MOBILITY

MOBILITY 4Iiib AT&T AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm •3/4 \---s""s e AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in lit OTC. Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 a Conn. Seizure Time Time CUTC) ST Originating Terminating Number Number MORI INSI CT Feature 1 03/01/20 19:58:27 0:09 0:00 NM 2 03/02/20 16:34:38 0:03 0:00 MO 3 03/02/20 16:35:15 0:10 0:00 MT (1 4 03/02/20 16:35:19 0:24 0:00 MO 5 03/02/20 16:36:05 0:06 0:00 MT (NIORI 6 03/02/20 16:36:05 0:07 0:00 MO 7 03/02/20 16:36:53 0:09 0:47 MO 8 03/02/20 16:43:46 0:09 0:04 MT 9 03/02/20 16:44:06 0:06 2:06 MO 10 03/03/20 21:36:01 0:07 30:41 MO 11 03/04/20 18:52:26 0:08 1:40 MT 12 03/04/20 19:46:37 0:20 0:05 MO 13 03/04/20 22:07:25 0:05 47:57 MO 14 03/04/20 23:04:25 0:03 0:39 MO 15 03/05/20 00:56:24 0:33 0:00 MO AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 1 SDNY_GM_00170884 EFTA01342942 ---PAGE BREAK--- .111020 MOBILITY S AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm "‘" ss° AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in \C ite UTC. Run Date: Run Time: Voice Usage For: Item Conn. Date 0""n.. dildimmo Conn. Seizure Time Tine (UTc) Er Originating Terminating SRI INBI Cr Member Number Feature 16 03/05/20 00:58:14 0:07 0:26 MT (Ni-ri:NIOPI 17 03/05/20 13:22:45 0:11 1:13 NO (Ni-ri:MIORI 18 03/05/20 14:04:59 0:20 0:00 MT (NIOPI 19 03/05/20 15:49:47 0:29 0:00 MT (Ni-ri:NIOPI 20 03/05/20 15:49:48 0:30 0:01 MT (MI - ri:NIOP:CFNA:VM] 21 03/05/20 15:50:04 0:08 0:00 MT (MI -fi:NI081 22 03/05/20 17:14:12 0:02 0:34 MO CM/ -fi:NIOA1 23 03/05/20 17:15:32 0:07 0:00 MO 24 03/05/20 18:27:34 0:19 0:05 MO 25 03/05/20 18:29:16 0:20 0:04 MO 26 03/05/20 18:42:42 0:20 0:03 MO 27 03/05/20 20:38:46 0:10 9:04 MO (VCORAI 28 03/05/20 20:51:35 0:05 0:00 MO (1 29 03/06/20 15:08:17 0:04 1:07 NO (W1-81:N101:1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 2 SDNY_GM_00170885 EFTA01342943 ---PAGE BREAK--- .111020 MOBILITY `~~ AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: Run Tine: Voice Usage For: Item Conn. Date 06/17/2020 NM= Conn. Seizure Tim Sum (USC) CT Originating Terminating DC IM8I Cr Number number Feature 30 03/06/20 20:02:56 0:20 0:05 MO [Ni-fil 31 03/06/20 20:51:24 0:03 0:58 MO [Ni-fi:NIOA1 32 03/06/20 21:03:38 0:14 0:00 MT [Ni-fi:NIOPI 33 03/06/20 21:04:01 0:08 0:00 MT [Ni-fi:NIOPI 34 03/06/20 21:04:33 0:03 0:16 MO [Ni-fi:NIOAI 35 03/06/20 21:09:32 0:03 0:51 MO [Ni-fi:NIOAI 36 03/06/20 21:32:36 0:03 1:11 MO [Ni-fi:NIOAI 37 03/07/20 00:02:25 0:13 0:00 MT (1 38 03/07/20 00:02:25 0:24 0:00 ST [HIM 39 03/07/20 00:02:26 0:25 0:05 ST (NIOP:CfNA:VM] 40 03/07/20 16:17:45 0:15 0:00 ST (NIOPI 41 03/07/20 18:21:38 0:05 0:08 MT (MITR:INIORI 42 03/07/20 18:21:40 0:25 0:04 MO -ri:NIORI 43 03/07/20 18:39:48 0:06 0:00 MT -ri:NIOPI 44 03/08/20 00:01:01 0:22 0:00 MT (Mt -ri:NIOPI AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 3 SDNY_GM_00170886 EFTA01342944 ---PAGE BREAK--- .111020 MOBILITY 4III, AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm C at id 1e /4 1..... AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Dato: Run Tine: Voice Usage For: Item Conn. Dato 08/17/2020 Conn. Tama (UMC) Seizure Time ET Originating Terminating DMZ INSI Number number CT Feature 45 03/08/20 18:09:41 0:11 0:00 MT (Ni-Pi:NIOPI 46 03/08/20 18:23:28 0:13 0:00 MT (Ni-Pi:NIOPI 47 03/09/20 00:45:20 0:27 0:00 MT (Ni-Pi:NIOP1 48 03/09/20 00:45:22 0:29 0:01 MT (Ni- ri:NIOP:CPNA:VNI 49 03/09/20 01:30:41 0:17 18:35 MT (NIOA:VCORA1 50 03/09/20 01:30:41 0:18 18:35 NO (Ni-ri:NIOA1 51 03/09/20 14:52:35 0:17 0:00 MT (Ni-ri:NIOPI 52 03/09/20 15:46:24 0:07 0:00 MT (Ni-ri:NIOA1 53 03/09/20 18:49:59 0:04 0:00 NO (Ni-ri:NIOA1 54 03/10/20 17:41:33 0:14 0:00 MT (Ni-ri:NIOPI 55 03/10/20 17:43:58 0:23 0:00 MT (Ni-ri:NIORI 56 03/10/20 17:44:00 0:25 0:58 MT (Ni- ri:NIOA:CPNA:VNI 57 03/10/20 18:36:22 0:13 0:00 MT (Ni-ri:NIOA1 58 03/10/20 23:20:53 0:01 0:00 NO (Ni-ri:NIOA1 59 03/10/20 23:20:57 0:02 0:00 NO (Ni-ri:NIOA1 1PHONE8 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 4 SDNY_GNL00170887 EFTA01342945 ---PAGE BREAK--- .111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm t1/4-15 AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Dato: Run Time: Voice Osage For: Item Conn. Date 0""n.. dildimmo Conn. Seizure Tim Tine (OTC) ET Originating Terminating a@I nMS1 Number Member Cr Feature 60 03/11/20 20:57:26 0:20 0:04 MO (Ili -ri:MIORI 61 03/11/20 21:36:41 0:20 0:04 MO (Ili -ri:MIORI 62 03/11/20 21:48:29 0:20 0:05 MO (Wi-Pit 63 03/11/20 21:56:49 0:21 0:04 MO (Wi-Pit 64 03/12/20 00:33:30 0:02 0:00 MT (RIM 65 03/12/20 16:00:34 0:08 7:20 MO (Wi-Pit 66 03/12/20 18:12:35 0:20 0:03 MO (Wi-Pit 67 03/12/20 19:34:27 0:06 1:09 MO (Wi-Pit 68 03/12/20 19:39:16 0:12 0:00 MO (Wi-Pit 69 03/12/20 19:49:52 0:20 0:03 MO (Wi-Pit 70 03/13/20 16:33:25 0:21 0:04 MO (Wi-Pit 71 03/13/20 17:59:47 0:20 0:03 MO (Wi-Pit 72 03/14/20 15:39:45 0:28 0:00 MT (Wi-ri:MIOPI 73 03/14/20 15:39:45 0:28 0:00 MT (WI- ri:MIOP:CFNA:VM] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 5 SDNY_GM_00170888 EFTA01342946 ---PAGE BREAK--- .111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41.. ..„`•-_--s at's 1/4-6 AT&T Run Date: Run Tine: Voice Usage For: Item Conn. Date 06/17/2020 dill's' Conn. Seizure Tina TiaDO (UTC) ET Originating Terminating =RI INSI Numbor Maher CT Feature 74 03/14/20 20:56:04 0:03 0:02 NO (Mt -ril 75 03/14/20 20:56:10 0:02 0:03 NO (Mt -8/1 76 03/14/20 20:56:19 0:05 0:03 NO (Ni-fil 77 03/14/20 20:56:42 0:02 0:03 NO (Ni-Pil 78 03/14/20 22:49:35 0:19 0:00 MT (NIOP1 79 03/14/20 22:49:36 0:20 0:04 MT (NIOP:CPNR:VN1 80 03/14/20 23:33:17 0:14 0:00 MT (Ni -Pi:NIOP1 81 03/15/20 00:44:05 0:02 0:00 MT (NIOP1 82 03/15/20 00:44:23 0:11 0:00 MT (NIOP1 83 03/15/20 00:44:23 0:11 0:09 MT (NIOP:CPNR:VN1 84 03/15/20 15:46:15 0:18 0:00 MT (Ni -Pi:NIOR1 85 03/16/20 00:36:19 0:14 0:00 MT (1 86 03/16/20 00:36:19 0:25 0:00 ST (NIOR1 87 03/16/20 00:36:21 0:27 0:07 ST (NIOR:CFNA:VN1 88 03/19/20 16:30:35 0:39 0:00 NO -P i1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 6 SDNY_GNL001708.89 EFTA01342947 ---PAGE BREAK--- MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 dildimmo Conn. Seizure Time Time (UTC) ET Originating Terminating DISI Number Number CT Feature 89 03/19/20 19:26:50 0:18 0:00 NO (Ni-Fil 90 03/23/20 03:56:33 0:14 0:00 NT (1 91 03/23/20 03:56:33 0:25 0:00 ST (NIOP1 92 03/23/20 03:56:35 0:27 0:03 ST (NIOS:CVNA:VM] 93 03/23/20 04:01:36 0:26 0:00 NT (Ni-ri:NI081 94 03/24/20 00:20:32 0:24 0:00 NT -Pi:NIOP1 95 03/24/20 00:20:32 0:24 0:00 NT -Pi:NIOP1 96 03/24/20 00:20:38 0:30 0:05 NT (Ni- Pi:NIOP:CFNA:VNI 97 03/24/20 00:20:38 0:30 0:05 NO (Ni-Fil 98 03/24/20 23:44:26 0:06 0:06 NO (Ni-Fil 99 03/24/20 23:45:05 0:22 0:00 NT (Ni-Pi:NIOP1 100 03/24/20 23:45:05 0:22 0:00 NT (NIOP:CNN1 101 03/24/20 23:45:12 0:29 0:04 NT (NIOP:CPNA:CbM:VM1 102 03/24/20 23:45:12 0:29 0:04 NO (Ni-Fil 103 03/26/20 23:55:56 0:20 0:00 NT (Xi —Pi:NIOP1 104 03/27/20 02:21:32 0:13 0:00 NT —Pi:NIOP1 105 03/27/20 14:05:36 0:06 0:00 NT (NIOP1 106 03/27/20 14:05:42 0:13 0:00 ST (NIOP1 107 03/27/20 14:05:42 0:14 0:00 NO (Ni-Fil 1PHONE8 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 7 SDNY_GM_00170890 EFTA01342948 ---PAGE BREAK--- MOBILITY P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 Conn. Time (DMC) Seizure Time CT Originating Terminating LNSI CT Number Number Feature 108 03/27/20 20:17:37 0:05 0:00 MT (Ni-Ti:NIOPI 109 03/27/20 20:52:41 0:11 0:00 MT (Ni-ri:NIOPI 110 03/30/20 23:55:43 0:21 0:00 MT (Ni-ri:NIOPI 111 03/31/20 17:28:06 0:01 0:00 NO (Ni-ril 112 03/31/20 17:28:18 0:07 4:39 NO (Ni-ril 113 04/01/20 16:49:44 0:12 0:00 MT (Ni-ri:NIOPI 114 04/01/20 16:49:44 0:12 0:00 MT (Ni-ri:NIOPI 115 04/01/20 16:49:48 0:16 0:03 MT (Ni-ri:NIOP:CPB:VM] 116 04/01/20 16:49:48 0:16 0:03 NO (Ni-ril 117 04/01/20 16:50:01 0:04 44:44 MT (Ni-ri:NIOPI 118 04/01/20 16:50:01 0:04 14:01 NO (Ni-ril 119 04/01/20 17:04:02 0:00 0:12 NO (1 120 04/01/20 17:04:14 0:00 12:58 NO (Ni-fil 121 04/01/20 17:17:12 0:00 0:12 NO (1 122 04/01/20 17:17:24 0:00 0:15 NO (Ni-fil 123 04/01/20 17:17:39 0:00 0:11 NO (1 124 04/01/20 17:17:50 0:00 3:32 NO (Ni-fil 125 04/01/20 17:21:22 0:00 0:12 NO (1 126 04/01/20 17:21:34 0:00 5:33 NO (Ni-fil 127 04/01/20 17:27:07 0:00 0:11 NO (1 128 04/01/20 17:27:18 0:00 2:26 NO (Ni-fil 129 04/01/20 17:29:44 0:00 0:11 NO (1 130 04/01/20 17:29:55 0:00 0:21 NO (Ni-fil 131 04/01/20 17:30:16 0:00 0:11 NO (1 132 04/01/20 17:30:27 0:00 4:18 NO (Ni-fil AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 8 SDNY_GM_001708.91 EFTA01342949 ---PAGE BREAK--- P.020 MOBILITY "-a. AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm t--_„•-•° AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: Run Time: Voice Usage For: Item Conn. Date 0""n.. dildimmo Conn. Seizure Tine Time (uTc) LT Originating Terminating flax DWI CT Number Number Feature 133 04/01/20 21:54:18 0:21 0:00 MT (Ni-Fi:NIOPI 134 04/01/20 21:54:18 0:21 0:00 MT (Ni-Fi:NIOPI 135 04/01/20 21:54:22 0:25 0:02 MT Fi:NIOP:CFNA:VM] 136 04/01/20 21:54:22 0:25 0:02 MO (Ni-Fil 137 04/01/20 22:49:44 0:10 4:27 MO (Ni-Fil 138 04/01/20 22:49:44 0:10 61:40 MT (Ni-Fi:NIOPI 139 04/01/20 22:54:11 0:00 0:11 MO (1 140 04/01/20 22:54:22 0:00 13:02 MO (Ni-ril 141 04/01/20 23:07:24 0:00 0:09 MO (1 142 04/01/20 23:07:33 0:00 13:50 MO (Ni-ril 143 04/01/20 23:21:23 0:00 0:10 MO (1 144 04/01/20 23:21:33 0:00 2:28 MO (Ni-811 145 04/01/20 23:24:01 0:00 0:12 MO (1 146 04/01/20 23:24:13 0:00 13:03 MO (Ni-ril 147 04/01/20 23:37:16 0:00 0:21 MO (1 148 04/01/20 23:37:37 0:00 6:17 MO ($11-811 149 04/01/20 23:43:54 0:00 0:12 MO (1 150 04/01/20 23:44:06 0:00 0:53 MO (Ni-ril 151 04/01/20 23:44:59 0:00 6:25 MO (VCORR1 152 04/03/20 14:24:29 0:15 0:00 MT (Ni-Fi:NIOPI 153 04/03/20 20:07:32 0:03 0:27 MO -Fil 154 04/03/20 20:08:13 0:04 0:57 MO -Fil 155 04/06/20 21:07:53 0:02 0:00 MT (Ni-Fi:NIOPI 156 04/06/20 21:08:13 0:22 0:00 MT (Ni-Fi:NIOPI 157 04/06/20 21:08:17 0:26 0:01 MT Fi:NIOP:CFNA:VM] 158 04/06/20 21:08:17 0:26 0:01 MO (Ni-Fil AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 9 SDNY_GNL00170892 EFTA01342950 ---PAGE BREAK--- .111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. `ca -ase• ""s AT&T Run Dato: Run Tine: Voice Osage For: Item Conn. Date 06/17/2020 dildimmo Conn. Seizure Tim Time MMC) ET Originating Terminating L@I IMSI Cr Number Weber Feature 159 04/06/20 21:08:54 0:09 5:49 MO (Ili-Pit 160 04/06/20 21:08:54 0:09 5:49 MT (Ili -Pi:NIOP1 161 04/06/20 21:15:03 0:03 12:03 NO (Mi-Pit 162 04/06/20 21:15:03 0:03 12:03 NT (NIOP1 163 04/06/20 22:56:05 0:01 0:00 NO (Mi-Pit 164 04/06/20 22:57:06 0:21 0:00 MT (Mi-Pi:NIOP1 165 04/06/20 22:57:06 0:21 0:00 MT (Mi-Pi:NIOP1 166 04/06/20 22:57:10 0:25 0:02 NT (Ili- ri:NIOP:CPNA:VM1 167 04/06/20 22:57:10 0:26 0:02 NO (Mi-Pit 168 04/06/20 22:58:08 0:39 0:00 NO (Mi-Pit 169 04/06/20 23:18:27 0:23 0:00 MT (Mi-Pi:NIOP1 170 04/06/20 23:18:27 0:23 0:00 MT (Mi-Pi:NIOP1 171 04/06/20 23:18:31 0:27 0:04 MT (Ili- ri:NIOP:CPNA:VM1 172 04/06/20 23:18:31 0:28 0:04 MO (Mi-Pit 173 04/06/20 23:28:26 0:22 0:00 MT (Mi-Pi:NIOP1 174 04/06/20 23:28:26 0:22 0:00 MT (Mi-Pi:NIOP1 175 04/06/20 23:28:29 0:25 0:01 MT (Ili- ri:NIOP:CPNA:VM1 176 04/06/20 23:28:29 0:25 0:01 MO (Mi-Pit 177 04/07/20 00:15:42 0:23 0:00 MT (Mi-Pi:NIOP) 178 04/07/20 00:15:44 0:25 0:07 MT (Mt- ri:NIOP:CPNA:VM1 179 04/07/20 00:15:44 0:26 0:07 MO (Mi-Pit AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 10 SDNY_GN1_00170893 EFTA01342951 ---PAGE BREAK--- .111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in VTC. ...."-_ 11,/ `'s AT&T Run Date: Run Tine: Voice Usage For: Item Conn. Date 06/17/2020 dildimmo Conn. Seizure Tine Sum (DSc) ET Originating Terminating flax DWI CT Number Number Feature 180 04/07/20 00:31:15 0:14 0:00 MT (Ni-Fi:NIOPI 181 04/07/20 00:31:15 0:14 18:52 MT (Ni-Fi:NIOPI 182 04/07/20 00:31:15 0:14 18:52 NO (Ni-Fil 183 04/07/20 14:35:18 0:07 48:52 NO (1 184 04/07/20 17:03:18 0:22 0:00 MT (Ni-ri:NIOPI 185 04/07/20 17:03:18 0:22 0:00 MT (Ni-fi:NIOP1 186 04/07/20 17:03:23 0:27 0:02 MT (Wi- fi:NIOP:CZNA:VM] 187 04/07/20 17:03:23 0:28 0:02 MO (Ni-fil 188 04/07/20 21:49:43 0:04 0:00 MT (NIOP1 189 04/07/20 22:24:55 0:22 0:00 MT (Ni-fi:NIOP1 190 04/07/20 22:24:55 0:22 0:00 MT (Ni-fi:NIOP1 191 04/07/20 22:25:00 0:27 0:06 MT (Wi- fi:NIOP:CZNA:VM] 192 04/07/20 22:25:00 0:27 0:06 NO (Ni-fil 193 04/08/20 19:59:50 0:03 18:27 NO (Ni-fil 194 04/09/20 14:31:59 0:19 7:35 NO CI 195 04/09/20 19:29:43 0:16 0:00 MT (Ni-Pi:NIOP1 196 04/09/20 19:29:43 0:16 0:00 MT (Ni-Pi:NIOP1 197 04/09/20 19:29:43 0:16 0:00 NO (1 198 04/09/20 19:30:14 0:22 0:00 MT (NIOP1 199 04/09/20 19:30:16 0:24 0:10 NO (Ni-fil AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 11 SDNY_GM_00170894 EFTA01342952 ---PAGE BREAK--- P.020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided UTC. a AT&T in Run Dato: Run Time: Voice Osage For: Item Conn. Date 0""n0.0 dildimmo Conn. Seizure T10.0 Sum (DTC) ST Originating Terminating !MIT DO3I Number Number CT Feature 200 04/09/20 19:30:16 0:24 0:10 MT (NIOP:CrNA:VM1 201 04/09/20 19:37:50 0:23 0:00 MT (Ni-ri:NIOPI 202 04/09/20 19:37:50 0:23 0:00 MT (Ni-ri:NIOPI 203 04/09/20 19:37:51 0:24 0:02 MT (Wi- ri:NIOP:ClNA:VM1 204 04/09/20 19:37:51 0:25 0:02 NO (1 205 04/09/20 19:48:23 0:01 0:00 MT (Ni-ri:NIOP1 206 04/09/20 19:48:23 0:01 0:00 MT (NIOP1 207 04/09/20 19:48:23 0:02 0:00 NO (1 208 04/09/20 20:39:36 0:22 0:00 MT (NIOP1 209 04/09/20 20:39:38 0:24 0:02 NO (1 210 04/09/20 20:39:38 0:24 0:02 MT (NIOP:CrNA:VM1 211 04/09/20 21:03:46 0:10 22:09 MT (NIOP:VCORR1 212 04/09/20 21:03:46 0:11 22:09 NO (1 213 04/09/20 21:29:49 0:05 27:57 NO (1 214 04/09/20 22:33:59 0:06 13:20 NO (NIOR1 215 04/09/20 22:49:27 0:04 4:06 NO (1 216 04/09/20 23:32:11 0:05 0:29 MT (NIOP:VCORR1 217 04/09/20 23:32:11 0:06 0:05 NO (Ni-ril 218 04/09/20 23:32:16 0:00 0:13 NO (1 219 04/09/20 23:32:29 0:00 0:11 NO (Ni-ril 220 04/09/20 23:33:32 0:04 0:00 MT (Ni-ri:NIOP1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 12 SDNY_GN1_00170895 EFTA01342953 ---PAGE BREAK--- .111020 MOBILITY dn. AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm ..., 1/4=s) 4*-6 AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Seizure Time CT Originating Terminating flat INSI Number Maher CT Feature 221 04/09/20 23:33:32 0:04 0:21 MT (Ni-Pi:NIOPI 222 04/09/20 23:33:32 0:04 0:21 NO (VCORAI 223 04/09/20 23:33:53 0:00 0:00 MT (NIOP:VCORR1 224 04/10/20 00:24:44 0:13 1:54 MO (Mi-Fil 225 04/10/20 00:24:44 0:13 1:54 MT (NIOP1 226 04/10/20 18:26:36 0:27 0:00 MT (Mi-Pi:NIOP1 227 04/10/20 18:26:38 0:29 0:14 MT (NI - ri:NIOP:CPNA:VN1 228 04/13/20 15:24:09 0:12 0:00 MT (Ni -Pi:NIOP1 229 04/15/20 21:58:10 0:08 0:00 (NIOP1 230 04/15/20 22:54:21 0:21 0:00 MT (Ni-Pi:NIOP1 231 04/15/20 22:54:21 0:21 0:00 MT (NIOP:CNN1 232 04/15/20 22:54:25 0:25 0:03 MT (NIOP:CFNA:CbM:VN1 233 04/15/20 22:54:25 0:25 0:03 MO —Fil 234 04/15/20 23:06:43 0:10 25:16 (Ni—Pi:NIOP1 235 04/15/20 23:06:43 0:10 3:54 ND (1 236 04/15/20 23:10:37 0:00 13:18 MO (Ni-fil 237 04/15/20 23:23:55 0:00 1:52 NO (1 238 04/15/20 23:25:47 0:00 6:12 NO (Ni-fil 239 04/16/20 22:15:29 0:22 0:00 MT (NIOP1 240 04/16/20 22:15:30 0:23 1:02 (NIOP:CFNA:VN1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 13 SDNY_GM_00170896 EFTA01342954 ---PAGE BREAK--- .111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm ..4:1/44 AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Seizure Time UT Originating Terminating SRI INBI Number Number CT Feature 241 04/16/20 22:30:40 0:01 0:00 MT 242 04/17/20 00:28:51 0:07 0:04 NO (Ni-fil 243 04/17/20 01:54:30 0:14 41:46 MT (NIOP:VCORR1 244 04/17/20 01:54:30 0:15 41:46 NO (Ni-fil 245 04/17/20 15:23:40 0:06 0:00 MT 246 04/17/20 21:16:10 0:07 0:00 MT (Ni-ri:NIOPI 247 04/21/20 00:50:15 0:15 0:00 MT (MIOP:00,1 248 04/21/20 00:50:15 0:16 0:00 NO (Ni-fil 249 04/21/20 00:50:39 0:21 0:00 MT (MIOP:00,1 250 04/21/20 00:50:42 0:24 0:32 MT (NIOP:CFNA:001:VM1 251 04/21/20 00:50:42 0:24 0:32 NO (1 252 04/21/20 00:53:30 0:11 0:00 MT 253 04/21/20 00:53:31 0:12 0:09 NO (VCORR1 254 04/21/20 00:53:31 0:12 0:09 MT (NIOP:CtUR:VM1 255 04/21/20 03:11:37 0:11 0:00 MT (NIOP1 256 04/21/20 03:11:38 0:12 0:30 MT (NIOP:CtUR:VM1 257 04/22/20 20:59:27 0:17 0:00 MT (NIOP1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 14 SDNY_GM_00170897 EFTA01342955 ---PAGE BREAK--- P.020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm \1/4 .77: 11 00 "-a AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Dato: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 dildimmo Conn. Seizure Time Time (OTC) CT Originating Terminating EMI IMSI Number Number CT Feature 258 04/22/20 21:49:51 0:28 0:02 NO (VCORR1 259 04/22/20 21:51:33 0:06 0:05 NO (VCORR1 260 04/25/20 14:13:47 0:00 0:00 NO (1 261 04/25/20 14:14:08 0:01 0:14 NO (NIOR:VM1 262 04/28/20 19:16:39 0:21 0:00 NT -Fi:NIOR1 263 04/28/20 19:16:39 0:21 0:00 NT -Fi:NIOR1 264 04/28/20 19:16:43 0:25 0:02 NT (MI - ri:NIOR:CFNA:Vbil 265 04/28/20 19:16:43 0:25 0:02 NO (MI —Fi:NIOR1 266 04/28/20 19:44:14 0:03 45:03 MO (Ni-ri:NIOR1 267 04/28/20 21:03:10 0:17 36:49 MO (Ni-ri:NIOR1 268 04/28/20 23:39:52 0:24 0:00 MT (NIOR1 269 04/28/20 23:40:00 0:32 0:35 MT (NIOR:CFNA:VM1 270 04/28/20 23:40:00 0:32 0:35 MO (MI -Fi:NIOR1 271 04/28/20 23:45:33 0:22 0:00 MT (MI -Fi:NIOR1 272 04/28/20 23:45:33 0:22 0:00 NT (MI -Fi:NIOR1 273 04/28/20 23:45:37 0:26 0:03 NT (MI - ri:NIOR:CFNA:Vbil 274 04/28/20 23:45:38 0:27 0:02 MO (MI —Fi:NIOR1 275 04/29/20 00:07:11 0:22 0:00 NT (MI -Fi:NIOR1 276 04/29/20 00:07:11 0:22 0:00 MT (MI -Fi:NIOR1 277 04/29/20 00:07:15 0:26 0:02 MT (MI - Fi:NIOR:CFNA:VM1 The information contained here is for use by authorized persons only and is not for general distribution. Page 15 SDNY_GM_00170898 EFTA01342956 ---PAGE BREAK--- MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided UTC. in AT&T Run Dato: Run Time: Voice Osage For: Item Conn. Date 0""n.. dildimmo Conn. Seizure Tim Sum (VC) ET Originating Terminating LORI Number number CT Feature 278 04/29/20 00:07:15 0:26 0:02 NO (Ni-Pi:NIOR1 279 04/29/20 16:53:22 0:05 0:00 MT (Ni-Pi:NIOR1 280 04/29/20 16:53:22 0:05 0:00 MT (Ni-Pi:NIOR1 281 04/29/20 16:53:22 0:05 0:00 NO (Ni-Pi:NIOR1 282 04/29/20 16:54:04 0:21 0:00 MT (Ni-ri:NIOPI 283 04/29/20 16:54:04 0:21 0:00 MT (Ni-ri:NIOPI 284 04/29/20 16:54:08 0:25 0:02 MT (WI- ri:NIOP:ClNA:VN1 285 04/29/20 16:54:08 0:25 0:02 NO (Ni-Pil 286 04/29/20 19:29:51 0:03 1:01 NO (Ni-Pil 287 04/29/20 20:52:10 0:07 0:00 MT (Ni-ri:NIOPI 288 04/29/20 20:52:10 0:07 19:48 NO 289 04/29/20 20:52:10 0:07 4:08 MT (Wi -Pi:NIOP1 290 04/29/20 20:56:18 0:00 15:40 MT (NIOP:VCORR1 291 04/30/20 20:14:09 0:22 0:01 MT (Wi -Pi:NIOP1 292 04/30/20 20:14:09 0:22 0:01 MT (NIOP1 293 04/30/20 20:14:13 0:26 0:05 MT (NIOP:CPNA:VN1 294 04/30/20 20:14:13 0:26 0:05 NO (Ni-Pil 295 04/30/20 21:11:42 0:22 0:00 MT (Wi -Pi:NIOP1 296 04/30/20 21:11:42 0:22 0:00 MT (NIOP1 297 04/30/20 21:11:47 0:27 0:02 MT (NIOP:ClNA:VN1 298 04/30/20 21:11:47 0:28 0:01 NO (Wi -Pi1 299 04/30/20 21:26:48 0:07 28:07 NO (Wi -Pi1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 16 SDNY_GPV1_00170899 EFTA01342957 ---PAGE BREAK--- MOBILITY P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run pato: Run Time: Voice Doane For: Item Conn. Date 06/17/2020 Conn. Time (urc) Seizure Sum ZT Originating Terminating flax LO)r Member Number CT Feature 300 04/30/20 23:47:42 0:08 5:05 NO (Ni-Pit 301 05/01/20 00:19:46 0:22 0:00 MT (Ni -Pi:NIOP1 302 05/01/20 00:19:46 0:22 0:00 MT (NIOP1 303 05/01/20 00:19:50 0:26 0:01 MT (NIOP:CPNA:VN1 304 05/01/20 00:19:50 0:26 0:01 NO (Ni-Pit 305 05/01/20 01:27:25 0:04 22:24 NO (Ni-Pit 306 05/01/20 01:27:25 0:04 22:24 MT (NIOP:VCORAI 307 05/01/20 20:59:25 0:21 0:00 MT (Wi -fi:NIOP1 308 05/01/20 20:59:25 0:21 0:00 MT (Wi -fi:NIOP1 309 05/01/20 20:59:30 0:26 0:01 MT (Wi- fi:NIOP:CZNA:VM] 310 05/01/20 20:59:30 0:26 0:01 NO (Ni-Pit 311 05/04/20 22:10:28 0:14 17:33 MT (NIOP:VCORR1 312 05/04/20 22:10:28 0:15 17:33 NO (Ni-Pit 313 05/04/20 22:49:00 0:22 0:00 MT (Ni-fi:NIOP1 314 05/04/20 22:49:00 0:22 0:00 MT (Ni-fi:NIOPI 315 05/04/20 22:49:04 0:26 0:02 MT (Wi- fi:NIOP:CZNA:VM] 316 05/04/20 22:49:04 0:26 0:02 MO (Ni-Pit 317 05/04/20 23:22:53 0:21 0:00 MT (Wi-fi:NIOP1 318 05/04/20 23:22:53 0:21 0:00 MT (Wi-fi:NIOPI 319 05/04/20 23:22:58 0:26 0:02 MT (Wi- fi:NIOP:CZNA:VM] 320 05/04/20 23:22:58 0:27 0:02 MO (Ni-fit 321 05/05/20 20:49:17 0:21 0:00 MT (Ni-fi:NI08) 322 05/05/20 20:49:17 0:21 0:00 MT (Ni-fi:NI08) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 17 SDNY_GNL00170900 EFTA01342958 ---PAGE BREAK--- .111020 MOBILITY illir AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm •3/4 --s ""s `41 t AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in 4Ctoleli OTC. Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 Ma= Conn. Seizure Tim Time (urc) ET Originating Terminating flax DO3I CT Number Number Feature 323 05/05/20 20:49:21 0:25 0:02 MT (Ni- Fi:NIOP:CFNA:VN( 324 05/05/20 20:49:21 0:25 0:02 MO -fil 325 05/05/20 21:25:15 0:22 0:00 MT (Ni-ri:NIOPI 326 05/05/20 21:25:15 0:22 0:00 MT 327 05/05/20 21:25:19 0:26 0:05 MT ri:NIOP:ClNA:VM] 328 05/05/20 21:25:19 0:27 0:05 MO (Ni-fil 329 05/05/20 21:37:14 0:38 0:03 MO -ril 330 05/06/20 00:41:07 0:23 0:00 MT (Ni-ri:NIOP) 331 05/06/20 00:41:07 0:23 0:00 MT (Ni-ri:NIOPI 332 05/06/20 00:41:11 0:27 0:02 MT ri:NIOP:CfNA:VM] 333 05/06/20 00:41:11 0:28 0:02 MO (Ni-fil 334 05/06/20 00:41:32 0:00 0:00 MO (Ni-ril 335 05/06/20 00:41:43 0:08 0:00 MO (Ni-ril 336 05/06/20 00:41:53 0:06 0:03 MO (Ni-ril 337 05/07/20 14:49:32 0:23 0:00 MT (Ni-ri:NIOPI 338 05/07/20 14:49:39 0:30 0:02 MT ri:NIOP:CINA:VM] 339 05/07/20 14:49:39 0:31 0:02 MO (Ni-fil 340 05/07/20 17:03:16 0:23 0:00 MT (Ni-ri:NIOPI 341 05/07/20 17:03:27 0:34 0:01 MT ri:NIOP:CINA:VM] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 18 SDNY_GNL00170901 EFTA01342959 ---PAGE BREAK--- MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 0""n.. dildimmo Conn. Seizure Time Sum (OTC) ZT Originating Terminating EMU DWI Mmber Number CT Feature 342 05/07/20 17:03:27 0:34 0:01 NO (Ni-ril 343 05/07/20 17:48:17 0:24 0:00 NT (Ni-Fi:NIOP( 344 05/07/20 17:48:23 0:30 0:02 NT (Ni- Pi:NIOP:CPNA:VN( 345 05/07/20 17:48:23 0:31 0:02 NO -ril 346 05/07/20 19:12:18 0:22 0:00 NT (Ni-Fi:NIOP( 347 05/07/20 19:12:24 0:28 0:02 NT (Ni- Pi:NIOP:CFNA:VN( 348 05/07/20 19:12:24 0:28 0:02 NO -ril 349 05/07/20 19:16:22 0:07 0:00 NO (Mi 350 05/07/20 23:33:08 0:21 0:00 NT (Ni-ri:NIOP) 351 05/07/20 23:33:08 0:21 0:00 NT (Ni-ri:NIOPI 352 05/07/20 23:33:13 0:26 0:02 NT ri:NIOP:ClNA:VM] 353 05/07/20 23:33:13 0:26 0:02 NO (Ni-ril 354 05/07/20 23:33:46 0:01 0:00 NT (Ni-ri:NIOPI 355 05/07/20 23:33:46 0:01 0:00 NT (Ni-ri:NIOP1 356 05/07/20 23:33:46 0:01 0:00 NO (Ni-ril 357 05/07/20 23:34:32 0:39 0:03 NO (Mi 358 05/08/20 00:19:18 0:21 0:00 MT (Ni-ri:NIOPI 359 05/08/20 00:19:18 0:21 0:00 ST (NIOP:CHNI 360 05/08/20 00:19:22 0:25 0:03 ST (NIOP:ClNA:CHN:VM] 361 05/08/20 00:19:23 0:27 0:02 NO (Mi AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 19 SDNY_GNL00170902 EFTA01342960 ---PAGE BREAK--- .111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ....`t-e ad° 1/4"". AT&T Run Date: Run Time: voice Osage For: Item Conn. Date 06/17/2020 Ma= Conn. Seizure Time Time (OTC) ET Originating Terminating L@I nut CT Number Number Feature 362 05/08/20 14:29:29 0:05 74:10 NO (Ni-PSI 363 05/08/20 17:49:44 0:32 0:02 NO (Ni-PSI 364 05/08/20 17:58:22 0:21 0:23 NO (Ni-PSI 365 05/09/20 17:19:42 0:27 0:00 NT (Ni-ri:MIOP) 366 05/09/20 17:19:44 0:29 1:16 NT ri:NIOP:CfNA:VM] 367 05/11/20 13:49:51 0:16 0:55 NO (Ni-PSI 368 05/11/20 13:52:24 0:12 3:10 NO (Ni-PSI 369 05/11/20 13:55:47 0:08 15:51 NO (Ni-PSI 370 05/11/20 17:48:07 0:16 0:00 NO (Ni-PSI 371 05/11/20 20:27:52 0:09 0:29 NT -ri:MIOPI 372 05/11/20 21:18:16 0:11 0:30 NT -ri:MIOPI 373 05/11/20 21:39:04 0:12 1:11 NO (Ni-PSI 374 05/11/20 21:51:53 0:07 0:28 NT -ri:MIOPI 375 05/11/20 23:14:44 0:01 0:00 NO (Ni-PSI 376 05/11/20 23:15:02 0:07 33:55 NT (NIOP:VCORR1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 20 SDNY_GNL00170903 EFTA01342961 ---PAGE BREAK--- 020 MOBILITY 4MIN0 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 SS= Conn. Seizure Time Time (UTC) Cr Originating Number Terminating Number ENE' 1NSI CT Feature 377 05/11/20 23:15:02 0:07 33:55 19785258484 13038983895 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE9 378 05/12/20 13:53:18 0:00 0:00 19785258484 14158666097 NT (NIOP) 379 05/12/20 13:53:19 0:01 0:11 19785258484 14158666097 NT (NIOP:CFNI:VNI 12096078210(t) 380 05/12/20 13:53:21 0:09 0:07 19785258484 442032862047 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE9 381 05/12/20 15:01:44 0:08 30:55 19785258484 19177695374 NT (NIOP:VCORR) 382 05/12/20 15:01:44 0:09 30:55 19785258484 19177695374 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE8 383 05/12/20 15:33:00 0:10 19:49 19785258484 13036196231 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE8 384 05/12/20 16:50:53 0:27 0:00 19785258484 19786751300 MT (Ni-Pi:NIOP) 385 05/12/20 16:50:58 0:32 0:07 19785258484 19786751300 MT (Ni- 14013693201(t) ri:NIOP:CINA:VNI 386 05/12/20 16:50:58 0:33 0:07 19785258484 19786751300 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE9 387 05/12/20 18:18:51 0:08 8:56 19785258484 12128217058 3587080982063726 310410214827503 NO (Ni-Pi:NIOR) APPLE IPHONE8 388 05/12/20 19:13:25 0:05 7:33 19785258484 15165822707 3587080982063726 310410214827503 NO (Ni-Pi:NIOR) APPLE IPHONE8 389 05/12/20 19:29:15 0:23 0:00 19785258484 19786751300 MT (NIOR) 390 05/12/20 19:29:20 0:28 0:06 19785258484 19786751300 MT (NIOR:CPNA:VNI 14013693201(P) 391 05/12/20 19:29:20 0:29 0:06 19785258484 19786751300 3587080982063726 310410214827503 NO (Ni-Pi:NIOR) APPLE IPHONE8 392 05/12/20 22:00:31 0:05 28:33 19785258484 19177695374 3587080982063726 310410214827503 NO (Ni-Pi:NIOR) APPLE IPHONE9 393 05/12/20 22:00:31 0:05 28:33 19785258484 19177695374 MT (NIOR:VCORR) 394 05/13/20 18:07:12 0:39 0:03 19785258484 13036196231 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE8 395 05/13/20 18:08:35 0:24 0:00 19785258484 19177695374 MT (NIOP) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 21 SDNY_GNL00170904 EFTA01342962 ---PAGE BREAK--- .111020 MOBILITY `~~ AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Dato: Run Time: Voice Usage For: Item Conn. Date 04/17/2020 dildimmo Conn. Seizure r10.0 Time (OTC) LT Originating Terminating IMMI INS1 Member Number R Feature 396 05/13/20 18:08:41 0:30 0:02 MO (Ni-Pit 397 05/13/20 18:08:41 0:30 0:02 MT (NIOP:CZNA:VMI 398 05/13/20 19:00:16 0:09 15:49 MO (Ni-Pit 399 05/13/20 19:00:16 0:09 15:49 MT (NIOP:VCORAI 400 05/13/20 19:52:36 0:22 0:00 MT (Mi-fi:NIOPI 401 05/13/20 19:52:46 0:32 0:02 MT (Mi - fi:NIOP:CZNA:VM] 402 05/13/20 19:52:46 0:33 0:02 NO (Ni-Pit 403 05/13/20 19:53:03 0:06 1:39 MT -Pi:NIOP1 404 05/13/20 19:54:59 0:06 4:35 NO (Ni-Pit 405 05/13/20 21:05:54 0:11 0:00 MT (NIOP1 406 05/13/20 21:05:55 0:12 0:07 MT (NIOP:CPNR:VM] 407 05/13/20 21:35:50 0:07 13:47 MO (Ni-Pit 408 05/13/20 22:14:50 0:23 0:00 MT (NIOP1 409 05/13/20 22:14:56 0:29 0:01 MT (NIOP:CfNA:Vbil 410 05/13/20 22:14:56 0:30 0:01 MO (Ni—Pit 411 05/13/20 23:54:11 0:26 0:00 MT (Mt —ri:MIOP) 412 05/13/20 23:54:12 0:27 0:05 MT - ri:NIOP:CFNA:VM] 413 05/13/20 23:54:12 0:27 0:05 MO (VCORR1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 22 SDNY_GNL00170905 EFTA01342963 ---PAGE BREAK--- .111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm " S it' AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Dato: Run Time: Voice Usage For: Item Conn. Date 08/17/2020 dila= Conn. Seizure Tillie Sum (UTC) ET Originating Terminating EMBI IIISI CT Number Number Feature 414 05/13/20 23:54:27 0:02 17:46 NO (Ni-Pil 415 05/13/20 23:54:27 0:02 17:46 NT (NIOP:VCORR1 416 05/14/20 14:39:29 0:22 0:00 NT -Pi:NIOP1 417 05/14/20 14:39:37 0:30 0:01 NT (MI - ri:NIOP:CIPNA:VM1 418 05/14/20 14:39:37 0:31 0:01 NO (Mt -Pil 419 05/14/20 14:39:48 0:10 0:00 NT (Ili -Pi:NIOP:0611 420 05/14/20 15:52:43 0:08 1:09 NO -Pil 421 05/14/20 16:15:14 0:16 0:54 NT -Pi:NIOP1 422 05/14/20 17:11:25 0:13 0:00 NT (1 423 05/14/20 17:11:25 0:24 0:00 ST (NIOP1 424 05/14/20 17:11:26 0:25 0:11 ST (NI08:CfNA:VM] 425 05/14/20 17:20:45 0:06 0:00 NT (NIOP1 426 05/14/20 17:20:45 0:06 8:46 NT (NIOP:VCORR1 427 05/14/20 17:20:45 0:06 8:46 NO -Pil 428 05/14/20 17:42:04 0:10 0:01 NT (NIOP1 429 05/14/20 17:42:05 0:11 0:03 NT (NIOP:CENR:VM1 430 05/14/20 18:14:46 0:04 0:00 NT -Pi:NIOP1 431 05/14/20 18:14:46 0:04 1:31 NT (NIOP1 432 05/14/20 18:14:46 0:05 1:31 NO -Pil AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 23 SDNY_GM_00170906 EFTA01342964 ---PAGE BREAK--- .111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ...„,,,,,o •ftaid %"""° AT&T Run Date: Run Tame: Voice Usage For: Item Conn. Date 0""n.. Skim Conn. Seizure Time Time (UTC) ET Originating Terminating IMMI IN= Member Member CT Feature 433 05/14/20 19:41:13 0:28 0:00 MT (ML-Pi:NIOP1 434 05/14/20 19:41:16 0:31 0:04 MT (MI- ri:NIOP:CPNA:VM1 435 05/17/20 21:54:23 0:06 3:05 MO (MI-Pi:NIOR1 436 05/19/20 01:55:50 0:00 0:00 MO (MI-Pi:NIOR1 437 05/19/20 20:41:12 0:09 8:05 MO (MI-Pi:NIOR1 438 05/19/20 20:49:29 0:05 2:33 MO (MI-Pi:NIOR1 439 05/19/20 21:14:58 0:23 0:00 NT (NIOR1 440 05/19/20 21:15:04 0:29 0:03 NO (MI-Pi:NIOR1 441 05/19/20 21:15:04 0:29 0:03 NT (NIOR:CFNA:VM1 442 05/19/20 22:29:37 0:22 0:00 NT (NIOR1 443 05/19/20 22:29:44 0:29 0:02 MT (NIOR:CFNA:VM1 444 05/19/20 22:29:44 0:30 0:02 MO (MI-Pi:NIOR1 445 05/19/20 23:03:59 0:22 0:00 MT (NIOR1 446 05/19/20 23:03:59 0:22 0:00 NO (Ni-ri:NIOnl 447 05/19/20 23:04:28 0:06 2:13 MT (NIOP:VCORR1 448 05/19/20 23:04:28 0:06 2:13 MO (MI-Pil 449 05/20/20 18:53:54 0:10 0:52 MT (MI-Pi:NIOPI 450 05/20/20 21:41:19 0:23 0:00 MT (NIOP1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 24 SDNY_GM_00170907 EFTA01342965 ---PAGE BREAK--- .111020 MOBILITY 4 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm ...1/477i# ""s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Voice Usage For: Item Conn. Data 06/17/2020 Conn. Time (DSC) Seizure Sum ET Originating Terminating MEI INSI CT Number number Feature 451 05/20/20 21:41:26 0:30 0:03 MT (NIOP:CFNA:VN1 452 05/20/20 21:41:26 0:30 0:03 NO (Ni-Fi) 453 05/20/20 21:58:25 0:23 0:00 NT (NIOP) 454 05/20/20 21:58:31 0:29 0:02 NT (NIOP:CFNA:VN1 455 05/20/20 21:58:31 0:30 0:02 NO (Ni-Fi) 456 05/20/20 21:59:01 0:01 0:00 NO (Ni-Fi) 457 05/20/20 21:59:40 0:37 0:04 NO (Ni-Fi) 458 05/20/20 22:00:20 0:22 0:00 NT (NIOP) 459 05/20/20 22:00:28 0:30 0:02 NT (NIOP:CFNA:VN1 460 05/20/20 22:00:28 0:31 0:02 NO (Ni-Fi) 461 05/21/20 00:31:09 0:03 35:29 NO (Ni-Fi) 462 05/21/20 00:31:09 0:03 54:04 MT (NIOP:VCORR) 463 05/21/20 01:06:38 0:00 0:21 NO (VCORR) 464 05/21/20 01:06:59 0:00 18:14 NO (Ni-Fi) 465 05/21/20 15:07:09 0:07 0:05 NO (Ni-Fi) 466 05/21/20 20:31:30 0:07 0:04 NO (Ni-Fi) 467 05/21/20 21:23:59 0:19 0:00 NT (Ni-Pi:NIOP) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 25 SDNY_GNL00170908 EFTA01342966 ---PAGE BREAK--- P.020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ....,• ••••-•a"" . AT&T Run Dato: Run Time: Voice Usage For: Item Conn. Date 0""n.. dildimmo Conn. Seizure Tine Time (UTC) LT Originating Terminating LORI nNSI CT Number Number Feature 468 05/21/20 21:31:01 0:15 26:49 MO (Mi-fil 469 05/22/20 00:18:09 0:24 0:01 MT (Mi-Pi:NIOP1 470 05/22/20 00:18:11 0:26 0:32 MT (Ili- ri:NIOP:CPNA:VM1 471 05/22/20 00:20:52 0:28 0:00 MT (Mi-Pi:NIOP1 472 05/22/20 00:20:53 0:29 0:04 MT ri:NIOP:CPNA:VM1 473 05/22/20 16:23:16 0:14 0:00 MT (1 474 05/22/20 16:23:16 0:25 0:00 ST (NIOP1 475 05/22/20 16:23:17 0:26 0:15 ST (NIOP:CPNA:VM1 476 05/22/20 17:37:15 0:06 22:47 MT (Mi-Pi:NIOP1 477 05/22/20 18:00:20 0:05 7:06 MO (Mi-Pil 478 05/22/20 18:33:59 0:23 0:00 MT (NIOP:044141 479 05/22/20 18:34:08 0:32 0:02 MO (Mi-Pil 480 05/22/20 18:34:08 0:32 0:02 MT (NIOP:CPNA:CMN:VM1 481 05/22/20 21:26:30 0:25 0:00 MT -Pi:NIOP1 482 05/22/20 21:26:31 0:26 0:05 MT (Mi- ri:NIOP:CPNA:VM1 483 05/22/20 21:26:31 0:26 0:05 MO (VCOAR1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 26 SDNY_GM_00170909 EFTA01342967 ---PAGE BREAK--- P.020 MOBILITY illir AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm ...1/477 i1 L# -6 AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 dildimmo Conn. Seizure Time Time (UTC) ET Originating Terminating LORI INS1 CT Number Member Feature 484 05/22/20 21:43:41 0:13 0:40 NO (Ni-fil 485 05/22/20 21:43:41 0:13 0:40 NT (NIOP:VCORR1 486 05/22/20 21:45:43 0:06 30:22 NO -ril 487 05/22/20 22:26:24 0:21 0:00 NT -ri:NIOPI 488 05/22/20 22:26:24 0:21 0:00 NT -ri:NIOPI 489 05/22/20 22:26:29 0:26 0:01 NT - ri:NIOP:CfNA:VM1 490 05/22/20 22:26:29 0:27 0:01 NO -fil 491 05/22/20 22:26:36 0:07 0:45 NT (Ni-ri:NIOP:0611 492 05/22/20 22:26:36 0:08 0:35 NO (Ni-fil 493 05/22/20 22:27:11 0:00 0:12 NO (1 494 05/22/20 22:27:21 0:00 6:09 NT (NIOP:CMN:VCORR1 495 05/22/20 22:27:23 0:00 6:07 NO -fil 496 05/22/20 22:46:06 0:18 0:00 NT -ri:NIOPI 497 05/22/20 22:46:06 0:18 3:09 NO -fil 498 05/22/20 22:46:06 0:18 0:38 NT -ri:NIOPI 499 05/22/20 22:46:44 0:00 0:29 NT (NIOP1 500 05/22/20 22:47:13 0:00 2:01 NT -ri:NIOPI 501 05/22/20 22:49:14 0:00 0:32 NT (NIOP1 502 05/22/20 22:49:15 0:00 0:54 NO (VCORRI 503 05/22/20 22:49:46 0:00 3:10 NT -ri:NIOPI 504 05/22/20 22:50:09 0:00 2:52 NO -fil 505 05/22/20 22:52:56 0:00 2:53 NT (NIOP1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 27 SDNY_GM_00170910 EFTA01342968 ---PAGE BREAK--- MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ‘•-• 40 ".". AT&T Run Dato: Run Time: Voice Usage For: Item Conn. Dato 06/17/2020 dildimmo Conn. Seizure Tame Time (OTC) ET Originating Terminating L@I INSI CT Number Number Feature 506 05/22/20 22:53:01 0:00 17:28 MO (VCOAN 507 05/22/20 22:55:49 0:00 14:40 MT (Mi -Pi:NIOP1 508 05/23/20 22:54:43 0:08 30:48 MT (NIOP:VCOAN 509 05/23/20 22:54:43 0:08 30:48 MO (Mi-Pi( 510 05/23/20 23:25:49 0:07 11:42 MT (NIOP:VCOAN 511 05/23/20 23:25:49 0:07 11:42 MO (Mi-Pi( 512 05/26/20 14:10:35 0:09 0:00 MT (Mi -Pi:NIOP1 513 05/26/20 18:03:44 0:24 0:00 MT (NIOP1 514 05/26/20 18:03:52 0:32 0:05 MT (NIOP:CPNA:VM1 515 05/26/20 18:03:52 0:32 0:05 MO (Mi-Pi( 516 05/26/20 19:02:46 0:23 0:00 MT (NIOP1 517 05/26/20 19:02:52 0:29 0:00 MT (NIOP:CPNA:VM1 518 05/26/20 19:02:52 0:29 0:00 MO (Mi-Pi( 519 05/26/20 19:13:13 0:25 0:00 MT (Mi -Pi:NIOP1 520 05/26/20 19:13:14 0:26 0:15 MT (Mi- ri:NIOP:CFNA:VM] 521 05/26/20 19:19:54 0:06 0:42 MO (Mi-Pi( 522 05/26/20 19:20:51 0:05 0:00 MO (Mi-Pi( 523 05/26/20 19:21:17 0:01 0:00 MT (NIOP:04M1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 28 SDNY_GM_00170IM1 EFTA01342969 ---PAGE BREAK--- MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Dato: Run Time: Voice Usage For: Item Conn. Date 04/17/2020 Conn. Time Curc) Seizure Time LT Originating Terminating flax CT Number Number Feature 524 05/26/20 19:21:17 0:01 0:04 MT (NIOP:CMCNN:VN1 525 05/26/20 19:21:18 0:22 0:00 MT (Ni-Pi:NIOP1 526 05/26/20 19:21:25 0:29 0:03 MT (Ni- ri:NIOP:CPNA:VN1 527 05/26/20 19:21:25 0:30 0:03 MO (Ni-Pil 528 05/26/20 19:21:36 0:06 6:58 MT (Ni-Pi:NIOP1 529 05/26/20 20:00:30 0:02 5:29 MO (Ni-Pil 530 05/26/20 20:06:12 0:02 0:42 MO (Ni-Pil 531 05/26/20 22:47:03 0:37 0:05 MO (Ni-Pil 532 05/27/20 19:58:08 0:23 0:00 MT (Ni-Pi:NIOP1 533 05/27/20 19:58:12 0:27 0:02 MT (Ni- ri:NIOP:CPNA:VN1 534 05/27/20 19:58:13 0:28 0:01 MO (Ni-Pil 535 05/27/20 20:19:38 0:10 2:16 MT (Ni-Pi:NIOP1 536 05/27/20 20:19:38 0:11 0:09 MO (Ni-Pil 537 05/27/20 20:19:47 0:00 0:15 MO (1 538 05/27/20 20:20:02 0:00 1:45 MO (Ni-PSI 539 05/27/20 20:21:47 0:00 0:09 MO (VCORR1 540 05/27/20 20:21:54 0:00 0:02 MT (NIOP:VCORR1 541 05/27/20 20:22:21 0:00 0:08 MO (Ni-Pil AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 29 SDNY_GNL00170912 EFTA01342970 ---PAGE BREAK--- .111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm t —IsS e s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 dildimmo Conn. Seizure Time Sum (UTC) tt Originating Terminating nez =SI Number Member CT Feature 542 05/27/20 20:22:21 0:08 0:00 NO (1 543 05/27/20 20:22:48 0:02 0:00 MT (NIOP1 544 05/27/20 20:22:49 0:18 0:00 ST (NIOP1 545 05/27/20 20:22:49 0:18 0:00 NO (Ni-ril 546 05/27/20 20:27:06 0:08 0:06 NO (Ni-ril 547 05/27/20 20:27:17 0:02 