iDiscovery Solutions

10/16/2026

Today marks sixteen years at iDS for Jonathan Karchmer, Associate Director, Forensics, and sixteen years of matters that got easier the moment he joined them.

Learn more about Jonathan and our team at idsinc.com/about/team/.

10/15/2026

Faster review is no longer in question. What courts are weighing now is how you got there.

One court approved a party’s use of an AI review tool and declined to order its performance metrics produced. Another ordered an expert’s AI prompts produced as part of her methodology. That order is stayed pending review.

Two courts. One demand: someone has to explain the method. At iDS, AI accelerates the work. The expert owns the conclusion, and stands in front of it.

Should the prompts behind an expert’s work be treated as part of their methodology? Tell us what you think.

Generative AI speeds e-discovery review but raises risks around workflow, accuracy, and confidentiality, with courts weighing in on discovery protocols.

10/14/2026

This week Philadelphia police described a false homicide tip an AI model submitted online. It was flagged as spam and never reached a detective. In the department’s words, a tip is “a lead to assess, not an established fact.”

The same rule belongs in your matter. AI can surface a lead faster than anyone. It becomes evidence only when someone validates it and can explain how.

At iDS, AI accelerates the work. The expert validates the decision. What is the review step in your AI process?

Click below to read, and let us know what you think.

The bad tip “had minimal impact,” but Anthropic said it takes the action seriously, as “the same behaviors could do far more harm as models become more powerful.”

10/14/2026

Every organization eventually has its systems examined. The only variable is who sets the timing: you, through an audit grounded in frameworks such as NIST 800-171 and 800-53, or someone else, through a regulatory inquiry, a CFIUS review, or an investigation following an incident.

The first kind exists so the second kind finds order instead of surprises.

One question: When were your systems last audited by an outside team?
A. Within the past year
B. One to three years ago
C. Longer than that
D. Not sure

If your answer made you pause, that pause is worth a conversation.

Truth Through Data: idsinc.com

10/13/2026

A witness says the file was never opened. An access log says it was opened twice, on the 14th, from a device the witness carried. One of these statements now has a problem, and it is not the log.

That is the quiet power of forensic evidence: it does not argue. It documents. A hash value does not get nervous in deposition. A timestamp does not soften under cross.

This is why the strongest position in any dispute is the one that checked its own claims first. At iDS, that is our job: test what the record actually supports before anyone adverse does it for you.

Truth Through Data: idsinc.com

10/12/2026

The premise of dispute resolution is that evidence means something. AI-generated content is testing that premise, and the discipline that answers it has a name: verify.

At the Techno Security & Digital Forensics Conference in San Diego, iDS Director Bobby Williams presents a session on what synthetic evidence means for how disputes get decided, and what verification looks like when seeing is no longer believing.

Session: Trust but Verify: AI, Synthetic Evidence, and the Future of Dispute Resolution
Wednesday, October 21 | 11:30 am to 12:30 pm
Techno West | Town & Country Resort, San Diego | October 20 to 22

Register and save 10% with code SPK26: https://www.technosecurity.us/west

Truth Through Data: idsinc.com

10/09/2026

Mark Cybersecurity Awareness Month with five questions worth more than a reminder.

Everyone will tell you to patch, train, and stay alert this month. Good advice, already covered. These five go where October usually doesn't, swipe through and score your own organization honestly.

Truth Through Data: idsinc.com

10/08/2026

A flaw in widely used HR software exposed the Bureau. For everyone else, what you can prove depends on evidence you prepared before the breach.

ShinyHunters says it breached the FBI through Oracle PeopleSoft, HR software used across government and industry, and took personnel and medical files on tens of thousands of agents and applicants. A week later, the FBI says whether data was actually stolen is “still undetermined.”

Regulators, insurers and opposing counsel will ask that same question on day one. The answer is in the evidence, and the organizations that get it fastest know where their evidence lives and have experts ready to read it. Are your logs kept long enough to show what left and when? Is there a plan to preserve evidence before recovery overwrites it?

iDS helps organizations answer those questions before they're asked, and defend the answers after.

Click below to read the full piece.

The bureau has not yet publicly confirmed a breach, but has told its agents that their personal information and Social Security numbers were exposed.

10/07/2026

Congratulations to Teddy Brown, celebrating two years at iDS as Managing Director, Damages and Forensic Accounting, building the analyses that carry matters through challenge.

Learn more about Teddy and our team at idsinc.com/about/team/.

10/06/2026

Ransomware just hit its 2026 high. NCC Group's August review, reported by Industrial Cyber, counts 1,073 attacks in a single month, with industrial organizations taking 31% of them. The method matters more than the number: groups like Aurora steal the data first, then encrypt the hypervisors, which takes down the systems that would tell the story.

So recovery doesn't close the matter. Regulators, insurers and opposing counsel will ask what was taken, whose data it was, and when it started. The answer gets rebuilt from what survived: authentication logs, credential activity, and endpoint and cloud records, pulled into one timeline built to survive challenge.

That reconstruction is the work iDS does. Operations come back online, but the questions stay open until the evidence answers them.

Click below to read the full piece.

NCC Group reports that ransomware activity hits a 2026 high as the industrial sector bears 31% of attacks and Qilin dominates.