Category: Digital Forensics Expert Witness

  • Digital Forensics Expert Not Allowed to Opine on Driver Behavior

    Digital Forensics Expert Not Allowed to Opine on Driver Behavior

    This litigation arises from a motor vehicle accident that occurred during the early morning hours of May 10, 2023, on Interstate 20 in Bienville Parish, Louisiana. Ja’Vel Coleman alleged that she sustained injuries when her vehicle struck the rear of a tractor-trailer operated by Saint Fleur.

    According to Defendants, Saint Fleur experienced mechanical issues with his tractor-trailer and pulled onto the shoulder of Interstate 20 prior to the collision.

    During discovery, Defendants retained Dr. Douglas C. Brown and Josh Lorencz.

    Brown examined Coleman on January 15, 2026, and subsequently issued an expert report setting forth his findings and opinions while Lorencz reviewed AT&T Call Detail Records and identified calls and text messages associated with the phone number, the times of those communications, and the cell towers used during those communications.

    Coleman sought to exclude, or alternatively limit, the testimony of Dr. Douglas C. Brown and Josh Lorencz under Federal Rule of Evidence 702 and the Daubert standard.

    Orthopedic Surgery Expert Witness

    Dr. Douglas Coleman Brown has been in private practice in North Louisiana since 1977 and is certified by the American Board of Orthopaedic Surgery and the American Board of Independent Medical Examiners. He also is a member of the American Orthopaedic Foot and Ankle Society.

    Want to know more about the challenges Douglas Brown has faced? Get the full details with our Challenge Study report.

    Digital Forensics Expert Witness

    Josh Lorencz possesses substantial training and experience in the field of cell phone forensics. He spent approximately sixteen years with the Simi Valley Police Department working as a detective and police officer and then subsequently worked in digital forensics for Envista Forensics before joining Rimkus.

    Lorencz has several certifications in digital forensics and has performed numerous digital analyses of this kind. 

    Discover more cases with Josh Lorencz as an expert witness by ordering his comprehensive Expert Witness Profile report.

    Discussion by the Court

    I. Douglas Brown

    a. Future Medical Costs

    Coleman first sought exclusion of Brown’s opinions regarding future medical costs. In their opposition, Defendants expressly stipulate that Brown will not testify or offer opinions regarding Coleman’s future medical costs and represent that they have retained a separate expert to address those issues.

    b. Coleman’s Neurological Condition and the October 2023 EMG

    Coleman challenged Brown’s opinions regarding Coleman’s neurological condition, arguing that Brown failed to adequately account for an October 2023 EMG report showing radial neuropathy and performed an insufficient neurological examination.

    The Court found that these criticisms go to the weight of Brown’s testimony rather than its admissibility. Brown acknowledged the EMG findings during his deposition and provided an explanation for why the study did not alter his clinical conclusions during his January 2026 examination.

    Coleman has not demonstrated that Brown employed an unreliable methodology such that exclusion is warranted under Rule 702. Any alleged shortcomings in Brown’s review of the medical records, interpretation of the EMG, or physical examination may be explored through cross-examination.

    c. Return to Work

    Coleman also sought exclusion of Brown’s opinion that Coleman is capable of returning to her pre-injury sedentary occupation to the extent that opinion relies upon his neurological findings. Because the Court found that Coleman has not established a basis for excluding Brown’s neurological opinions, the Court likewise declined to exclude his opinions regarding Coleman’s functional capacity and work restrictions.

    d. Future Treatment

    Coleman next sought to exclude Brown’s opinions regarding future surgical treatment and the appropriate surgical approach to Coleman’s anticipated hip arthroplasty. Coleman emphasizes that Brown no longer performs orthopedic surgery and testified regarding certain physical limitations.

    The Court found no basis for exclusion of this testimony. The record reflects that Brown is a board-certified orthopedic surgeon who practiced orthopedic surgery for decades, performed the type of procedures at issue during his career, remains licensed, and continues to practice medicine and perform independent medical examinations.

    Any reduction in his surgical practice or disagreement regarding the appropriate surgical approach affects the weight of his testimony rather than its admissibility.

    II. Josh Lorencz

    a. Qualifications

    Based upon Lorencz’s education, training, and professional experience, the Court found that he possesses sufficient qualifications to testify regarding cell site location analysis. Accordingly, the Court found that Lorencz is qualified to offer expert testimony in this matter.

    b. Reliability of Methodology

    Coleman argued that Lorencz’s opinions should be excluded because his CellHawk training occurred in 2016, he has not attended refresher courses since that time, and he cannot explain the software’s internal processes.

