Supporting a contractor experiencing organised site intrusions and material loss
A civil engineering contractor contacted us after repeated incidents of unauthorised access across several active infrastructure works locations.
The incidents included theft of materials, interference with stored equipment and evidence of individuals entering compounds outside working hours. Despite additional lighting, fencing and patrols, the activity continued.
Management could not determine whether the incidents were opportunistic trespassers or individuals with knowledge of site operations.
They required verified information before escalating the matter further.
The Situation
The company was working across multiple locations simultaneously. Following several incidents, patterns began to emerge:
- compounds disturbed overnight
- materials relocated or missing
- access points tampered with
- security patrols avoided
The financial loss was increasing, but the larger concern was safety. Unauthorised access to infrastructure sites created potential hazards for both the public and workers.
Without clear evidence, the company could not take targeted action or meaningfully assist the relevant authorities.
Objectives
We agreed an investigation strategy to:
- establish how access was being gained
- identify activity patterns and timings
- document individuals entering sites from lawful observation points
- provide verifiable evidence to support appropriate action
Our Approach
We met with management to review incident logs, site layouts and working schedules to identify likely risk periods.
Rather than continuous monitoring, we deployed targeted covert observation during specific high-risk timeframes across selected locations.
Observations were conducted from lawful public positions and did not interfere with operations, safety procedures or security staff. The investigation remained confidential and no personnel were approached.
All activity was documented using time-referenced logs and evidential imagery.
Findings
During the operation we recorded repeated organised access to site areas outside operational hours.
The activity followed consistent timing and entry patterns, allowing a clear sequence of events to be documented. The compiled evidence demonstrated how the locations were being accessed and the nature of the activity occurring.
The Outcome
We provided a structured evidence report to the contractor, which was shared with the appropriate authorities.
As a result the client was able to:
- implement targeted security improvements
- reduce further incidents
- support an ongoing investigation
- protect staff safety and project continuity
The investigation allowed management to move from general suspicion to informed preventative action.
Confidential Advice for Employers
If your sites are experiencing repeated intrusion, increasing physical security alone may not resolve the issue. Understanding how and when access occurs is often the key to stopping it.
We can advise what evidence can lawfully be obtained and how an investigation can support both internal decisions and external reporting.
All enquiries are handled confidentially.
Speak directly with an investigator — no obligation.
