support later cybercrime, including phishing and identity theft. The episode gives a 2020 case described by SecureWorks. A threat actor searched the dumpsters of tax preparers and collected taxpayers’ information. He sold the information on criminal forums, where cybercriminals used it to commit stimulus-check fraud and launch COVID-19-themed phishing campaigns. The practical defense is to shred sensitive documents and thoroughly wipe devices before throwing them away, so discarded material cannot become an attacker's source of intelligence.

Better Call Saul shows how trash can become legal evidence

The episode’s “Nerd Reference” turns to AMC’s Better Call Saul. Bob Odenkirk’s character, Jimmy McGill, has learned that the owners of Sandpiper Retirement Home have been defrauding elderly residents. He also catches Sandpiper personnel shredding documents, apparently to conceal the evidence trail. In a hurry, Jimmy writes a cease-and-desist letter to Sandpiper’s lawyers on toilet paper—the only paper available. Later, Jimmy dumpster-dives behind Sandpiper headquarters to look for more incriminating evidence. He hides deep under the trash while employees add more bags. While he is still trapped in the dumpster, Sandpiper lawyer Rich Schweikert calls. Jimmy says he is at the opera—“The Magic Flute,” by Mozart—which explains why he is whispering. Schweikert questions the strange demand letter and says shredding is neither irregular nor illegal because every business does it. Jimmy answers, “You say potato, I say spoliation,” and warns that Sandpiper faces elder-abuse, fraud, and deceptive and unfair trade-practice claims. When Schweikert comments that the letter is hard to read, Jimmy replies, “Next time I’d use double ply,” before insisting that they focus on the message rather than the toilet-paper medium.

Credits, the security-workforce message, and closing security ads

The episode credits Tim Nodar as writer, Peter Kilpe as executive producer, and John Petrick and Rick Howard as editors, with sound design and original music by Elliot Peltzman. It also describes N2K’s role in the broader cybersecurity-information ecosystem, saying that N2K and podcasts such as Word Notes are part of the daily intelligence routine of influential public- and private-sector leaders, Fortune 500 security teams, and major intelligence and law-enforcement agencies. N2K Strategic Workforce Intelligence is presented as a way to help organizations understand their teams and improve the value of their investment in people, with more information at N2K.com. The closing ads return to identity and social-engineering risk. Doppel claims it uses AI to dismantle cross-channel attacks and provide agentic email protection. Zage Security warns that critical systems are now accessed not only by employees but also by vendors, machines, applications, workloads, and AI agents; its Identity Fabric platform applies zero-trust policies to govern each identity’s access, actions, and timing. Farmers then presents straightforward, understandable insurance coverage, with a standard disclaimer that policies are underwritten by Farmers Truck or Fire Insurance Exchanges or affiliates and are not available in every state.

Show notes

Please enjoy this encore of Word Notes.

The act of searching through an organization's trash for discarded sensitive material.

CyberWire Glossary link: ⁠https://thecyberwire.com/glossary/dumpster-diving⁠

Audio reference link: “⁠Better Call Saul jimmy digs in the Sandpiper trash scene⁠,” uploaded by Robert Bowersock, 18 September 2022.