    Notably, Coleman did not challenge the general reliability of cell site location analysis itself. Instead, Coleman argued that Lorencz lacked sufficient familiarity with the CellHawk software because he has not received recent training and cannot explain the software’s internal processes.

    Here, the record reflected that Lorencz has extensive experience utilizing CellHawk and performing cell site location analyses. The fact that he cannot explain the software’s back-end functionality did not render his methodology unreliable.

    Any alleged deficiencies in Lorencz’s familiarity with CellHawk’s internal workings can be scrutinized on cross-examination and affect the weight of his testimony rather than its admissibility. Accordingly, the Court rejected Coleman’s argument that Lorencz’s opinions should be excluded based upon his training history or inability to explain CellHawk’s internal processes.

    Coleman also argued that Lorencz failed to reliably apply his methodology because he did not independently verify cell tower locations. During his deposition, Lorencz acknowledged that he has independently verified tower locations in prior matters but did not do so in this case. Instead, he relied upon the AT&T records and CellHawk’s mapping functions.

    The Court found that this criticism goes to the weight of Lorencz’s testimony rather than its admissibility.

    Although Lorencz acknowledged that independent verification through tools like Google Earth may be used to ensure accuracy of the cell tower locations, Coleman has identified no authority finding that such verification is a prerequisite to admissibility under Rule 702.

    Likewise, the Court is aware of no authority suggesting that an expert’s failure to employ every available validation technique renders an otherwise reliable methodology inadmissible. The Court concluded that Lorencz’s decision not to independently verify the tower locations presents an issue appropriately explored through cross-examination.

    c. Scope of Permissible Testimony

    Lorencz was retained to analyze AT&T Call Detail Records associated with a particular telephone number. His report identifies calls and text messages, the timing of those communications, and the cell towers associated with those communications. The record further reflects that Lorencz reviewed the AT&T Call Detail Records and the Louisiana Uniform Crash Report but did not review GPS data, electronic logging device (“ELD”) data, or other location-specific information.

    Lorencz testified that cell site location analysis did not permit him to determine the precise GPS location of a device. Rather, he can only identify the tower and sector utilized during a communication.

    Thus, the fact that a communication utilized a specific tower only indicates that the device was within the serviceable range of that tower at that time; it does not establish the device’s precise location.

    Accordingly, Lorencz may testify regarding the contents of the AT&T Call Detail Records, the timing of the calls and text messages reflected therein, the cell towers and sectors associated with those communications, and the general principles underlying cell site location analysis. Such testimony may assist the jury in understanding the evidence.

    However, the Court finds that the methodology employed by Lorencz does not support testimony concerning the precise location of any vehicle or person, the precise time that Saint Fleur arrived at the accident location, the length of time that any vehicle remained at a particular location, or other conclusions that cannot be reliably derived from the Call Detail Records.

    Likewise, Lorencz may not offer opinions regarding user identity, driver behavior, distraction, causation, or matters beyond the scope of his report and expertise.

    Held

    The Court granted in part and denied in part Coleman’s Daubert motions to exclude and/or limit the testimony of Dr. Douglas Brown and Josh Lorencz.

    Key Takeaway

    Experts routinely rely upon specialized software tools without possessing detailed knowledge of the software’s source code or internal algorithms.

    However, Rule 702 requires not only that expert testimony be reliable, but also that it assist the trier of fact. Thus, even where an expert is qualified and employs a reliable methodology, the testimony must remain within the bounds of what that methodology can reasonably support.

    Case Details:

    Case Caption: Coleman v. Burlington Ins. Co.
    Docket Number: 5:24cv512
    Court Name: United States District Court, Louisiana Western
    Order Date: July 13, 2026
  • Digital Forensics Expert’s Analysis of Website Activity Considered Relevant

    Digital Forensics Expert’s Analysis of Website Activity Considered Relevant

    This is a copyright infringement action filed by CoStar Group, Inc. and CoStar Realty Information, Inc. (collectively, “CoStar”) in September 2020 against Commercial Real Estate Exchange Inc (“CREXi”).

