An expert in cybersecurity and digital forensics from Minnesota who has provided testimony in numerous courtroom trials during the past three decades is now under scrutiny regarding his qualifications. The Federal Bureau of Investigation (FBI) is conducting an investigation into the expert, which could potentially lead to the review of several previously closed cases where his testimony played a crucial role, according to legal analysts.
An observation from Mr. Lanterman’s LinkedIn page could infer that he possesses a degree from Harvard University.
Mark Lanterman, the founder of Computer Forensic Services (CFS) in Minneapolis, is a former member of the U.S. Secret Service Electronics Crimes Task Force. Lanterman’s career spanning 30 years includes testifying as an expert witness in over 2,000 cases, covering a wide array of legal matters such as workplace disputes, theft of intellectual property, white-collar crime, and class action lawsuits.
However, recent developments saw Lanterman’s profile and professional history removed from the CFS website, following concerns raised by the Hennepin County Attorney’s Office regarding the validation of Lanterman’s educational and employment background. The FBI’s involvement was disclosed by the county attorney’s office, triggering further investigation.
Sean Harrington, an attorney and digital forensics examiner based in Prescott, Wisconsin, alleged that Lanterman provided false information under oath by claiming to hold a Bachelor’s and Master’s degree in computer science from the defunct Upsala College, and having completed postgraduate studies in cybersecurity at Harvard University.
An investigation by the law firm Perkins Coie LLP revealed discrepancies in Lanterman’s educational claims, prompting a request to strike his testimony from a current case involving forensics analysis of a client’s laptop. Perkins Coie’s findings indicated that records from Upsala College during Lanterman’s alleged enrollment period did not include his name.
Addressing the allegations, Lanterman admitted that he could not provide evidence of attending Upsala College, clarifying that his “postgraduate work” at Harvard University actually involved an online cybersecurity course named HarvardX, which explicitly disclaims equivalence to a formal Harvard degree.
Moreover, Lanterman’s omission of his early career as a police officer in Springfield Township, Pennsylvania, from his resume was highlighted by Perkins Coie attorneys who discovered discrepancies in verifying this position. Lanterman’s actions, including retrieving his personnel record from the police department and failing to return it as promised, were noted as questionable.
The Perkins Coie law firm raised concerns over Lanterman’s actions, describing his conduct as deceptive and urging for his exclusion as an expert witness in ongoing cases.
Harrington initially contacted KrebsOnSecurity in late 2023 after Lanterman showcased confidential documents from a ransomware victim during a conference presentation, attributing the refusal by the victim to hire his firm for forensic analysis as the reason. Harrington criticized Lanterman’s claims of involvement in high-profile cases and prestigious speaking engagements as unsubstantiated.
According to court documents, Lanterman’s former clients reported incidents where CFS withheld data as leverage during billing disputes. In a statement filed in August 2022, the co-founder of MoreLaw Minneapolis LLC detailed an unsettling encounter with Lanterman over financial disagreements.
Lanterman’s threatening communication regarding data possession prompted concerns from the law firm, highlighting a pattern of questionable practices.
“The contents of Mr. Lanterman’s email left us stunned,”wrote Co-founder of MoreLaw Kimberly Hanlon. “I was unaware of any reputable forensic company threatening to ‘auction’ off an attorney’s information, especially given that the information consists of confidential client data, a substantial portion of which is sensitive.”
In 2009, a Wisconsin-based manufacturing firm that had engaged Lanterman for digital forensics objected to paying an invoice of $86,000 from CFS, deeming it “exorbitant and unsupported.” The firm informed a Hennepin County court that on April 15, 2009, CFS conducted an auction of its proprietary information, breaching their confidentiality agreement.
“CFS observed and held a public auction of electronic data that was entrusted to them as per the terms of the engagement agreement,” the firm stated. “CFS placed the highest bid at the public auction amounting to $10,000.”
Lanterman briefly replied to a questionnaire regarding his background (and recent heart diagnosis) on March 24, stating that he would furnish detailed responses the next day. However, those responses never surfaced. Instead, Lanterman forwarded a recent memorandum he authored to the court targeting Harrington and alleging that his accuser was simply attempting to eliminate a competitor. He has not responded to subsequent requests for remarks.
“During my time at Upsala, I commuted as a student and resided with my grandparents in Morristown, New Jersey roughly 30 minutes from Upsala College,” Lanterman explained to the presiding judge (PDF) overseeing a separate ongoing lawsuit (PDF) in which he provided testimony. “With limited resources, I did not participate in campus social gatherings, nor attended commencement ceremonies. In 2023, I confirmed with Felician University — the holder of Upsala College’s records — that they were unable to locate my transcripts or diploma, a situation they attributed to unresolved financial matters.”
Lanterman was directed to appear in court on April 3 in the lawsuit defended by Perkins Coie, yet he failed to show up. Instead, he sent a message to the judge withdrawing from the case.
“I am 60 years old,” Lanterman informed the judge. “I established my business from scratch. I am finished dealing with individuals like Sean Harrington. And truthfully, I have long been planning to hand over my business to my children. That time has come.”
Lanterman’s letter gives the impression that his retirement was voluntary. However, according to a sworn statement (PDF) submitted in a Florida case on March 28, Mark Lanterman’s son Sean stated that he had made the difficult choice to request his father to step down due to the negative media scrutiny.
Mark Rasch, a former federal cybercrime prosecutor who currently serves as legal advisor to the New York cybersecurity intelligence agency Unit 221B, mentioned that should an expert witness be discredited, defendants who lost cases heavily influenced by that expert’s conclusions at trial might have grounds for appeal.
Rasch highlighted that law firms proposing an expert witness have an obligation in good faith to thoroughly examine that expert’s qualifications, acknowledging that such credentials will be subject to scrutiny in court.
“The federal rules of civil procedure and evidence mandate that experts disclose every case they testified in as an expert over the past few years,” Rasch explained. “A crucial aspect of this due diligence involves examining the outcomes of those cases and the nature of their testimonies.”
Arguably, the most widely reported case involving substantial forensic discoveries from Lanterman was the 2018 conviction of Stephen Allwine, who was convicted of murdering his wife two years earlier after his attempts to hire a hitman on the dark net failed. Allwine is currently serving a life sentence, persisting in his claim that he was framed, thus questioning the computer forensic evidence found on 64 electronic devices seized from his residence.
On March 24, Allwine petitioned a Minnesota court (PDF) to review his case, citing the allegations against Lanterman and his pivotal role as a prosecution witness.
About Author
