Definition
Dumpster diving refers to the act of searching through trash or discarded materials to find sensitive information that has not been properly secured. This practice exploits the human tendency to improperly dispose of confidential data, such as documents containing personal details, financial records, or proprietary business information. In a physical security context, it involves physically sifting through refuse bins, while in a digital context, it can mean recovering deleted files or data from discarded hardware. Understanding dumpster diving is crucial for implementing robust data disposal policies and protecting against unauthorized access to sensitive information. For instance, an attacker might find unredacted customer lists in a company's recycling bin, leading to identity theft or corporate espionage. This differs from social engineering, which relies on manipulation rather than direct information retrieval from waste. Dumpster diving is a common topic covered in CompTIA Security+ and CISSP certifications.