{"id":1112,"date":"2025-04-07T02:31:17","date_gmt":"2025-04-07T02:31:17","guid":{"rendered":"https:\/\/techtrendfeed.com\/?p=1112"},"modified":"2025-04-07T02:31:17","modified_gmt":"2025-04-07T02:31:17","slug":"cyber-forensic-knowledgeable-in-2000-circumstances-faces-fbi-probe-krebs-on-safety","status":"publish","type":"post","link":"https:\/\/techtrendfeed.com\/?p=1112","title":{"rendered":"Cyber Forensic Knowledgeable in 2,000+ Circumstances Faces FBI Probe \u2013 Krebs on Safety"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div>\n<p>A Minnesota cybersecurity and laptop forensics knowledgeable whose testimony has featured in 1000&#8217;s of courtroom trials over the previous 30 years is going through questions on his credentials and an inquiry from the <strong>Federal Bureau of Investigation<\/strong> (FBI). Authorized specialists say the inquiry could possibly be grounds to reopen a variety of adjudicated circumstances through which the knowledgeable\u2019s testimony could have been pivotal.<\/p>\n<div id=\"attachment_70889\" style=\"width: 827px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" aria-describedby=\"caption-attachment-70889\" decoding=\"async\" class=\"size-full wp-image-70889\" src=\"https:\/\/krebsonsecurity.com\/wp-content\/uploads\/2025\/03\/marklanterman-linkedin.png\" alt=\"\" width=\"817\" height=\"597\" srcset=\"https:\/\/krebsonsecurity.com\/wp-content\/uploads\/2025\/03\/marklanterman-linkedin.png 817w, https:\/\/krebsonsecurity.com\/wp-content\/uploads\/2025\/03\/marklanterman-linkedin-768x561.png 768w, https:\/\/krebsonsecurity.com\/wp-content\/uploads\/2025\/03\/marklanterman-linkedin-782x571.png 782w\" sizes=\"auto, (max-width: 817px) 100vw, 817px\"\/><\/p>\n<p id=\"caption-attachment-70889\" class=\"wp-caption-text\">One would possibly conclude from studying Mr. Lanterman\u2019s LinkedIn profile that has a level from Harvard College.<\/p>\n<\/div>\n<p><strong><a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.linkedin.com\/in\/marklanterman\" target=\"_blank\" rel=\"noopener\">Mark Lanterman<\/a><\/strong> is a former investigator for the U.S. Secret Service Electronics Crimes Job Power who based the Minneapolis consulting agency <strong>Laptop Forensic Companies<\/strong> (CFS). The CFS web site says Lanterman\u2019s 30-year profession has seen him testify as an knowledgeable in additional than 2,000 circumstances, with expertise in circumstances involving sexual harassment and office claims, theft of mental property and commerce secrets and techniques, white-collar crime, and sophistication motion lawsuits.<\/p>\n<p>Or not less than it did till final month, when Lanterman\u2019s profile and work historical past had been quietly faraway from the CFS web site. The elimination got here after <strong>Hennepin County Legal professional\u2019s Workplace<\/strong> <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.hennepinattorney.org\/news\/news\/2025\/March\/lanterman-disclosure\" target=\"_blank\" rel=\"noopener\">stated<\/a> it was notifying events to 10 pending circumstances that they had been unable to confirm Lanterman\u2019s academic and employment background. The county lawyer additionally stated the FBI is now investigating the allegations.<\/p>\n<p>These allegations had been raised by <strong>Sean Harrington<\/strong>, an lawyer and forensics examiner primarily based in Prescott, Wisconsin. Harrington alleged that Lanterman lied underneath oath in courtroom on a number of events when he testified that he has a Bachelor of Science and a Grasp\u2019s diploma in laptop science from the now-defunct <strong>Upsala Faculty<\/strong>, and that he accomplished his postgraduate work in cybersecurity at <strong>Harvard College<\/strong>.<\/p>\n<p>Harrington\u2019s claims gained steam due to digging by the legislation agency <strong>Perkins Coie LLP<\/strong>, which is defending a case whereby a shopper\u2019s laptop computer was forensically reviewed by Lanterman. On March 14, Perkins Coie attorneys <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/krebsonsecurity.com\/wp-content\/uploads\/2025\/03\/155-1.pdf\" target=\"_blank\" rel=\"noopener\">requested the decide<\/a> (PDF) to strike Lanterman\u2019s testimony as a result of neither he nor they might substantiate claims about his academic background.