Corporate Computer & Mobile Phone Forensic Investigations by Experts

Lndwdi12aWV3LW91dHB1dFtkYXRhLXRvb2xzZXQtdmlld3Mtdmlldy1lZGl0b3I9IjllOGYyMmQxY2RkM2JlNzhmMmVmOGIzODMxYTE5MzA2Il0gPiAudGItZ3JpZC1jb2x1bW46bnRoLW9mLXR5cGUoM24gKyAxKSB7IGdyaWQtY29sdW1uOiAxIH0gLndwdi12aWV3LW91dHB1dFtkYXRhLXRvb2xzZXQtdmlld3Mtdmlldy1lZGl0b3I9IjllOGYyMmQxY2RkM2JlNzhmMmVmOGIzODMxYTE5MzA2Il0gPiAudGItZ3JpZC1jb2x1bW46bnRoLW9mLXR5cGUoM24gKyAyKSB7IGdyaWQtY29sdW1uOiAyIH0gLndwdi12aWV3LW91dHB1dFtkYXRhLXRvb2xzZXQtdmlld3Mtdmlldy1lZGl0b3I9IjllOGYyMmQxY2RkM2JlNzhmMmVmOGIzODMxYTE5MzA2Il0gPiAudGItZ3JpZC1jb2x1bW46bnRoLW9mLXR5cGUoM24gKyAzKSB7IGdyaWQtY29sdW1uOiAzIH0gLndwdi12aWV3LW91dHB1dFtkYXRhLXRvb2xzZXQtdmlld3Mtdmlldy1lZGl0b3I9IjllOGYyMmQxY2RkM2JlNzhmMmVmOGIzODMxYTE5MzA2Il0gLmpzLXdwdi1sb29wLXdyYXBwZXIgPiAudGItZ3JpZCB7IGdyaWQtdGVtcGxhdGUtY29sdW1uczogbWlubWF4KDAsIDAuMzMzM2ZyKSBtaW5tYXgoMCwgMC4zMzMzZnIpIG1pbm1heCgwLCAwLjMzMzNmcik7Z3JpZC1hdXRvLWZsb3c6IHJvdyB9IC53cHYtdmlldy1vdXRwdXRbZGF0YS10b29sc2V0LXZpZXdzLXZpZXctZWRpdG9yPSI5ZThmMjJkMWNkZDNiZTc4ZjJlZjhiMzgzMWExOTMwNiJdIC50Yi1tYXNvbnJ5IHsgZ3JpZC10ZW1wbGF0ZS1jb2x1bW5zOiBtaW5tYXgoMCwgMWZyKSBtaW5tYXgoMCwgMWZyKSBtaW5tYXgoMCwgMWZyKTtncmlkLWNvbHVtbi1nYXA6IDVweDsgfSAud3B2LXZpZXctb3V0cHV0W2RhdGEtdG9vbHNldC12aWV3cy12aWV3LWVkaXRvcj0iOWU4ZjIyZDFjZGQzYmU3OGYyZWY4YjM4MzFhMTkzMDYiXSAudGItbWFzb25yeSAudGItYnJpY2tfX2NvbnRlbnQgeyBwYWRkaW5nOiAwIDAgNXB4IDA7IH0gLndwdi12aWV3LW91dHB1dFtkYXRhLXRvb2xzZXQtdmlld3Mtdmlldy1lZGl0b3I9IjllOGYyMmQxY2RkM2JlNzhmMmVmOGIzODMxYTE5MzA2Il0gLndwdi1jb2xsYWdlIHsgZ3JpZC1jb2x1bW4tZ2FwOiAxNXB4O2dyaWQtcm93LWdhcDogMTVweDsgfSBAbWVkaWEgb25seSBzY3JlZW4gYW5kIChtYXgtd2lkdGg6IDc4MXB4KSB7IC53cHYtdmlldy1vdXRwdXRbZGF0YS10b29sc2V0LXZpZXdzLXZpZXctZWRpdG9yPSI5ZThmMjJkMWNkZDNiZTc4ZjJlZjhiMzgzMWExOTMwNiJdID4gLnRiLWdyaWQtY29sdW1uOm50aC1vZi10eXBlKDNuICsgMSkgeyBncmlkLWNvbHVtbjogMSB9IC53cHYtdmlldy1vdXRwdXRbZGF0YS10b29sc2V0LXZpZXdzLXZpZXctZWRpdG9yPSI5ZThmMjJkMWNkZDNiZTc4ZjJlZjhiMzgzMWExOTMwNiJdID4gLnRiLWdyaWQtY29sdW1uOm50aC1vZi10eXBlKDNuICsgMikgeyBncmlkLWNvbHVtbjogMiB9IC53cHYtdmlldy1vdXRwdXRbZGF0YS10b29sc2V0LXZpZXdzLXZpZXctZWRpdG9yPSI5ZThmMjJkMWNkZDNiZTc4ZjJlZjhiMzgzMWExOTMwNiJdID4gLnRiLWdyaWQtY29sdW1uOm50aC1vZi10eXBlKDNuICsgMykgeyBncmlkLWNvbHVtbjogMyB9IC53cHYtdmlldy1vdXRwdXRbZGF0YS10b29sc2V0LXZpZXdzLXZpZXctZWRpdG9yPSI5ZThmMjJkMWNkZDNiZTc4ZjJlZjhiMzgzMWExOTMwNiJdIC5qcy13cHYtbG9vcC13cmFwcGVyID4gLnRiLWdyaWQgeyBncmlkLXRlbXBsYXRlLWNvbHVtbnM6IG1pbm1heCgwLCAwLjMzMzNmcikgbWlubWF4KDAsIDAuMzMzM2ZyKSBtaW5tYXgoMCwgMC4zMzMzZnIpO2dyaWQtYXV0by1mbG93OiByb3cgfSAud3B2LXZpZXctb3V0cHV0W2RhdGEtdG9vbHNldC12aWV3cy12aWV3LWVkaXRvcj0iOWU4ZjIyZDFjZGQzYmU3OGYyZWY4YjM4MzFhMTkzMDYiXSAudGItbWFzb25yeSB7IGdyaWQtdGVtcGxhdGUtY29sdW1uczogbWlubWF4KDAsIDFmcikgbWlubWF4KDAsIDFmcikgbWlubWF4KDAsIDFmcik7Z3JpZC1jb2x1bW4tZ2FwOiA1cHg7IH0gLndwdi12aWV3LW91dHB1dFtkYXRhLXRvb2xzZXQtdmlld3Mtdmlldy1lZGl0b3I9IjllOGYyMmQxY2RkM2JlNzhmMmVmOGIzODMxYTE5MzA2Il0gLnRiLW1hc29ucnkgLnRiLWJyaWNrX19jb250ZW50IHsgcGFkZGluZzogMCAwIDVweCAwOyB9ICB9IEBtZWRpYSBvbmx5IHNjcmVlbiBhbmQgKG1heC13aWR0aDogNTk5cHgpIHsgLndwdi12aWV3LW91dHB1dFtkYXRhLXRvb2xzZXQtdmlld3Mtdmlldy1lZGl0b3I9IjllOGYyMmQxY2RkM2JlNzhmMmVmOGIzODMxYTE5MzA2Il0gID4gLnRiLWdyaWQtY29sdW1uOm50aC1vZi10eXBlKDFuKzEpIHsgZ3JpZC1jb2x1bW46IDEgfSAud3B2LXZpZXctb3V0cHV0W2RhdGEtdG9vbHNldC12aWV3cy12aWV3LWVkaXRvcj0iOWU4ZjIyZDFjZGQzYmU3OGYyZWY4YjM4MzFhMTkzMDYiXSAuanMtd3B2LWxvb3Atd3JhcHBlciA+IC50Yi1ncmlkIHsgZ3JpZC10ZW1wbGF0ZS1jb2x1bW5zOiBtaW5tYXgoMCwgMWZyKTtncmlkLWF1dG8tZmxvdzogcm93IH0gLndwdi12aWV3LW91dHB1dFtkYXRhLXRvb2xzZXQtdmlld3Mtdmlldy1lZGl0b3I9IjllOGYyMmQxY2RkM2JlNzhmMmVmOGIzODMxYTE5MzA2Il0gLnRiLW1hc29ucnkgeyBncmlkLXRlbXBsYXRlLWNvbHVtbnM6IG1pbm1heCgwLCAxZnIpIG1pbm1heCgwLCAxZnIpIG1pbm1heCgwLCAxZnIpO2dyaWQtY29sdW1uLWdhcDogNXB4OyB9IC53cHYtdmlldy1vdXRwdXRbZGF0YS10b29sc2V0LXZpZXdzLXZpZXctZWRpdG9yPSI5ZThmMjJkMWNkZDNiZTc4ZjJlZjhiMzgzMWExOTMwNiJdIC50Yi1tYXNvbnJ5IC50Yi1icmlja19fY29udGVudCB7IHBhZGRpbmc6IDAgMCA1cHggMDsgfSAgfSA=

