FD Logo

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Forensic Discoveries Newsletter

July 2010

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Welcome to Forensic Discoveries' eDiscovery and Digital Forensics Newsletter. Keeping you and your practice informed of the ever-changing realm and value of Electronic Discovery and Digital Forensics is the purpose of this newsletter. If you have a colleague that may be interested in subscribing, follow the instructions at the bottom of this newsletter to be added to the distribution. If you choose not to continue receiving this newsletter, follow the directions at the bottom of this newsletter and accept our apologies for intruding.
in this issue
Facebook and Litigation
How Facebook Can Make or Break Your Case
EDiscovery Case Law
 
Previous Newsletters
 
Although it has been a while, we hope you enjoyed our last newsletter. Due to a steady increase in new subscribers, Forensics Discoveries will continue to list previous newsletters. As others have done, please let us know of a specific topic you would like to see covered.

We have added a new newsletter archive section to our website. The improved archive interface provides the same interaction with the newsletter as the distributed newsletter. View the new newsletter archive here.

 Below is a review of our previous newsletters:
 

August 2007 - "What is Computer Forensics?"

September 2007 - "Preparing Your Clients for EDiscovery - Part 1"
October 2007 - "Preparing Your Clients for EDiscovery - Part 2"
November 2007 - "Preparing for Your Clients' EDiscovery"
December 2007 - "Why Does My Case Need Electronic Discovery?"
February 2008 - "Computer Forensics Proves Intelletual Property Theft"
March 2008 - "In Search of the Holy Grail"
May 2008 - "When to Preserve"
June 2008 - "Electronic Discovery in Workplace Litigation"
July 2008 -
"Proving Spoliation with Computer Forensics"
August 2008 - "Proposed Updated TN Rules of Civil Procedure"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~  

Facebook and Litigation
 
Our society has entered a new era for communications, social networks. Wikipedia provides a very good definition, "A social network service focuses on building and reflecting of social networks or social relations among people, e.g., who share interests and/or activities. A social network service essentially consists of a representation of each user (often a profile), his/her social links, and a variety of additional services.". Based on my observations and participation in this phenomenon, I have determined that Social networking sites primarily answer two questions "What are you thinking?" and "What are you doing?". To demonstrate how popular these sites are in the worldwide culture, just between the top three social networking sites, there are 675 million users (the United States has a population of 310 million). With a worldwide population of 7 billion and a worldwide Internet user population of 1.5 billion (China has been removed as they do not have access to social networking sites), 45% of the Internet population uses social networking sites. Who are these people? They are plaintiffs, defendants, expert witnesses, future employees and, likely, you. A U.S. demographic breakdown of social networking sites can be found here.
 

The use of social networking sites has evolved dramatically over the past couple of years. Social networks are now used for everything from personal thoughts to critical business information, and everything in-between. This article will briefly cover the most popular social networking site, Facebook, and how you can begin to leverage this information in your cases.

Facebook.com now has more than 500 million users worldwide and has more internet traffic than Google at 7.7% of all Internet communications. Facebook users leverage this technology to update their "status" with opinions and thoughts, build large networks of old and new friends, communicate on a "wall" in which others participate, and post pictures as the basics. Facebook also provides two different private communication mechanisms in the form of messages, which is very similar to email, and chat which is a real-time conversation with someone that is online at the same time, but not viewable by other Facebook users. You can even provide someone with a virtual "poke".
 
With this great source of personal information, the privacy of this information should obviously be protected. This is where the fun begins. In the past, the privacy settings for a Facebook account were somewhat complex to understand the end result. Essentially, you secure your information by designating who can view it: everyone, friends of friends, or friends only (and many combinations thereof). Just to make things interesting, Facebook sometimes changes the end result their privacy settings to automatically opt you into new settings if you do not manually change them. To get an idea as to how much controversy is surrounding Facebook's privacy settings, a Google search for "Facebook Privacy Settings" returns 79.5 million results. Here is good resource to lockdown your Facebook profile, 33 pages of screenshots and tutorials. I will go ahead and disclose that a small population of Facebook users has their privacy settings properly set to protect their information. It is this lack of security that recently facilitated the personal information of 100 million Facebook users to be compromised and distributed. Not only can failing to properly set your privacy settings be embarrassing, it can also be very dangerous. The wife of the head of the British spy agency MI6 accidentally disclosed their family information that, due to her husband's position, many feel endangered their family.
 