0:09 MT (Ni-ri:NIOPI 548 05/27/20 20:27:17 0:03 0:13 NO (Ni-ril 549 05/27/20 20:27:26 0:00 1:25 MT (NIOP1 550 05/27/20 20:27:30 0:00 2:23 NO (1 551 05/27/20 20:28:51 0:00 0:59 MT (Ni-ri:NIOPI 552 05/27/20 20:29:50 0:00 0:03 MT (NIOP:VCORR1 553 05/27/20 20:31:27 0:02 0:00 MT (NIOP:CMW] 554 05/27/20 20:31:27 0:03 0:00 NO (Ni-ril 555 05/27/20 20:34:42 0:21 8:33 MT (Ni-ri:NIOP1 556 05/27/20 20:43:15 0:00 7:44 MT (NIOP:VCORR1 557 05/27/20 20:51:20 0:10 38:47 MT (NIOP:CMN:VCORR1 558 05/27/20 20:51:20 0:10 0:02 NO (1 559 05/27/20 20:51:22 0:00 38:45 NO (Ni-ril 560 05/27/20 21:37:25 0:22 0:00 MT (Ni-ri:NIOP1 561 05/27/20 21:37:34 0:31 0:01 MT (Wi- ri:NIOP:CYNA:VM] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 30 SDNY_GN1_00170913 EFTA01342971 ---PAGE BREAK--- MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Tine: Voice Usage For: Item Conn. Date 06/17/2020 Skim Conn. Seizure Tillie Time (OTC) IT Originating Terminating IMMI INSI Number Humber CT Feature 562 05/27/20 21:37:34 0:31 0:01 MO (Mi-Pil 563 05/28/20 16:49:41 0:24 0:00 NT (NIOP1 564 05/28/20 16:49:50 0:33 0:02 NT (NIOP:CPNA:VM1 565 05/28/20 16:49:50 0:33 0:02 MO (Mi-Pil 566 05/28/20 16:50:02 0:00 0:00 MT (NIOP:0041 567 05/28/20 16:50:05 0:03 0:01 MT (NIOP:CPB:CMN:VM1 568 05/28/20 16:50:05 0:04 0:01 MO (Mi-Pil 569 05/28/20 16:50:38 0:20 0:03 MO (Mi-Pil 570 05/28/20 16:50:53 0:08 0:00 MT (NIOP1 571 05/28/20 16:50:53 0:08 0:00 MO (Mi-Pil 572 05/28/20 17:10:11 0:10 3:58 MT (Mi-Pi:NIOP1 573 05/28/20 17:14:19 0:05 22:33 MT (Mi-Pi:NIOP1 574 05/28/20 17:14:19 0:06 22:33 MO (VCORR1 575 05/29/20 18:23:50 0:12 8:19 MO (Mi-Pil 576 05/29/20 18:32:09 0:00 6:19 MO (VCORR1 577 05/29/20 18:52:27 0:08 24:52 MO (Mi-Pil 578 05/29/20 18:52:27 0:08 27:53 MT (NIOP:VCORR1 579 05/29/20 19:17:19 0:00 3:01 MO (VCORR1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 31 SDNY_GM_00170914 EFTA01342972 ---PAGE BREAK--- ..020 MOBILITY illk, AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. Run Date: Run Tine: Voice Usage For: Item Conn. Date 06/17/2020 dildimmo Conn. Seizure Tame Time (VC) ET Originating Terminating nez INS1 CT Number Number Feature 580 05/30/20 15:17:28 0:21 0:00 MT (Ni-ri:NIOPI 581 05/30/20 15:17:29 0:22 0:14 MT (WI- ri:NIOP:CtRA:VM1 582 05/30/20 15:23:39 0:05 36:20 NO (Ni-fil 583 06/02/20 14:44:00 0:10 17:35 MT (NIOP:VCORR1 584 06/02/20 14:44:00 0:11 10:35 NO (Ni-ril 585 06/02/20 14:54:35 0:00 0:19 NO (VCORRI 586 06/02/20 14:54:54 0:00 6:41 NO (Ni-fil 587 06/02/20 17:04:25 0:03 10:19 MT (NIOP:VCORR1 588 06/02/20 17:04:25 0:04 10:19 NO (Ni-fil 589 06/02/20 17:33:58 0:10 0:54 MT (Ni-ri:NIOPI 590 06/03/20 00:07:18 0:16 6:39 MT (NIOP:VCORR1 591 06/03/20 00:07:18 0:16 6:39 NO (Ni-ril 592 06/03/20 19:09:20 0:23 0:00 MT (NIOP:04141 593 06/03/20 19:09:26 0:29 0:02 NO (Ni-fil 594 06/03/20 19:09:26 0:29 0:02 MT (NIOP:CrNA:CMN:VM1 595 06/03/20 20:31:08 0:07 17:32 MO (Ni-ri1 596 06/03/20 20:31:08 0:07 60:39 MT (NIOP:VCORR1 597 06/03/20 20:48:40 0:00 21:03 MO (1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 32 SDNY_GNL00170915 EFTA01342973 ---PAGE BREAK--- .111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e .....0 ‘•--00 AT&T Run Date: Run Fine: Voice Usage For: Item Conn. Date 08/17/2020 dildimmo Conn. Seizure 1.10.0 Time (UMC) ET Originating Terminating flax ntsI CT Number Number Feature 598 06/03/20 21:09:43 0:00 22:05 NO (Ai-Vi) 599 06/04/20 14:30:08 0:11 1:42 NT (Ai -Vi:NIOV) 600 06/05/20 19:34:05 0:26 0:00 NT (Ai -Vi:NIOV) 601 06/05/20 19:34:06 0:27 0:02 NO (VCORR) 602 06/05/20 19:34:06 0:27 0:02 NT (MI - Vi:NADV:CVNA:VM1 603 06/05/20 19:34:36 0:25 0:00 NT (Ai -Vi:NIOV) 604 06/05/20 19:34:38 0:27 0:02 NO (VCORR) 605 06/05/20 19:34:38 0:27 0:02 NT (NI- Fi:NIOP:CFNA:VN( 606 06/05/20 20:45:34 0:24 0:00 NT (NIOP) 607 06/05/20 20:45:41 0:31 0:02 NT (NIOV:CVNA:VM1 608 06/05/20 20:45:41 0:31 0:02 NO (Ai-Pi) 609 06/05/20 20:46:31 0:24 0:00 NT (NIOP) 610 06/05/20 20:46:37 0:30 0:02 NT (NIOV:CVNA:VM1 611 06/05/20 20:46:37 0:30 0:02 NO (Ai-Pi) 612 06/06/20 22:41:11 0:23 0:00 NT (NIOP) 613 06/06/20 22:41:16 0:28 1:04 NT (NIOV:CVNA:VM1 614 06/06/20 22:41:16 0:28 0:06 NO (Ai-Pi) 615 06/06/20 22:41:22 0:00 0:58 NO (VCORR) 616 06/06/20 22:43:40 0:04 3:36 NO (VCORR) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 33 SDNY_GNL00170916 EFTA01342974 ---PAGE BREAK--- P.020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e AT&T Run Dato: Run Time: Voice 'imago For: Item Conn. Date 06/17/2020 MI= Conn. Seizure Tim Time Co2c) Er Originating Terminating INS' Meter amber CT Feature 617 06/06/20 22:43:40 0:04 1:01 MT (NIOP:VCORR1 618 06/06/20 22:44:41 0:00 2:35 MT -22:NIOPI 619 06/09/20 20:00:48 0:01 2:22 MO -ril 620 06/09/20 20:59:57 0:10 40:05 MT (NIOP:VCORR1 621 06/09/20 20:59:57 0:11 40:05 MO (Ni-Pil 622 06/09/20 21:46:06 0:39 0:03 MO (Ni-Pil 623 06/09/20 21:46:34 0:11 0:00 MT (Ni -Pi:NIOP1 624 06/09/20 21:46:34 0:11 0:00 MT (NIOP1 625 06/09/20 21:46:39 0:16 0:01 MT (NIOP:CPS:VM1 626 06/09/20 21:46:39 0:17 0:01 MO (Ni-Pil 627 06/09/20 23:19:32 0:10 0:03 MO (Ni-Pil 628 06/09/20 23:19:41 0:03 0:00 MT (Ni -Pi:NIOP1 629 06/09/20 23:19:41 0:03 0:00 MT (Ni -Pi:NIOP1 630 06/09/20 23:19:46 0:08 0:02 MT (Ni-ri:NIOP:CPB:VM1 631 06/09/20 23:19:46 0:09 0:02 MO (Ni-Pil 632 06/09/20 23:58:57 0:02 0:00 MT (Ni -Pi:NIOP1 633 06/09/20 23:58:57 0:02 0:00 MT (Ni -Pi:NIOP1 634 06/09/20 23:59:00 0:05 0:02 MT (Ni-ri:NIOP:CPS:VM1 635 06/09/20 23:59:00 0:06 0:02 MO (Ni-Pil 636 06/10/20 14:55:12 0:23 0:00 MT (NIOP1 637 06/10/20 14:55:12 0:23 0:00 MT (Ni -Pi:NIOP1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 34 SDNY_GM_00170917 EFTA01342975 ---PAGE BREAK--- .111020 MOBILITY 4III, AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm •3/4--s "--6 \ 'AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .tor lYSI OTC. Run Date: Run Time: Voice Usage For: Item Conn. Date 08/17/2020 dildimmo Conn. Seizure 1.10.0 Time (OTC) Er Originating Terminating n@I INSI Number 'lumber CT Feature 638 06/10/20 14:55:16 0:27 0:02 MT (Wi- fi:NIOV:CZNA:VM1 639 06/10/20 14:55:16 0:27 0:02 MO (Ni-PSI 640 06/10/20 14:55:36 0:10 0:05 MO (Ni-PSI 641 06/10/20 18:51:20 0:23 0:00 MT (NI001 642 06/10/20 18:51:27 0:30 0:02 MT (NIOV:CZNA:VMI 643 06/10/20 18:51:27 0:31 0:02 MO (Ni-PSI 644 06/10/20 19:11:49 0:21 0:00 MT (NIOVI 645 06/10/20 19:11:53 0:25 0:02 MO (Ni-PSI 646 06/10/20 19:11:53 0:25 0:02 MT (NIOV:CZNA:VMI 647 06/10/20 22:21:12 0:23 0:00 MT (NIOVI 648 06/10/20 22:21:17 0:28 0:02 MO (Ni-PSI 649 06/10/20 22:21:17 0:28 0:02 MT (NIOV:CZNA:VMI 650 06/11/20 00:50:40 0:22 0:00 MT (MI001 651 06/11/20 00:50:40 0:22 0:00 MT (NS-fi:NIOVI 652 06/11/20 00:50:45 0:27 0:01 MT - fi:NIOV:CZNA:VMI 653 06/11/20 00:50:45 0:27 0:01 MO (Ni-PSI 654 06/11/20 01:00:17 0:06 44:39 MT (NIOV:VCOARI 655 06/11/20 01:00:17 0:07 44:39 MO (Ni-PSI 656 06/11/20 14:12:28 0:38 0:03 MO (Ni-PSI 657 06/11/20 23:57:41 0:00 0:00 MT (NI00:0011 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 35 SDNY_GM_00170918 EFTA01342976 ---PAGE BREAK--- MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 411. AT&T Run Dato: Run Tine: Voice Osage For: Item Conn. Dato 06/17/2020 dildimmo Conn. Soisurn Till* Time (VMC) ZS Originating Terminating DMZ INBI Mager Maims CT Feature 658 06/11/20 23:57:47 0:06 0:04 MT (NIOP:CPS:CMN:VM1 659 06/11/20 23:57:47 0:07 0:04 NO (Ni-Pil 660 06/12/20 00:35:53 0:39 0:04 NO (Ni-Pil 661 06/12/20 00:36:33 0:24 0:00 MT (NIOP1 662 06/12/20 00:36:39 0:30 0:02 MT (NIOP:CPNA:VM1 663 06/12/20 00:36:39 0:31 0:02 NO (Ni-Pil 664 06/12/20 13:40:56 0:17 0:38 MT (Ni-Pi:NIOP1 665 06/12/20 13:41:49 0:02 0:00 NO (Ni-Pil 666 06/12/20 16:43:56 0:25 0:00 MT (Ni-Pi:NIOP1 667 06/12/20 16:43:57 0:26 0:05 MT (Ili- ri:NIOP:CPNA:VM1 668 06/12/20 16:44:48 0:06 0:00 MT (Ni-Pi:NIOP1 669 06/12/20 16:47:03 0:36 0:03 NO (Ni-Pil 670 06/12/20 16:47:08 0:00 0:00 NO (Ni-Pil 671 06/12/20 16:47:56 0:35 0:05 NO (Ni-Pil 672 06/12/20 16:48:26 0:18 0:00 NO (Ni-Pil AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 36 SDNY_GM_00170919 EFTA01342977 ---PAGE BREAK--- .111020 MOBILITY 4Illo AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm traes `'s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: 0""n.. Voice Usage For: Item Conn. Conn. Seizure LT Originating Terminating flax INSI CT Feature Date Time Time (UTC) 673 06/12/20 16:49:51 0:13 0:43 NO (Mt -ril AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 37 SDNY_GM_00170920 EFTA01342978 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cre ‘•- . ia AT&T Run Date: Run Tine: Data Usage For: Item Conn. Date 06/17/2020 NM= Conn. Tama (OTC/ Originating ET Bytos Up Bytes Apn Dn EBBE IMBI MAKE MODEL 1 03/01/20 05:38:22 1:22 0 0 ims APPLE 'PHONES 2 03/01/20 05:41:28 60:00 11858 8720 ims APPLE 'PHONES 3 03/01/20 05:55:39 60:00 924 840 nxtgenpho ne APPLE 'PHONES 4 03/01/20 06:41:28 41:54 2580 1324 ims APPLE 'PHONES 5 03/01/20 06:55:39 60:00 865 525 nxtgenpho ne APPLE 'PHONES 6 03/01/20 07:23:22 60:00 11920 4220 ims APPLE 'PHONES 7 03/01/20 07:55:39 60:00 919 1036 nxtgenpho ne APPLE 'PHONES 8 03/01/20 08:23:22 60:00 6956 2648 ims APPLE 'PHONES 9 03/01/20 08:55:39 60:00 692 420 nxtgenpho ne APPLE 'PHONES 10 03/01/20 09:23:22 17:52 3424 1324 ims APPLE 'PHONES 11 03/01/20 09:44:39 60:00 11862 8772 ims APPLE 'PHONES 12 03/01/20 09:55:39 60:00 872 735 nxtgenpho ne APPLE 'PHONES 13 03/01/20 10:44:39 60:00 5192 2664 ims APPLE 'PHONES 14 03/01/20 10:55:39 60:00 635 525 nxtgenpho ne APPLE 'PHONES 15 03/01/20 11:44:39 60:00 5192 2648 ims APPLE 'PHONES 16 03/01/20 11:55:39 60:00 1038 630 nxtgenpho ne APPLE 'PHONES 17 03/01/20 12:44:39 27:07 2580 1324 ims APPLE 'PHONES 18 03/01/20 12:55:39 60:00 3838 5118 nxtgenpho ne APPLE 'PHONES 19 03/01/20 13:11:46 10:55 3424 1340 ims APPLE 'PHONES 20 03/01/20 13:25:26 18:05 7402 6102 ims APPLE 'PHONES 21 03/01/20 13:43:31 39:19 10252 4128 ims APPLE 'PHONES 22 03/01/20 13:55:39 60:00 7138 6900 nxtgenpho ne APPLE 'PHONES 23 03/01/20 14:24:05 0:19 9754 7358 ims APPLE 'PHONES 24 03/01/20 14:24:24 8:29 5180 1696 ims APPLE 'PHONES 25 03/01/20 14:38:56 60:00 13027 7566 ims 26 03/01/20 14:55:39 9:59 173 105 nxtgenpho ne APPLE 'PHONES 27 03/01/20 15:05:38 3:44 6742 4956 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170921 The information contained here is for use by authorized persons only and is not for general distribution. Page 1 EFTA01342979 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:30:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 "MI= Conn. Time (OTC/ Originating Number ET Bytes Up Bytes Apn Dn IN/LI IMSI MAKS MODEL 28 03/01/20 15:09:22 0:12 0 0 nxtgonpho no APPLE 'PROMS 29 03/01/20 15:09:55 2:27 5220 5991 nxtgonpho no APPLE 'PEONES 30 03/01/20 15:09:56 2:27 5991 4932 nxtgenpho no APPLE 'PEONES 31 03/01/20 15:12:23 19:15 8268 7175 nxtgonphe ne APPLE 'PEONES 32 03/01/20 15:31:38 4:48 8406 5288 nxtgonpho no APPLE 'PHONES 33 03/01/20 15:36:25 1:43 6726 6727 nxtgonpho no APPLE 'PHONES 34 03/01/20 15:36:26 1:43 6727 6438 nxtgenpho ne APPLE 'PHONES 35 03/01/20 15:38:09 1:35 7450 5003 nxtgonphe ne APPLE 'PHONES 36 03/01/20 15:38:56 60:00 3532 1324 ims 37 03/01/20 15:39:44 0:22 5221 5991 nxtgonpho no APPLE 'PHONES 38 03/01/20 15:39:45 0:22 5991 4933 nxtgonphe no APPLE 'PHONES 39 03/01/20 15:40:07 31:31 21318 19563 nxtgenphe ne APPLE 'PHONES 40 03/01/20 16:02:35 17:49 9902 6262 ims 41 03/01/20 16:11:37 2:55 4504 5759 nxtgenpho ne APPLE 'PHONES 42 03/01/20 16:11:38 2:55 5759 4216 nxtgonphe no APPLE 'PHONES 43 03/01/20 16:14:33 0:05 0 0 nxtgonphe no APPLE 'PHONES 44 03/01/20 16:27:22 21:33 8365 6084 ims 45 03/01/20 16:29:19 1:40 7396 4952 nxtgonpho no APPLE 'PHONES 46 03/01/20 16:30:58 1:31 5220 5991 nxtgonpho no APPLE 'PHONES 47 03/01/20 16:30:59 1:31 5991 4932 nxtgonpho no APPLE 'PHONES 48 03/01/20 16:32:30 6:30 6040 4939 nxtgonpho no APPLE 'PHONES 49 03/01/20 16:38:56 60:00 0 0 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170922 The information contained here is for use by authorized persons only and is not for general distribution. Page 2 EFTA01342980 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. casso r ‘•- . 0° AT&T Run Date: Run Tine: Data Usage For: 06/17/2020 Item Conn. Conn. Date Time (uzz) 50 03/01/20 16:38:59 51 03/01/20 16:39:00 52 03/01/20 16:43:59 53 03/01/20 16:50:30 54 03/01/20 16:50:37 55 03/01/20 16:50:38 56 03/01/20 16:51:00 57 03/01/20 17:08:38 58 03/01/20 17:08:39 59 03/01/20 17:09:47 60 03/01/20 17:38:56 61 03/01/20 17:50:30 62 03/01/20 17:51:25 63 03/01/20 17:51:32 64 03/01/20 17:51:33 65 03/01/20 18:01:09 66 03/01/20 18:06:21 67 03/01/20 18:13:49 68 03/01/20 18:25:49 69 03/01/20 18:35:07 70 03/01/20 18:36:35 71 03/01/20 18:44:38 72 03/01/20 18:44:39 73 03/01/20 18:50:30 74 03/01/20 18:50:53 Originating Number ET Bytos Bytes Apn MEI INSI MAKE MODEL Up Dn 4:59 6299 7586 nxtgonpho APPLE !PHONES no 4:59 7586 5915 nxtgonpho APPLE !PHONES no 6:39 7933 19165 nxtgonpho APPLE !PHONES no 60:00 24775 18430 ims 0:21 288 48 nxtgonpho APPLE !PHONES no 0:22 48 0 nxtgonpho APPLE !PHONES no 17:39 19037 30448 nxtgonpho APPLE !PHONES no 1:08 5117 6043 nxtgonpho APPLE !PHONES no 1:08 6043 4829 nxtgonpho APPLE !PHONES no 41:45 65228 67623 nxtgonpho APPLE !PHONES no 12:29 0 0 ims 60:00 0 0 ims 6:34 8423 6138 ims 45:02 14269 13073 nxtgonpho APPLE !PHONES no 45:02 13073 17918 nxtgonpho APPLE !PHONES ne 2:30 8313 6090 ims 5:55 11275 10058 ims 8:59 8187 6296 ims 5:48 8263 7472 ims 26:02 8371 6016 ims 8:04 43532 18469 nxtgonpho APPLE !PHONES no 6:14 10852 13435 nxtgonpho APPLE !PHONES no 6:14 13435 21886 nxtgonpho APPLE !PHONES no 60:00 0 0 ims 2:02 9758 6565extgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170923 The information contained here is for use by authorized persons only and is not for general distribution. Page 3 EFTA01342981 ---PAGE BREAK--- MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Dunbar ET Bytes Up Bytes Apn Dn MBE! IMSI MARE MODEL 75 03/01/20 18:50:54 2:02 6565 9470 nxtgonpho ne APPLE 'PHONES 76 03/01/20 18:52:56 60:00 19262 29639 nxtgonpho ne APPLE 'PHONES 77 03/01/20 19:02:56 60:00 22413 16301 ims 78 03/01/20 19:50:30 60:00 0 0 ims 79 03/01/20 19:52:56 9:07 173 105 nxtgonpho no APPLE 'PHONES 80 03/01/20 19:58:23 0:05 0 3613 ims 81 03/01/20 20:02:02 2:03 5218 5973 nxtgonpho no APPLE 'PHONES 82 03/01/20 20:02:03 2:03 5973 4930 nxtgenpho ne APPLE 'PHONES 83 03/01/20 20:02:56 60:00 6956 2864 ims 84 03/01/20 20:04:06 60:00 32943 15861 nxtgonpho ne APPLE 'PHONES 85 03/01/20 20:50:30 58:40 0 0 ims 86 03/01/20 21:02:56 32:46 8480 3004 ims 87 03/01/20 21:04:06 3:13 0 0 nxtgonpho ne APPLE 'PHONES 88 03/01/20 21:07:19 40:44 7436 11745 nxtgonpho no APPLE 'PHONES 89 03/01/20 21:43:30 0:16 48 0 ims APPLE 'PHONES 90 03/01/20 21:43:46 51:58 11627 7387 ims APPLE 'PHONES 91 03/01/20 21:48:02 2:57 5221 6043 nxtgonpho no APPLE 'PHONES 92 03/01/20 21:48:03 2:57 6043 4933 nxtgonpho no APPLE 'PHONES 93 03/01/20 21:51:00 2:13 6040 4892 nxtgonpho no APPLE 'PHONES 94 03/01/20 21:53:12 2:03 5221 5991 nxtgonpho no APPLE 'PHONES 95 03/01/20 21:53:13 2:03 5991 4933 nxtgonpho ne APPLE 'PHONES 96 03/01/20 21:55:16 15:41 9091 5311 nxtgonpho no APPLE 'PHONES 97 03/01/20 22:10:56 2:03 5177 6103 nxtgonpho no APPLE 'PHONES 98 03/01/20 22:10:57 2:03 6103 4889 nxtgonpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170924 The information contained here is for use by authorized persons only and is not for general distribution. Page 4 EFTA01342982 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Date: Run Tine: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Timm (OTC) Originating Number ET Bytes Up Bytes Apn Dn LBSI IMSI MAKE 99 03/01/20 22:13:00 60:00 6976 5733 nxtgonpho ne APPLE 100 03/01/20 22:42:34 13:34 6778 6105 ims APPLE 101 03/01/20 22:56:08 40:20 7172 3696 ims APPLE 102 03/01/20 23:13:00 60:00 1471 4996 nxtgonpho no APPLE 103 03/01/20 23:38:48 0:05 0 0 ims APPLE 104 03/01/20 23:53:31 42:44 17191 8099 ims 105 03/02/20 00:13:00 60:00 4177 4210 nxtgonpho no APPLE 106 03/02/20 00:47:05 36:22 8553 7960 ims 107 03/02/20 01:13:00 58:51 4775 11416 nxtgonpho ne APPLE 108 03/02/20 01:28:01 19:50 8228 7855 ims APPLE 109 03/02/20 01:47:51 2:30 3532 1340 ims APPLE 110 03/02/20 01:58:42 60:00 13603 7860 ims 111 03/02/20 02:11:50 2:11 5221 6043 nxtgonpho no APPLE 112 03/02/20 02:11:51 2:11 6043 4933 nxtgonpho no APPLE 113 03/02/20 02:14:02 60:00 7529 5854 nxtgonpho no APPLE 114 03/02/20 02:58:42 59:06 13444 4516 ims 115 03/02/20 03:14:02 60:00 1746 1500 nxtgonpho no APPLE 116 03/02/20 03:58:49 60:00 12186 9034 ims APPLE 117 03/02/20 04:14:02 60:00 1320 1250 nxtgonpho no APPLE 118 03/02/20 04:58:49 60:00 5192 2664 ims APPLE 119 03/02/20 05:14:02 60:00 1095 1341 nxtgonpho ne APPLE 120 03/02/20 05:58:49 60:00 5192 2664 ims APPLE 121 03/02/20 06:14:02 60:00 639 375 nxtgonpho no APPLE 122 03/02/20 06:58:49 41:03 2596 1324 ims APPLE 123 03/02/20 07:14:02 25:50 369 375 nxtgonpho no APPLE 124 03/02/20 07:39:52 0:15 495 293 nxtgonpho no APPLE 125 03/02/20 07:39:52 0:07 0 0 ims APPLE MODEL 'PEONES IPEOME8 'PEONES 'PHONED 'PHONED 'PHONED 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170925 The information contained here is for use by authorized persons only and is not for general distribution. Page 5 EFTA01342983 ---PAGE BREAK--- MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:56:66pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Timm: Data Usage For: Item Conn. Data 06/17/2020 WM= Conn. Time (UTC) Originating Numbor ET Bytes Up Bytes Apn Dn neer IMSI MAKE MODEL 126 03/02/20 07:39:59 22:50 4840 1572 Las APPLE !PHONES 127 03/02/20 07:40:07 60:00 582 572 nxtgonpho no APPLE !PHONES 128 03/02/20 08:07:09 29:52 9262 7340 Las APPLE !PHONES 129 03/02/20 08:37:01 6:04 8728 7072 Las APPLE !PHONES 130 03/02/20 08:40:07 2:56 252 269 nxtgonpho no APPLE !PHONES 131 03/02/20 12:01:08 29:41 103877 370807 nxtgonpho no APPLE !PHONES 132 03/02/20 12:01:11 29:38 14032 12064 Las APPLE !PHONES 133 03/02/20 16:16:03 30:50 152117 587017 nxtgonpho no APPLE !PHONES 134 03/02/20 16:16:05 1:10 8816 6194 Las APPLE !PHONES 135 03/02/20 16:17:15 60:00 79112 44236 Las APPLE !PHONES 136 03/02/20 16:34:35 0:04 0 2210 Las