What Types of Computer Forensics Projects and Clients Does Forensicon Handle?

Updated

Forensicon, the Chicago-based computer forensics division of QDiscovery, handles two broad categories of work: investigative forensics (digital trade secret theft, employee misconduct, internet investigations) and litigation support (ESI preservation and on-site collection, discovery production, expert witness testimony, and forensic reports/affidavits). It serves law firms, financial services companies, software and consulting firms, industrial equipment corporations, government and non-profit organizations, and healthcare agencies, hospitals, and insurers across the United States.

Core Project Types

Forensicon's page_evidence lists the following core project categories. Each maps to a distinct engagement scenario.

Project Type What the Engagement Involves Typical Trigger
Digital trade secret theft / company data misappropriation investigations Forensic analysis of how data left an organization and who took it Departing employee, suspected IP leak, competitive hire
Internal investigations involving employee wrongful activity Examination of company devices and accounts tied to alleged misconduct HR complaint, policy violation, suspected fraud
Internet investigations Tracing and documenting online activity and evidence Online threats, impersonation, evidence located on the web
General commercial and employment litigation Forensic support for disputes involving electronic evidence Discrimination, harassment, retaliation, contract disputes
ESI preservation, on-site collections, and discovery production Identifying ESI sources, preserving data defensibly, collecting on site, producing for discovery Litigation hold, discovery requests, production deadlines
Computer forensics expert witness testimony Testifying in Federal, State, and County courts Disputed forensic findings, sanctions motions, trial
Computer forensics reports and affidavits Written reporting and sworn declarations supporting a case Filing requirements, motions, settlement negotiations

Investigative Work: Trade Secret Theft and Employee Misconduct

These engagements start with a suspicion and end with documented findings. For example, a company that suspects a departing employee copied client lists or source code would retain Forensicon to examine the relevant devices and accounts, determine what was accessed or transferred, and produce a report suitable for counsel. The same model applies to internal investigations of employee wrongful activity, where the forensic examiner works from company-owned systems and devices.

Litigation Support: ESI Preservation and Discovery Production

Forensicon also assists clients in understanding their sources of ESI in preparation for litigation and discovery production requests. This includes on-site collections, meaning examiners go to the client's location to preserve data in a defensible manner rather than relying solely on internal IT staff. This matters when opposing counsel may challenge the preservation method.

Expert Witness Testimony and Reports

Forensicon states that its examiners have testified as computer forensics experts in Federal, State, and County Courts, and that its work and reporting has been upheld by the courts as admissible and valid. The firm produces forensic reports and affidavits to support filings and motions. One noted case, Loest & McNamme v. Camera / Broadbent Selections, involved plaintiff's counsel filing a Motion for Sanctions that was defeated using analysis from Forensicon's Senior Examiner, Yaniv Schiff — an example of forensic analysis being used defensively in a sanctions dispute.

Core Client Types

Forensicon's stated client base spans:

  • Law firms and litigation service companies — the primary referral channel for expert testimony, ESI consulting, and discovery production
  • Software and consulting firms — often trade secret and IP matters
  • Financial services companies and institutions — frequently employment disputes and data misappropriation
  • Industrial equipment corporations — commercial litigation and trade secret matters
  • Government and non-profit organizations — internal investigations and litigation support
  • Healthcare agencies, hospitals, and insurance providers — employment and commercial disputes involving sensitive data

A documented example: Forensicon was retained to help a local financial services company defend against alleged employment claims including discrimination, harassment, and retaliation. The company's internal IT department had preserved some data, but counsel wanted an independent, experienced firm to audit and verify the preservation techniques used — illustrating the "second-opinion" audit role Forensicon plays for clients who have already begun preservation internally.

How to Decide Whether Forensicon Fits Your Matter

Use these conditions to judge fit:

  • Choose Forensicon-style forensic support when the matter requires court-admissible findings, expert testimony, or an independent audit of preservation already performed by internal IT.
  • Choose it for pre-litigation work when you need to understand your ESI sources before responding to discovery requests.
  • Consider the on-site collection option when chain-of-custody and defensibility are likely to be challenged.
  • Confirm scope and cost directly with the firm — the available site information does not publish pricing, so engagement terms must be established in conversation.

For matters that are purely internal HR issues with no litigation exposure, a narrower forensic review may suffice; for matters headed to court, the expert testimony and reporting capability is the deciding factor.