<\/p>\n<p>Upsala Faculty, situated in East Orange, N.J., operated for 102 years till it closed in 1995 after a interval of declining enrollment and monetary difficulties. Perkins Coie instructed the courtroom that they\u2019d visited <strong>Felician College<\/strong>, which holds the transcripts for Upsala Faculty in the course of the years Lanterman claimed to have earned undergraduate and graduate levels. The legislation agency stated Felician <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/krebsonsecurity.com\/wp-content\/uploads\/2025\/03\/155-21.pdf\" target=\"_blank\" rel=\"noopener\">had no document of transcripts for Lanterman<\/a> (PDF), and that his title was absent from the entire Upsala Faculty pupil yearbooks and graduation applications throughout that interval.<\/p>\n<p>Reached for remark, Lanterman acknowledged he had no solution to show he attended Upsala Faculty, and that his \u201cpostgraduate work\u201d at Harvard was the truth is an eight-week on-line cybersecurity class referred to as <strong>HarvardX<\/strong>, which cautions that its certificates shouldn&#8217;t be thought-about equal to a Harvard diploma or a certificates earned by conventional, in-person applications at Harvard College.<\/p>\n<p>Lanterman has testified that his first job after faculty was serving as a police officer in Springfield Township, Pennsylvania, though the Perkins Coie attorneys famous that this function was omitted from his resume. The attorneys stated once they tried to confirm Lanterman\u2019s work historical past, \u201cthe police division responded with a narrative that may be virtually inconceivable to imagine if it was not corroborated by Lanterman\u2019s personal e-mail communications.\u201d<\/p>\n<p>As recounted within the March 14 submitting, Lanterman was deposed on Feb. 11, and the next day <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/krebsonsecurity.com\/wp-content\/uploads\/2025\/03\/155-21.pdf\" target=\"_blank\" rel=\"noopener\">he emailed the Springfield Township Police Division<\/a> to see if he may have a peek at his previous personnel file. On Feb. 14, Lanterman visited the Springfield Township PD and requested to borrow his employment document. He instructed the officer he spoke with on the telephone that he\u2019d lately been instructed to \u201cget his affairs so as\u201d after being recognized with a grave coronary heart situation, and that he wished his previous file to indicate his household about his early profession.<\/p>\n<p>In line with Perkins Coie, Lanterman left the Springfield Township PD along with his personnel file, and has not returned it as promised.<\/p>\n<p>\u201cIt&#8217;s surprising that an knowledgeable from Minnesota would journey to suburban Philadelphia and abscond along with his decades-old personnel file to obscure his background,\u201d the legislation agency wrote. \u201cThat seems to be the worst and most egregious type of spoliation, and the deception alone is motive sufficient to exclude Lanterman and contemplate sanctions.\u201d<\/p>\n<p>Harrington initially contacted KrebsOnSecurity about his considerations in late 2023, fuming after sitting by <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.dropbox.com\/scl\/fi\/srxrxkwyf03inudrw9ymn\/2023-Seminar-Recording-copy-copy-1.MP4?rlkey=th0yqylm5uvmq84skfg8qvfh3&amp;e=1&amp;dl=0\" target=\"_blank\" rel=\"noopener\">a convention speech<\/a> through which Lanterman shared paperwork from a ransomware sufferer and instructed attendees it was as a result of they\u2019d refused to rent his firm to carry out a forensic investigation on a current breach.<\/p>\n<p>\u201cHe claims he was concerned within the Martha Stewart investigation, the Bernie Madoff trial, Paul McCartney\u2019s divorce, the Tom Petters investigation, the Denny Hecker investigation, and lots of others,\u201d Harrington stated. \u201cHe claims to have been invited to talk to the Supreme Court docket, claims to coach the \u2018total federal judiciary\u2019 on cybersecurity yearly, and is a school member of america Judicial Convention and the Judicial Faculty \u2014 positions which he obtained, partially, on a home of fraudulent playing cards.\u201d<\/p>\n<p>In an interview this week, Harrington stated courtroom paperwork reveal that not less than two of Lanterman\u2019s earlier shoppers complained CFS had held their knowledge for ransom over billing disputes. In <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/krebsonsecurity.com\/wp-content\/uploads\/2025\/03\/2022-10-26_Declaration-ofKimberlyHanlon.pdf\" target=\"_blank\" rel=\"noopener\">a declaration<\/a> (PDF) dated August 2022, the co-founder of the legislation agency <strong>MoreLaw Minneapolis LLC<\/strong> stated she employed Lanterman in 2014 to look at a number of digital units after studying that one in all their paralegals had a prison fraud historical past.