APPLE !PHONES 137 03/02/20 16:34:56 0:23 7149 31933 ims APPLE !PHONES 138 03/02/20 16:35:59 0:06 5581 12969 ims APPLE !PHONES 139 03/02/20 16:36:44 0:56 117835 139892 ims APPLE !PHONES 140 03/02/20 16:43:41 0:09 11001 4562 ims APPLE !PHONES 141 03/02/20 16:44:01 2:12 235412 454074 ims APPLE !PHONES 142 03/02/20 16:46:52 2:07 5464 7722 nxtgonpho no APPLE !PHONES 143 03/02/20 16:46:53 2:07 7722 5176 nxtgonpho no APPLE !PHONES 144 03/02/20 16:48:59 21:34 10832 12811 nxtgonpho no APPLE !PHONES 145 03/02/20 17:10:33 44:52 11500 13087 nxtgonpho no APPLE !PHONES 146 03/02/20 17:10:34 44:52 13087 13674 nxtgonpho no APPLE !PHONES 147 03/02/20 17:17:15 8:46 0 0 ims APPLE !PHONES 148 03/02/20 17:28:07 14:50 8207 7090 ims 149 03/02/20 17:48:50 11:14 8225 6088 ims 150 03/02/20 17:55:26 3:03 7794 5274 nxtgonpho ne APPLE !PHONES 151 03/02/20 17:58:28 18:22 321797 68055 nxtgonpho ne APPLE !PHONES 152 03/02/20 17:58:29 18:22 68055 350874 nxtgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170926 The information contained here is for use by authorized persons only and is not for general distribution. Page 6 EFTA01342984 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e s, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating CT Time Number (UTC) Bytes Up Bytes Apn Dn DOLT INS! MANE Merl. 153 03/02/20 18:04:26 12:24 6316 6778 ims APPLE 'PHONED 154 03/02/20 18:04:27 12:24 6670 5964 ims APPLE 'PHONED 155 03/02/20 18:15:35 17:29 10178 6494 ims 156 03/02/20 18:16:51 8:26 5439 6387 nxtgenpho ne APPLE 'PHONED 157 03/02/20 18:16:52 8:26 6387 5151 nxtgenpho ne APPLE 'PHONED 158 03/02/20 18:25:18 15:26 8963 10970 nxtgenpho ne APPLE 'PHONED 159 03/02/20 18:36:22 13:47 8199 5999 ims APPLE IPHONEO 160 03/02/20 18:40:43 2:07 13092 7135 nxtgenpho ne APPLE 'PHONES 161 03/02/20 18:40:44 2:07 7135 12804 nxtgenpho ne APPLE 'PHONES 162 03/02/20 18:42:51 60:00 11769 17044 nxtgenpho ne APPLE 'PHONES 163 03/02/20 18:50:09 2:18 2984 1340 ims APPLE 'PHONES 164 03/02/20 18:50:09 2:18 2812 1340 ims APPLE 'PHONES 165 03/02/20 18:52:27 4:13 3424 1448 ims APPLE 'PHONES 166 03/02/20 18:58:32 4:46 0 0 ims 167 03/02/20 19:14:25 15:41 9323 6918 ims 168 03/02/20 19:32:47 17:39 8477 6283 ims 169 03/02/20 19:42:51 54:20 10545 9322 nxtgenpho ne APPLE 'PHONES 170 03/02/20 19:56:40 10:31 0 0 ims 171 03/02/20 20:09:27 60:00 16978 9252 ims 172 03/02/20 20:37:10 2:07 5578 6598 nxtgenpho ne APPLE !PHONES 173 03/02/20 20:37:11 2:07 6457 5290 nxtgenpho ne APPLE !PHONES 174 03/02/20 20:39:18 27:09 8245 11360 nxtgenpho ne APPLE !PHONES 175 03/02/20 21:06:26 2:18 6296 8106 nxtgenpho ne APPLE !PHONES 176 03/02/20 21:06:27 2:19 8106 6008 nxtgenpho ne APPLE !PHONES 177 03/02/20 21:08:46 38:39 8309 6108 nxtgenpho ne APPLE !PHONES 178 03/02/20 21:09:27 15:00 0 0 ims 179 03/02/20 21:32:03 20:42 8203 5998 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170927 The information contained here is for use by authorized persons only and is not for general distribution. Page 7 EFTA01342985 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e s, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number CT Bytes Up Bytes Apn Dn DMZ IBS! ISAN2L MOMS 180 03/02/20 21:47:24 12:15 17860 39013 nxtgonpho no APPLE 'PHONES 181 03/02/20 21:47:25 12:16 39013 17476 nxtgenpho no APPLE IPHONE8 182 03/02/20 21:58:20 30:21 0 0 isms 183 03/02/20 21:59:40 34:23 32299 48475 nxtgonpho no APPLE 'PHONES 184 03/02/20 21:59:41 34:23 48475 32752 nxtgonpho no APPLE !PHONES 185 03/02/20 22:06:58 22:20 10591 8188 ims 186 03/02/20 22:28:40 5:23 6305 6732 isms APPLE !PHONES 187 03/02/20 22:28:41 5:23 6732 6041 isms APPLE !PHONES 188 03/02/20 22:31:33 6:26 10063 8268 isms 189 03/02/20 22:34:03 7:05 8089 10976 nxtgonpho no APPLE !PHONES 190 03/02/20 22:34:05 7:04 10976 7801 nxtgonpho no APPLE !PHONES 191 03/02/20 22:40:32 32:40 19107 12870 isms 192 03/02/20 22:41:09 1:04 8543 5515 nxtgonpho no APPLE !PHONES 193 03/02/20 22:42:12 2:10 5792 7397 nxtgonpho no APPLE !PHONES 194 03/02/20 22:42:13 2:10 7397 5504 nxtgonpho no APPLE !PHONES 195 03/02/20 22:44:23 12:58 8379 5971 nxtgonpho no APPLE !PHONES 196 03/02/20 22:57:20 10:17 9677 19783 nxtgenpho no APPLE !PHONES 197 03/02/20 22:57:21 10:17 19783 9389 nxtgenpho no APPLE !PHONES 198 03/02/20 23:07:38 0:51 7248 5395 nxtgenpho no APPLE !PHONES 199 03/02/20 23:08:29 99:47 12346 13625 nxtgenpho no APPLE !PHONES 200 03/02/20 23:08:30 60:00 6907 8351 nxtgonpho no APPLE !PHONES 201 03/02/20 23:13:34 94:42 9570 9722 isms APPLE !PHONES 202 03/02/20 23:13:35 60:00 9614 9414 isms APPLE !PHONES 203 03/02/20 23:14:47 0:01 0 0 isms 204 03/02/20 23:17:19 34:17 11811 7693 isms AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170928 The information contained here is for use by authorized persons only and is not for general distribution. Page 8 EFTA01342986 ---PAGE BREAK--- MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:30:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Tine: Data Usage For: Item Conn. Date 06/17/2020 Ma= Conn. TIM* (OTC/ Originating B2 Bytes up Bytes Apn EMU IMSI MAKE 0n MODEL 205 03/02/20 23:56:48 60:00 14766 7840 ims 206 03/03/20 00:08:30 39:48 6718 6727 nxtgenpho ne APPLE 'PEONES 207 03/03/20 00:13:35 34:43 0 0 ims APPLE 'PEONES 208 03/03/20 00:48:17 4:13 7806 5708 nxtgenpho ne APPLE 'PEONES 209 03/03/20 00:52:30 14:10 64691 46658 nxtgenpho ne APPLE 'PEONES 210 03/03/20 00:52:35 56:22 20187 11190 ims 211 03/03/20 00:56:48 60:00 0 0 ims 212 03/03/20 01:06:40 2:06 5584 6435 nxtgenpho ne APPLE 'PHONES 213 03/03/20 01:06:41 2:06 6435 5296 nxtgenpho ne APPLE 'PHONES 214 03/03/20 01:08:47 2:21 7926 5519 nxtgenpho ne APPLE 'PHONES 215 03/03/20 01:11:07 1:20 5584 6507 nxtgenpho ne APPLE 'PHONES 216 03/03/20 01:11:08 1:19 6507 5296 nxtgenpho ne APPLE 'PHONES 217 03/03/20 01:12:28 30:56 17894 13813 nxtgenpho ne APPLE 'PHONES 218 03/03/20 01:43:23 14:47 6083 6888 nxtgenpho ne APPLE 'PHONES 219 03/03/20 01:43:24 14:47 6888 5795 nxtgenpho ne APPLE 'PHONES 220 03/03/20 01:53:38 32:27 16630 8649 ims 221 03/03/20 01:56:48 60:00 0 0 ims 222 03/03/20 01:58:11 60:00 8925 7567 nxtgenpho ne APPLE 'PHONES 223 03/03/20 02:35:26 60:00 13553 7876 ims 224 03/03/20 02:56:48 60:00 0 0 ims 225 03/03/20 02:58:11 60:00 852 500 nxtgenpho ne APPLE 'PHONES 226 03/03/20 03:35:26 60:00 13444 4360 ims 227 03/03/20 03:56:48 45:12 0 0 ims 228 03/03/20 03:58:11 60:00 6285 9286 nxtgenpho ne APPLE 'PHONES 229 03/03/20 04:35:26 11:25 0 0 ims 230 03/03/20 04:54:33 26:00 11002 6192 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170929 The information contained here is for use by authorized persons only and is not for general distribution. Page 9 EFTA01342987 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 45, AT&T Run Data: Run Tine: Data Usage For: Item Conn. Date 06/17/2020 Conn. TIM* (07C) Originating BT Bytos Up Bytes Apn Dn IMAI IIS! MAKE MODEL 231 03/03/20 04:58:11 60:00 1008 750 nxtgenpho ne APPLE 'PEONES 232 03/03/20 05:28:33 5:32 0 0 ims 233 03/03/20 05:42:12 11:36 8451 6230 ims 234 03/03/20 05:58:11 30:15 426 250 nxtgenpho ne APPLE 'PEONES 235 03/03/20 06:05:52 0:25 9552 7198 ims APPLE 'PEONES 236 03/03/20 06:06:17 60:00 12012 4560 ims APPLE 'PEONES 237 03/03/20 06:28:26 2:10 5221 6055 nxtgenpho ne APPLE 'PEONES 238 03/03/20 06:28:27 2:10 6055 4933 nxtgonpho no APPLE !PHONES 239 03/03/20 06:30:37 12:02 6265 5017 nxtgonpho no APPLE !PHONES 240 03/03/20 06:42:39 61:49 6703 7688 nxtgonpho no APPLE !PHONES 241 03/03/20 06:42:40 60:00 7515 6310 nxtgenpho ne APPLE 'PHONES 242 03/03/20 07:06:17 7:58 0 0 ims APPLE !PHONES 243 03/03/20 07:23:35 20:53 7325 6792 ims APPLE !PHONES 244 03/03/20 07:23:36 20:53 6792 7061 ims APPLE !PHONES 245 03/03/20 07:23:52 10:34 11234 6390 ims 246 03/03/20 07:42:38 38:41 13368 7571 ims 247 03/03/20 07:42:40 1:49 173 105 nxtgenpho ne APPLE !PHONES 248 03/03/20 07:44:29 15:24 7635 5218 nxtgenpho ne APPLE !PHONES 249 03/03/20 07:59:52 8:49 7621 7231 nxtgenpho ne APPLE !PHONES 250 03/03/20 07:59:53 8:49 7231 7237 nxtgenpho ne APPLE !PHONES 251 03/03/20 08:08:42 0:48 6870 4955 nxtgenpho no APPLE !PHONES 252 03/03/20 08:09:29 0:48 5116 6055 nxtgenpho ne APPLE !PHONES 253 03/03/20 08:09:30 0:48 6055 4828 nxtgenpho ne APPLE !PHONES 254 03/03/20 08:10:18 0:40 6112 4952 nxtgenpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 10 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170930 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342988 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn LBSS IMSI MAKE MODEL 255 03/03/20 08:10:57 2:36 5117 6055 nxtgonpho no APPLE 'PEONES 256 03/03/20 08:10:58 2:36 6055 4829 nxtgonpho no APPLE 'PEONES 257 03/03/20 08:13:33 8:22 5113 6105 nxtgonpho no APPLE 'PEONES 258 03/03/20 08:13:35 8:21 6105 4825 nxtgonpho ne APPLE 'PEONES 259 03/03/20 08:21:56 60:00 7213 5837 nxtgenpho ne APPLE 'PEONES 260 03/03/20 08:31:42 16:37 9802 6142 ims 261 03/03/20 08:49:57 41:51 14587 7694 ims 262 03/03/20 09:21:56 5:17 173 105 nxtgenpho ne APPLE 'PEONES 263 03/03/20 09:27:12 2:06 5116 6055 nxtgenpho ne APPLE 'PEONES 264 03/03/20 09:27:13 2:06 6055 4828 nxtgenpho ne APPLE 'PEONES 265 03/03/20 09:29:19 60:00 8500 5638 nxtgenpho ne APPLE 'PEONES 266 03/03/20 09:43:56 4:50 0 0 ims 267 03/03/20 09:58:18 3:50 11004 6250 ims 268 03/03/20 10:07:18 25:12 9679 6398 ims 269 03/03/20 10:29:19 60:00 8133 2343 nxtgenpho ne APPLE 'PHONES 270 03/03/20 10:47:22 0:14 48 0 ims APPLE 'PHONES 271 03/03/20 10:47:36 34:54 13747 8456 ism APPLE 'PHONES 272 03/03/20 11:29:05 33:39 13398 7586 ims 273 03/03/20 11:29:19 37:34 9542 6573 nxtgonpho no APPLE 'PHONES 274 03/03/20 12:06:52 8:49 5221 6055 nxtgenpho ne APPLE 'PHONES 275 03/03/20 12:06:54 8:48 6055 4933 nxtgenpho ne APPLE 'PHONES 276 03/03/20 12:07:05 60:00 18679 8370 ims 277 03/03/20 12:15:42 2:09 5216 6053 nxtgenpho ne APPLE 'PHONES 278 03/03/20 12:15:43 2:09 6053 4928 nxtgenpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170931 The information contained here is for use by authorized persons only and is not for general distribution. Page 11 EFTA01342989 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating Time Number ET Bytes Up Bytes Apn Dn TAINT MANZ MODEL. (UTC) 279 03/03/20 12:17:52 19:55 7630 6275 nxtgenpho ne APPLE 'PEONES 280 03/03/20 12:37:46 2:06 5532 9011 nxtgenpho no APPLE 'PEONES 281 03/03/20 12:37:47 2:06 9011 5244 nxtgenpho no APPLE 'PEONES 282 03/03/20 12:39:53 31:03 7586 5843 nxtgenpho no APPLE 'PEONES 283 03/03/20 13:07:05 22:45 4964 1572 ims 284 03/03/20 13:10:55 0:40 5325 6280 nxtgenpho ne APPLE 'PHONES 285 03/03/20 13:10:56 0:40 6280 5037 nxtgonpho no APPLE 'PHONES 286 03/03/20 13:11:36 7:06 9026 5966 nxtgenpho no APPLE 'PHONES 287 03/03/20 13:18:41 8:16 5217 6105 nxtgenpho no APPLE 'PHONES 288 03/03/20 13:18:42 8:16 6105 4929 nxtgenpho no APPLE 'PHONES 289 03/03/20 13:26:58 0:46 6870 4956 nxtgenpho ne APPLE 'PHONES 290 03/03/20 13:27:43 2:06 10413 7087 nxtgenpho ne APPLE 'PHONES 291 03/03/20 13:27:44 2:06 7087 10125 nxtgenpho ne APPLE 'PHONES 292 03/03/20 13:29:50 38:38 13586 8797 nxtgenpho ne APPLE 'PHONES 293 03/03/20 13:33:07 0:25 16290 13240 ims APPLE 'PHONES 294 03/03/20 13:33:32 33:21 10840 10928 ims APPLE 'PHONES 295 03/03/20 14:08:27 6:02 5221 6055 nxtgenpho no APPLE 'PHONES 296 03/03/20 14:08:28 6:02 6055 4933 nxtgenpho no APPLE 'PHONES 297 03/03/20 14:14:30 46:03 26448 21682 nxtgenpho no APPLE 'PHONES 298 03/03/20 14:14:32 10:03 8808 6173 ims APPLE 'PHONES 299 03/03/20 14:24:35 29:19 8248 3004 ims APPLE 'PHONES 300 03/03/20 14:54:30 0:29 8098 7128 ims APPLE 'PHONES 301 03/03/20 14:54:59 39:09 9804 3052 ims APPLE 'PHONES 302 03/03/20 15:00:32 13:07 24019 14458 nxtgenpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170932 The information contained here is for use by authorized persons only and is not for general distribution. Page 12 EFTA01342990 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ce. AT&T Run Dato: Run Time: Data Usage For: 06/17/2020 Item Conn. Conn. Date Time (OTC/ 303 03/03/20 15:00:33 13:07 14458 23635 nxtgonpho no 304 03/03/20 15:13:40 58:17 7179 6785 nxtgenpho no 305 03/03/20 15:35:15 0:06 0 0 ims 306 03/03/20 15:43:23 5:03 18043 11424 ims 307 03/03/20 15:48:44 55:52 13475 8142 ims 308 03/03/20 16:20:12 2:10 7680 8328 nxtgonpho no 309 03/03/20 16:20:13 2:10 8328 7392 nxtgonpho no 310 03/03/20 16:22:23 52:40 60305 22538 nxtgonpho no 311 03/03/20 16:45:35 60:00 12603 7786 ims 312 03/03/20 17:15:02 2:07 13534 92096 nxtgonpho no 313 03/03/20 17:15:03 2:07 92096 13246 nxtgonpho no 314 03/03/20 17:17:10 40:59 10564 6373 nxtgonpho no 315 03/03/20 17:45:35 29:47 5088 1572 ims 316 03/03/20 17:58:08 11:42 11259 12573 nxtgenpho no 317 03/03/20 17:58:09 11:42 12573 24067 nxtgonpho no 318 03/03/20 18:09:51 35:52 6810 5733 nxtgonpho no 319 03/03/20 18:17:26 18:56 6670 5963 ims 320 03/03/20 18:36:22 60:00 11996 4328 ims 321 03/03/20 18:45:42 2:07 5218 6105 nxtgonpho ne 322 03/03/20 18:45:43 2:07 6105 4930 nxtgonpho no 323 03/03/20 18:47:50 2:26 9442 11383 nxtgonpho no 324 03/03/20 18:50:15 2:15 5535 9029 nxtgonpho ne 325 03/03/20 18:50:16 2:15 9029 5247 nxtgonpho ne 326 03/03/20 18:52:31 21:26 15301 35155 nxtgenpho no Originating Number BT Bytes Bytes Apn DIRT IM9I NAM MODEL Up Dn APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 13 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170933 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342991 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 1/44e. AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn LEI TM! MANZ MOBIL 327 03/03/20 19:13:. 2:25 5768 7851 nxtgonpho ne APPLE 'PEONES 328 03/03/20 19:13: 2:24 7851 5480 nxtgonpho ne APPLE 'PEONES 329 03/03/20 19:16: 52:45 731753 3170468 nxtgonpho ne APPLE 'PEONES 330 03/03/20 19:16: 52:45 3170468 731465 nxtgonpho ne APPLE 'PEONES 331 03/03/20 19:36: 60:00 6956 2880 ims APPLE 'PHONES 332 03/03/20 20:09: 1:12 7245 5092 nxtgonpho ne APPLE 'PHONES 333 03/03/20 20:10: 12:53 8802 7894 nxtgonpho no APPLE 'PHONES 334 03/03/20 20:10: 12:53 7894 8514 nxtgonpho no APPLE 'PHONES 335 03/03/20 20:23: 2:10 7526 5166 nxtgonpho no APPLE 'PHONES 336 03/03/20 20:25: 2:09 5345 7525 nxtgonpho no APPLE 'PHONES 337 03/03/20 20:25: 2:09 7525 5057 nxtgonpho no APPLE 'PHONES 338 03/03/20 20:27: 3:08 6340 5292 nxtgonpho no APPLE 'PHONES 339 03/03/20 20:30: 14:54 5752 7585 nxtgonpho no APPLE 'PHONES 340 03/03/20 20:30: 14:54 7585 5464 nxtgonpho no APPLE 'PHONES 341 03/03/20 20:36: 16:16 3532 1324 ims APPLE 'PHONES 342 03/03/20 20:45: 0:06 0 48 nxtgonpho ne APPLE 'PHONES 343 03/03/20 20:45: 0:05 48 0 nxtgonpho ne APPLE 'PHONES 344 03/03/20 20:45: 1:55 5221 6055 nxtgonpho no APPLE 'PHONES 345 03/03/20 20:45: 1:56 6055 4933 nxtgonpho no APPLE 'PHONES 346 03/03/20 20:47: 13:12 9776 11284 nxtgonpho no APPLE 'PHONES 347 03/03/20 20:53: 0:34 19114 16639 ims APPLE 'PHONES 348 03/03/20 20:54: 28:56 8836 3160 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170934 The information contained here is for use by authorized persons only and is not for general distribution. Page 14 EFTA01342992 ---PAGE BREAK--- MOBILITY PRIO2O AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro ‘•- . 00 AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating KT %It weilwr Bytes Up Bytes Apn Dn 1:1012 INSI MAKE MODEL 349 03/03/20 21:00:55 2:06 5117 6055 nxtgenpho ne APPLE 'PHONES 350 03/03/20 21:00:56 2:06 6055 4829 nxtgenpho ne APPLE 'PHONES 351 03/03/20 21:03:02 4:40 7630 5224 nxtgenpho ne APPLE 'PHONES 352 03/03/20 21:07:41 2:07 5281 6115 nxtgenpho ne APPLE 'PHONES 353 03/03/20 21:07:42 2:07 6115 4993 nxtgenpho ne APPLE 'PHONES 354 03/03/20 21:09:49 0:05 0 Onxtgonpho ne APPLE 'PHONES 355 03/03/20 21:09:58 25:19 7879 5848 nxtgenpho ne APPLE 'PHONES 356 03/03/20 21:24:20 8:46 0 0 ims 357 03/03/20 21:35:17 113:52 6856 11128 nxtgenpho ne APPLE 'PHONES 358 03/03/20 21:35:18 60:00 192 Onxtgonpho ne APPLE 'PHONES 359 03/03/20 21:35:20 112:43 7134 6744 ims APPLE 'PHONES 360 03/03/20 21:35:21 60:00 6744 6978 ims APPLE 'PHONES 361 03/03/20 21:35:37 60:00 32623 20498 ims 362 03/03/20 21:35:54 30:49 5373088 4436025 ims 363 03/03/20 22:35:18 53:52 10936 6280 nxtgenpho ne APPLE 'PHONES 364 03/03/20 22:35:21 52:43 0 0 ims APPLE 'PHONES 365 03/03/20 22:35:37 37:55 3532 1340 ims 366 03/03/20 23:15:41 8:11 0 0 ims 367 03/03/20 23:27:35 0:59 6262 6666 ims APPLE 'PHONES 368 03/03/20 23:27:36 0:59 6666 5998 ims APPLE 'PHONES 369 03/03/20 23:28:02 0:03 0 0 ims 370 03/03/20 23:28:09 1:00 7266 6862 ims APPLE 'PHONES 371 03/03/20 23:28:10 1:00 6798 7002 ims APPLE 'PHONES 372 03/03/20 23:28:33 58:37 18422 9574 ims 373 03/03/20 23:29:10 0:36 7462 5052 nxtgenpho ne APPLE 'PHONES 374 03/03/20 23:29:45 24:20 30213 52870 nxtgenpho ne APPLE 'PHONES 375 03/03/20 23:29:46 24:20 52870 29925 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 15 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170935 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342993 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 1/44% AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 Conn. Time (OTC) Originating Numbor ET Bytes Up Bytes Apn Dn nom IISI WA= MOD= 376 03/03/20 23:54:06 15:46 17645 20423 nxtgonpho ne APPLE 'PROM 377 03/03/20 23:54:07 15:47 20423 17069 nxtgonpho ne APPLE 'PROM 378 03/04/20 00:09:54 0:46 11507 6439 nxtgonpho no APPLE 'PROM 379 03/04/20 00:10:39 52:20 56711 52938 nxtgonpho no APPLE 'PICNICS 380 03/04/20 00:10:40 52:20 52938 68486 nxtgonpho ne APPLE 'PHONES 381 03/04/20 00:32:25 2:30 0 0 ims 382 03/04/20 00:45:06 17:53 6510 8370 ims APPLE 'PHONES 383 03/04/20 00:45:07 17:53 8302 6354 ims APPLE 'PHONES 384 03/04/20 00:45:49 0:03 0 0 ims 385 03/04/20 00:46:19 60:00 15323 9894 ims 386 03/04/20 01:03:00 0:59 48 Onxtgonpho no APPLE 'PHONES 387 03/04/20 01:03:58 30:52 55514 57373 nxtgonpho no APPLE 'PHONES 388 03/04/20 01:03:59 30:52 57373 56180 nxtgonpho no APPLE 'PHONES 389 03/04/20 01:34:51 0:06 0 0 nxtgonpho no APPLE !PHONES 390 03/04/20 01:37:32 21:01 25916 28070 nxtgonpho no APPLE !PHONES 391 03/04/20 01:37:33 21:01 28070 25517 nxtgonpho ne APPLE !PHONES 392 03/04/20 01:46:19 55:23 8620 2928 ims 393 03/04/20 01:58:34 63:59 