[September 2026] Launch of "Departing Employee PC Fraud Investigation Package" to Prevent Data Exfiltration at Resignation

[September 2026] Launch of "Departing Employee PC Fraud Investigation Package" to Prevent Data Exfiltration at Resignation

Digital Forensics 24, which protects corporate critical data, is launching the "Departing Employee PC Log Analysis and Fraud Investigation Package" to address unauthorized exfiltration of trade secrets and personal information by departing or prospective departing employees, as well as intentional data deletion on devices.

This package provides a one-stop service from evidence preservation (cloning) of PCs used by departing employees, to connection history of external storage media such as USB memory, traces of uploads to cloud storage, and recovery and timeline analysis of deleted files. It creates legally valid investigation reports and supports swift decision-making to protect corporate intellectual property and trust.

"Riplus News 2026 Vol.50"

[September 2026] Launch of "Departing Employee PC Fraud Investigation Package" to Prevent Data Exfiltration at Resignation

Background of Service Provision

As employment mobility increases and job changes become common, troubles involving unauthorized exfiltration of trade secrets such as "customer lists," "technical know-how," and "quotes and proposals" when moving to competitors are rapidly increasing.

In recent years, the following issues have become serious risks for companies:

Sophisticated concealment efforts

Not only deleting files just before resignation, but also cases using OS reinitialization or history deletion tools are increasing.

Loss of evidence due to delayed initial response

PCs are redistributed to other employees or overwritten, losing decisive evidence.

Difficulty of proof

Although suspicious, objective and technical evidence is insufficient, making it difficult to take legal measures or claim damages.

Given this background, we have established a dedicated package that can handle not only post-incident investigations but also "precautionary preservation" immediately after resignation notification.

Features of the "Departing Employee PC Log Analysis and Fraud Investigation Package"

1. Advanced recovery technology for deleted or initialized data

Even when files are completely deleted from the recycle bin, quick-formatted, or have traces of deletion by dedicated tools, we attempt to recover files and access logs using advanced data recovery know-how.

2. Identification and visualization of multiple exfiltration routes

Beyond mere file existence confirmation, we identify the following actions in a timeline:

External device connections

Connection dates and model numbers of USB memory, external HDDs, etc.

Cloud/Web routes

History of uploads to personal Google Drive, Dropbox, and attachments sent to personal email.

Printing and other

History of mass printing just before resignation, traces of file renaming or encryption.

3. Submission of "legally valid reports" ensuring evidentiary integrity

We create clones compliant with the international standard of evidence preservation (Chain of Custody) and produce objective reports that can be used directly for internal disciplinary actions, settlement negotiations, litigation, or reports to investigative authorities.

Main Investigation Targets and Items

Target devices

Windows PCs, Macs, external storage, etc.

Investigation items

Recovery of file creation, update, access, and deletion history

Connection history of external devices such as USB storage

Email send/receive and attachment history

Access and upload history to cloud storage

History of recently used files

Service Overview and Usage Flow

Inquiry and interview: Interview about the departing employee's situation, how the issue was discovered, and target devices (free)

Receipt of target devices and evidence preservation: Create a complete copy (forensic image) of the actual device to protect originality

Analysis and data recovery: Log analysis and recovery of deleted data using specialized technology

Report delivery and explanation: Submit a detailed report summarizing investigation results and provide explanation

Service name: Departing Employee PC Log Analysis and Fraud Investigation Package

Official website: https://www.forensic24.com/

Launch date: September 29, 2026

Future Development / Message

Information assets are the source of corporate competitiveness. "Simply preserving the PC at the time of resignation" can prevent or early-resolve future information leak troubles or unauthorized outflow to competitors. Digital Forensics 24 will contribute to creating an environment where companies can focus on their business with peace of mind through advanced analytical capabilities and a rapid response system.

[Digital Forensics Contact]

Digital Forensics 24

Click here for the website

Service name: Data Investigation and Evidence Preservation Digital Forensics 24

Contact: 0120-703-392

Digital Forensics 24 HP: https://www.forensic24.com/

Inquiry form: https://www.forensic24.com/form/

Operating company: Riplus Co., Ltd.

President and Representative Director: Masaki Yanagimachi

Head office: 〒450-0002

Orchid Building 5F, 2-38-2 Meieki, Nakamura-ku, Nagoya, Aichi Prefecture

TEL: 052-414-7561

Company HP: https://www.riplus.co.jp/