Using computer forensics to investigate employee data theft

The trails left by printing a document and searching the web can also provide key information about the theft or even constitute direct evidence. A company suffering data theft can only recover damages by proving two things: A company suffering data theft can only recover damages by proving that the thief took information without corporate permission.

Investigating Employee Data Theft

One cost-effective precaution is to make a forensic copy of the hard drive or mobile device. Read on for our best practices on using forensics to deter and catch data thieves.

An emerging discipline is mobile forensics, which targets smart phones such as the iPhone, the Blackberry, or Android devices. An expert should be able to identify: He had been issued a laptop by his employer, which allowed him access to highly confidential information about customers, business practices, negotiating strategies, and sales reports.

These contain information that can provide significant insight on what an employee was doing leading up to the theft of data—and might also provide direct evidence of the theft. For more information and to keep up with our latest findings, subscribe to our IDWise newsletter.

In order to recover damages or file criminal charges against a current or former employee, a company must first prove that the theft originated from their systems. The employee took information without permission The stolen information caused harm Computer forensics experts can determine if an employee connected a device such as a removable USB card, or created a CD that contained confidential data.

Bailey Even in the most mundane positions, employees can have access to company networks that will allow them to steal data. Computer forensics experts use specialized hardware, software, and techniques to pinpoint data theft. The make, model, and serial number of a USB card When a storage device was first connected The last time a storage device was used Forensics can also identify if data was deleted and often can even recover the deleted information.

Frank Ringo was accused of stealing confidential information from his employer. IDWise offers clear and accessible resources to empower citizens—both online and offline—to be better informed and make smarter choices to protect their personal information.

Data such as voicemails, emails, contacts, and call logs—even those deleted by the user—can be recovered and used as evidence.

For the iPhone, recoverable files include: That same month, his employer learned that Ringo was associated with a direct competitor. While smart policies and updated technology will prevent casual data theft, determined employees will still steal data. A cost-effective way to hedge against theft by departing employees is to make a forensics copy of the computer or mobile device.

As an example, a forensics investigation of an Apple iPhone will generally result in the recovery of 50,—60, files, most of which the user never knew existed or thought they had deleted. Mobile forensics targets devices like the iPhones, the Blackberry, or Androids. Highlights If an employee has robbed your company of valuable data, computer and mobile forensics experts are your best tools for recovery.

An example of how computer forensics was used in a case was in Dental Health Products, Inc. Researchers at the Center for Identity are investigating ways in which data lapses like these happen and what companies can do about them. Funded by a partnership with the Texas Legislature, and powered by the Center for Identity, IDWise is a resource center for the public on identity theft, fraud, and privacy.

Smart business owners take measures to protect themselves from data theft—by recently terminated employees as well as current staff. Unfortunately, many employers do not realize an employee has taken confidential information until weeks or months have passed.Investigating Employee Data Theft A study was conducted in which it was revealed that more than 25 percent of employees abducted their own data when leaving the company or organization.

Some people can use their company’s email to send attachments to their personal e-mail account. How Digital Forensics Aids In the Investigation of Employee Data Theft published an article last week entitled " Using Computer Forensics to Investigate IP Theft." I read it with great interest since this comprises about 25% of our digital forensics work at Sensei.

When suspicions of employee data theft arise it is important to engage a computer forensics expert to perform a theft-of-IP analysis in order to preserve electronic data and uncover important evidence.

Timothy Opsitnick, Joseph Anguilano and Trevor Tucker have published an article titled “Using Computer Forensics to Investigate Employee Data Theft”. In the article they write about six. Employee data theft occurs most frequently just prior to, or immediately after, an individual’s termination or resignation from an organization.

Motives for data theft include setting up a competing business, using the information at a new job, a sense of ownership of what was created, and revenge against the employer, among other things. Computer forensics experts can find and document instances of an employee's improper conduct using specialized techniques, software, and hardware.

Researchers at the Center for Identity are investigating ways in which data lapses like these happen and what companies can do about them.

Using Computer Forensics to Manage the Internal Threat Download
Using computer forensics to investigate employee data theft
Rated 0/5 based on 43 review