105999 112162 nxtgonpho ne APPLE !PHONES 394 03/04/20 01:58:35 60:00 111873 105108 nxtgonpho ne APPLE !PHONES 395 03/04/20 02:49:16 12:28 264 112 ims APPLE 'PHONES 396 03/04/20 02:49:17 12:28 48 0 ims APPLE 'PHONES 397 03/04/20 02:50:28 6:33 0 0 ims 398 03/04/20 02:58:35 3:59 289 315 nxtgonpho ne APPLE !PHONES 399 03/04/20 03:01:22 0:25 7234 6788 ims APPLE 'PHONES 400 03/04/20 03:01:23 0:26 6788 6970 ims APPLE 'PHONES 401 03/04/20 03:01:44 0:05 2567 1210 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 16 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170936 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342994 ---PAGE BREAK--- ..020 MOBILITY 41110 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm ::-_„,•-•° ""s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number lu7C1 Bytes Up Bytes Apn Dn INKS INSI MAKE MODEL 402 03/04/20 03:01:47 0:46 6360 6670 ism APPLE !PHONES 403 03/04/20 03:01:48 0:46 6670 6096 ism APPLE !PHONES 404 03/04/20 03:02:11 39:31 14275 8051 ism 405 03/04/20 03:02:34 0:39 0 Onstgonpho no APPLE !PHONES 406 03/04/20 03:03:12 73:18 28513 15701 nxtgonpho no APPLE !PHONES 407 03/04/20 03:03:13 60:00 7682 13726 nxtgonpho no APPLE !PHONES 408 03/04/20 03:53:13 23:17 7231 6796 Las APPLE !PHONES 409 03/04/20 03:53:14 23:17 6796 7075 iota APPLE !PHONES 410 03/04/20 03:54:40 14:02 9119 6273 iota 411 03/04/20 04:03:13 13:18 8019 14307 nxtgonpho no APPLE !PHONES 412 03/04/20 04:13:39 36:38 13443 7848 iota 413 03/04/20 04:16:31 6:11 6032 5599 nxtgonpho no APPLE !PHONES 414 03/04/20 04:22:41 20:00 11994 13097 nxtgonpho no APPLE !PHONES 415 03/04/20 04:22:42 60:00 65817 44943 nxtgonpho no APPLE !PHONES 416 03/04/20 04:42:41 62:23 34539 53298 nxtgonpho no APPLE !PHONES 417 03/04/20 04:48:51 56:13 7374 39842 Las APPLE !PHONES 418 03/04/20 04:48:52 56:13 6794 7110 iota APPLE !PHONES 419 03/04/20 05:05:48 60:00 15313 8908 iota 420 03/04/20 05:22:42 22:23 578 630 nxtgonpho no APPLE !PHONES 421 03/04/20 05:45:05 2:17 5221 6023 nxtgonpho no APPLE !PHONES 422 03/04/20 05:45:06 2:17 6023 4933 nxtgonpho no APPLE !PHONES 423 03/04/20 05:47:23 37:45 27157 37423 nxtgonpho no APPLE !PHONES 424 03/04/20 05:47:24 37:45 37423 26773 nxtgonpho no APPLE !PHONES 425 03/04/20 06:05:48 16:56 0 0 iota 426 03/04/20 06:25:10 48:24 9251 11190 nxtgonpho no APPLE !PHONES 427 03/04/20 06:26:41 13:02 8491 6410 ism AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170937 The information contained here is for use by authorized persons only and is not for general distribution. Page 17 EFTA01342995 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 1/445, ‘•- .a# AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Tame (DTC) Originating Numbor ET Bytes Up Bytes Apn DOM INSI MAKE Dn MODEL 428 03/04/20 06:46:22 60:00 13338 7746 ims 1 429 03/04/20 07:13:33 2:05 5222 6075nxtgonphe ne APPLE !PHONES 430 03/04/20 07:13:34 2:05 6075 4934 nxtgenpho ne APPLE !PHONES 431 03/04/20 07:15:39 60:00 8970 6813 nxtgenpho ne APPLE !PHONES 432 03/04/20 07:46:22 0:17 0 0 ims 433 03/04/20 07:51:19 6:15 48 0 ims APPLE !PHONES 434 03/04/20 07:57:34 60:00 15137 8951 ims APPLE !PHONES 435 03/04/20 08:15:39 60:00 58544 77226nxtgonphe ne APPLE !PHONES 436 03/04/20 08:57:34 9:27 0 0 ims APPLE !PHONES 437 03/04/20 09:11:30 8:59 0 0 ims 438 03/04/20 09:15:39 60:00 1723 3095nxtgonphe ne APPLE !PHONES 439 03/04/20 09:25:04 60:00 16490 8950 ims 440 03/04/20 10:15:39 60:00 1384 968 nxtgenpho ne APPLE !PHONES 441 03/04/20 10:25:04 49:47 8388 3036 ims 442 03/04/20 11:15:39 60:00 22590 24929 nxtgenpho ne APPLE !PHONES 443 03/04/20 11:18:22 46:42 14778 8892 ims 444 03/04/20 12:09:39 15:38 8367 6072 ims 445 03/04/20 12:15:39 19:26 21920 25058 nxtgenpho ne APPLE !PHONES 446 03/04/20 12:32:29 15:21 14115 12665 ims 447 03/04/20 12:35:04 2:56 5221 6023 nxtgenpho ne APPLE !PHONES 448 03/04/20 12:35:05 2:56 6023 4933 nxtgenpho ne APPLE !PHONES 449 03/04/20 12:38:01 11:43 7596 6216 nxtgenpho ne APPLE !PHONES 450 03/04/20 12:49:44 34:12 15878 18653 nxtgenpho ne APPLE !PHONES 451 03/04/20 12:49:45 34:12 18653 16658 nxtgenpho ne APPLE !PHONES 452 03/04/20 12:49:49 2:11 8453 6430 Las 453 03/04/20 12:51:43 0:05 0 0 Las APPLE !PHONES 454 03/04/20 12:52:18 26:35 6262 6670 Las APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 18 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170938 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342996 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. c r. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn IMRE INSI BANS MODEL 455 03/04/20 12:52:19 26:35 6670 6106 isms APPLE 'PEONES 456 03/04/20 12:52:35 16:07 8313 5982 isms 457 03/04/20 13:13:15 1:38 0 0 isms 458 03/04/20 13:17:35 6:21 6248 6666 isms APPLE 'PEONES 459 03/04/20 13:17:36 6:21 6666 6092 isms APPLE 'PEONES 460 03/04/20 13:18:53 60:00 16575 9018 isms 461 03/04/20 13:23:57 2:15 14505 5862 nxtgenpho ne APPLE 'PEONES 462 03/04/20 13:26:12 1:08 5112 6021 nxtgenpho ne APPLE 'PEONES 463 03/04/20 13:26:13 1:08 6021 4824 nxtgenpho ne APPLE 'PHONES 464 03/04/20 13:27:21 2:26 6020 4893 nxtgenpho ne APPLE 'PHONES 465 03/04/20 13:29:46 2:07 5222 6196 nxtgenpho ne APPLE 'PHONES 466 03/04/20 13:29:47 2:07 6196 4934 nxtgenpho ne APPLE 'PHONES 467 03/04/20 13:31:54 60:00 25665 13703 nxtgenpho ne APPLE 'PHONES 468 03/04/20 14:18:53 46:08 8496 2820 isms 469 03/04/20 14:31:54 60:00 341 1155 nxtgenpho ne APPLE 'PHONES 470 03/04/20 15:04:19 60:00 0 0 isms 471 03/04/20 15:05:01 26:14 11655 7628 isms 472 03/04/20 15:31:54 9:53 0 0 nxtgenpho ne APPLE 'PHONES 473 03/04/20 15:42:35 60:00 16282 9102 Les 474 03/04/20 16:04:19 11:00 0 0 Les 475 03/04/20 16:08:38 60:00 16925 11000 nxtgenpho ne APPLE 'PHONES 476 03/04/20 16:15:18 0:07 0 0 Les 477 03/04/20 16:17:32 19:08 9817 6348 Les 478 03/04/20 16:40:18 1:19 7364 6104 isms APPLE 'PHONES 479 03/04/20 16:41:37 60:00 12028 4220 isms APPLE 'PHONES 480 03/04/20 16:42:35 60:00 0 0 isms 481 03/04/20 17:08:38 11:35 237 210 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 19 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170939 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342997 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 MS= Conn. Tame (OTC/ Originating Ntivnl-sar ET Bytes Up Bytes Apn DOLT INSI MAKE Dn MODEL 482 03/04/20 17:20:1 2:07 5222 6023 nxtgenpho ne APPLE 'PHONES 483 03/04/20 17:20:1 2:07 6023 4934 nxtgenpho ne APPLE 'PHONES 484 03/04/20 17:22:2 17:42 15481 6441 nxtgenpho ne APPLE 'PHONES 485 03/04/20 17:40:0 21:24 22364 19777 nxtgenpho ne APPLE 'PHONES 486 03/04/20 17:40:0 21:24 19777 21884 nxtgenpho ne APPLE 'PHONES 487 03/04/20 17:41:3 60:00 6956 2756 ims APPLE 'PHONES 488 03/04/20 17:42:3 60:00 0 0 ims 489 03/04/20 18:01:2 34:35 31417 25433 nxtgenpho ne APPLE 'PHONES 490 03/04/20 18:36:0 10:11 123900 267707 nxtgenpho ne APPLE 'PHONES 491 03/04/20 18:41:3 44:17 18788 8828 ims APPLE 'PHONES 492 03/04/20 18:42:3 41:54 0 0 ims 493 03/04/20 18:46:1 14:32 2738331 1371751 nxtgenpho ne APPLE 'PHONES 494 03/04/20 18:46:1 14:32 1371751 2737947 nxtgenpho ne APPLE 'PHONES 495 03/04/20 18:52:2 1:45 146201 318486 ims APPLE 'PHONES 496 03/04/20 19:00:4 16:05 54281 30349 nxtgenpho ne APPLE 'PHONES 497 03/04/20 19:16:4 4:26 8112 8235 nxtgenpho ne APPLE 'PHONES 498 03/04/20 19:16:4 4:26 8235 7824 nxtgenpho ne APPLE 'PHONES 499 03/04/20 19:21:1 5:10 12167 13427 nxtgenpho ne APPLE 'PHONES 500 03/04/20 19:21:1 5:10 13427 11783 nxtgenpho ne APPLE 'PHONES 501 03/04/20 19:24:2 1:57 7266 6862 ims APPLE 'PHONES 502 03/04/20 19:24:2 1:57 6794 7002 ims APPLE 'PHONES 503 03/04/20 19:26:2 4:02 11620 6086 nxtgenpho ne APPLE 'PHONES 504 03/04/20 19:26:2 60:00 29067 17646 ims 505 03/04/20 19:30:2 8:16 5707 6616 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 20 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170940 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342998 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e t. AT&T Run Date: Run Time: Data Usage For: 06/17/2020 Item Conn. Conn. Date Time (OTC) 506 03/04/20 19:30:29 8:16 6616 5419 nxtgonpho no 507 03/04/20 19:38:45 42:09 22349 17236 nxtgenpho no 508 03/04/20 19:46:18 0:24 27681 51638 ims 509 03/04/20 20:20:53 7:50 7092 7276 nxtgonpho no 510 03/04/20 20:20:54 7:50 7276 6708 nxtgonpho no 511 03/04/20 20:26:28 55:05 8604 3036 ims 512 03/04/20 20:28:44 0:05 0 0 nxtgenpho no 513 03/04/20 20:30:50 93:46 76696 88972 nxtgonpho no 514 03/04/20 20:30:51 60:00 52778 46425 nxtgenpho no 515 03/04/20 21:25:15 39:21 8517 8866 ims 516 03/04/20 21:25:16 39:21 8758 8253 ims 517 03/04/20 21:29:51 60:00 25598 14171 ims 518 03/04/20 21:30:51 33:46 36194 29351 nxtgenpho ne 519 03/04/20 22:04:37 4:46 6080 4929 nxtgenpho ne 520 03/04/20 22:07:20 48:02 5023984 9542836 ims 521 03/04/20 22:09:22 1:51 5584 6403 nxtgonpho no 522 03/04/20 22:09:23 1:51 6403 5296 nxtgenpho ne 523 03/04/20 22:11:14 4:08 7260 6155 nxtgenpho ne 524 03/04/20 22:15:21 2:11 5436 6473 nxtgonpho no 525 03/04/20 22:15:22 2:11 6473 5148 nxtgonpho ne 526 03/04/20 22:17:32 15:05 14750 26225 nxtgonpho no 527 03/04/20 22:17:33 15:05 26225 15206 nxtgonpho no 528 03/04/20 22:29:51 60:00 20512 12964 ims 529 03/04/20 22:32:38 18:11 11974 14957 nxtgonpho Originating Number ET Bytes Bytes Apn max IMBI MIME MODEL Up Dn no APPLE IPECIJQB APPLE 'PEONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPHONE8 APPLE IPHONE8 APPLE IPEONE8 APPLE IPEONE8 APPLE IPEONE8 APPLE IPEONE8 APPLE IPEONE8 APPLE IPEONE8 APPLE IPEONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170941 The information contained here is for use by authorized persons only and is not for general distribution. Page 21 EFTA01342999 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e s, AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Ma= Conn. Time (OTC/ Originating mink.: BT Bytes Up Bytes Apn MOLT IBIS! Ise Dn Mori. 530 03/04/20 22:32:39 18:11 14957 11590 nxtgenpho no APPLE 'PEONES 531 03/04/20 22:50:50 3:38 9791 5778 nxtgenpho no APPLE 'PEONES 532 03/04/20 22:54:27 1:02 5221 6023 nxtgenpho no APPLE 'PEONES 533 03/04/20 22:54:28 1:02 6023 4933 nxtgenpho no APPLE 'PEONES 534 03/04/20 22:55:30 4:48 136342 110705 nxtgenpho ne APPLE 'PHONES 535 03/04/20 23:00:17 9:59 16815 14603 nxtgenpho ne APPLE 'PHONES 536 03/04/20 23:00:19 9:58 14603 16431 nxtgenpho ne APPLE 'PHONES 537 03/04/20 23:04:22 0:43 92872 57448 ims 538 03/04/20 23:10:17 4:26 8747 5322 nxtgenpho ne APPLE 'PHONES 539 03/04/20 23:14:42 8:28 5220 6075 nxtgenpho no APPLE 'PHONES 540 03/04/20 23:14:43 8:28 6075 4932 nxtgenpho no APPLE 'PHONES 541 03/04/20 23:23:11 5:52 6866 5015 nxtgenpho no APPLE 'PHONES 542 03/04/20 23:29:02 8:29 5282 6135 nxtgenpho ne APPLE 'PHONES 543 03/04/20 23:29:04 8:28 6135 4994 nxtgenpho ne APPLE 'PHONES 544 03/04/20 23:29:51 22:47 4980 1588 ims 545 03/04/20 23:37:32 4:06 6018 4936 nxtgenpho no APPLE 'PHONES 546 03/04/20 23:41:37 8:28 6755 6847 nxtgenpho no APPLE 'PHONES 547 03/04/20 23:41:38 8:28 6847 6467 nxtgenpho no APPLE 'PHONES 548 03/04/20 23:50:06 35:32 11569 7003 nxtgenpho no APPLE 'PHONES 549 03/04/20 23:54:57 24:22 9623 6213 ims 550 03/05/20 00:22:15 0:19 96 0 ims APPLE 'PHONES 551 03/05/20 00:23:33 25:46 20534 11770 ims 552 03/05/20 00:25:37 3:04 5117 6023 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170942 The information contained here is for use by authorized persons only and is not for general distribution. Page 22 EFTA01343000 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 alai= Conn. Time (UTC) Originating KT Bytes Up Bytes Apn Dn max INS! ISAPZZ Mori. 553 03/05/20 00:25:38 3:04 6023 4829 nxtgenpho ne APPLE 'PEONES 554 03/05/20 00:28:41 6:06 6068 6035 nxtgenpho ne APPLE 'PEONES 555 03/05/20 00:28:42 6:06 6035 5780 nxtgenpho ne APPLE 'PEONES 556 03/05/20 00:34:48 7:20 7430 4957 nxtgenpho ne APPLE 'PEONES 557 03/05/20 00:42:07 0:52 5221 6075 nxtgenpho ne APPLE 'PEONES 558 03/05/20 00:42:08 0:52 6075 4933 nxtgenpho no APPLE 'PEONES 559 03/05/20 00:43:00 2:32 6193 5009 nxtgonpho no APPLE IPEOII68 560 03/05/20 00:45:31 2:07 5118 6023 nxtgenpho ne APPLE !PHONES 561 03/05/20 00:45:33 2:06 6023 4830 nxtgenpho ne APPLE 'PHONES 562 03/05/20 00:47:40 5:43 16247 12433 nxtgenpho no APPLE 'PHONES 563 03/05/20 00:51:15 0:00 0 0 ims APPLE 'PHONES 564 03/05/20 00:51:24 11:26 31254 20844 ims 565 03/05/20 00:53:22 6:04 7012 10966 nxtgenpho no APPLE 'PHONES 566 03/05/20 00:53:23 6:04 10966 6724 nxtgenpho no APPLE 'PHONES 567 03/05/20 00:55:51 0:33 1723 0 ims 568 03/05/20 00:58:09 0:32 74020 62275 isms 569 03/05/20 00:59:27 8:23 6804 4951 nxtgenpho ne APPLE 'PHONES 570 03/05/20 01:07:12 22:51 10774 6954 isms 571 03/05/20 01:07:49 8:29 5113 6021 nxtgenpho ne APPLE 'PHONES 572 03/05/20 01:07:50 8:29 6021 4825 nxtgenpho ne APPLE 'PHONES 573 03/05/20 01:16:19 15:28 7603 5208 nxtgenpho ne APPLE 'PHONES 574 03/05/20 01:31:46 2:06 5784 6614 nxtgenpho no APPLE 'PHONES 575 03/05/20 01:31:47 2:06 6614 5496 nxtgenpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 23 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170943 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343001 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. cre AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 "IS= Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn IMMIX INSI MAKE MODEL 576 03/05/20 01:32:07 1:45 6262 6666 ims APPLE 'PHONES 577 03/05/20 01:32:08 1:45 6666 5998 ims APPLE 'PHONES 578 03/05/20 01:33:54 35:09 33154 14141 nxtgonpho ne APPLE 'PHONES 579 03/05/20 01:33:59 49:38 15602 8058 ims 580 03/05/20 02:09:03 27:21 708 1490 nxtgonpho ne APPLE 'PHONES 581 03/05/20 02:24:41 6:43 8962 7128 ims APPLE 'PHONES 582 03/05/20 02:31:24 60:00 12336 4468 ims APPLE 'PHONES 583 03/05/20 02:36:23 2:33 5583 6387 nxtgonpho ne APPLE 'PHONES 584 03/05/20 02:36:24 2:33 6387 5295 nxtgonpho ne APPLE 'PHONES 585 03/05/20 02:38:56 12:47 5709 6616 nxtgonpho no APPLE 'PHONES 586 03/05/20 02:38:57 12:47 6616 5421 nxtgonpho no APPLE 'PHONES 587 03/05/20 02:51:44 2:18 0 0 nxtgonpho no APPLE 'PHONES 588 03/05/20 02:54:01 3:01 5535 6475 nxtgonpho ne APPLE 'PHONES 589 03/05/20 02:54:02 3:01 6475 5247 nxtgonpho ne APPLE 'PHONES 590 03/05/20 02:57:03 2:04 5435 6401 nxtgonpho no APPLE 'PHONES 591 03/05/20 02:57:04 2:04 6401 5147 nxtgonpho no APPLE 'PHONES 592 03/05/20 02:59:08 13:23 6613 5266 nxtgonpho ne APPLE 'PHONES 593 03/05/20 03:12:30 8:47 5499 6678 nxtgonpho ne APPLE 'PHONES 594 03/05/20 03:12:31 8:47 6678 5211 nxtgonpho ne APPLE 'PHONES 595 03/05/20 03:21:18 10:02 8179 5715 nxtgonpho ne APPLE 'PHONES 596 03/05/20 03:31:20 26:07 8414 6032 nxtgonpho ne APPLE 'PHONES 597 03/05/20 03:31:24 2:30 0 0 ims APPLE 'PHONES 598 03/05/20 03:41:55 22:09 10019 6550 ims 599 03/05/20 03:57:28 4:01 7810 5394 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170944 The information contained here is for use by authorized persons only and is not for general distribution. Page 24 EFTA01343002 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cm% 1/4-.00 AT&T Run Date,: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Date Conn. Time (OTC) 600 03/05/20 04:01:29 601 03/05/20 04:09:31 602 03/05/20 04:10:48 603 03/05/20 04:17:53 604 03/05/20 04:18:50 605 03/05/20 04:18:51 606 03/05/20 04:27:44 607 03/05/20 04:27:45 608 03/05/20 04:38:18 609 03/05/20 04:54:28 610 03/05/20 04:59:22 611 03/05/20 05:00:01 612 03/05/20 05:00:02 613 03/05/20 05:02:07 614 03/05/20 05:09:08 615 03/05/20 05:12:23 616 03/05/20 05:18:36 617 03/05/20 05:18:37 618 03/05/20 05:20:41 619 03/05/20 05:34:29 620 03/05/20 05:34:58 621 03/05/20 05:39:49 Originating Number ET Bytes Bytes Apn flat ItC3I MAKE MODEL Up Dn 16:23 7079 6004 nxtgenpho ne APPLE 'PHONES 1:17 48 0 ims APPLE 'PHONES 43:41 13523 7927 ims APPLE 'PHONES 0:58 6388 5102 nxtgenpho ne APPLE 'PHONES 8:54 5584 6475 nxtgenpho ne APPLE 'PHONES 8:54 6475 5296 nxtgenpho ne APPLE 'PHONES 10:33 5438 6475 nxtgenpho ne APPLE 'PHONES 10:33 6475 6150 nxtgenpho ne APPLE 'PHONES 16:10 6658 5674 nxtgenpho ne APPLE 'PHONES 5:33 6030 5595 nxtgenpho ne APPLE 'PHONES 60:00 16731 9110 ims 2:05 5221 6075nmtgonphe ne APPLE 'PHONES 2:06 6075 4933 nxtgenpho ne APPLE 'PHONES 7:01 7430 4955 nxtgenpho ne APPLE 'PHONES 3:15 6866 5015 nxtgenpho ne APPLE 'PHONES 6:13 6080 4953 nxtgenpho ne APPLE 'PHONES 2:04 5281 6083 nxtgenpho ne APPLE 'PHONES 2:04 6083 4993 nxtgenpho ne APPLE 'PHONES 13:47 7603 5112 nxtgenpho ne APPLE 'PHONES 0:29 6231 5060 nxtgenpho ne APPLE 'PHONES 4:52 6806 4955 nxtgenpho ne APPLE 'PHONES 2:06 288 48 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 25 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. S0NY_GM_00170945 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343003 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. „sow AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 "MI= Conn. originating BT Time Number (OTC) Bytes Up Bytes Apn THE Dn IMSI IOR MODEL 622 03/05/20 05:39:51 2:05 48 0 nxtgenphe ne 3587080982063725 310410214827503 APPLE IPROME8 623 03/05/20 05:41:56 23:40 6364 5098 nxtgenphe ne APPLE IPROME8 624 03/05/20 05:59:22 15:46 0 0 ims 625 03/05/20 06:05:35 2:05 5221 6075 nxtgenphe ne APPLE IPHONE8 626 03/05/20 06:05:36 2:05 6075 4933 nxtgenphe ne APPLE 'PHONES 627 03/05/20 06:07:41 13:59 7847 5533 nxtgenphe ne APPLE 'PHONES 628 03/05/20 06:16:28 8:43 0 0 ims 629 03/05/20 06:21:40 4:18 6866 5017 nxtgenphe ne APPLE 'PHONES 630 03/05/20 06:25:58 14:03 7847 5582 nxtgenphe ne APPLE 'PHONES 631 03/05/20 06:30:52 47:56 23127 9750 ims 632 03/05/20 06:40:01 0:54 7546 5108 nxtgenphe ne APPLE 'PHONES 633 03/05/20 06:40:55 0:44 48 0 nxtgenphe ne APPLE 'PHONES 634 03/05/20 06:41:38 2:06 288 48 nxtgenphe ne APPLE 'PHONES 635 03/05/20 06:41:40 2:05 48 0 nxtgenphe ne APPLE 'PHONES 636 03/05/20 06:43:45 12:14 6193 5044 nxtgenphe ne APPLE !PHONES 637 03/05/20 06:55:58 2:17 5281 6135 nxtgenphe ne APPLE 'PHONES 638 03/05/20 06:56:00 2:16 6135 4993 nxtgenphe ne APPLE 'PHONES 639 03/05/20 06:58:16 22:26 7546 6684 nxtgenphe ne APPLE 'PHONES 640 03/05/20 07:08:46 1:37 0 0 ims 641 03/05/20 07:18:49 60:00 20702 10498 ims 642 03/05/20 07:34:11 10:14 8655 5731 nxtgenphe ne APPLE 'PHONES 643 03/05/20 08:18:49 