Physical security breach where an unauthorised person follows an authorised person through secured access points.
Tailgating (or piggybacking) is a physical social engineering attack where an unauthorised person follows an authorised person through a secured door or checkpoint. Attackers exploit politeness—people naturally hold doors open—and may pose as delivery personnel, contractors, or new employees who 'forgot their badge'. Once inside, attackers can access physical assets, plant devices, or gather information for further attacks. Tailgating undermines access control investments when staff don't challenge unknown individuals.
Why It Matters
The DSC Perspective:
Physical access can lead to cyber access. An attacker inside your building can plug into your network, access unattended workstations, or steal devices. Train staff to challenge unknown individuals and never hold secure doors for strangers.