Misappropriation of Data

A hospital worker was informed that his employment was soon to be terminated. The hospital suspected that the employee subsequently deleted important research information from the hospital’s database. During the forensic investigation, it was discovered that the employee had deleted files manually, as well as by utilizing a ‘wiping’ utility. The forensic investigator recovered several important files, which aided the hospital in making an educated decision on how to proceed with its administrative proceeding. Once this forensic evidence was brought to the attention of the hospital worker, the employee admitted his guilt. The court ordered the employee to submit his computers to additional forensic analysis, and to not attempt to destroy additional data. The forensic investigation led to the employee being found in violation of the court order.

< Back to Case Summaries