17.01.2013 Views

Electronic Discovery and Computer Forensics Case List - Kroll Ontrack

Electronic Discovery and Computer Forensics Case List - Kroll Ontrack

Electronic Discovery and Computer Forensics Case List - Kroll Ontrack

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

� Olson v. International Bus. Machs., 2006 WL 503291 (D. Minn. Mar. 1, 2006). In a case involving<br />

allegations of wrongful termination from employment, the parties filed cross-motions for summary<br />

judgment. After terminating the plaintiff, the defendant requested the return of a company-issued<br />

laptop <strong>and</strong> instructed the plaintiff not to make any changes to the laptop. The laptop was returned<br />

<strong>and</strong> examined by a computer forensic expert, who found evidence of data deletion. The expert<br />

indicated the computer’s file content was unrecoverable, but file names – several of which related<br />

to sexually explicit material – were located. Following the investigation, the plaintiff admitted to<br />

deleting data from the laptop after his termination, but testified others, including family <strong>and</strong> friends,<br />

had used the machine. In seeking summary judgment, the defendants claimed they would have<br />

terminated the plaintiff if they knew he was visiting Internet sites featuring sexual content. The<br />

defendants also claimed the plaintiff’s spoliation of data was grounds for termination. In support of<br />

his summary judgment motion, the plaintiff declared the defendants could not prove facts to<br />

support its “after-acquired evidence defense.” The court declined to grant summary judgment for<br />

either side <strong>and</strong> found “a factual dispute exists regarding whether [the plaintiff] is responsible for the<br />

files found on the laptop <strong>and</strong> regarding whether [the defendants] would actually have terminated<br />

[the plaintiff] in this situation.”<br />

� Afremov v. Amplatz, 2006 WL 44341 (Minn. Ct. App. Jan. 10, 2006). An attorney appealed a<br />

sanctions award prohibiting him from appearing before the district court. During discovery, the<br />

court ordered the attorney’s client to immediately turn over his computer to a court-appointed<br />

recipient. A computer forensic expert examined the computer <strong>and</strong> found e-mail had been deleted<br />

on the morning the computer was h<strong>and</strong>ed over. The expert subsequently stated he recovered 300<br />

e-mails that were moved <strong>and</strong> may have been archived rather than deleted. The district court<br />

determined the attorney had instructed his client to "open the computer, turn it on <strong>and</strong> to look at<br />

‘what was in there.’ " In sanctioning the attorney, the court found the attorney “had been ‘untruthful<br />

to the court directly <strong>and</strong> by omission,’ had deliberately <strong>and</strong> intentionally impeded discovery <strong>and</strong><br />

violated the court’s order, <strong>and</strong> had engaged in the spoliation of evidence that would not have been<br />

discovered without the services of an expert.” On appeal, the court reversed the award on the<br />

grounds that the attorney’s due process rights had been violated as the attorney was not provided<br />

with sufficient notice of a hearing at which sanctions might be considered.<br />

� Foust v. McFarl<strong>and</strong>, 698 N.W.2d 24 (Minn. Ct. App. 2005). The defendants appealed an $11<br />

million jury verdict in a personal injury lawsuit involving an automobile accident. Specifically, the<br />

defendants argued that the trial court erred by barring evidence relating to the plaintiff’s intentional<br />

spoliation of electronic evidence. The defendants also contended the court should have granted a<br />

mistrial or dismissed the case with prejudice, instead of granting a spoliation adverse inference<br />

instruction. Upon examining the plaintiff’s computer, the defendants’ computer forensic expert had<br />

discovered evidence of child pornography, illegal downloads of intellectual property, <strong>and</strong> evidence<br />

that a software wiping program was used in an attempt to permanently delete data from the<br />

computer hard drive. The trial court refused to admit the evidence on the grounds that it was more<br />

prejudicial than probative. The trial court further concluded an adverse inference instruction was an<br />

appropriate spoliation sanction in light of the circumstances. On appeal, the appellate court<br />

determined the trial court properly issued the adverse inference instruction <strong>and</strong> concluded that<br />

intentional spoliation did not create “a presumption that a dismissal with prejudice of the spoiling<br />

party’s claims is the best <strong>and</strong> fairest sanction.” The appellate court also found the spoliation<br />

evidence was appropriately excluded as “some of the information was character assassination <strong>and</strong><br />

was more prejudicial than probative.”<br />

204

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!