Councillors were told this week that a live investigation remains ongoing though the IT system recovery phase is now complete.