Premiership Football Club – Employment Tribunal Proceedings

An Athena Forensics’ Mobile Phone Expert was instructed by the lawyers acting on behalf of a Premiership Football Club to conduct an examination of 2 mobile phones for any communication, including deleted texts and calls, between two specific dates.

The forensic examination of the phones was conducted and all data retrieved was provided and formed part of the employment tribunal involving the club.

Corporate Fraud Investigation – Company Director of a Supermarket Supplier

Athena Forensics were instructed by the Chairman of a company who supplied products to a chain of UK based supermarkets due to suspicions that a Director of the firm may have been committing fraud within the company.

Initially an examination of a laptop computer and a desktop computer were conducted that resulted in the identification of evidence to suggest that the Director had setup another company and was operating that company to take and supply goods from their employer and sell them cheaper to his own customers, some of which were also originally customers of his employer.

The findings of the computer forensic examination report resulted in the court granting a seizure order and Athena Forensics were then instructed to assist in the identification, examination and seizure of evidence from the home address of the company director.

This examination eventually resulted in the identification of approximately £1,000,000 worth of sales for goods that had been taken from the employer and personally sold by the company director.

Corporate Fraud Investigation – Managing Director of a Health Club Chain

Athena Forensics were contacted and instructed by the Chairman, through their in house legal department, to carry out the examination of the company computers of two Directors and the computer server of a well known UK chain of health clubs.

An Athena Forensics computer expert attended the headquarters of the company and acquired forensics copies of both computers and the company server.

The following report enabled the company to begin proceedings against the Managing Director and Financial Director for fraud and those individuals were later Prosecuted by the Serious Fraud Office using the evidence produced by Athena Forensics.

Data Theft Investigation at a Recruitment Firm

Athena Forensics were contacted and instructed by a specialist recruitment firm to examine a computer system used by a recently departed employee who had left to work for a competitor for evidence to suggest that they had copied or sent company data, including customer details prior to leaving.

A computer forensic expert at Athena Forensics conducted an examination of the computer that resulted in the identification of evidence to suggest that a USB memory stick had been connected to the computer in the days prior to the employee leaving the company and that they had accessed confidential company data shortly prior to the connection of the memory stick.

Data Theft – Confidential and Client Information

An investigation was requested by an International recruitment agency to conduct an examination of a senior employee who had left the company and was suspected of taking confidential customer information to a competitor.

The company suspected that the employee had forwarded contact client information and confidential data to his personal e-mail address shortly before his departure.

An examination of the computer revealed that prior to deleting his e-mails, contact and client information had been sent to his personal e-mail account as well as an individual within his new company.

From the evidence provided by Athena’s investigators proceedings were taken against the previous employee.

Employment Dispute – Unfair Dismissal

The case involved an employment tribunal of an employee of a British based manufacturer who claimed that they had been unfairly dismissed.

The case centered on whether an e-mail had been sent by the employee to his manager. An examination of the computer failed to identify the presence of the e-mail using standard techniques.

However, using specialist forensic techniques, Athena investigators were able to identify the partially deleted e-mail within an area of the hard drive that is not normally accessible.

The evidence was provided and a settlement was then made between both parties.

Corporate - Previous Investigations

Corporate – Previous Investigations