3:30 0 0 ims 644 03/05/20 08:29:56 16:06 8407 6169 ims 645 03/05/20 08:49:39 9:48 8187 5998 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 26 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170946 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343004 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. c o . AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 "IS= Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn WANE MODEM 646 03/05/20 09:06:19 60:00 16685 9202 ims 647 03/05/20 10:06:19 16:47 0 0 ims 648 03/05/20 10:09:57 19:22 6191 5041 nxtgonpho no APPLE IPEOEW68 649 03/05/20 10:28:37 60:00 15269 8862 ims 650 03/05/20 10:29:19 14:38 5326 6248 nxtgonpho no APPLE 'PHONES 651 03/05/20 10:29:20 14:38 6248 5038 nxtgonpho no APPLE !PHONES 652 03/05/20 10:43:58 55:27 7625 8243 nxtgonpho no APPLE !PHONES 653 03/05/20 11:28:37 18:22 0 0 ims 654 03/05/20 11:39:26 60:00 12056 9665 nxtgonpho no APPLE !PHONES 655 03/05/20 11:48:45 4:26 0 0 ins APPLE !PHONES 656 03/05/20 11:53:11 0:00 0 0 ims APPLE !PHONES 657 03/05/20 11:53:11 0:00 0 0 ims APPLE !PHONES 658 03/05/20 12:00:53 60:00 19677 10140 ims 659 03/05/20 12:39:26 53:45 36378 21287 nxtgonpho no APPLE !PHONES 660 03/05/20 13:00:53 54:06 19612 10568 ims 661 03/05/20 13:22:35 1:24 123162 257851 ims 662 03/05/20 13:33:11 0:21 5381 6256 nxtgonpho no APPLE !PEONES 663 03/05/20 13:33:12 0:21 6256 5093 nxtgonpho no APPLE !PEONES 664 03/05/20 13:33:33 32:14 9598 8370 nxtgonpho no APPLE !PEONES 665 03/05/20 13:57:56 7:15 17920 16272 ims APPLE !PEONES 666 03/05/20 14:04:43 0:17 0 24131 ims APPLE !PEONES 667 03/05/20 14:05:11 60:00 15448 4980 ims APPLE !PEONES 668 03/05/20 14:05:46 2:07 5554 9296 nxtgonpho no APPLE !PEONES 669 03/05/20 14:05:48 2:06 9296 5266 nxtgonpho no APPLE !PEONES 670 03/05/20 14:07:54 35:19 26806 16478 nxtgonpho no APPLE IPEONE8 671 03/05/20 14:43:12 2:07 5222 6075 nxtgonpho no APPLE IPEONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 27 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SONY_GM_00170947 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343005 ---PAGE BREAK--- MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. dro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 NM= Conn. Time (OTC) Originating ET Bytes up Bytes Apn Dn EMU IMSI MAKS MODEL 672 03/05/20 14:43:13 2:07 6075 4934 nxtgenpho ne APPLE 'PEONES 673 03/05/20 14:45:20 9:32 6659 6136 nxtgenpho ne APPLE 'PROMS 674 03/05/20 14:54:52 2:02 12120 10092 nxtgenpho ne APPLE 'PROMS 675 03/05/20 14:56:54 2:09 5221 6023 nxtgenpho ne APPLE IPE06E6 676 03/05/20 14:56:55 2:09 6023 4933 nxtgenpho ne APPLE 'PHONES 677 03/05/20 14:59:05 13:21 7223 5581 nxtgenpho ne APPLE 'PHONES 678 03/05/20 15:05:11 56:38 38340 20760 ims APPLE !PHONES 679 03/05/20 15:12:25 2:07 5116 6023 nxtgenpho ne APPLE !PHONES 680 03/05/20 15:12:27 2:06 6023 4828 nxtgenpho ne APPLE !PHONES 681 03/05/20 15:14:33 15:06 33334 21642 nxtgenpho ne APPLE !PHONES 682 03/05/20 15:29:38 2:07 5117 6023 nxtgenpho ne APPLE !PHONES 683 03/05/20 15:29:39 2:07 6023 4829 nxtgenpho ne APPLE !PHONES 684 03/05/20 15:31:46 13:19 7667 5217 nxtgenpho ne APPLE !PHONES 685 03/05/20 15:45:05 8:11 5220 6023 nxtgenpho ne APPLE !PHONES 686 03/05/20 15:45:06 8:11 6023 4932 nxtgenpho ne APPLE !PHONES 687 03/05/20 15:49:25 0:22 0 1254 ims APPLE !PHONES 688 03/05/20 15:49:58 0:07 0 1548 ims APPLE !PHONES 689 03/05/20 15:53:17 15:34 12631 10152 nxtgenpho ne APPLE !PHONES 690 03/05/20 16:02:35 60:00 11799 7322 ims 691 03/05/20 16:08:50 2:18 5221 6023 nxtgenpho ne APPLE !PHONES 692 03/05/20 16:08:51 2:18 6023 4933 nxtgenpho ne APPLE !PHONES 693 03/05/20 16:11:08 1:25 5221 6075 nxtgenpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 28 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170948 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343006 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. cro AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 NM= Conn. Time (OTC) Originating Dunbar ET Bytes Up Bytes Apn MOM II I MAKE Dn MODEL 694 03/05/20 16:11:09 1:25 6075 4933 nxtgonpho no APPLE 'PHONES 695 03/05/20 16:12:34 0:49 12388 5896 nxtgenpho no APPLE 'PHONES 696 03/05/20 16:13:22 14:41 5839 6939 nxtgonpho no APPLE 'PHONES 697 03/05/20 16:13:23 14:41 6939 5551 nxtgonpho no APPLE 'PHONES 698 03/05/20 16:28:04 1:36 0 0 nxtgenpho no APPLE 'PHONES 699 03/05/20 16:29:39 1:14 5218 6073 nxtgonpho no APPLE 'PHONES 700 03/05/20 16:29:40 1:14 6073 4930 nxtgonpho no APPLE 'PHONES 701 03/05/20 16:30:54 10:00 9273 7536 nxtgonpho no APPLE 'PHONES 702 03/05/20 16:40:53 8:56 12853 8449 nxtgonpho no APPLE 'PHONES 703 03/05/20 16:40:54 8:56 8449 12565 nxtgonpho no APPLE 'PHONES 704 03/05/20 16:49:50 0:05 0 Onxtgonpho ne APPLE 'PHONES 705 03/05/20 16:50:18 23:43 11746 8806 nxtgonpho no APPLE 'PHONES 706 03/05/20 17:02:35 60:00 30884 17448 imo 707 03/05/20 17:14:00 0:51 5118 6023 nxtgonpho no APPLE 'PHONES 708 03/05/20 17:14:02 0:50 6023 4830 nxtgonpho no APPLE 'PHONES 709 03/05/20 17:14:10 0:37 24028 73435 imo 710 03/05/20 17:14:52 9:12 39449 28212 nxtgonpho no APPLE 'PHONES 711 03/05/20 17:15:25 0:08 3465 13132 imo 712 03/05/20 17:24:04 6:01 14748 12013 nxtgonpho no APPLE 'PHONES 713 03/05/20 17:30:04 2:10 8275 9000 nxtgonpho no APPLE 'PHONES 714 03/05/20 17:30:06 2:09 9000 7891 nxtgonpho no APPLE 'PHONES 715 03/05/20 17:32:15 48:36 34297 24332 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 29 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170949 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343007 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ct, `-- .4 AT&T Run Data: Run Timm: Data usage For: Item Conn. Data 06/17/2020 Conn. Tame (OTC: Originating Number BT Bytes Up Bytes Apn DMZ I16I MANZ Dn MODEL 716 03/05/20 18:02:35 52:23 43408 28432 ims 717 03/05/20 18:20:51 1:46 5318 6071 nxtgenpho ne APPLE 'PEONES 718 03/05/20 18:20:52 1:46 6071 4934 nxtgenpho ne APPLE 'PEONES 719 03/05/20 18:22:38 27:23 63753 41374 nxtgenpho ne APPLE 'PEONES 720 03/05/20 18:27:15 0:24 12736 49564 ims 721 03/05/20 18:28:56 0:24 15889 46520 ims 722 03/05/20 18:42:22 0:24 16574 44337 ims 723 03/05/20 18:50:00 2:09 5113 6073 nxtgenpho ne APPLE 'PHONES 724 03/05/20 18:50:01 2:09 6073 4825 nxtgenpho ne APPLE IPHONE8 725 03/05/20 18:52:10 1:34 6020 4941 nxtgenpho ne APPLE IPHONE8 726 03/05/20 18:53:43 15:50 377833 92026 nxtgenpho ne APPLE IPHONE8 727 03/05/20 18:53:44 15:50 91974 379105 nxtgenpho ne APPLE IPHONE8 728 03/05/20 18:54:57 10:21 7160 6814 ims APPLE IPHONE8 729 03/05/20 18:54:58 10:21 6746 7004 ims APPLE IPHONE8 730 03/05/20 19:02:11 10:31 11538 6746 ims 731 03/05/20 19:05:18 4:15 6316 6646 ims APPLE IPHONE8 732 03/05/20 19:05:19 4:15 6646 5964 ims APPLE IPHONE8 733 03/05/20 19:09:34 16:58 56922 89719 nxtgenpho ne APPLE IPHONE8 734 03/05/20 19:09:37 16:55 8904 7985 ims APPLE IPHONE8 735 03/05/20 19:26:32 0:41 2654 4560 nxtgenpho ne APPLE IPHONE8 736 03/05/20 19:26:32 0:41 0 0 ims APPLE IPHONE8 737 03/05/20 19:27:13 0:42 3250 7682 nxtgenpho ne APPLE IPHONE8 738 03/05/20 19:27:13 0:42 0 0 ims APPLE IPHONE8 739 03/05/20 19:27:55 0:30 0 Onstgenpho ne APPLE IPHONE8 740 03/05/20 19:27:55 0:30 0 0 ims APPLE IPHONE8 741 03/05/20 19:28:25 21:30 1429910 18614505 nxtgenpho ne APPLE IPHONE8 742 03/05/20 19:28:25 60:00 7788 4128 ims APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 30 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00170950 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343008 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e s, AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 Conn. Originating ET Time Number (UTC) sytos Up Bytes Apn IN/LI IMSI MESE Dn MODEL 743 03/05/20 19:49:55 32:08 1214122 3567455 nxtgonphe no APPLE 'PEONES 744 03/05/20 20:22:03 5:52 351921 19649061 nxtgonphe no APPLE 'PEONES 745 03/05/20 20:27:55 35:39 1936311 18204765 nxtgonphe no APPLE 'PEONES 746 03/05/20 20:28:25 60:00 23956 16172 ims APPLE IPEONE8 747 03/05/20 20:38:36 9:14 1550472 1193028 ims APPLE IPHONE8 748 03/05/20 20:51:31 0:04 2449 10497 ims APPLE IPHONE8 749 03/05/20 21:03:34 20:51 824545 926983 nxtgonphe no APPLE !PHONES 750 03/05/20 21:24:25 9:16 676408 792894 nxtgonphe no APPLE !PHONES 751 03/05/20 21:28:25 5:16 0 0 ims APPLE !PHONES 752 03/05/20 21:33:41 0:50 0 Onxtgonphe no APPLE !PHONES 753 03/05/20 21:33:41 0:50 0 0 ims APPLE !PHONES 754 03/05/20 21:34:31 1:02 0 Onmtgonphe no APPLE !PHONES 755 03/05/20 21:34:31 1:02 0 0 ims APPLE !PHONES 756 03/05/20 21:35:33 1:43 0 Onmtgonphe no APPLE !PHONES 757 03/05/20 21:35:33 1:43 0 0 ims APPLE !PHONES 758 03/05/20 21:37:16 8:54 22653 43544 nxtgonphe no APPLE !PHONES 759 03/05/20 21:37:16 8:54 0 0 ims APPLE !PHONES 760 03/05/20 21:46:09 3:53 21998 14343 nxtgonphe no APPLE !PHONES 761 03/05/20 21:46:10 3:52 6246 6668 ims APPLE !PHONES 762 03/05/20 21:46:10 3:53 14343 21710 nxtgonphe no APPLE !PHONES 763 03/05/20 21:46:11 3:52 6668 5982 ims APPLE !PHONES 764 03/05/20 21:50:03 1:12 13504 14911 nxtgonphe no APPLE !PHONES 765 03/05/20 21:50:05 1:10 6666 5964 ims APPLE !PHONES 766 03/05/20 21:51:14 8:20 913741 108412 nxtgonphe no APPLE !PHONES 767 03/05/20 21:51:16 8:18 6226 6774 ims APPLE !PHONES 768 03/05/20 21:51:16 8:19 108412 927006 nxtgonphe no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170951 The information contained here is for use by authorized persons only and is not for general distribution. Page 31 EFTA01343009 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ‘•- .s. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn DMZ INSI MAKE MODEL 769 03/05/20 21:51:17 8:18 6666 5962 isms APPLE 'PHONES 770 03/05/20 21:59:34 1:24 15373 13467 nxtgenpho ne APPLE 'PHONES 771 03/05/20 21:59:35 1:23 6316 6778 isms APPLE 'PHONES 772 03/05/20 21:59:35 1:24 13467 20245 nxtgenpho ne APPLE 'PHONES 773 03/05/20 21:59:37 1:22 6670 5964 isms APPLE 'PHONES 774 03/05/20 22:00:58 5:42 5220 6023 nxtgenpho ne APPLE 'PHONES 775 03/05/20 22:00:59 5:42 6023 4932 nxtgenpho ne APPLE 'PHONES 776 03/05/20 22:01:03 10:56 8523 6446 isms 777 03/05/20 22:04:31 2:09 7114 6846 isms APPLE 'PHONES 778 03/05/20 22:04:32 2:09 6738 6850 isms APPLE 'PHONES 779 03/05/20 22:06:41 0:06 0 0nxtgonpho ne APPLE 'PHONES 780 03/05/20 22:08:13 16:17 20308 20681 nxtgenpho ne APPLE 'PHONES 781 03/05/20 22:08:14 14:56 6262 6782 isms APPLE 'PHONES 782 03/05/20 22:08:14 16:16 20681 39271 nxtgenpho ne APPLE 'PHONES 783 03/05/20 22:08:15 14:56 6674 5998 isms APPLE 'PHONES 784 03/05/20 22:23:11 0:00 0 0 isms APPLE 'PHONES 785 03/05/20 22:23:12 1:18 6263 6674 isms APPLE 'PHONES 786 03/05/20 22:23:13 1:19 6674 5999 isms APPLE 'PHONES 787 03/05/20 22:24:32 5:58 9126 5538 nxtgenpho ne APPLE 'PHONES 788 03/05/20 22:24:34 4:29 8898 8820 isms APPLE 'PHONES 789 03/05/20 22:29:07 1:23 7958 6082 isms APPLE 'PHONES 790 03/05/20 22:30:29 3:34 7691 8133 nxtgenpho ne APPLE 'PHONES 791 03/05/20 22:30:31 3:32 7136 6852 isms APPLE 'PHONES 792 03/05/20 22:30:31 3:33 8133 9592 nxtgenpho ne APPLE 'PHONES 793 03/05/20 22:30:32 3:32 6744 6872 isms APPLE 'PHONES 794 03/05/20 22:33:37 0:33 144 144 isms APPLE 'PHONES 795 03/05/20 22:34:04 15:16 19427 29128 nxtgenpho ne APPLE 'PHONES 796 03/05/20 22:34:10 1:36 8070 6138 isms APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170952 The information contained here is for use by authorized persons only and is not for general distribution. Page 32 EFTA01343010 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. cro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytos Up Bytes Apn Dn L@I INSI MAKE MODEL 797 03/05/20 22:34: 1:36 8006 6138 ism APPLE 'PHONES 798 03/05/20 22:35: 6:23 3408 1340 ism APPLE 'PHONES 799 03/05/20 22:42:1 7:11 3344 1464 ism APPLE 'PHONES 800 03/05/20 22:42:1 7:11 3280 1464 ism APPLE 'PHONES 801 03/05/20 22:49: 17:10 7929 6401 nxtgenpho ne APPLE 'PHONES 802 03/05/20 22:49: 17:09 6458 7404 ism APPLE 'PHONES 803 03/05/20 22:49: 17:10 6401 8586 nxtgenpho ne APPLE 'PHONES 804 03/05/20 22:49: 17:09 7404 6214 ism APPLE 'PHONES 805 03/05/20 22:54: 7:36 16014 11770 ism 806 03/05/20 23:06: 42:29 1120699 1146855 nxtgenpho ne APPLE 'PHONES 807 03/05/20 23:06: 42:26 10802 10151 ism APPLE 'PHONES 808 03/05/20 23:48: 12:42 13580 47470 nxtgenpho ne APPLE 'PHONES 809 03/05/20 23:49: 12:42 46210 16744 nxtgenpho ne APPLE 'PHONES 810 03/05/20 23:49: 12:40 6248 31006 ism APPLE 'PHONES 811 03/05/20 23:49: 12:40 6670 6092 ism APPLE 'PHONES 812 03/05/20 23:56: 60:00 18177 10135 ism 813 03/06/20 00:01: 39:39 13061 11748 nxtgenpho ne APPLE 'PHONES 814 03/06/20 00:41: 60:00 14747 12058 nxtgenpho ne APPLE 'PHONES 815 03/06/20 00:56: 48:52 7032 2772 ims 816 03/06/20 01:41: 60:00 11245 7612 nxtgenpho ne APPLE 'PHONES 817 03/06/20 01:47: 20:33 10047 6550 ism APPLE 'PHONES 818 03/06/20 02:08: 0:01 0 0 ism APPLE 'PHONES 819 03/06/20 02:08: 0:01 0 0 ims APPLE 'PHONES 820 03/06/20 02:08: 4:01 8573 6344 ism 821 03/06/20 02:14: 21:21 8307 6048 isms 822 03/06/20 02:38: 41:02 16240 8162 isms 823 03/06/20 02:41: 60:00 1322 1155 nxtgenpho ne APPLE 'PHONES 824 03/06/20 03:25: 7:24 0 0 isms 825 03/06/20 03:37: 60:00 16650 9085 isms AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 33 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170953 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343011 ---PAGE BREAK--- P.020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cm% :•-es AT&T Run Date: Run Tine: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC/ Originating Number 22 Bytes up Bytes Apn 0n IB@I IMSI MAKE MODEL 826 03/06/20 03:41:22 60:00 49981 10993 nxtgenpho ne APPIZ 'PROMS 827 03/06/20 04:37:25 22:28 4964 1588 ims 828 03/06/20 04:41:22 60:00 1433 1513 nxtgenpho ne APPIZ 'PROMS 829 03/06/20 05:06:31 30:16 8371 6046 ims 830 03/06/20 05:41:22 60:00 1270 1050 nxtgenpho ne APPIZ 'PROMS 831 03/06/20 05:45:39 34:57 8373 6162 ims 832 03/06/20 06:24:30 5:56 0 0 ims 833 03/06/20 06:37:01 60:00 16695 9034 ims 834 03/06/20 06:41:22 60:00 1211 735 nxtgenpho ne APPLE 'PHONES 835 03/06/20 07:37:01 13:53 0 0 ims 836 03/06/20 07:41:22 60:00 1270 1050 nxtgenpho ne APPLE 'PHONES 837 03/06/20 07:52:58 11:23 8199 5962 ims 838 03/06/20 08:07:51 60:00 11735 7554 ims 839 03/06/20 08:41:22 60:00 865 525 nxtgenpho ne APPLE 'PHONES 840 03/06/20 09:07:51 13:42 3424 1340 ims 841 03/06/20 09:25:04 26:28 8311 6214 ims 842 03/06/20 09:41:22 60:00 1038 630 nxtgenpho ne APPLE 'PHONES 843 03/06/20 09:58:33 60:00 11769 7519 ims 844 03/06/20 10:41:22 60:00 986 589 nxtgenpho ne APPLE 'PHONES 845 03/06/20 10:58:33 13:38 3532 1324 ims 846 03/06/20 11:14:49 60:00 11623 7556 ims 847 03/06/20 11:41:22 5:25 510 3082 nxtgenpho ne APPLE 'PHONES 848 03/06/20 11:46:46 1:46 5440 6475 nxtgenpho ne APPLE 'PHONES 849 03/06/20 11:46:47 1:46 6475 5152 nxtgenpho ne APPLE 'PHONES 850 03/06/20 11:48:33 14:26 7666 5214 nxtgenpho ne APPLE 'PHONES 851 03/06/20 12:02:58 12:46 28108 29261 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170954 The information contained here is for use by authorized persons only and is not for general distribution. Page 34 EFTA01343012 ---PAGE BREAK--- PRI020 MOBILITY 4111. AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm •3/4-s "-a. AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in 41citsot il° OTC. Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Tame Number (OTC) Bytes Up Bytes Apn Dn ZIOLI INSI NAAS MODEL 852 03/06/20 12:02:59 12:46 29261 27532 nxtgonphe ne 3587080982063725 310410214827503 APPLE 'PHONES 853 03/06/20 12:14:49 17:54 5072 1572 ims 854 03/06/20 12:15:45 18:55 8345 5919nmtgonphe ne 3 APPLE !PHONES 855 03/06/20 12:34:17 60:00 15887 8782 ims 856 03/06/20 12:34:40 2:06 5931 10717 nxtgonphe ne 3 APPLE !PHONES 857 03/06/20 12:34:41 2:06 10717 5643 nxtgonphe ne 3 APPLE !PHONES 858 03/06/20 12:36:47 60:00 8424 7148 nxtgonphe ne 3 APPLE !PHONES 859 03/06/20 13:34:17 33:45 3424 1324 ims 860 03/06/20 13:36:47 60:00 2159 5574 nxtgonphe ne 3 APPLE !PHONES 861 03/06/20 14:11:36 33:17 11410 7501 ims 3 APPLE !PHONES 862 03/06/20 14:36:47 31:10 11189 6538 nxtgonphe ne 3 APPLE !PHONES 863 03/06/20 14:44:53 28:56 20364 11140 ims 3 APPLE !PHONES 864 03/06/20 15:07:56 1:30 5668 7321 nxtgonphe ne 3 APPLE !PHONES 865 03/06/20 15:07:57 1:30 7321 5380 nxtgonphe ne 3 APPLE !PHONES 866 03/06/20 15:08:13 1:12 183147 212153 ims 3 APPLE !PHONES 867 03/06/20 15:09:27 4:49 7244 5221 nxtgonphe ne 3 APPLE !PHONES 868 03/06/20 15:14:15 8:18 5583 6403nmtgonphe ne 3 APPLE !PHONES 869 03/06/20 15:14:16 8:18 6403 5295 nxtgonphe ne 3 APPLE !PHONES 870 03/06/20 15:15:16 4:51 8435 6304 ims 871 03/06/20 15:22:34 3:06 7244 5269nmtgonphe ne 3 APPLE !PHONES 872 03/06/20 15:22:49 10:49 8203 5938 ims 873 03/06/20 15:25:40 4:52 5644 6401 nxtgonphe ne 3 APPLE !PHONES 874 03/06/20 15:25:41 4:52 6401 5356 nxtgonphe ne 3 APPLE !PHONES 875 03/06/20 15:30:33 28:38 19589 13840 nxtgonphe ne 3 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 35 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170955 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343013 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. 