This type of test requires direct contact with the subject to retrieve the sensitive information. It might involve human handling tactics like Dumpster Diving, Imitation, Intimidation or convince the subject via phone calls.
Please note that you must inform the appropriate people before conducting the social engineering penetration test