You have made the time investment to properly lock down your profile to the maximum settings; all of your actions are now secure right? Wrong.  You can only control your content. If someone else "tags" you in a picture and posts it in their wall, the privacy settings of the person that posted the picture of you determines if the Facebook community can view it. The same situation applies when you post a comment to someone's wall or participate a conversation that already exists.  One more thing to consider, do you really know all of your "friends" on Facebook?

So how can information help your case? Let's go through some examples. The Plaintiff has filed a claim that an accident at his workplace is preventing him from working and has "diminished" his quality of life. In a deposition, he states, "I can no longer enjoy my hobbies because of the pain". However, his Facebook page has posts from the great Florida wakeboarding trip he just returned from for everyone to see. The others that joined him on the trip also have Facebook accounts and made the story even better by tagging him in some great pictures with him riding wakeboards (it appears that he is pretty good). The husband in a divorce claims that due to the downturn in the economy, he cannot make his child support payments. Yet his Facebook wall conveys that he just returned from a trip to Vegas and pictures of the boat that he plans to purchase soon. Facebook is now being used by some law enforcement agencies to crack down on underage drinking. One of my personal favorites happened right here in Tennessee. A woman was arrested for violating an order or restraint for sending the other party a Facebook "poke".
 

Facebook has also been the source of litigation and played a role in jury selection for a high profile murder case. A Knoxville marketing firm filed a $2 million libel lawsuit against a former client claiming comments posted on the social media sites, Facebook and Twitter, hurt its reputation. During the jury selection for a local murder case, one of the jurors was found to have accessed a Facebook specific to the victims of the murder.

 

Social networking sites like Facebook are big business. Much of our population participates in the world of Facebook. This can be a great source to learn more about your client, opposing parties, even experts that may be involved in the case. Their status updates, pictures, comments, and even the Facebook groups they join may provide value in your case. What many people still fail to realize is that once something has been published on  the Internet, it can't be taken back. I am really looking forward to the day when some of these people decide to further their career or run for office. I will continue develop future articles on social networking sites for this newsletter that cover additional topics. Please email me to suggest a topic you would like to see.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
                           

 
                        How Facebook Can Make or Break Your Case
 

As I was performing the research for this newsletter article, I found that Law Technology News had the same idea and published a great article on using Facebook in litigation. You can read the article here. The article has some great links, including ISP mailing addresses and a sample consent form.
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
                           

 
                        LinkedIn Evidence In A Lawsuit - It Was Only A Matter of Time
 

Linked in is another social networking site that is typically more geared toward professional relationships. We will cover how LinkedIn works in a future newsletter. Here is a very good blog post that incorporates many of the social networking sites and their potential valued role in litigation.

 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
                           

 
                        Anything You Say on Facebook May Be Used Against You in a Court of Law 
 

Recently the webmaster here at Sword & Shiled posted an article on our blog with good information and links to articles pertaining to Facebook in Divorce matters and Tax implications. You can view this post here.

 
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
 
 

EDiscovery Case Law
 

 
Court Finds Failure to Preserve Evidence Including Text and Skype Messages Warrants a $10,000 Sanction

                  Passlogix, Inc. v. 2FA Tech., LLC, 2010 WL 1702216 (S.D.N.Y. Apr. 27, 2010). 
 
In this licensing agreement litigation, the plaintiff sought sanctions through an adverse inference instruction, preclusion and costs, alleging the defendants failed to implement a litigation hold and spoliated electronic evidence. Despite admitting to the deletion of the e-mails, text messages, Skype messages, and network and computer logs, the defendants denied the relevance of the electronic evidence to the pending case. Addressing the spoliation, the court reiterated that a litigation hold must be put in place and routine document retention/destruction policies must be suspended, which the defendants failed to accomplish. The court found the failure to preserve e-mails and text and Skype messages constituted gross negligence while the failure to preserve computer logs was intentional. Balancing the defendants' "litigation conduct with its status as a small corporation," the court determined that a $10,000 monetary fine was the appropriate remedy.
 
