• Computer Expert Witness
    Computer Expert
    Digital and Computer Forensics
    Expert Technical Witness
  • Cyber Security Expert
    Cyber Security Specialist
    Digital networks and Data Systems security
    Reducing the Risk of Cyber Attack
  • Digital Forensic Expert
    Dr Paul Hunton
    Digital and Online Investigation Specialist
    Reliable Internet Evidence Recovery

Independent Expert

DIGITAL FORENSICS AND IT DISPUTES

Clear, impartial analysis of complex digital evidence, first assessment through to court.

Discuss a Case

Dr Paul Hunton

EXPERT TECHNICAL WITNESS

Email: paul.hunton@huntonwoods.co.uk

T: +44 (0)1325 978492|M: +44 (0)7747 111602

PDF Profile/CV

Overview

When the Technology Is Complex, the Evidence Is Contested and the Stakes Are High

I am an independent technical expert with nearly 25 years of professional experience in digital forensics, cybersecurity, complex computer systems and the investigation of electronic evidence. My background combines specialist technical investigation and digital forensic examination within UK law enforcement, commercial IT systems design and development, and professional and academic research into data integration and analysis technologies.

A significant part of my work involves cybersecurity incidents and major data breaches, including technical investigation, incident response and the examination of technical evidence in the civil litigation that follows. My instructions have involved major multinational corporations, government bodies, public authorities and high-net-worth individuals, often in complex and high-profile matters across several jurisdictions.

For legal teams facing complex technical issues, my value lies not simply in examining the evidence but in understanding the technology behind it, identifying weaknesses and inconsistencies, testing competing technical explanations and presenting clear, independent conclusions capable of withstanding scrutiny.

Computer Expert Witness

I have provided expert evidence in civil and criminal proceedings, acting for claimants and defendants, prosecution and defence, and as a single joint expert. I present complex technical evidence clearly and in a form the court can rely on.

Digital Forensic Examination

From digital devices and electronic communications to large-scale business systems, I examine electronic evidence and assess the authenticity, integrity and reliability of digital documentation, including evidence that may have been manipulated.

Complex IT Disputes

I advise on the technical issues behind high-value commercial and IT disputes, including the implementation and fitness for purpose of enterprise systems, software copyright, patent claims and electronic tendering.

Cyber Breach Investigation

I have been instructed in litigation arising from some of the most widely reported data breaches in the UK and Ireland, examining how systems were compromised and what the technical evidence shows about the security measures in place.

Education and Professional Qualifications

I hold three academic degrees in computing, including a professional doctorate (D.Prof) in Business Intelligence Systems and Data Integration and Analysis Technologies, an MSc in e-Business Technologies and a BSc in Business Computing.

I am a Chartered Engineer (CEng) and a Fellow of the British Computer Society (FBCS), with continuing specialist training in digital investigation and cybersecurity.

Nearly 25 Years of Experience

Notable Case Highlights

I have undertaken numerous complex technical investigations, nationally and internationally, involving high-value commercial disputes, cybersecurity incidents, major data breaches, high-net-worth individuals and serious international criminal cases. My work includes the identification of manipulated electronic evidence, the independent review of existing forensic findings and the assessment of the authenticity, integrity and reliability of digital documentation.

I have acted for claimants and defendants, prosecution and defence, and as a single joint expert (SJE). My evidence has been subject to judicial scrutiny, including recognition by the Commercial Court for my contribution as an expert witness.

  • IPJSC United Company Rusal v Whiteleave Holdings Limited and others [2026]

    International Commercial Dispute

    Instructed in a high-value international commercial dispute involving the forensic examination and analysis of complex electronic evidence, including issues surrounding document provenance, authenticity, integrity and attribution.

  • Zellis UK Data Breach [2026]

    Data Breach Litigation

    Instructed in the matter involving Zellis UK and the exploitation of the MOVEit Transfer software.

  • R v Hussain [2026]

    Terrorism Act Offences

    Instructed in a matter involving offences under the Terrorism Act relating to the alleged dissemination of terrorist material using online social media platforms.

  • Capita plc Data Breach [2026]

    Data Breach Litigation

    Instructed in the matter involving the data breach of Capita plc.

