CONFIDENTIAL · BOCA RATON, FL
Removal of Inappropriate Content
What happened to you is not your fault, and it is not something you have to sort out alone or explain twice.
If intimate or unlawful images of you were published without consent, preserve them before you delete anything. Enetsec documents the material, traces its source, and then pursues removal with the platforms. The laboratory has handled these cases since 1999. Call (561) 846-9010 in Boca Raton, Florida.
You are probably reading this at a bad hour, and the strongest feeling you have is that you want it gone. That instinct is completely normal. Before you act on it, please read the next section, because the first thing most people do is the one thing that makes the rest harder.
Preserve Before You Delete
Do not delete the messages. Do not block the account yet. Do not close the conversation.
We know that is the opposite of what you want. Here is why it matters. The moment you delete a message thread, you also delete the timestamps, the account identifiers and the metadata that show who sent it and when. Platforms remove accounts. Posts get taken down and reposted somewhere else. Within a week, the material that could identify the person may exist nowhere except in the copy you did not keep.
PRESERVATION STEPS
So the first step is to preserve. That means:
- Take screenshots of everything, including the profile pages and the URLs
- Do not delete any message thread, email or notification
- Do not confront the person, because that often triggers wider distribution
- Write down dates, times and anything you remember, while it is fresh
- Then call us at (561) 846-9010 so we can capture it properly
Screenshots are a good emergency measure but they are not evidence on their own, because a screenshot carries no proof of when it was taken. We perform verified captures that record the page state, the URL, the capture time and a hash value, so that what you hand to a platform, an attorney or the police holds up.
Tracing Where It Came From
Once the material is preserved, we work backward toward the source.
We examine the accounts distributing it, the image files themselves and any metadata they carry, the upload and posting timeline, the reuse of the same material across sites, and the message records where you have them. Often the material has been reposted many times, and the useful question is where it entered circulation, not where you found it.
When we examine the accounts and files in a case like this, the first thing we look for is the earliest instance, because that is usually the one closest to the person responsible.
This Work Has a Long History Here
CASE FILE — 2007
In 2007 Wanderson Castilho investigated the case of Rose Leonel, a Brazilian journalist whose private images were published without her consent. He traced the material to its source, and the examination produced a conviction. Brazil later passed Lei 13.772/2018, which is popularly known as the Rose Leonel Law. Castilho solved the case the law is named after.
We tell you that not as a promise about your case, because no honest examiner promises an outcome. We tell you because this is not new work to us and you are not going to have to explain to us why it matters.
Pursuing Removal
With the material documented and the source traced, removal becomes something you can pursue from a position of evidence rather than from a report form.
We prepare removal requests for each platform in the form their trust and safety teams act on, including the verified capture, the URLs and the legal basis. Where content sits on a website rather than a platform, we prepare documentation for the hosting provider and the domain registrar. We give your attorney an exhibit set that supports a demand letter, a protective order application or a filing. We give law enforcement a package they can work from rather than a verbal account. And we monitor for reappearance, because this material often resurfaces, and a fast, documented response to the second posting is far more effective than the first.
THE LIMIT
We cannot promise that any specific item will come down. Platforms make their own decisions and no firm controls them. What we control is how well documented and how well argued the request is, and that is what makes the difference between a request that gets actioned and one that gets a form reply.
Confidentiality
Your case is handled by a small number of named examiners and nobody else. We do not use case details in marketing. We do not need to see more of the material than the examination requires. If you would rather speak with a woman on our team, say so on the first call and we will arrange it.
If the material against you is part of a wider coordinated campaign rather than a single incident, see our page on the management and interruption of defamatory crises, where the same identify-then-remove sequence is applied at larger scale. If you also need to know who is behind an anonymous account, see identification of the origin of internet attacks.
Frequently Asked Questions
NO. 1 Is my case confidential?
Yes. Case material is held on encrypted storage accessible only to the examiners assigned to your matter, and access is logged. We do not discuss cases publicly, we do not use case details in marketing, and we do not disclose your identity to anyone without your written instruction or a lawful requirement. Where you are working with an attorney, we can take the engagement through counsel. We keep only what the examination requires and destroy working copies at the close of the matter on your instruction.
NO. 2 Will an examination damage my device or alter my data?
No. We examine a verified copy, never the original. Acquisition is performed with write-blocking hardware or the equivalent software controls so that nothing is written back to your device, and the copy is hash-verified against the original to prove nothing changed. Your phone or computer is returned to you in the state it arrived in. If a device cannot be acquired without alteration, which occasionally happens with certain devices, we tell you before we do anything and you decide.
NO. 3 How is evidence stored, and how long do you keep it?
Evidence is held on encrypted, access-controlled storage in our laboratory, with every access logged. Retention is set in your engagement letter rather than by us unilaterally, because the right period depends on whether litigation is likely or a limitations period is running. A common arrangement is retention through the life of the matter plus an agreed period after it closes. At the end of that term we destroy the material and give you written confirmation, or we return it to you.
NO. 4 What does the forensic process look like from start to finish?
Five stages. First a confidential intake call where you describe what happened and we tell you what to preserve immediately. Second, acquisition, where we capture the content and any devices under documented chain of custody. Third, examination, where we analyze the material and trace the source. Fourth, reporting, where you receive a written report with verified exhibits. Fifth, action, where we prepare removal packages for platforms and exhibits for your attorney or for law enforcement, and monitor for reappearance.
NO. 5 Can I speak directly with the founder?
Yes. Wanderson Castilho founded Enetsec in 1999 and remains personally involved in casework, particularly in matters of this kind. He is a Certified Computer Examiner with a BSc in Physics from the Federal University of Paraná, has given 40 depositions in the past four years, and has authored four books on cybercrime and digital investigation. Call (561) 846-9010 and ask for him directly.
NO. 6 Are your digital forensic experts certified and court qualified?
Yes. Wanderson Castilho holds Cellebrite and AccessData certifications and the Certified Computer Examiner (CCE) credential, holds a BSc in Physics from the Federal University of Paraná, has 21 years in practice, and is a member of the Association of Certified Fraud Examiners. He has served on the electronic law commission of the São Paulo bar association and represented South and Central America to the Michigan Collegiate Cyber Defense Network.
Call Us Before You Delete Anything
You can call (561) 846-9010 and simply describe what happened. There is no form to complete first and no need to prepare anything. If you would rather write, our contact page reaches the same people. We will tell you on that first call exactly what to preserve, and we will start from there.
Call (561) 846-9010, email [email protected], or start at /contact-us/. For a wider coordinated campaign, see management and interruption of defamatory crises.
CONFIDENTIAL INTAKE MON–FRI 8:00 AM – 5:00 PM EN / PT / ES