-----------------------------------------------------------------------------------------------------

 
Counsel's Failure to Understand Computer and Archive Systems Results in Production Delay, Monetary Sanctions

In re A & M Florida Props. II, 2010 WL 1418861 (Bkrtcy.S.D.N.Y. Apr. 7, 2010)
 
In this bankruptcy litigation, the defendant sought sanctions alleging the plaintiffs and their counsel intentionally obstructed the discovery process by causing misunderstandings and by delaying the production of relevant e-mails, which resulted in "needless costs and frustrations." The plaintiffs eventually produced more than 9,500 e-mails that were stored in the company archive system following two forensic searches. Based on the absence of intentional destruction and the fact that the sought-after e-mails were ultimately produced, the court noted that dismissal or an adverse inference would be "unjustly harsh." However, the court found that the plaintiffs' counsel "did not understand the technical depths to which electronic discovery can sometimes go" and noted that counsel has an obligation to search for sources of information to understand where data is stored. According to the court, if the plaintiffs' counsel would have spoken with key figures at the company regarding the computer and archiving systems in place, the forensic search and subsequent motions would have been unnecessary. As such, the court found monetary sanctions to be appropriate.
 
-----------------------------------------------------------------------------------------------------
 
 
Court Imposes Permissive Adverse Inference Instruction for Intentional Deletion of E-Mails, Draws Distinctions Between Pension Committee
 
Rimkus Consulting Group, Inc. v. Cammarata, 2010 WL 645253 (S.D.Tex. Feb. 19, 2010)
 
In this employment agreement dispute, the plaintiff sought sanctions, costs and attorneys' fees, and a finding of contempt, alleging the defendants intentionally spoliated evidence and failed to produce requested discovery. Before addressing the parties' specific arguments, the court noted that "spoliation of evidence - particularly of electronically stored information - has assumed a level of importance in litigation that raises grave concerns" and "distract[s] from the merits of a case, add[s] costs to discovery, and delay[s] resolution." Moving to the case specifics, the court found the defendants intentionally lost, altered and deleted e-mails, and sent the case back to the jury with a permissive adverse inference instruction. The court also awarded the plaintiff attorneys' fees and costs incurred in the spoliation investigation. Notably, the court distinguished the recent Pension Committee ruling from the Southern District of New York, finding the differences between circuits in relation to culpability of parties limited the applicability of the approach taken in Pension Committee. The court identified an additional distinction in regard to the burden of proof in relation to relevance and prejudice of spoliated evidence.
 
-----------------------------------------------------------------------------------------------------

 
Court Issues Default Judgment Sanction for Defendant's "Shocking" Discovery Misconduct, Finds Over $83 Million in Judgment Not Dischargeable
In re Hecker, 2010 WL 654151 (Bkrtcy.D.Minn. Feb. 23, 2010)
 
 In this ancillary bankruptcy proceeding, the plaintiff requested default judgment sanctions, alleging the defendant repeatedly failed to produce privilege logs and responsive ESI, and engaged in offensive discovery despite court orders prohibiting those actions. The defendant argued he was unable to produce large amounts of the requested ESI since the documents were located on his computers and servers that were in government custody. First, the court noted that the majority of information requested remained in the defendant's possession, since the government made forensic images of the data. Next, the court detailed the "shocking" behavior of the defendant and his counsel throughout the discovery process, which included belated and incomplete productions, violation of court orders, and delivery of an external hard drive containing 1.1 million scrambled files and folders. Based on this behavior, the court determined the defendant acted in bad faith and willfully abused the discovery process. Due to the court's certainty that no court order would secure the defendant's cooperation, the plaintiff's motion for a default judgment sanction was granted and $83,070,987 of the plaintiff's judgment against the defendant was not dischargeable.
 
