Businesses and organizations have dozens of quality software choices that address email data loss prevention, yet many are still leaving themselves vulnerable. Newer versions of Exchange even have DLP built in, but unless implemented correctly its worthless. During this talk I will show you an example of how, even if DLP is in place, users still try to beat the system. We will go in depth demonstrating how to recover deleted and purged emails using a tool called MFCMAPI. During this talk we will walk through a real investigation process using MFCMAPI and touch on how easily this type of data loss can be prevented.