Pearson was not a perimeter failure

A passenger checks a bag in Toronto. Somewhere between the desk and the aircraft, the printed tag is removed and attached to a different suitcase. The narcotics fly under their name. At the destination carousel, legally, that bag is theirs.

In May 2026, CTV's investigative programme W5 identified at least seventeen passengers on Canada-originating flights detained abroad on drug smuggling allegations over the preceding year after exactly this. Sixteen traced back to Pearson. The RCMP had by then arrested six baggage and ramp workers there.

Reported destinations included France, Germany, Morocco, Bermuda, the Philippines and South Korea. Jurisdictions where trafficking convictions carry life imprisonment and, in some, the death penalty. All seventeen were eventually released. Some were handcuffed, arrested and held first.

It was not a single discovery. In July 2025 the RCMP announced the arrest of two Swissport Canada Handling employees after a French national was detained on arrival in Paris. A separate case saw an Air Canada baggage room employee charged after roughly 33 kilograms of cannabis were found in each of two bags tagged to German passengers who had never checked them in.

The detail that should stop you is not the scheme. It is the profile of the people who ran it.

Nothing failed at the perimeter

They held valid airside credentials. They had passed background screening. They were employed by legitimate handling companies under contract at a major hub. They worked in tarmac zones and baggage floors where their presence was entirely unremarkable, because it was entirely legitimate.

The access control system did not fail. It confirmed that an authorised credential was presented by a person entitled to present it, which is exactly what it was built to do. Screening did not fail either. It assessed those individuals against the criteria in force, and at that moment they presented no disqualifying record.

Perimeter security keeps unauthorised people out. It has no view of what authorised people do once inside. That is not a defect, it is the boundary of the control, and the entire category of insider risk lives on the other side of it.

Three conditions, present at every major hub

Strip out the Canadian specifics and what remains is structural:

Legitimate access in volume. Thousands of workers across dozens of employers: ground handling, hold baggage screening, catering, security, maintenance, fuel, customs. Each holding credentials to areas where exploitation causes real harm.
Imperfect observation. Baggage areas are large, industrial, and cannot be comprehensively covered. Blind spots are a property of the built environment, not a scandal. A tag swap takes seconds.
Fragmented accountability. Where several people operate across different shifts and different employers, no single organisation holds a complete view of their combined behaviour. Each employer sees its own staff. The airport sees access events. The airline sees baggage exceptions. Nobody reads across.

The scheme reportedly ran for around a year. That duration is not a story about incompetence. It is a story about a pattern no participant was positioned to see.

What would have been observable

Not the swap itself. Seconds long, and indistinguishable from ordinary work.

The conditions surrounding it, over twelve months, look different:

Repeated presence in zones outside assigned duties
Recurring dwell time in areas of reduced camera coverage, as a pattern rather than an occasion
Attendance diverging from roster assignment, with shift swaps that cluster
Baggage exceptions tied repeatedly to the same staff on duty
The alignment of several individuals' anomalies with one another, in time and place

That last one is the crux. Organised insider activity is a coordination signal. Six people acting in concert generate a pattern none of them generates alone, and it only becomes visible if something correlates across individuals rather than assessing each in isolation.

None of this requires new cameras or new observation of employees. Every signal already exists inside access control, rostering, HR and incident systems. It exists in fragments, held by different parties, correlated by nobody.

If a comparable scheme were running in your operation now, at what point would you find out, and how?

For most operators the honest answer is: when a law enforcement agency tells us, or when a journalist does. Both arrived at Pearson. Neither is a security control.

Seventeen innocent people were detained overseas. An operator able to demonstrate continuous oversight and an evidenced escalation process is in a materially different position afterwards to one holding clean background checks and a folder of access logs.

Pearson is documented, recent and well reported. That makes it useful. It does not make it exceptional.

Iveron. Predict. Detect. Protect. From insider threat.