Question Mark Key on Computer Keyboard

Electronically Stored Information – More than Just Domestic Cases

Russell W. Gilmore, CISSP, CISM, EnCE Computer Forensics

Question Mark Key on Computer KeyboardI receive calls from attorneys and clients on a daily basis. Some I have worked for in the past and some have gotten my name from a colleague. In most cases, there is an issue involving electronic data, computers, mobile devices or the internet. Anytime electronically stored information becomes part of a civil or criminal matter, it can get very confusing. Most issues involve what information is available, where it is, how to get it, and what it means to the case. Most matters are quite common but many are unique.

Most attorneys I speak with rarely if ever rely on computer forensics or have to deal with it in a case. Attorneys that work in specific area such as domestic matters are more likely to utilize computer forensics. It is interesting to see that computer forensics can be beneficial in many different types of litigation.

Examples of some unique cases are:

  • Did a doctor research the medical complaints of a patient years ago? We forensically imaged the computer he used to prove that he did.
  • Did an employee, after hearing he was being terminated, collected documents from his employer’s server before going to work for a competitor? We analyzed all data and determined that he took data with him when he left. (Actually, he took more than they initially thought.)
  • Was a document modified after it was signed or agreed upon? Our results determined that it was.
  • Were harassing messages being sent via text? Multiple cell phones used by employees of a company were analyzed, and not all suspected employees were involved.
  • Was personally identifiable information (PII) exposed on the server? We determined how the hack occurred, what data had been exposed, and who needed to be notified.
  • Who owns these photos? The court determined that images on a computer had to be identified, saved for the court, and removed from a computer.

The bottom line is that if there is even a slight possibility that electronically Stored information could be available and shed light on the case, contact Protus3. We can advise you on the options available to you or your client.