  • Data Protection Commission (Ireland) v TikTok Technology Limited [2025]

    International Data Protection

    Instructed in the matter involving TikTok’s failure to comply with GDPR in relation to its transfer and processing of personal data in China.

  • The National Corruption Bureau of Ukraine v Oleksandr Hranovskyi [2025]

    Organised Crime

    Instructed in the matter involving the Ukrainian People’s Deputy on charges of organised crime.

  • Quantum (SPG PTE) v DKT Allseas Shipping Ltd [2025]

    Business Systems Dispute

    Instructed to assist with the complex technical issues surrounding a large-scale distributed CRM and business intelligence system dispute, including its implementation and fitness for purpose.

  • R v Eaton [2025]

    Computer Hacking

    Instructed in a matter involving the hacking and exploitation of a medical charity’s computer systems.

  • R v Bashforth [2025]

    Pension Fraud

    Instructed in the matter involving fraud connected with a pension liberation scheme.

  • Republic of Montenegro v Dusko Knezevic [2024]

    Legal Document Plagiarism

    Instructed in the matter involving legal document plagiarism.

  • easyJet Data Breach [2024]

    Data Breach Litigation

    Instructed in the matter involving the data breach of the easyJet airline.

  • Police Federation of England & Wales [2024]

    Data Breach Litigation

    Instructed in the matter involving the data breach of the Police Federation.

  • Arnold Clark Data Breach [2024]

    Data Breach Litigation

    Instructed in the matter involving the data breach of the Arnold Clark automotive group.

  • R v Sterritt and others [2023]

    Denial of Service Attack

    Instructed in the matter involving a Denial-of-Service (DoS) attack against Microsoft.

  • The National Corruption Bureau of Ukraine v Oksana Varakina [2023]

    Corruption and Bribery

    Instructed in the matter involving the former Ukrainian MP on charges of creating an organised crime group and bribery.

  • Andrew Tate [2023]

    International Criminal Investigation

    Instructed in the matter involving the Tate brothers and the investigation surrounding the allegations of people trafficking, rape and organised crime.

  • CW and CG Claims Limited v Clarkewood Limited [2022]

    Significant Financial Dispute

    Instructed in a significant financial dispute to examine a large-scale distributed CRM system and establish transactions originating from relevant parties.

  • Fastway Couriers Ireland [2022]

    Data Breach Class Action

    Instructed in the class action involving the data breach of the Fastway courier network and data systems, which led to the loss of personal data and an investigation by the Irish Data Protection Commission.

  • Ticketmaster UK Ltd [2021]

    Data Breach Class Action

    Instructed in the class action involving the large-scale data breach of the Ticketmaster online ticket purchase system, which led to the loss of personal and financial data.

  • R v Cornelio, Perez and Sanchez [2021]

    National Security System Sabotage

    Instructed by the Royal Gibraltar Police to examine software systems and processes surrounding the alleged hacking and/or sabotage of the National Security Centralised Intelligence System.

  • R v James Skilling and others [2021]

    International Criminal Communication Network

    Instructed in one of the first EncroChat cases in the UK following the takedown of the communication network by the French Authorities and Europol and brought to trial by the National Crime Agency.

  • CPD Powerlines Limited v Northern Ireland Electricity Networks Limited [2021]

    National Infrastructure Commercial Dispute

    Instructed to consider the electronic tendering processes and systems in a high-value commercial dispute.

  • Erdenet Mining Corporation, Mongolia [2020]

    International Government Corruption

    Instructed in a matter involving a major Mongolian state-owned mining corporation and allegations of high-level government corruption involving a former Prime Minister.

  • Currys PC World - DSG Retail Ltd [2020]

    Data Breach Class Action

    Instructed in the class action involving the large-scale data breach of Currys PC World store data and IT systems, which led to the loss of personal and financial data.

  • British Airways [2020]

    Data Breach Class Action

    Instructed in the class action against British Airways involving the large-scale loss of personal and financial data surrounding their website.

  • Huawei Technologies Co [2019]

    International Legal Challenge

    Instructed in the matter against the Royal Canadian Mounted Police in relation to the arrest of Huawei’s chief financial officer Meng Wanzhou.

