MD5 can recover live and deleted data from mobile phone handsets and SIM cards
MD5 can forensically recover all viewable data stored on the handset and SIM card using specialist forensic hardware and software. Our investigations are conducted in a shielding unit to prevent the mobile phone from connecting to the network ensuring no data is altered during the examination.
MD5 convert all phone specific media (such as videos and recordings) into a format viewable on any personal computer.
MD5 provide a detailed printout and compact disk containing the data. A statement is also provided for court purposes.
MD5 have extensive experience in providing expert witness testimony.
MD5 provide expert opinion upon prosecution reports, procedures and findings.
Cell Site Analysis
MD5 are able to provide Cell Site Analysis to all clients. Our cell site expert can offer the following levels of service:
- Provide a desktop review to analyse and map the historical movement of the phone in question, focusing in on places and times of interest.
- Provide on-site cell site analysis network readings and radio surveys to determine if a particular mobile phone mast could have provided service on a particular occasion.
For more information please click here, or to request a quotation please contact Carl Tinker on 01924 220 999 or at This e-mail address is being protected from spambots. You need JavaScript enabled to view it .
Deleted Data
MD5 are the UK's leading specialist in the recovery of deleted data from handset and SIM card memory. We are able to recover any form of deleted user data from all makes of handset including phonebook entries, call logs, text messages, pictures and videos etc. Where normal data retrieval methods are not possible, MD5 are able to conduct 'chip removal' examinations. Our highly experienced security cleared team (CTC level) are happy to discuss any requirements in relation to a specific make and model of phone.
Damaged Handsets
We are able to repair most forms of damage to handsets to allow us to access the user data stored. We are also able to recover data from water and fire damaged mobile phones by directly accessing the memory chips on the board, extracting and decoding the user data stored. Click here for a recent case study involving a fire damaged handset.
SIM less Mobiles
Many mobile phones record the details of the last inserted SIM card. Using specialist equipment we are able to recover these details and then gain access to all the user data stored on the handset including the call logs. This is useful when a Mobile Phone without a SIM card inserted needs to be examined.
PIN Codes
A PIN code (Personal Identification Number) is a 4 to 8 digit code allowing the user to activate a lock feature, thus preventing unauthorised access and use of their SIM card. Although it is possible to enter another SIM card into the handset to view the user data stored, the call logs are linked to the SIM card that was present when the calls were made or received, therefore without this specific SIM card it is not possible to view the call logs.
Without the PIN code it is necessary to apply for the PUK code (Personal Unlock Key) from the service provider. An 8 digit master code that each network provider retains for security reasons. It will over-ride a PIN locked SIM Card allowing full memory access. We are able to partially clone a PIN code protected SIM Card to gain access to all the user data stored on the Mobile Phone including the call logs. It is still necessary to obtain the PIN/PUK code to access the data stored on the SIM Card and to verify the downloaded data for a complete forensic investigation.
Security Codes
Many mobile phones have additional security features which enable a user to password protect the data held on a handset. This prevents access to most of the user data and makes a forensic investigation impossible. At MD5 we are able to access the memory chip and extract the password without altering any data. This allows us to enter the password as the user would to view and download the data.
