Data Recovery and Forensic Analysis

Kroll's expertise establishes whether data was compromised and to what extent. We uncover actionable information, leaving you better prepared to manage a future incident.

Contact us
/en/services/cyber-risk/incident-response-litigation-support/data-recovery-forensic-analysis service
Data Recovery: Extending Your Window of Opportunity

When a data breach event occurs, your company only has a short window of time to gather critical evidence. Internal IT resources are often forced to act as a first line of defense – but first responders who are untrained in data recovery and forensic analysis sometimes do more harm than good, damaging critical data or inadvertently mishandling important evidence.

The experts at Kroll have unparalleled experience using forensic software and protocols to perform data collection and data preservation in the wake of a breach. We handle evidence with proven, forensically sound methodology, using data recovery tools and processes that are supported by case law.

We’ll apply forensic science to your technology – from servers to laptops and smartphones – and investigate your physical systems and personnel, getting real answers to your questions and establishing whether data was compromised and to what extent.


Forensic Analysis With an Eye on the Future

Our team members are Certified Information Privacy Professionals (CIPP) and well-versed in the most specialized data recovery tools and processes. We always employ forensically accurate processes, including appropriate chain of custody and documentation. We understand case law regarding the accuracy and reliability of digital tools. We’ll apply state-of-the art technology to your forensic analysis, but we also have the experience to accurately interpret findings, turning data points into a clear story and timeline that can be presented in court.

With Kroll, you can rest assured that your first responders are thinking beyond the immediate crisis towards an enhanced security posture for your company. We’ll work with your counsel on forensic analysis and incident recovery that leaves you in the strongest possible position; we’ll also leave your company protected and better prepared to manage future incidents.

Key Areas

Increased Cyber Resilience with a Cyber Risk Retainer

Kroll delivers more than a typical incident response retainer—secure a true cyber risk retainer with elite digital forensics and incident response capabilities and maximum flexibility for proactive and notification services.

Connect with us

Jason N Smolanoff
Jason N. Smolanoff
President, Cyber Risk
Cyber Risk
Los Angeles
Marc Brawner
Marc Brawner
Managing Director and Global Head of Managed Services
Cyber Risk
Alan Brill
Alan Brill
Senior Managing Director
Cyber Risk

See all servicesStay Ahead with Kroll


Valuation of businesses, assets and alternative investments for financial reporting, tax and other purposes.

Compliance and Regulation

End-to-end governance, advisory and monitorship solutions to detect, mitigate and remediate security, legal, compliance and regulatory risk.

Corporate Finance and Restructuring

Comprehensive investment banking, corporate finance, restructuring and insolvency services to investors, asset managers, companies and lenders.

Cyber Risk

Incident response, digital forensics, breach notification, managed detection services, penetration testing, cyber assessments and advisory.

Environmental, Social and Governance

Advisory and technology solutions, including policies and procedures, screening and due diligence, disclosures and reporting and investigations, value creation, and monitoring.

Investigations and Disputes

World-wide expert services and tech-enabled advisory through all stages of diligence, forensic investigation, litigation and testimony.

Business Services

Expert provider of complex administrative solutions for capital events globally. Our services include claims and noticing administration, debt restructuring and liability management services, agency and trustee services and more.

The Monitor

The Rise of Vishing and Smishing Attacks – The Monitor, Issue 21

Aug 02, 2022

by Laurie Iacono Josh Hickman, Caitlin Muniz


KAPE Quarterly Update – Q2 2022

Jul 19, 2022

by Eric Zimmerman Andrew Rathbun


ModPipe POS Malware: New Hooking Targets Extract Card Data

Jun 02, 2022

by Sean Straw


Q4 2021 Threat Landscape: Software Exploits Abound

Feb 16, 2022

by Keith WojcieszekLaurie Iacono George Glass


Addressing the Ransomware Attack Against Kaseya VSA Customers

Jul 08, 2021

by Scott HansonJaycee RothThomas Brittain Anthony Knutson


Phishing in New Waters: Exploiting Live Chat to Deliver Malware

Jun 23, 2021

by Devon Ackerman Anthony Knutson


Kroll Launches Strategic Communications Service

Jun 01, 2022


Kroll Partners with Armis to Extend Preparedness and Response for OT and ICS Environments

May 09, 2022


Kroll Named a Cyber Security Services Pacesetter by ALM Intelligence

Oct 28, 2020


Kroll Recognized Among Top Managed Security Service Providers Worldwide by MSSP Alert

Sep 29, 2020


KAPE Intensive Training and Certification

Online Event Apr 12 - Dec 08, 2022 | Online Event