IntaForensics were approached by a large private company specialising in Recruitment, the Sales & Marketing Director believed that several ex employee's had stolen a customer
database and were now employed by a rival company. Due to the nature of the investigation IntaForensics were requested to act rapidly and covertly.
IntaForensics attended the offices of the company over a period of two nights and created Forensic copies of over 30 computers and laptops. This allowed the
computers to be used by their users the following day without any knowledge of the investigation currently underway, whilst securing the
evidential integrity.
IntaForensics then performed a full Computer Forensic Analysis on each of the Forensic copies taken and were able to identify customer database
transfers to a several USB drives. These were known to belong to two of the ex employees.
The USB drives were recovered from the individuals under a court order. Forensic Analysis identified deleted customer databases
present on both. A report was then produced detailing all the findings and the correlation of the data transferred and the time frame involved.