  • R v Mohammed Khilji [2018]

    Encouraging Terrorism

    Instructed in the case of Khilji, charged under the Terrorism Act with the creation and dissemination of terrorist material in the form of digital media. Khilji was convicted of encouraging terrorism.

  • Ryanair v Google [2017]

    Internet Advertising Dispute

    Instructed in the challenge raised by Ryanair relating to Google’s AdWords programme.

  • Tourplan Pacific Ltd v Australian Tours Management Pty Ltd [2017]

    Software Copyright

    Instructed to assist with the complex technical issues surrounding an international software copyright dispute concerning a global travel management system.

  • R v Elliot Hyams and others [2016]

    FBI Investigation of the Dark Web

    Instructed by the defence in one of the first UK trials relating to the infamous Dark Web online marketplace ’Silk Road’. Working in the New York offices of the Federal Bureau of Investigation (FBI), I examined and reviewed the investigation processes, data handling practices and the reliability of electronic evidence produced during the FBI’s investigation of the ’Silk Road’ website and Bitcoin servers.

  • Nicocigs Limited v Fontem Holdings 1 BV and Fontem Ventures BV [2016]

    International Patent Dispute

    Instructed in a high-value patent claim to examine the reliability and provenance of complex technical evidence. My technical analysis established that the findings of the claimant’s highly reputable technical experts were incorrect and fundamentally flawed.

  • R v Adam Johnson [2016]

    High Profile Grooming Case

    Acting for the prosecution in the case of the Sunderland and England international footballer Adam Johnson, I was instructed to provide expert technical case consultancy, including the forensic recovery and examination of pertinent electronic evidence, expert reporting and court testimony. Johnson was convicted of sexual offences.

  • Orb a.r.l. and ors v Ruhan [2015]

    High Value Commercial Dispute

    Instructed by the claimant in a £100m commercial dispute to establish the reliability and provenance of digital documentation and provide other expert technical investigation and assistance.

  • R v John O’Brien and others [2015]

    International Organised Crime

    Instructed in a high-profile international organised crime case involving the theft of £57m of museum exhibits and artefacts from several museums across Europe.

  • Harbour Supplies Limited v Jeremiah Strongarm Limited [2014]

    Corporate Dispute

    Instructed by the Respondent to re-examine computer systems and electronic data previously examined by digital forensic experts acting for the Claimant. Following re-examination, discrepancies in the Claimant’s technical expert’s examination processes were identified, resulting in sections of technical evidence being amended or withdrawn.

  • R v Undisclosed Youth [2013]

    Computer Hacking

    Instructed to provide expert technical analysis in a complex computer hacking case involving an alleged member of the hacking group ’Anonymous’.

  • Undisclosed [2012]

    Covert Internet Investigation

    Instructed in a matter involving online digital evidence capture and the covert test-purchase and recovery of property associated with a high-profile individual and belonging to a Formula 1 race team.

  • R v Alan Ellis [2009]

    Digital Copyright

    Acting on behalf of the British Phonographic Industry (BPI) and the International Federation of the Phonographic Industry (IFPI) in the first UK criminal investigation into online music piracy and the ’Oink’ website.

Vetting and Background Checks

I am UK government security checked to vetting level SC. I have considerable experience of highly sensitive and confidential cases covering private commercial clients and law enforcement agencies.

As a Chartered Engineer, my technical skills have been independently validated. I have also held accreditation as a trainer under the original GCHQ cybersecurity training accreditation scheme, which likewise required independent validation of my skills and knowledge.

Publications and Academia

Research, Teaching and Training

I am a published academic specialising in cyber investigation and digital evidence recovery, and my research has also involved the development of complex data integration and analysis technologies. I am a former member of the Professional Board of the journal Computer Law & Security Review. I am a university guest lecturer and have taught subjects including digital forensics, cybercrime, Internet investigation and expert witness report writing.

I am also the author of one of the first Maritime Cyber Risk Awareness courses specifically developed for the maritime industry and accredited under the National Cyber Security Centre (NCSC) certified training scheme.