<\/p>\n<p>However the legislation agency stated when it pushed again on a consulting invoice that was far larger than anticipated, Lanterman instructed them CFS would \u201cescalate\u201d its assortment efforts in the event that they didn\u2019t pay, together with \u201ca declare and lien in opposition to the information which can end in a public public sale of your knowledge.\u201d<\/p>\n<p>\u201cAll of us had been flabbergasted by Mr. Lanterman\u2019s e-mail,\u201d wrote MoreLaw co-founder <strong>Kimberly Hanlon<\/strong>. \u201cI had by no means heard of any reputable forensic firm threatening to \u2018public sale\u2019 off an lawyer\u2019s knowledge, significantly figuring out that the information is comprised of confidential shopper knowledge, a lot of which is delicate in nature.\u201d<span id=\"more-70780\"\/><\/p>\n<p>In 2009, a Wisconsin-based manufacturing firm that had employed Lanterman for laptop forensics balked at paying an $86,000 bill from CFS, calling it \u201cextreme and unsubstantiated.\u201d The corporate instructed a Hennepin County courtroom that on April 15, 2009, CFS carried out an public sale of its commerce secret data in violation of their confidentiality settlement.<\/p>\n<p>\u201cCFS seen and carried out a Public Sale of digital data that was entrusted to them pursuant to the phrases of the engagement settlement,\u201d the corporate wrote. \u201cCFS submitted the best bid on the Public Sale within the quantity of $10,000.\u201d<\/p>\n<p><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter size-full wp-image-70891\" src=\"https:\/\/krebsonsecurity.com\/wp-content\/uploads\/2025\/03\/27-cv-12-22089-ExtrusionDiesIndustries.png\" alt=\"\" width=\"1039\" height=\"439\" srcset=\"https:\/\/krebsonsecurity.com\/wp-content\/uploads\/2025\/03\/27-cv-12-22089-ExtrusionDiesIndustries.png 1039w, https:\/\/krebsonsecurity.com\/wp-content\/uploads\/2025\/03\/27-cv-12-22089-ExtrusionDiesIndustries-768x324.png 768w, https:\/\/krebsonsecurity.com\/wp-content\/uploads\/2025\/03\/27-cv-12-22089-ExtrusionDiesIndustries-782x330.png 782w\" sizes=\"auto, (max-width: 1039px) 100vw, 1039px\"\/><\/p>\n<p>Lanterman briefly responded to an inventory of questions on his background (and up to date coronary heart analysis) on March 24, saying he would ship detailed replies the next day. These replies by no means materialized. As an alternative, Lanterman forwarded a current memo he wrote to the courtroom that attacked Harrington and stated his accuser was solely attempting to take out a competitor. He has not responded to additional requests for remark.<\/p>\n<p>\u201cOnce I attended Upsala, I used to be a commuter pupil who lived with my grandparents in Morristown, New Jersey roughly half-hour away from Upsala Faculty,\u201d Lanterman <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/krebsonsecurity.com\/wp-content\/uploads\/2025\/03\/ACU-Plasmold-Lanterman-Repsonse-Letter.pdf\" target=\"_blank\" rel=\"noopener\">defined to the decide<\/a> (PDF) overseeing <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/krebsonsecurity.com\/wp-content\/uploads\/2025\/03\/2025-03-12_memo-toCourt-1.pdf\" target=\"_blank\" rel=\"noopener\">a separate ongoing case<\/a> (PDF) through which he has testified. \u201cWith restricted assets, I didn&#8217;t take part in campus social occasions, nor did I attend commencement ceremonies. In 2023, I confirmed with Felician College \u2014 which maintains Upsala Faculty\u2019s data \u2014 that they might not find my transcripts or diploma, a scenario that they indicated was probably on account of unresolved money-related points.\u201d<\/p>\n<p>Lanterman was ordered to look in courtroom on April 3 within the case defended by Perkins Coie, however he didn&#8217;t present up. As an alternative, he despatched a message to the decide withdrawing from the case.<\/p>\n<p>\u201cI&#8217;m 60 years previous,\u201d Lanterman <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/krebsonsecurity.com\/wp-content\/uploads\/2025\/03\/lanterman-retire.png\" target=\"_blank\" rel=\"noopener\">instructed the decide<\/a>. \u201cI created my enterprise from nothing. I&#8217;m carried out coping with the likes of people like Sean Harrington. And fairly frankly, I&#8217;ve been planning at turning over my enterprise to my youngsters for years. That point has arrived.