Email Environment Investigation

Brief

HKA’s Cybersecurity and Privacy Risk Management experts were engaged to investigate the integrity of a sports-industry client’s Office 365 environment after an employee’s mobile device was stolen.

What we did

HKA’s Cybersecurity and Privacy team dispatched a digital forensics expert to evaluate the client’s Office 365 Environment to ensure the theft of the mobile phone posed no lingering or ongoing malicious persistence.

HKA reviewed two user accounts to determine if any data exfiltration or lateral movement occurred following the theft. HKA’s investigation also determined the extent of malicious activity perpetrated by the hackers, and whether additional localized forensics were necessary on the client’s hosted or on-premises systems.

Outcomes

HKA identified what data had been read by the hacker and determined the act posed no threat of lateral movement within the organization. HKA also determined there was no exfiltration of data and worked with the client to ensure their internal cyber-environment is secure.