When preparing a targeted attack against a company, attackers sometimes resort to dumpster-diving, hoping to find useful information. In real life they won’t stumble across 50 valid passwords in a trash can, Hackers style, but cybercriminals can still find a lot of useful intel in company trash.
What shouldn’t go in the garbage
Even the most optimistic trash scavengers do not expect to find a portfolio of documents marked TOP SECRET. Then again, they hardly need huge secrets to discredit a company or put together a targeted attack; any scrap of corporate dirt or information can help them dupe employees through social engineering.