    CoStar is a company that provides commercial real estate (“CRE”) information, analytics, and online property listing marketplaces. It owns and operates LoopNet.com, a digital marketplace platform for CRE listings. CoStar contended that CREXi has engaged in “mass infringement” of CoStar’s photographs. Apparently, CREXi and its BPOs copied listing information, including images, from LoopNet when a listing could only be found on LoopNet, and that CREXi would take screenshots of photos or otherwise crop out CoStar’s watermarks from photos to build out listings on its website.

    CREXi filed a Daubert Motion to exclude the opinions of CoStar’s expert, Mr. Daniel Roffman. CoStar retained Roffman to opine on CREXi’s access to the LoopNet website.

    Digital Forensics Expert Witness

    Daniel E. Roffman is Vice President in the Forensic Services Practice. He has over 20 years of digital forensics and information security consulting experience, helping clients protect their most valuable information, and investigating allegations of trade secret theft and cyber incidents.

    He has extensive testimony experience working on behalf of both plaintiffs and defendants and has served as a court-appointed neutral expert on theft of trade secret cases. Roffman has also testified on a range of other digital forensic subjects including software piracy, cyber investigations, and electronic document authenticity issues.

    Want to know more about the challenges Daniel Roffman has faced? Get the full details with our Challenge Study report

    Discussion by the Court

    Roffman was supposed to analyze LoopNet logs and identify what activity in those logs can be attributable to CREXi and its representatives (including CREXi employees and third-party vendors CREXi retained to complete certain work).

    To begin with, Roffman explained how IP addresses can be used to identify users and track their activity on a website, LoopNet’s tools for logging activity (referred to as “hits”) on its website during a “session,” and how users “anonymous online campaigns” attempt to mask user activity through virtual private networks (“VPNs”), outsourcing tasks to third-party business process outsourcing companies (“BPOs”), and rotating through multiple IP addresses in a single session.

    Rule 403

    Basically, CoStar’s theory of copyright infringement is that CREXi copied its images from LoopNet “on a massive scale,” including by having BPOs copy images from CoStar, crop out CoStar’s watermark logo, and upload them onto CREXi’s website, and that this activity was a company policy at CREXi.

    Given that CoStar’s theory of the case is “mass infringement” by CREXi, the Court found that Roffman’s opinions are not substantially more prejudicial than probative. 

    Accordingly, Roffman’s analysis of the volume of activity on LoopNet’s website attributable to CREXi is relevant to and probative of whether CREXi employees and BPOs copied images off of LoopNet.

    Rule 702

    CREXi contended that Roffman’s opinions are unreliable because IP addresses identify a computer network, not an individual user. But if an IP address is identified as a computer network associated with CREXi, including activity from users on that computer network would likely show activity by users associated with CREXi. Roffman’s testimony attempts to identify LoopNet activity by CREXi and its BPOs. To the extent CREXi contended that this does not accurately capture activity attributable to CREXi, the Court held that it is free to challenge Roffman’s approach on cross-examination.

    Next, CREXi argued that Roffman’s opinions unreasonably assumed that activity from certain IP addresses containing no indicators, which appeared in the same sessions as IP addresses with an indicator, is also attributable to CREXi. Roffman explained why he “swept in” activity from IP addresses with no indicator of CREXi—if a user accessed LoopNet from a “CREXi Referring Website” once, only the activity from that particular session would appear as associated with CREXi. Other activity from that IP address where a user did not access LoopNet through a CREXi Referring Website would be left off of the activity log results. Thus, Roffman included activity from these IP addresses to capture potential CREXi activity where a VPN or rotating IP addresses were employed.

    Roffman relied on both IP addresses and sessions, which capture multiple IP addresses associated with one user in a session. He acknowledged that his approach to this analysis “may still be over inclusive,” despite taking measures to remove some data that appeared associated with CoStar’s clients, CoStar, and private IP addresses. 

    Held

    The Court denied the Defendant’s Daubert motion to exclude the opinions of Daniel E. Roffman.

    Key Takeaway:

    Roffman sufficiently explained his methodology, which is sound and based on his expertise in digital forensics. Again, to the extent CREXi disagreed with Roffman’s methodology because the results may be overinclusive, it is free to challenge his opinions on cross-examination. But questions that go to weight, not admissibility, are for the jury to decide—not the Court.

    Case Details:

    Case Caption: Costar Group, Inc. Et Al V. Commercial Real Estate Exchange Inc.
    Docket Number: 2:20cv8819
    Court Name: United States District Court, California Central
    Order Date: June 26, 2025