Police forensics contractor ‘sent phones to Fone Fun Shop’ – Sytech suspended

UKAS suspends a number of its customers each quarter.  This proves it’s doing its job while limiting its financial losses.

The Guardian reports the story of one of them:

Police forensics contractor ‘sent phones to Fone Fun Shop’

Sytech holds major contracts with more than a dozen police forces. Photograph: Alamy

One of the country’s largest digital forensics laboratories has been stripped of its accreditation after a former employee reported concerns about the handling of evidence at the business.

It was found that the company, Sytech, had inadequate vetting procedures for new staff and police exhibits were being transported in private vehicles at a recent inspection.

The Guardian has heard of further concerns from former staff who said that broken phones had been unsealed from evidence bags and sent to a consumer repair shop called Fone Fun Shop. On other occasions phones were sent abroad to be decrypted without the knowledge of the police, a former staff member said.

Sytech, based in Stoke-on-Trent, holds major contracts with more than a dozen police forces, and during a period when police spending on forensics science has fallen precipitously, it is one of the few companies to have expanded. However, concerns have been raised about the chain of custody of evidence entrusted to the company and the case raises broader questions about the outsourcing of forensic work to private labs.

“What made me report them to the forensic services regulator was because I couldn’t get it out of my head [that] any doubt in a case can get a case overturned or thrown out or even an appeal on a previous conviction,” the former Sytech analyst said.

When asked whether phones had been sent to the repair shop, Sytech said in an email: “We have carried out all mobile phone repairs in-house for over 12 months.”

The company said it was not aware of any cases in which the failure to maintain a chain of custody could risk undermining criminal evidence.

A second former employee, who also did not wish to be named, said a police force, understood to be Greater Manchester police, raised concerns with Sytech last year after learning that phones had been sent abroad to be unlocked by the Israeli-founded, Japanese-owned company Cellebrite.

When asked to confirm this, Emily Burton, the head of forensic services at Greater Manchester police, said: “In October 2018, we became aware of potential issues with the data extraction service provided to us by an external digital forensics company. When this potential issue became apparent, we raised this with the national policing leads for forensics, immediately reviewed current investigations and made alternate arrangements for our data extraction needs whilst the matter was resolved.”

Currently no investigations had been significantly affected, Burton said.

In an email, Sytech said the findings of the recent inspection by the UK Accreditation Service (UKAS) “make no reference to our handling of phones requiring pin-decryption”. Currently phones were not sent abroad, the company said, adding that all exhibits sent to external labs for unlocking were transported by a driver with police security clearance in a secure van.

Gillian Tully, the government’s forensic science regulator, declined to comment on specific concerns about Sytech. In general, she said, establishing a continuous chain of custody for evidence was a cornerstone of forensic science. “All organisations engaged in work for the criminal justice system should be well aware of those requirements and of adhering to them,” she said. “If the continuity can’t be established … it could compromise cases.”

Tully said it would be of concern if private labs were subcontracting “outside of the quality chain”.

Nick Baker, the national police lead on digital forensics and deputy chief constable of Staffordshire police, said his force had placed outsourcing to Sytech temporarily on hold while a risk assessment was carried out. “We’re going through a process of understanding what the issues are and understanding what our own exposure and risk is and obviously [we’ll] make a decision based on that,” he said.

Sytech said it had made police aware of its loss of accreditation “fully and frankly”.

It said the company completed “internal authentication of staff” and arranged for the police online application to be completed immediately when staff joined the company. “All new employees go through a period of training and strict supervision during their probationary period,” Sytech said.

In response to the UKAS findings Sytech said it had ceased using privately owned vehicles for the transport of exhibits.

As seen previously with Randox Testing Services, UKAS weren’t quick to spot they’d been accrediting services that fell short of the standards they claim to enforce.

Ergo, “takes one to know one” is disproved.

This entry was posted in Computing, Forensic science and tagged , , , , . Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s