-----------------------------------------------------------------------------------------------------

 
New York Court Provides Detailed Instruction on Protocol for Discovery of Cloned Hard Drive
 
Schreiber v. Schreiber, 2010 WL 2735672 (N.Y. Sup. Ct. June 25, 2010)
 
In this matrimonial action, plaintiff sought access to her husband's (the defendant) office computer to determine his true financial condition.  After denying plaintiff's initial motion, the court directed (by stipulated order) that a clone of defendant's office hard drive be made at plaintiff's expense.  Thereafter, the court denied plaintiff's motion for access to the cloned drive upon finding her request for unrestricted access overbroad.  "Equally important" to the court was plaintiff's failure to propose any protocol for investigation of defendant's hard drive.  The court instructed that should the plaintiff wish to renew her motion, her renewal "must contain a detailed, step-by-step discovery protocol that would allow for the protection of privileged and private material."  Moreover, the court provided detailed instruction for what such a protocol should contain: Read more here.
 
-----------------------------------------------------------------------------------------------------

 
Court Orders Retention of Third Party Vendor to Assist with Document Review and Production, Appoints Special Master to Resolve Future Disputes

Multiven, Inc. v. Cisco Sys., Inc., 2010 WL 2813618 (N.D. Cal. July 9, 2010)
 
Observing that plaintiff and counterdefendants had insisted upon "a review process that guarantees that they will not finish this extensive project in any reasonable amount of time", namely reviewing large volumes of information without first narrowing the material using search terms, the court acknowledged the need to expedite production and directed plaintiff and counterdedendants to retain a third party vendor to assist in their discovery efforts.  Accepting defendant's offer, the court further ordered that Cisco would bear half the cost. Read more here.
 
-----------------------------------------------------------------------------------------------------

 
Culpability for Allowing Evidence to Become Inaccessible a Factor for Consideration when Determining Good Cause to Compel Production
 
Major Tours, Inc. v. Colorel, 2010 WL 2557250 (D.N.J. June 22, 2010)
 

Appealing an order from the magistrate judge, plaintiffs argued that defendants should bear the costs of producing inaccessible data where it was defendants' failure to preserve that resulted in the data's inaccessibility.  The court declined to support such a rule, finding that defendants' culpability was merely a factor for consideration when deciding whether to compel production for good cause.  The court also found that the magistrate judge had adequately considered defendants' culpability when crafting the underlying order and did not abuse his discretion.  Accordingly, the order was affirmed. Read more here
-----------------------------------------------------------------------------------------------------

 
Jury Instruction Allowing Inference that Destroyed Evidence Was Unfavorable and Payment of Attorneys' Fees and Costs Ordered as Sanction for Failure to Preserve
 
Medcorp, Inc. v. Pinpoint Tech., Inc., 2010 WL 2500301 (D. Colo. June 15, 2010)
 

Finding "willful" spoliation of 43 hard drives "in the sense that Plaintiff was aware of its responsibilities to preserve relevant evidence and failed to take necessary steps to do so", a special master ordered a jury instruction which allowed the jury to infer that the destroyed evidence was unfavorable to plaintiff and for the parties to split the cost of defendants' litigation of the spoliation issue.  Upon a motion to modify the order, the magistrate judge affirmed the imposition of the jury instruction, but found plaintiff should pay all of defendants' reasonable expenses and ordered payment of $89,365.88. Read more here.  
-----------------------------------------------------------------------------------------------------
 


 
Our Website
 
Forensic Discoveries is available to provide onsite presentations or Q&A sessions on topics such as Electronic Discovery, Technical Implications of the updated Federal Rules of Civil Procedure, or Computer Forensics. Forensic Discoveries is also available to you, obligation free, to answer any specific questions pertaining to these topics. Simply give us a call and we will be glad to answer any questions pertaining to Electronic Discovery and Digital Forensics.
 

a division of Sword & Shield

   Knoxville Office

   Phone:    (865)-244-3500

   Address:  1431 Centerpoint Blvd, Suite 150

                  Knoxville, TN 37932


   Washington D.C. Office

   Phone:    (410)-414-5580

   Address:  1425 K Street NW, Suite 350

                 Washington, DC 20005-3514


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 

If you have a topic that you would like addressed in the newsletter, please let us know. Either visit http://www.forensicdiscoveries.com/newsletter.html and submit your suggestion there or reply to this e-mail with your suggestion. 

For previous versions of Forensic Discoveries EDiscovery newsletters, click here 

This document does not provide legal or other professional advice and should not be relied upon as anything other than a starting point for research and information on the subject of electronic evidence and digital forensics.