Thu, Apr 6, 2023

Uncovering Critical Historical Data to Progress a Complex Legal Case

As part of a major court case, a U.S.-based law firm needed access to key data covering two decades from a multinational corporation in the United Arab Emirates (UAE). With $95 million (mn) at stake, it was critical that as much relevant data as possible was identified. However, this was proving extremely challenging as the information required was historical, with much of it stored in a warehouse in the UAE. Added to this, potentially valuable email data was no longer accessible due to changes in systems and staff.

Despite these challenges, Kroll was able to locate and analyze more than 10 terabytes of data, completing a highly complex data mapping process that enabled the law firm to gain the information it required and ensuring that a highly sensitive and high-value case moves closer to a satisfactory resolution for all parties.



  • Legal Services
  • Subject company concerned about processes
  • Key data inaccessible
  • Large volumes of historical information



Kroll Services
  • Cyber Litigation Support
  • Critical case data obtained
  • Data acquisition report provided
  • Streamlined litigation process
  • Case costs and delays reduced

The Challenge

As part of a matter in dispute in the courts, a U.S.-based law firm needed to collect critical data spanning decades from a multinational corporation in the UAE. The discovery exercise was initially stalled on a jurisdictional basis, but voluntary cooperation was agreed. Discovery later underwent further delays as the law firm was unable to access the detailed historical data it required to inform the case and resolve the issue. This was because the company had significant concerns about the investigation, and the majority of the documentation required was stored in a warehouse in Dubai or was inaccessible due to system changes within the company. An additional obstacle to the process was that most of the company’s current employees lacked knowledge of its  historic IT infrastructure.

Kroll's Solution

The law firm engaged Kroll to develop a productive working relationship with the company and gain an initial understanding of the scale and location of the required data. This was a complex process that entailed the Kroll team visiting the company in person on several occasions to gain the trust of the company’s CEO and convince them to provide access to key historical information. Kroll helped outline the law firm’s discovery requirements, why the data was needed, how the process could be managed, and the privacy and security mechanisms that would be implemented. This was followed by a structured data mapping process which included:

  • Investigating initial data sets to establish the likely presence of additional data within legacy systems
  • Attending the company’s extensive storage site in person to locate relevant paper documents and large bound documents and files, before logging and photographing them and engaging a local vendor to complete a major scanning exercise
  • Investigating the location of electronic data and emails to understand the company’s current and historical IT and email exchange infrastructure and reconstruct past systems and actions
  • Contacting past company employees to help identify the location of email data
  • Searching for company laptops and old servers that could provide relevant data
  • Completing a major forensic imaging exercise for the forensic collection of data once all the relevant data was tracked down
  • Writing contemporaneous notes to accurately document every stage

After collecting more than 10 terabytes of data, the team moved it into Kroll’s Dubai cyber lab facility. Following some triage by Kroll and lawyers from the U.S. firm, 1.3 terabytes of data were then staged and added to the Kroll RelativityOne platform, which streamlines discovery processes to allow legal professionals to store and control millions of documents across devices and jurisdictions from one single interface. As part of this, optical character recognition (OCR) was applied to the data to translate images of text, such as scanned and redacted documents, into actual text characters, ensuring that no key data was missed.

RelativityOne’s AI completed key analytical processes to reduce the quantity of documents requiring review by the lawyers. The 1.3 million documents (including paper-based documents made up 100,000 pages and 75,000 paper files) that were first added to the RelativityOne system were reduced to 250,000 by the searches.

RelativityOne analyzed these remaining documents and then used that insight to search for other data that might have been relevant, allowing the team to make a statistically-informed decision about when to stop reviewing. This ended up saving time and costs for the law firm. The implementation of active learning and statistics also helped to reduce the costs of the review. Of the 250,000 documents, around 40,000 of them were identified as key and used as a priority in the search for evidence.

1.3 million

Number of Documents Started With


Documents After Searches


Documents Identified as Key and Priority for Evidence

The Impact

Comprehensive Case Insight

Kroll’s end-to-end capabilities ensured that every stage of this complex process was maximized to support the entire litigation lifecycle. From site visits in the UAE to establish a productive working relationship with the subject company to a comprehensive analysis of large volumes of data, Kroll’s support meant that the law firm gained the insight needed to progress its case every step of the way.

Global and On-Site Support

By providing “boots on the ground” in Dubai, Kroll ensured that the quality and integrity of the discovery process was not compromised by the geographical distance between the law firm and the company under investigation. Visiting the company in person meant that the Kroll team was able to establish a relationship of trust, helping to convince the company of their legal obligations to ensure access to valuable sources of information.

Easier Access to Key Evidence

The law firm has benefited from faster and easier access to key digital and hard copy information through the strict chain-of-custody protocol Kroll followed at every stage of the data collection process. Kroll’s experience of data collection and persistence in pursuing all potential sources of relevant historical data also means that the law firm did not miss out on information that could impact on the outcome of the case.

Advanced Investigative Resources

The law firm has benefited from advanced investigative capabilities through Kroll’s expertise in achieving the best results from the RelativityOne platform, which combines advanced data analytics, machine learning and visual data mining expertise. Because the analysis process was led and managed by seasoned digital forensics investigators and Relativity-certified administrators, valuable insights to inform the case were quickly and efficiently analyzed.

Independent Representation

By acting as an independent party liaising between the law firm and the company, the Kroll team were able to minimize potential challenges and delays in communication. Because Kroll worked proactively and intensively to uncover the full scale of the potential data, the law firm gained far greater depth and breadth of insight than it otherwise would have done.

Assured Data Integrity

Kroll’s structured data mapping methodology ensured that the law firm could rely on the integrity of the data uncovered for their case. Kroll’s forensic expertise provided a clear structure for the entire process. As part of this, contemporaneous notes were kept, ensuring that the highly complex process was not only executed efficiently but also documented in detail.

Computer Forensics

Kroll's computer forensics experts ensure that no digital evidence is overlooked and assist at any stage of an investigation or litigation, regardless of the number or location of data sources.

Cyber Litigation Support

Whether responding to an investigatory matter, forensic discovery demand, or information security incident, Kroll’s forensic engineers have extensive experience providing litigation support and global eDiscovery services to help clients win cases and mitigate losses.

Strategic Communications Services

Deftly navigate a host of risk and reputational landmines caused by a cyber crisis with a full suite of strategic communications support for incident response, preparedness and training.