Electronic Discovery and Computer Forensics Case List - Kroll Ontrack
Electronic Discovery and Computer Forensics Case List - Kroll Ontrack
Electronic Discovery and Computer Forensics Case List - Kroll Ontrack
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
Aug. 22, 2003). Stating the order would be redundant because of the existing federal preservation<br />
orders, the defendants declined to stipulate to the order in state court but acknowledged their<br />
ongoing preservation duties. The defendants also asserted that preserving the computer<br />
information at issue would cost a considerable amount of money. In addressing the motion, the<br />
court noted it was almost a “word-for-word” duplicate of the orders previously issued in the earlier<br />
lawsuits <strong>and</strong> the defendant’s destruction in the current lawsuit was inadvertent. Despite this, the<br />
court granted the motion, finding the federal preservation orders may not be “sufficient protection<br />
for [the] plaintiff in this state action.” Addressing the defendant’s cost concerns, the court indicated<br />
it would entertain cost-shifting but “not constrain the production of possibly relevant evidence on<br />
account of the later need to allocate cost.”<br />
� Lava Trading, Inc. v. Hartford Fire Ins. Co., 2005 WL 459267 (S.D.N.Y. Feb. 24, 2005). In a<br />
breach of contract action, the defendant sought sanctions against the plaintiff for ignoring its<br />
discovery obligations, violating document production orders, <strong>and</strong> irremediably prejudicing the<br />
defendant’s ability to prepare for its case. The defendant claimed that the plaintiff engaged in<br />
partial <strong>and</strong> delayed document production throughout the discovery period, specifically in one<br />
instance producing more than 600 pages of e-mail one day before a scheduled court conference.<br />
In assessing the defendant’s motion, the magistrate judge found no “coherent justification” for the<br />
plaintiff to have “engaged in an excruciatingly slow <strong>and</strong> disjointed disclosure of documents,<br />
stretching over a period of one year, under the guise of a ‘rolling’ production or a production in<br />
‘waves’.” The magistrate further noted the plaintiff should have sought discovery extensions,<br />
produced substantially all of its documents early on, <strong>and</strong> ensured document searches were careful<br />
<strong>and</strong> thorough. The magistrate declined to dismiss the case <strong>and</strong> instead issued a detailed protocol<br />
that outlined remedial discovery measures, including payment of attorney’s fees <strong>and</strong> costs relating<br />
to the motion, preclusion of some evidence, <strong>and</strong> reopening of specified depositions.<br />
� Etzion v. Etzion, 796 N.Y.S.2d 844 (N.Y.Sup. 2005). Claiming the defendant had a history of “past<br />
fraudulent conduct,” the plaintiff, in a divorce proceeding, sought permission for her computer<br />
forensic experts to “impound, clone <strong>and</strong> inspect the computer servers, hard drives, individual<br />
workstation P.C., laptop <strong>and</strong> other items containing digital data” from the defendant. The plaintiff<br />
also requested the defendant pay attorney fees <strong>and</strong> computer forensic expert costs. In response,<br />
the defendant stated the request was overbroad, intrusive <strong>and</strong> burdensome. He also declared he<br />
had no confidence in the plaintiff’s ability to safeguard his data based on the plaintiff’s history of<br />
reckless <strong>and</strong> careless data h<strong>and</strong>ling. The court ordered both parties’ forensic experts, as well as a<br />
court-appointed referee, to meet at the data collection locations. The court ordered that the<br />
plaintiff’s expert would then copy the hard drives <strong>and</strong> immediately turn them over to the referee.<br />
After all of the drives were copied, the experts <strong>and</strong> referee would examine the hard drives <strong>and</strong> both<br />
parties would receive hard copies of relevant business records. The referee would maintain control<br />
over the hard drive images until the case closed. The court also ordered the plaintiff to bear<br />
production costs <strong>and</strong> each party to bear the costs of their own experts.<br />
� United States v. Br<strong>and</strong>, 2005 WL 77055 (S.D.N.Y. Jan 12, 2005). In prosecuting charges against<br />
the defendant for transporting minors for illegal sexual activity, the government claimed the<br />
defendant used America Online instant messaging software in an attempt to engage in sexual<br />
conduct with “Julie,” an undercover government agent posing as a minor. The government sought<br />
to admit two transcripts of AOL internet communications between the defendant <strong>and</strong> two other<br />
undercover agents, who had sent <strong>and</strong> received instant messages from the defendant. The<br />
defendant argued the transcripts should not be admitted as they were irrelevant, unfairly prejudicial<br />
<strong>and</strong> potentially confusing to the jury. The court determined one of the chat transcripts was<br />
63