\u201d<\/p>\n<p>Lanterman\u2019s letter leaves the impression that it was his resolution to retire. However in keeping with <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/krebsonsecurity.com\/wp-content\/uploads\/2025\/03\/affidavit-seanlanterman.pdf\" target=\"_blank\" rel=\"noopener\">an affidavit<\/a> (PDF) filed in a Florida case on March 28, Mark Lanterman\u2019s son Sean stated he\u2019d made the tough resolution to ask his dad to step down given all of the destructive media consideration.<\/p>\n<p><strong>Mark Rasch<\/strong>, a former federal cybercrime prosecutor who now serves as counsel to the New York cybersecurity intelligence agency <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.unit221b.com\" target=\"_blank\" rel=\"noopener\">Unit 221B<\/a>, stated that if an knowledgeable witness is discredited, any defendants who misplaced circumstances that had been strongly influenced by that knowledgeable\u2019s conclusions at trial may have grounds for attraction.<\/p>\n<p>Rasch stated legislation companies who suggest an knowledgeable witness have an obligation in good religion to vet that knowledgeable\u2019s {qualifications}, figuring out that these credentials shall be topic to cross-examination.<\/p>\n<p>\u201cFederal guidelines of civil process and proof each require specialists to listing each case they&#8217;ve testified in as an knowledgeable for the previous few years,\u201d Rasch stated. \u201cA part of that due diligence is pulling up the outcomes of these circumstances and seeing what the character of their testimony has been.\u201d<\/p>\n<p>Maybe probably the most well-publicized case involving important forensic findings from Lanterman was the 2018 conviction of <strong>Stephen Allwine<\/strong>, who was <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.fox9.com\/news\/convicted-dark-net-killer-claims-innocence-i-couldnt-have-done-it\" target=\"_blank\" rel=\"noopener\">discovered responsible of killing his spouse<\/a> two years earlier after makes an attempt at hiring a hitman on the darkish internet fell by. Allwine is serving a sentence of life in jail, and continues to take care of that he was framed, casting doubt on laptop forensic proof discovered on 64 digital units taken from his dwelling.<\/p>\n<p>On March 24, Allwine <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/krebsonsecurity.com\/wp-content\/uploads\/2025\/03\/78.pdf\" target=\"_blank\" rel=\"noopener\">petitioned a Minnesota courtroom<\/a> (PDF) to revisit his case, citing the accusations in opposition to Lanterman and his function as a key witness for the prosecution.<\/p>\n<\/p><\/div>\n\n","protected":false},"excerpt":{"rendered":"<p>A Minnesota cybersecurity and laptop forensics knowledgeable whose testimony has featured in 1000&#8217;s of courtroom trials over the previous 30 years is going through questions on his credentials and an inquiry from the Federal Bureau of Investigation (FBI). Authorized specialists say the inquiry could possibly be grounds to reopen a variety of adjudicated circumstances through [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":1114,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[58],"tags":[961,959,792,962,963,960,262,964,211],"class_list":["post-1112","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-cases","tag-cyber","tag-expert","tag-faces","tag-fbi","tag-forensic","tag-krebs","tag-probe","tag-security"],"_links":{"self":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/1112","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1112"}],"version-history":[{"count":1,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/1112\/revisions"}],"predecessor-version":[{"id":1113,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/1112\/revisions\/1113"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/media\/1114"}],"wp:attachment":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1112"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1112"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1112"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}<!-- This website is optimized by Airlift. Learn more: https://airlift.net. Template:. Learn more: https://airlift.net. Template: 69d9690a190636c2e0989534. Config Timestamp: 2026-04-10 21:18:02 UTC, Cached Timestamp: 2026-05-06 16:56:06 UTC -->