1/4-00 AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 UM= Conn. Time (OTC) Originating ET Bytes Up Bytes Alm Dn IUME MOD= 876 03/06/20 15:40:47 4:29 7400 6103 ims APPLE !PEONES 877 03/06/20 15:45:16 12:01 5072 1572 ims APPLE !PEONES 878 03/06/20 15:58:22 0:24 8256 7072 ims APPLE !PEONES 879 03/06/20 15:58:46 60:00 10688 4144 ims APPLE !PEONES 880 03/06/20 15:59:10 2:07 5236 6256nmtgonphe no APPLE !PEONES 881 03/06/20 15:59:11 2:07 6256 4948 nxtgonphe ne APPLE !PEONES 882 03/06/20 16:01:18 44:18 16273 12620 nxtgonphe ne APPLE !PEONES 883 03/06/20 16:45:35 2:10 10586 7639 nxtgonphe ne APPLE 'PHONES 884 03/06/20 16:45:36 2:10 7639 10298 nxtgonphe no APPLE !PHONES 885 03/06/20 16:47:46 60:00 12772 15399 nxtgonphe no APPLE !PHONES 886 03/06/20 16:58:46 2:08 0 0 ims APPLE !PHONES 887 03/06/20 17:47:46 24:54 369 1125 nxtgonphe no APPLE !PHONES 888 03/06/20 18:01:13 3:34 11022 6113 ims 889 03/06/20 18:12:39 30:26 36081 41844 nxtgonphe no APPLE !PHONES 890 03/06/20 18:12:40 30:26 41844 39403 nxtgonphe no APPLE !PHONES 891 03/06/20 18:12:47 11:23 0 0 ism 892 03/06/20 18:23:51 19:14 6426 8082 ism APPLE !PHONES 893 03/06/20 18:23:52 19:14 8082 6162 ism APPLE !PHONES 894 03/06/20 18:24:10 60:00 16795 9035 ism 895 03/06/20 18:43:06 6:32 9119 5813 nxtgenpho no APPLE !PHONES 896 03/06/20 18:49:37 4:09 7995 10045 nxtgonphe ne APPLE !PHONES 897 03/06/20 18:49:38 4:10 10045 7611 nxtgonphe ne APPLE !PHONES 898 03/06/20 18:53:48 3:51 15430 12196 nxtgonphe ne APPLE !PHONES 899 03/06/20 18:57:38 8:24 7732 18371 nxtgonphe ne APPLE !PHONES 900 03/06/20 18:57:40 8:23 18371 7444 nxtgonphe APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 36 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170956 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343014 ---PAGE BREAK--- 901 03/06/20 19:06:03 902 03/06/20 19:13:16 903 03/06/20 19:14:19 904 03/06/20 19:14:20 905 03/06/20 19:16:29 906 03/06/20 19:24:10 907 03/06/20 19:48:01 908 03/06/20 19:52:19 909 03/06/20 19:52:20 910 03/06/20 19:53:31 911 03/06/20 19:57:58 912 03/06/20 19:57:59 913 03/06/20 20:02:36 914 03/06/20 20:06:16 915 03/06/20 20:19:03 916 03/06/20 20:19:03 917 03/06/20 20:19:18 918 03/06/20 20:23:11 919 03/06/20 20:23:12 920 03/06/20 20:43:57 921 03/06/20 20:43:58 922 03/06/20 20:47:23 923 03/06/20 20:47:28 924 03/06/20 20:48:27 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 1/4-is AT&T Run Date: Run Tine: Data Usage For: 06/17/2020 Item Conn. Conn. Originating ST Bytes Bytes Apn DELI IMSI IUME MODEL Date Tine Number Up Dn (UTC) 7:13 8502 6668 nxtgenpho APPLE 'PEONES ne 1:04 6478 5616 nxtgonpho APPLE 'PEONES no 2:09 5117 6075 nxtgonpho APPLE IPECME8 no 2:09 6075 4829 nxtgonpho APPLE 'PHONED no 35:51 7480 6950 nxtgenpho APPLE 'PHONED ne 21:10 3424 1340 ims 31:02 23529 15801 ims APPLE 'PHONES 1:11 7184 7637 nxtgenpho APPLE 'PHONES ne 1:11 7637 6896 nxtgenpho APPLE 'PHONES ne 4:27 9262 7982 nxtgenpho APPLE 'PHONES ne 8:17 10717 21377 nxtgenpho APPLE 'PHONES ne 8:17 21377 10429 nxtgenpho APPLE 'PHONES ne 0:25 13104 53930 ims 16:56 14116 29041 nxtgenpho APPLE 'PHONES ne 0:15 6520 1432 ims APPLE 'PHONES 0:15 2920 1432 ims APPLE 'PHONES 12:10 3424 1324 ims APPLE 'PHONES 24:11 394055 54947 nxtgenpho APPLE 'PHONES ne 24:11 54947 400921 nxtgenpho APPLE 'PHONES ne 3:25 6245 6668 ims APPLE 'PHONES 3:25 6668 5981 ims APPLE 'PHONES 1:05 0 Onstgonpho APPLE 'PHONES no 1:00 11916 9299 ims APPLE 'PHONES 5:26 192 Onstgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170957 The information contained here is for use by authorized persons only and is not for general distribution. Page 37 EFTA01343015 ---PAGE BREAK--- MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 SS= Item Conn. Date Conn. Time (OTC) Originating number ET Bytes Up Bytes Apn Dn MBAI INBI 925 03/06/20 20:48:28 5:25 6572 6657 nxtgonpho ne 926 03/06/20 20:48:28 5:26 0 0 nxtgonpho ne 927 03/06/20 20:48:29 5:25 6657 6284 nxtgonpho no 928 03/06/20 20:48:35 60:00 95655 55560 ims 929 03/06/20 20:51:21 1:02 137665 211390 ims 930 03/06/20 20:53:54 10:42 6979 5113 nxtgonpho no 931 03/06/20 21:03:26 0:13 0 22616 ims 932 03/06/20 21:03:56 0:05 0 14202 ims 933 03/06/20 21:04:30 0:19 18001 51945 ims 934 03/06/20 21:04:35 3:32 5374 9015 nxtgonpho ne 935 03/06/20 21:04:36 3:32 9015 5086 nxtgonpho ne 936 03/06/20 21:08:08 1:34 7428 4951 nxtgonpho ne 937 03/06/20 21:09:30 0:53 98149 136719 ims 938 03/06/20 21:09:41 2:20 5116 6023 nxtgonpho ne 939 03/06/20 21:09:42 2:20 6023 4828 nxtgonpho ne 940 03/06/20 21:12:01 2:32 192 0 nxtgonpho no 941 03/06/20 21:12:02 2:31 5222 6075 nxtgonpho no 942 03/06/20 21:12:03 2:32 0 0 nxtgonpho no 943 03/06/20 21:12:03 2:32 6075 4934 nxtgonpho no 944 03/06/20 21:14:34 1:26 6212 6824 nxtgonpho ne 945 03/06/20 21:14:35 1:26 6824 5924 nxtgonpho no 946 03/06/20 21:16:01 1:08 6400 5239 nxtgonpho no 947 03/06/20 21:17:09 20:41 16484 135032 nxtgonpho ne BOAR Belt APPLE IPHONE8 APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 38 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170958 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343016 ---PAGE BREAK--- pm. MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ce. ‘•-. 00 AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 948 03/06/20 949 03/06/20 950 03/06/20 951 03/06/20 952 03/06/20 953 03/06/20 954 03/06/20 955 03/06/20 956 03/06/20 957 03/06/20 958 03/06/20 959 03/06/20 960 03/06/20 961 03/06/20 962 03/06/20 963 03/07/20 964 03/07/20 965 03/07/20 966 03/07/20 967 03/07/20 968 03/07/20 969 03/07/20 970 03/07/20 971 03/07/20 972 03/07/20 06/17/2020 Conn. Time (OTC) 21:17:10 21:32:33 21:37:51 21:48:35 21:50:54 21:50:55 21:58:10 22:10:04 22:13:03 22:58:10 23:13:03 23:37:22 23:37:36 23:56:38 23:58:10 00:03:08 00:03:24 00:06:49 00:06:50 00:15:07 00:31:35 00:31:36 00:52:34 00:56:07 00:56:08 Originating ET Bytes Bytes Apn ENE! INSI NAAS MODEL Up Dn 20:41 135032 16196 nxtgenpho ne APPLE !PHONES 1:15 142654 181807 ims 13:04 0 Onmtgonpho ne APPLE !PHONES 20:48 0 108 ims 7:15 192 0 nottgonpho ne APPLE !PHONES 7:15 0 Onmtgonpho ne APPLE !PHONES 60:00 0 0 nxtgenpho ne APPLE !PHONES 0:00 0 0 ims APPLE !PHONES 60:00 15339 9716 ims 60:00 0 0 nxtgenpho ne APPLE !PHONES 23:49 3532 1448 ims 0:00 0 0 ims APPLE !PHONES 12:30 10990 7899 ims 3:34 12230 6730 ims 8:40 0 Onactgonpho ne APPLE !PHONES 0:16 8078 6944 ims APPLE !PHONES 60:00 12120 4328 ims APPLE !PHONES 8:17 192 Onactgonpho ne APPLE !PHONES 8:17 0 0 nxtgenphe ne APPLE !PHONES 16:29 0 0 nxtgenphe ne APPLE !PHONES 20:57 192 0 nxtgenphe ne APPLE !PHONES 20:57 0 0 nxtgenphe ne APPLE !PHONES 3:34 0 0 nxtgenphe ne APPLE !PHONES 2:06 192 0 nxtgenphe ne APPLE !PHONES 2:06 0 0 nxtgenphe APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 39 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170959 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343017 ---PAGE BREAK--- pu020 MOBILITY illir AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm 1/4...r2s 4' s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Data: Run Tim: Data usage For: Item Conn. Data 06/17/2020 Conn. originating Er Ti.. number (OTC) Bytes up Bytes Apn Dn 7:11B2 INSI MAKE MODEL 973 03/07/20 00:58:14 39:51 0 0nxtgenpho ne APPLE 'PHONES 974 03/07/20 01:03:24 0:24 0 0 ims APPLE 'PHONES 975 03/07/20 01:19:41 4:34 8150 6944 ims APPLE 'PHONES 976 03/07/20 01:24:15 8:15 12056 6904 ims APPLE 'PHONES 977 03/07/20 01:33:01 0:45 17026 8556 ims 978 03/07/20 01:34:01 16:43 9644 6054 ims 979 03/07/20 01:38:05 3:37 0 0nxtgenpho ne APPLE 'PHONES 980 03/07/20 01:41:41 3:20 192 0nxtgenpho ne APPLE 'PHONES 981 03/07/20 01:41:42 3:20 0 0nxtgenpho ne APPLE 'PHONES 982 03/07/20 01:45:02 60:00 0 0nxtgenpho ne APPLE 'PHONES 983 03/07/20 01:56:42 0:00 0 0 ims APPLE 'PHONES 984 03/07/20 01:56:50 34:11 11647 9620 ims 985 03/07/20 02:34:49 0:00 0 0 ims APPLE 'PHONES 986 03/07/20 02:35:17 2:31 9694 6126 ims 987 03/07/20 02:42:07 60:00 18887 9464 ims 988 03/07/20 02:45:02 60:00 0 0nxtgenpho ne APPLE 'PHONES 989 03/07/20 03:42:07 1:22 0 0 ims 990 03/07/20 03:45:02 60:00 0 0nxtgenpho ne APPLE 'PHONES 991 03/07/20 03:47:37 3:47 9867 6478 ims 992 03/07/20 03:55:04 16:39 8367 6072 ims 993 03/07/20 04:13:11 60:00 15051 8988 ims 994 03/07/20 04:45:02 60:00 0 0nxtgenpho ne APPLE 'PHONES 995 03/07/20 05:13:11 59:03 6848 2664 ims 996 03/07/20 05:45:02 0:02 0 0nxtgenpho ne APPLE 'PHONES 997 03/07/20 05:45:06 60:00 0 0nxtgenpho ne APPLE 'PHONES 998 03/07/20 06:16:12 6:17 8203 6000 ims 999 03/07/20 06:31:28 60:00 15055 8878 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 40 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170960 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343018 ---PAGE BREAK--- MOBILITY 1000 03/07/20 06:45:0 60:00 0 Onmtgonpho ne 3587080982063725 1001 03/07/20 07:31:2 24:58 3408 1448 ims -1 1002 03/07/20 07:45:0 60:00 0 Onmtgonpho ne 3587080982063725 1003 03/07/20 08:02:5 3:28 8315 6122 ims -1 1004 03/07/20 08:11:0, 60:00 16811 9252 ims -1 1005 03/07/20 08:45:0 60:01 0 Onmtgonpho ne 3587080982063725 1006 03/07/20 09:11:0, 5:47 0 0 ims -1 1007 03/07/20 09:20:1! 60:00 18679 10125 ims -1 1008 03/07/20 09:45:0 60:00 0 Onmtgonpho ne 3587080982063725 1009 03/07/20 10:20:1! 37:07 3424 1324 ims -1 1010 03/07/20 10:45:0 60:00 0 Onmtgonpho ne 3587080982063725 1011 03/07/20 11:05:2 22:12 8311 6104 ims -1 1012 03/07/20 11:32:5 0:00 0 0 ims 3587080982063725 1013 03/07/20 11:35:3 12:17 8455 6338 ims -1 1014 03/07/20 11:45:0 60:00 0 Onmtgonpho ne 3587080982063725 1015 03/07/20 11:51:5! 56:14 21443 9826 ims -1 1016 03/07/20 12:45:0 60:00 0 Onmtgonpho no 3587080982063725 1017 03/07/20 12:48:0' 6:31 8453 6214 ims -1 1018 03/07/20 12:57:2: 47:41 13399 7751 ims -1 1019 03/07/20 13:45:0 0:01 0 Onxtgonpho ne 3587080982063725 1020 03/07/20 13:45:1 14:28 0 0 nxtgonpho no 3587080982063725 1021 03/07/20 13:47:3 60:00 17165 9495 ims -1 1022 03/07/20 13:59:4 60:00 0 0 nxtgonpho no 3587080982063725 1023 03/07/20 14:47:3 38:17 5072 1572 ims -1 1024 03/07/20 14:59:4 12:27 0 0 nxtgonpho ne 3587080982063725 1025 03/07/20 15:12:0 8:21 192 Onxtgonpho ne 3587080982063725 1026 03/07/20 15:12:0 8:20 0 Onxtgonpho 3587080982063725 ne ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cito AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Conn. Originating ET Bytes Bytes Apn IMEI IASI ISMS MODEL Date Time Number Up Dn (OTC/ APPLE 'PEONES APPLE 'PEONES APPLE 'PEONES APPLE 'PEONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170961 The information contained here is for use by authorized persons only and is not for general distribution. Page 41 EFTA01343019 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. 1/44.T. AT&T Run Date: Run Time: Data Usage For: 06/17/2020 Item Conn. Conn. Date Tine (UTC) 1027 03/07/20 15:20:28 1028 03/07/20 15:32:55 1029 03/07/20 15:33:04 1030 03/07/20 15:59:08 1031 03/07/20 16:18:14 1032 03/07/20 16:18:18 1033 03/07/20 16:19:05 1034 03/07/20 16:19:06 1035 03/07/20 16:20:58 1036 03/07/20 16:23:56 1037 03/07/20 16:23:57 1038 03/07/20 16:26:06 1039 03/07/20 16:36:56 1040 03/07/20 16:37:11 1041 03/07/20 16:49:40 1042 03/07/20 16:49:42 1043 03/07/20 16:57:59 1044 03/07/20 16:59:00 1045 03/07/20 16:59:01 1046 03/07/20 17:01:18 1047 03/07/20 17:01:19 1048 03/07/20 17:07:25 1049 03/07/20 17:11:22 Originating Number ET Bytes Bytes Apn Up Dn 57:46 0 0 nactgonpho ne 0:00 0 0 Less 16:06 9491 6883 Las 16:46 11990 6446 Las 0:52 0 0nactgonpho ne 14:21 8203 5996 Las 1:52 192 0 nactgonpho ne 1:52 0 0 nactgonpho ne 2:59 0 0 nactgonpho ne 2:09 192 0 nactgonpho ne 2:09 0 0 nactgonpho ne 23:35 0 0 nactgonpho ne 0:15 7488 5572 Las 59:00 14696 8116 Las 8:18 192 0 nactgonpho ne 8:17 0 0 nactgonpho ne 1:02 0 0 nactgonpho no 2:18 192 0 nactgonpho no 2:18 0 0 nmtgonpho ne 6:06 192 0 nmtgonpho ne 6:06 0 0 nmtgonpho ne 3:58 0 0 nmtgonpho ne 8:26 192 0 nmtgonpho ne TAINT TItOT AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. MAKE MODEL APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES SDNY_GNL00170962 The information contained here is for use by authorized persons only and is not for general distribution. Page 42 EFTA01343020 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:38:58pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. cro AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating ?lumbar ET Bytes Up Bytes Apn Dn ENKE IM9I MAKE MODEL 1050 03/07/20 17:11:23 8:26 0 0 'mtg.:mph* no APPLE 'PHONES 1051 03/07/20 17:19:49 11:27 0 0 nstgempho no APPLE 'PHONES 1052 03/07/20 17:31:15 0:50 192 0 nstgempho no APPLE 'PHONES 1053 03/07/20 17:31:17 0:49 0 0 nstgempho no APPLE 'PHONES 1054 03/07/20 17:32:06 3:19 0 0 nxtgonpho no APPLE !PHONES 1055 03/07/20 17:35:24 2:06 192 0 nstgempho no APPLE 'PHONES 1056 03/07/20 17:35:25 2:06 0 0 nstgempho no APPLE !PHONES 1057 03/07/20 17:35:52 1:38 7318 8814 ims APPLE 'PHONES 1058 03/07/20 17:35:54 1:37 8814 7054 ims APPLE !PHONES 1059 03/07/20 17:36:11 60:00 45387 23034 ims 1060 03/07/20 17:37:31 34:49 0 Onstgonpho no APPLE !PHONES 1061 03/07/20 18:12:19 2:41 192 0 nstgempho no APPLE 'PHONES 1062 03/07/20 18:12:20 2:41 0 0 nstgempho no APPLE 'PHONES 1063 03/07/20 18:15:01 4:44 192 0 nstgempho no APPLE 'PHONES 1064 03/07/20 18:15:02 4:44 0 °asty:mph* no APPLE 'PHONES 1065 03/07/20 18:19:46 7:15 0 0 astgonpho no APPLE !PHONES 1066 03/07/20 18:21:16 0:34 61632 26652 ims 1067 03/07/20 18:27:00 1:05 192 0 nstgonpho no APPLE 'PHONES 1068 03/07/20 18:27:02 1:04 0 0 nxtgenpho no APPLE 'PHONES 1069 03/07/20 18:28:06 13:15 0 0 astympho no APPLE 'PHONES 1070 03/07/20 18:36:11 30:45 13316 7812 ims 1071 03/07/20 18:39:44 0:05 0 2318 ims 1072 03/07/20 18:41:19 2:07 192 Onstympho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 43 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170963 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343021 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:30:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 1/4-writ AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn DMZ IMSI MAKE MODEL 1073 03/07/20 18:41:21 2:06 0 0 nxtgonpho ne APPLE 'PHONES 1074 03/07/20 18:43:27 26:50 0 0 nxtgonpho ne APPLE 'PHONES 1075 03/07/20 19:10:16 2:07 192 0nxtgonpho ne APPLE 'PHONES 1076 03/07/20 19:10:17 2:07 0 0 nxtgonpho ne APPLE 'PHONES 1077 03/07/20 19:10:35 1:48 7213 6790 imp APPLE 'PHONES 1078 03/07/20 19:10:36 1:48 6790 6949 imp APPLE 'PHONES 1079 03/07/20 19:11:08 15:58 8311 6213 imp 1080 03/07/20 19:12:24 4:40 0 0 nxtgonpho ne APPLE 'PHONES 1081 03/07/20 19:17:03 8:47 192 0 nxtgonpho ne APPLE 'PHONES 1082 03/07/20 19:17:05 8:46 0 0 nxtgonpho ne APPLE 'PHONES 1083 03/07/20 19:25:50 2:22 192 0 nxtgonpho ne APPLE 'PHONES 1084 03/07/20 19:25:52 2:21 0 0 nxtgonpho ne APPLE 'PHONES 1085 03/07/20 19:28:12 6:09 192 0 nxtgonpho ne APPLE 'PHONES 1086 03/07/20 19:28:13 6:09 0 0 nxtgonpho ne APPLE 'PHONES 1087 03/07/20 19:34:23 0:37 0 0 nxtgonpho ne APPLE 'PHONES 1088 03/07/20 19:34:29 60:00 19394 10386 ims 1089 03/07/20 19:35:00 21:20 192 0nxtgonpho ne APPLE 'PHONES 1090 03/07/20 19:35:01 21:20 0 0 nxtgonpho ne APPLE 'PHONES 1091 03/07/20 19:56:20 2:09 192 0nxtgonpho ne APPLE 'PHONES 1092 03/07/20 19:56:21 2:09 0 0 nxtgonpho ne APPLE 'PHONES 1093 03/07/20 19:58:30 1:27 0 0 nxtgonpho ne APPLE 'PHONES 1094 03/07/20 19:59:57 21:10 192 0 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170964 The information contained here is for use by authorized persons only and is not for general distribution. Page 44 EFTA01343022 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. c o . AT&T Run Date: Run Time: Data Usage For: 06/17/2020 Item Conn. Conn. Date Time (OTC) 1095 03/07/20 19:59:58 21:10 0 Onstgenpho ne 1096 03/07/20 20:21:07 2:24 192 0 nxtgonpho ne 1097 03/07/20 20:21:08 2:24 0 0 nxtgonpho ne 1098 03/07/20 20:23:31 6:07 192 0 nxtgonpho ne 1099 03/07/20 20:23:33 6:06 0 0 nxtgonpho ne 1100 03/07/20 20:29:39 4:48 0 0 nxtgonpho ne 1101 03/07/20 20:34:26 71:33 192 0 nxtgonpho ne 1102 03/07/20 20:34:27 60:00 0 0 nxtgenpho ne 1103 03/07/20 20:34:29 3:10 0 0 ims 1104 03/07/20 20:43:44 52:50 6354 6668 ims 1105 03/07/20 20:43:45 52:50 6668 6090 ims 1106 03/07/20 20:47:45 30:08 14287 8338 ims 1107 03/07/20 21:32:01 13:58 7228 6718 ims 1108 03/07/20 21:32:02 13:58 6718 6964 ims 1109 03/07/20 21:34:27 11:33 0 Onxtgonpho ne 1110 03/07/20 21:36:33 4:51 11664 7557 ims 1111 03/07/20 21:46:00 3:06 0 0 nxtgonpho ne 1112 03/07/20 21:49:05 2:10 192 0 nxtgonpho no 1113 03/07/20 21:49:07 2:09 0 0 nxtgonpho no 1114 03/07/20 21:49:18 1:57 7112 6720 ims 1115 03/07/20 21:49:19 1:57 6720 6848 ims 1116 03/07/20 21:51:16 0:39 0 Onxtgonpho ne 1117 03/07/20 21:51:18 0:00 0 0 ims 1118 03/07/20 21:51:54 27:15 192 Onxtgonpho ne 1119 03/07/20 21:51:55 27:15 0 0 nxtgonpho Originating Number BT Bytes Bytes Apn ZRE2 IMSI MARE MOM Up Dn no APPLE IPECISB APPLE IPECISB APPLE IPECISB APPLE IPECISB APPLE IPHONE8 APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 45 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170965 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343023 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:30:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro ‘•- . 00 AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (UTC) Bytes Up Bytes Apn Dn 1120 03/07/20 21:52:20 26:49 7262 6854 ims 1121 03/07/20 21:52:21 26:49 6746 6998 ims 1122 03/07/20 21:53:58 14:15 10099 6418 ims 1123 03/07/20 22:19:10 2:09 192 Onmtgonpho ne 1124 03/07/20 22:19:11 2:08 6246 6672 ims 1125 03/07/20 22:19:11 2:09 0 0 nmtgonpho ne 1126 03/07/20 22:19:12 2:08 6672 5982 ims 1127 03/07/20 22:21:20 0:37 0 0 nmtgonpho ne 1128 03/07/20 22:21:21 0:01 0 0 ims 1129 03/07/20 22:21:29 10:12 11698 6686 ims 1130 03/07/20 22:21:57 21:16 192 Onmtgonpho ne 1131 03/07/20 22:21:58 21:16 0 0 ructgonpho ne 1132 03/07/20 22:37:29 5:44 6316 6778 ims 1133 03/07/20 22:37:30 5:44 6670 5964 ims 1134 03/07/20 22:41:47 33:34 15774 8758 ims 1135 03/07/20 22:43:14 0:36 0 0 nmtgonpho no 1136 03/07/20 22:43:49 15:04 192 Onmtgonpho ne 1137 03/07/20 22:43:50 15:04 0 0 nmtgonpho ne 1138 03/07/20 22:58:54 27:38 192 0 nmtgonpho ne 1139 03/07/20 22:58:55 27:38 0 0 nmtgonpho ne 1140 03/07/20 23:26:32 34:00 192 0 nmtgonpho ne 1141 03/07/20 23:26:33 34:00 0 0 nmtgonpho ne 1142 03/07/20 23:26:37 33:55 6370 6674 ims 1143 03/07/20 23:26:38 33:55 6674 6106 ims 1144 03/07/20 23:27:04 39:15 42891 24018 ims 1145 03/08/20 00:00:33 5:46 0 0 nmtgonpho no 1146 03/08/20 00:00:45 0:16 0 55513 ims AT&T Proprietary MAKE MODEL APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES The AT&T network constantly communicates with Internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 46 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170966 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343024 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 4,15.• AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Timo Number (OTC) Bytos Up Bytes Apn Dn LBSI IMSI MOSE MODEL 1147 03/08/20 15:41:04 _1_02SL.._250,112,1_ 60:00 0 Onstgenphe ne APPLE 'PHONES 1148 03/08/20 15:41:06 0:17 8148 6924 ims APPLE 'PHONES 1149 03/08/20 15:41:23 60:00 14740 4576 ims APPLE 'PHONES 1150 03/08/20 16:41:04 60:00 0 Onstgenpho ne APPLE 'PHONES 1151 03/08/20 16:41:23 60:00 10020 3144 ims APPLE 'PHONES 1152 03/08/20 17:41:04 43:30 0 Onstgenpho ne APPLE 'PHONES 1153 03/08/20 17:41:23 60:00 42980 20732 ims APPLE 'PHONES 1154 03/08/20 18:09:35 0:06 0 6927 ims APPLE 'PHONES 1155 03/08/20 18:23:21 0:07 0 7700 ims APPLE 'PHONES 1156 03/08/20 18:24:33 2:09 192 Onstgenpho ne APPLE 'PHONES 1157 03/08/20 18:24:34 2:09 0 0 nxtgenpho ne APPLE 'PHONES 1158 03/08/20 18:26:43 14:23 0 0 nxtgenpho ne APPLE 'PHONES 1159 03/08/20 18:41:06 3:35 0 0 nxtgenpho ne APPLE 'PHONES 1160 03/08/20 18:41:23 60:00 3408 1432 ims APPLE 'PHONES 1161 03/08/20 18:44:41 16:06 0 0 nxtgenpho ne APPLE 'PHONES 1162 03/08/20 18:55:40 0:00 0 0 ims APPLE 'PHONES 1163 03/08/20 18:55:48 60:00 16793 8983 ims 1164 03/08/20 19:00:46 7:34 192 Onstgenpho ne APPLE !PHONES 1165 03/08/20 19:00:47 7:34 0 0 nxtgenpho ne APPLE !PHONES 1166 03/08/20 19:08:21 0:32 0 0 nxtgenpho ne APPLE !PHONES 1167 03/08/20 19:08:51 5:10 192 0 nxtgenpho ne APPLE !PHONES 1168 03/08/20 19:08:53 5:09 0 0 nxtgenpho ne APPLE !PHONES 1169 03/08/20 19:14:02 0:06 0 0 nxtgenpho ne APPLE !PHONES 1170 03/08/20 19:14:24 3:41 192 0 nxtgenpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170967 The information contained here is for use by authorized persons only and is not for general distribution. Page 47 EFTA01343025 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ‘sel. AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 MI= Conn. Originating BT Time Number (OTC) Bytes Up Bytes Apn INKS INSI MAKE Dn MODEL 1171 03/08/20 19:14:25 3:42 0 Onxtgenpho ne APPLE 'PHONES 1172 03/08/20 19:18:06 5:01 192 0 nxtgenpho ne APPLE 'PHONES 1173 03/08/20 19:18:07 5:01 0 0 nxtgenpho ne APPLE 'PHONES 1174 03/08/20 19:23:08 13:33 192 0 nxtgenpho ne APPLE 'PHONES 1175 03/08/20 19:23:09 13:34 0 0 nxtgenpho ne APPLE 'PHONES 1176 03/08/20 19:36:43 1:33 0 0 nxtgenpho ne APPLE 'PHONES 1177 03/08/20 19:38:15 2:10 192 0 nxtgenpho ne APPLE 'PHONES 1178 03/08/20 19:38:17 2:09 0 0 nxtgenpho ne APPLE 'PHONES 1179 03/08/20 19:40:26 3:26 0 0 nxtgenpho ne APPLE 'PHONES 1180 03/08/20 19:41:23 60:00 0 0 ims APPLE 'PHONES 1181 03/08/20 19:43:52 16:56 192 0 nxtgenpho ne APPLE 'PHONES 1182 03/08/20 19:43:53 16:56 0 0 nxtgenpho ne APPLE 'PHONES 1183 03/08/20 19:55:48 60:00 12652 3408 ims 1184 03/08/20 20:00:49 16:17 0 0 nxtgenpho ne APPLE 'PHONES 1185 03/08/20 20:17:06 4:04 192 0 nxtgenpho ne APPLE 'PHONES 1186 03/08/20 20:17:07 4:04 0 0 nxtgenpho ne APPLE 'PHONES 1187 03/08/20 20:21:11 0:56 0 0 nxtgenpho ne APPLE 'PHONES 1188 03/08/20 20:22:06 2:36 192 0 nxtgenpho ne APPLE 'PHONES 1189 03/08/20 20:22:07 2:36 0 0 nxtgenpho ne APPLE 'PHONES 1190 03/08/20 20:24:44 6:10 192 0 nxtgenpho ne APPLE 'PHONES 1191 03/08/20 20:24:46 6:09 0 0 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 48 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170968 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343026 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e s. ‘•- .a° AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Ma= Conn. Time (UTC) Originating Nflmhaw BT Bytes Up Bytes Apn Dn 73IZI IM9I MAKE MODEL 1192 03/08/20 20:30:55 4:54 0 Onmtgenpho ne APPLE !PHONES 1193 03/08/20 20:35:48 14:11 192 0 nmtgenpho ne APPLE !PHONES 1194 03/08/20 20:35:49 14:11 0 0 nmtgenpho ne APPLE !PHONES 1195 03/08/20 20:41:23 60:00 0 0 ims APPLE !PHONES 1196 03/08/20 20:50:00 12:34 192 0 nmtgonpho ne APPLE !PHONES 1197 03/08/20 20:50:01 12:34 0 0 nmtgonpho ne APPLE !PHONES 1198 03/08/20 20:55:48 60:00 10580 4096 ims 1199 03/08/20 21:02:34 6:10 192 0 nmtgenpho no APPLE !PHONES 1200 03/08/20 21:02:35 6:10 0 0 nmtgenpho no APPLE !PHONES 1201 03/08/20 21:08:45 60:00 0 0 nmtgenpho no APPLE !PHONES 1202 03/08/20 21:41:23 60:00 0 0 ims APPLE !PHONES 1203 03/08/20 21:55:48 60:00 6924 2772 ims 1204 03/08/20 22:08:45 0:58 0 0 nmtgenpho no APPLE !PHONES 1205 03/08/20 22:09:43 1:38 0 0 nmtgenpho ne APPLE !PHONES 1206 03/08/20 22:11:22 22:21 0 0 nmtgenpho ne APPLE !PHONES 1207 03/08/20 22:33:42 2:10 192 0 nmtgenpho no APPLE !PHONES 1208 03/08/20 22:33:43 2:10 0 0 nmtgenpho no APPLE !PHONES 1209 03/08/20 22:35:53 6:31 0 0 nmtgenpho no APPLE !PHONES 1210 03/08/20 22:41:23 18:00 0 0 ims APPLE !PHONES 1211 03/08/20 22:42:23 2:10 192 0 nmtgenpho ne APPLE !PHONES 1212 03/08/20 22:42:25 2:09 0 0 nmtgenpho no APPLE !PHONES 1213 03/08/20 22:44:34 4:14 0 0 nmtgenpho no APPLE !PHONES 1214 03/08/20 22:48:47 2:27 192 0 nmtgenpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 49 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170969 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343027 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Sidi= Conn. Originating ET Tame Number MC/ Bytes Up Bytes Apn Dn DOLT INSI MAKE MODEL 1215 03/08/20 22:48:48 2:27 0 Onmtgonphe ne APPLE !PHONES 1216 03/08/20 22:51:14 12:30 192 0 nmtgonphe ne APPLE !PHONES 1217 03/08/20 22:51:15 12:30 0 0 nmtgonphe ne APPLE !PHONES 1218 03/08/20 22:55:48 60:00 10160 3144 ism 1219 03/08/20 23:03:45 2:05 0 Onmtgonphe ne APPLE !PHONES 1220 03/08/20 23:05:49 8:43 192 0 nactgonphe ne APPLE !PHONES 1221 03/08/20 23:05:50 8:43 0 0 nactgonphe ne APPLE !PHONES 1222 03/08/20 23:14:33 60:00 0 0 nmtgonphe ne APPLE !PHONES 1223 03/08/20 23:55:48 55:14 51404 17880 Lam 1224 03/09/20 00:14:33 36:44 0 Onmtgonphe ne APPLE !PHONES 1225 03/09/20 00:44:58 0:23 0 43856 Lam 1226 03/09/20 00:51:16 22:51 192 0 nmtgonphe ne APPLE !PHONES 1227 03/09/20 00:51:17 22:51 0 0 nmtgonphe ne APPLE !PHONES 1228 03/09/20 00:51:17 4:16 7160 6810 ism APPLE !PHONES 1229 03/09/20 00:51:18 4:16 6742 6896 ism APPLE !PHONES 1230 03/09/20 00:55:02 0:31 756 0 ism 1231 03/09/20 00:55:32 18:35 7376 6794 Las APPLE !PHONES 1232 03/09/20 00:55:33 18:35 6794 7112 Las APPLE !PHONES 1233 03/09/20 00:56:28 60:00 24207 16162 Las 1234 03/09/20 01:14:08 2:02 0 Onmtgonphe ne APPLE !PHONES 1235 03/09/20 01:16:09 14:18 192 0 nmtgonphe ne APPLE !PHONES 1236 03/09/20 01:16:10 14:18 0 0 nmtgonphe ne APPLE !PHONES 1237 03/09/20 01:30:23 18:53 3007685 3052551 ism 1238 03/09/20 01:30:29 10:30 0 Onmtgonphe ne APPLE !PHONES 1239 03/09/20 01:40:58 18:18 192 0 nmtgonphe ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 50 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170970 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343028 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ‘se# AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. TIM* (07C) Originating Number ET Bytes Up Bytes Apn Dn ENE! INSI MAKE MODEL 1240 03/09/20 01:40:59 18:18 0 0nxtgonpho no APPLE !PHONES 1241 03/09/20 01:56:28 60:00 6940 2896 ism 1242 03/09/20 01:59:17 0:54 0 0 nxtgenpho ne APPLE 'PHONES 1243 03/09/20 02:00:10 5:09 192 0 nxtgonpho no APPLE 'PHONES 1244 03/09/20 02:00:11 5:09 0 0 nxtgonpho no APPLE 'PHONES 1245 03/09/20 02:05:19 8:38 192 0 nxtgonpho no APPLE !PHONES 1246 03/09/20 02:05:20 8:38 0 0 nxtgonpho no APPLE !PHONES 1247 03/09/20 02:13:58 5:51 192 0 nxtgonpho no APPLE !PHONES 1248 03/09/20 02:13:59 5:51 0 0 nxtgonpho no APPLE !PHONES 1249 03/09/20 02:19:50 55:27 0 0 nxtgOnphe ne APPLE !PHONES 1250 03/09/20 02:56:28 60:00 6848 2788 ism 1251 03/09/20 03:15:16 20:00 192 0 nxtgonpho ne APPLE !PHONES 1252 03/09/20 03:15:17 59:01 0 0 nxtgonpho no APPLE !PHONES 1253 03/09/20 03:56:28 60:00 8496 2928 ism 1254 03/09/20 04:14:18 60:00 0 0 nxtgenpho ne APPLE !PHONES 1255 03/09/20 04:56:28 60:00 16884 6232 ism 1256 03/09/20 05:14:18 60:00 0 0 nxtgenpho ne APPLE !PHONES 1257 03/09/20 05:56:28 60:00 8496 2928 ism 1258 03/09/20 06:14:18 60:00 0 0 nxtgenpho ne APPLE !PHONES 1259 03/09/20 06:56:28 60:00 8496 3160 ism 1260 03/09/20 07:14:18 60:00 0 0 nxtgenpho ne APPLE !PHONES 1261 03/09/20 07:56:28 60:00 8496 2928 ism 1262 03/09/20 08:14:18 0:01 0 0 nxtgonpho ne APPLE !PHONES 1263 03/09/20 08:47:44 2:23 192 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170971 The information contained here is for use by authorized persons only and is not for general distribution. Page 51 EFTA01343029 ---PAGE BREAK--- P.020 MOBILITY 4111. AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm •3/4--s ""a. AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Tame (OTC) Originating Number ET Bytos Up Bytes Apn ENE! INSI MAKE Dn MODEL 1264 03/09/20 08:47:46 2:22 0 0 nxtgonpho no APPLE !PHONES 1265 03/09/20 08:50:07 6:02 192 0 nxtgonpho no APPLE !PHONES 1266 03/09/20 08:50:08 6:03 0 0 nxtgonpho no APPLE !PHONES 1267 03/09/20 08:56:10 3:22 192 0 nxtgonpho no APPLE !PHONES 1268 03/09/20 08:56:11 3:22 0 0 nxtgonpho no APPLE !PHONES 1269 03/09/20 08:56:28 60:00 11812 4484 ism 1270 03/09/20 08:59:33 60:00 0 0 nxtgonpho no APPLE !PHONES 1271 03/09/20 09:56:28 60:00 12044 4552 ism 1272 03/09/20 09:59:33 51:11 0 0 nxtgonpho no APPLE !PHONES 1273 03/09/20 10:50:44 10:15 192 0 nxtgonpho no APPLE !PHONES 1274 03/09/20 10:50:45 10:15 0 0 nxtgonpho no APPLE !PHONES 1275 03/09/20 10:56:28 60:00 6832 2680 ism 1276 03/09/20 11:01:00 56:23 0 0 nxtgonpho no APPLE !PHONES 1277 03/09/20 11:56:28 60:00 13352 4732 ism 1278 03/09/20 11:57:22 2:59 192 0 nxtgonpho no APPLE !PHONES 1279 03/09/20 11:57:23 2:59 0 0 nxtgonpho no APPLE !PHONES 1280 03/09/20 12:00:21 20:57 192 0 nxtgonpho no APPLE !PHONES 1281 03/09/20 12:00:22 20:57 0 0 nxtgonpho no APPLE !PHONES 1282 03/09/20 12:21:18 7:42 192 0 nxtgonpho no APPLE !PHONES 1283 03/09/20 12:21:20 7:41 0 0 nxtgonpho no APPLE !PHONES 1284 03/09/20 12:29:01 13:08 192 0 nxtgonpho no APPLE !PHONES 1285 03/09/20 12:29:02 13:08 0 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170972 The information contained here is for use by authorized persons only and is not for general distribution. Page 52 EFTA01343030 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 4,12.• AT&T Run pato: Run Time: Data usage For: Item Conn. Data 06/17/2020 Coma. Time (OTC) Originating number BT Bytes Up Bytes Apn 0n DMZ IMSI WARR MOD= 1286 03/09/20 12:42:11 4 23:32 0 Onstgenpho ne APPLE 'PROMO 1287 03/09/20 12:56:28 4 60:00 7064 2804 ims 1288 03/09/20 13:05:42 4 8:24 192 Onstgenpho ne APPLE 'PROMO 1289 03/09/20 13:05:43 4 8:24 0 Onstgenpho ne APPLE 'PROMO 1290 03/09/20 13:14:07 4 13:42 0 Onstgenpho ne APPLE 'PROMO 1291 03/09/20 13:27:48 4 2:10 192 Onstgenpho ne APPLE 'PROMO 1292 03/09/20 13:27:50 4 2:09 0 Onstgenpho ne APPLE IPHONE8 1293 03/09/20 13:29:59 4 14:10 0 Onstgenpho ne APPLE 'PHONES 1294 03/09/20 13:44:08 4 5:25 192 Onstgenpho ne APPLE 'PHONES 1295 03/09/20 13:44:09 4 5:25 0 Onstgenpho ne APPLE 'PHONES 1296 03/09/20 13:49:34 4 5:02 0 Onstgenpho ne APPLE 'PHONES 1297 03/09/20 13:54:35 4 9:50 192 Onstgenpho ne APPLE 'PHONES 1298 03/09/20 13:54:36 4 9:50 0 Onstgenpho ne APPLE 'PHONES 1299 03/09/20 13:56:28 4 60:00 23568 10996 ims 1300 03/09/20 14:04:25 4 5:32 192 Onstgenpho ne APPLE 'PHONES 1301 03/09/20 14:04:27 4 5:31 0 Onstgenpho ne APPLE 'PHONES 1302 03/09/20 14:09:58 4 9:08 0 Onstgenpho ne APPLE 'PHONES 1303 03/09/20 14:19:05 4 0:44 192 Onstgenpho ne APPLE 'PHONES 1304 03/09/20 14:19:06 4 0:44 0 Onstgenpho ne APPLE 'PHONES 1305 03/09/20 14:19:50 4 60:00 0 Onstgenpho ne APPLE 'PHONES 1306 03/09/20 14:52:26 4 0:10 0 6685 ims 1307 03/09/20 14:56:28 4 60:00 29368 14756 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 53 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170973 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343031 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ce. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Si= Conn. Tine (OTC) Originating ET Bytes Up Bytes Apn IN= IISI MA= Dn MODEL 1308 03/09/20 15:19:50 52:16 0 0 nxtgenpho ne APPLE 'PEONES 1309 03/09/20 15:46:20 0:04 0 8568 ims 1310 03/09/20 15:56:28 50:29 8820 3468 ims 1311 03/09/20 16:37:57 2:26 192 0 nxtgenpho ne APPLE 'PEONES 1312 03/09/20 16:37:58 2:26 0 0 nxtgenpho ne APPLE 'PEONES 1313 03/09/20 16:40:24 6:23 0 0 nxtgenpho ne APPLE 'PEONES 1314 03/09/20 16:46:46 18:32 192 0 nxtgenpho ne APPLE SPRAWLS 1315 03/09/20 16:46:47 18:32 0 0 nxtgenpho ne APPLE 'PHONES 1316 03/09/20 16:46:56 18:22 7240 7554 ims APPLE 'PHONES 1317 03/09/20 16:46:57 18:22 7486 6976 ims APPLE 'PHONES 1318 03/09/20 17:05:19 14:42 0 0 nxtgenpho ne APPLE 'PHONES 1319 03/09/20 17:05:21 7:10 7406 6121 ims APPLE 'PHONES 1320 03/09/20 17:12:31 10:30 5180 1696 ims APPLE 'PHONES 1321 03/09/20 17:14:37 60:00 16620 9004 ims 1322 03/09/20 17:20:00 9:52 288 0 nxtgenpho ne APPLE 'PHONES 1323 03/09/20 17:20:01 9:52 0 0 nxtgenpho ne APPLE 'PHONES 1324 03/09/20 17:29:53 5:29 192 0 nxtgenpho ne APPLE IPHONE8 1325 03/09/20 17:29:54 5:29 0 0 nxtgenpho ne APPLE IPHONE8 1326 03/09/20 17:35:23 3:53 0 0 nxtgenpho ne APPLE IPHONE8 1327 03/09/20 17:39:15 2:16 192 0 nxtgenpho ne APPLE IPHONE8 1328 03/09/20 17:39:16 2:16 0 0 nxtgenpho ne APPLE IPHONE8 1329 03/09/20 17:41:32 15:20 192 0 nxtgenpho ne APPLE IPHONE8 1330 03/09/20 17:41:33 15:20 0 0 nxtgenpho ne APPLE IPHONE8 1331 03/09/20 17:56:53 60:00 0 0 nxtgenpho ne APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170974 The information contained here is for use by authorized persons only and is not for general distribution. Page 54 EFTA01343032 ---PAGE BREAK--- pu020 MOBILITY " a. AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm tres AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ‘‘.......sizse OTC. Run Date: Run Time: Data Usage For: 06/17/2020 it= Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ IMSI MAKE MODEL Date Time Number Up Dn (UTC) 1332 03/09/20 18:14:37 60:00 14340 6952 ims 1333 03/09/20 18:49:56 0:04 0 104 ims 1334 03/09/20 18:56:53 29:12 0 Onstgenphe APPLE !PHONES ne 1335 03/09/20 19:14:37 60:00 9960 3144 ims 1336 03/09/20 19:26:04 2:09 192 Onxtgenpho APPLE !PHONES ne 1337 03/09/20 19:26:05 2:09 0 0 nxtgenpho APPLE !PHONES ne 1338 03/09/20 19:28:14 37:51 0 0 nxtgenpho APPLE !PHONES ne 1339 03/09/20 20:06:04 2:10 192 0 nxtgenpho APPLE !PHONES ne 1340 03/09/20 20:06:06 2:09 0 0 nxtgenpho APPLE !PHONES ne 1341 03/09/20 20:08:15 0:47 0 0 nxtgenpho APPLE !PHONES ne 1342 03/09/20 20:09:01 8:34 192 0 nxtgenpho APPLE !PHONES ne 1343 03/09/20 20:09:02 8:34 0 0 nxtgenpho APPLE !PHONES ne 1344 03/09/20 20:14:37 60:00 8604 3020 ims 1345 03/09/20 20:17:36 0:59 0 Onxtgenpho APPLE !PHONES ne 1346 03/09/20 20:18:35 15:42 192 0 nxtgenpho APPLE !PHONES ne 1347 03/09/20 20:18:36 15:42 0 0 nxtgenpho APPLE !PHONES ne 1348 03/09/20 20:34:18 5:53 0 0 nxtgenpho APPLE !PHONES ne 1349 03/09/20 20:40:11 3:12 192 0 nxtgenpho APPLE !PHONES ne 1350 03/09/20 20:40:12 3:12 0 0 nxtgenpho APPLE !PHONES ne 1351 03/09/20 20:43:24 6:12 0 0 nxtgenpho APPLE !PHONES ne 1352 03/09/20 20:49:35 8:31 192 0 nxtgenpho APPLE !PHONES ne 1353 03/09/20 20:49:36 8:31 0 0 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 55 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170975 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343033 ---PAGE BREAK--- ..020 MOBILITY illOb AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm ...1/47,:ssi `'s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Tine (UTC) Originating Number KT Bytes Up Bytes Apn Dn II I MAKE MODEL 1354 03/09/20 20:58:07 9:29 0 Onmtgonpho ne APPLE 'PHONES 1355 03/09/20 21:07:35 1:02 192 Onmtgonpho ne APPLE 'PHONES 1356 03/09/20 21:07:36 1:02 0 Onmtgonpho ne APPLE 'PHONES 1357 03/09/20 21:08:38 3:54 0 Onmtgonpho ne APPLE 'PHONES 1358 03/09/20 21:12:31 2:56 192 Onmtgonpho ne APPLE 'PHONES 1359 03/09/20 21:12:32 2:56 0 Onmtgonpho ne APPLE 'PHONES 1360 03/09/20 21:14:37 18:28 3408 1324 ims 1361 03/09/20 21:15:28 1:22 0 Onmtgonpho ne APPLE 'PHONES 1362 03/09/20 21:16:49 2:09 192 Onmtgonpho ne APPLE 'PHONES 1363 03/09/20 21:16:50 2:09 0 Onmtgonpho ne APPLE 'PHONES 1364 03/09/20 21:18:59 10:53 0 Onmtgonpho ne APPLE 'PHONES 1365 03/09/20 21:29:52 20:16 192 Onmtgonpho ne APPLE 'PHONES 1366 03/09/20 21:29:53 20:15 6244 6740 ims APPLE 'PHONES 1367 03/09/20 21:29:53 20:16 0 Onmtgonpho ne APPLE 'PHONES 1368 03/09/20 21:29:54 20:15 6672 5980 ims APPLE 'PHONES 1369 03/09/20 21:46:37 60:00 18655 9854 ims 1370 03/09/20 21:50:09 2:03 0 Onmtgonpho ne APPLE 'PHONES 1371 03/09/20 21:52:11 9:24 192 Onmtgonpho ne APPLE 'PHONES 1372 03/09/20 21:52:12 9:25 0 Onmtgonpho ne APPLE 'PHONES 1373 03/09/20 22:01:37 30:59 0 Onmtgonpho ne APPLE 'PHONES 1374 03/09/20 22:32:36 17:41 192 Onmtgonpho ne APPLE 'PHONES 1375 03/09/20 22:32:36 17:42 0 Onmtgonpho ne APPLE 'PHONES 1376 03/09/20 22:46:37 46:07 10160 6456 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 56 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170976 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343034 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro ••- .ai. AT&T Run Dato: Run Tine: Data Usage For: Item Conn. Date 06/17/2020 Sid= Conn. Originating ET Time Number (UTC) Bytes Up Bytes Apn cm MAKE MODEL 1377 03/09/20 22:50:17 1:16 192 0nxtgonpho ne APPLE 'PHONES 1378 03/09/20 22:50:18 1:16 0 0 nxtgonpho ne APPLE 'PHONES 1379 03/09/20 22:51:34 5:52 0 0 nxtgonpho ne APPLE 'PHONES 1380 03/09/20 22:57:25 3:56 192 0 nxtgonpho ne APPLE 'PHONES 1381 03/09/20 22:57:27 3:57 0 0 nxtgonpho ne APPLE 'PHONES 1382 03/09/20 23:01:24 4:13 0 0 nxtgonpho ne APPLE 'PHONES 1383 03/09/20 23:05:36 3:35 192 0 nxtgonpho ne APPLE 'PHONES 1384 03/09/20 23:05:37 3:35 0 0 nxtgonpho ne APPLE 'PHONES 1385 03/09/20 23:09:12 11:34 0 0 nxtgonpho ne APPLE 'PHONES 1386 03/09/20 23:20:45 2:21 192 0 nxtgonpho ne APPLE 'PHONES 1387 03/09/20 23:20:46 2:21 0 0 nxtgonpho ne APPLE 'PHONES 1388 03/09/20 23:23:07 11:56 0 0 nxtgonpho ne APPLE 'PHONES 1389 03/09/20 23:33:05 0:34 840 72 isms APPLE 'PHONES 1390 03/09/20 23:33:39 0:00 0 0 isms APPLE 'PHONES 1391 03/09/20 23:33:39 0:01 0 0 isms APPLE 'PHONES 1392 03/09/20 23:33:43 60:00 18363 9389 isms 1393 03/09/20 23:35:02 7:16 192 0nxtgonpho ne APPLE 'PHONES 1394 03/09/20 23:35:03 7:16 0 0 nxtgonpho ne APPLE 'PHONES 1395 03/09/20 23:42:19 5:00 0 0 nxtgonpho ne APPLE 'PHONES 1396 03/09/20 23:47:18 1:15 192 0 nxtgonpho ne APPLE 'PHONES 1397 03/09/20 23:47:20 1:14 0 0 nxtgonpho ne APPLE 'PHONES 1398 03/09/20 23:48:34 3:06 0 0 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170977 The information contained here is for use by authorized persons only and is not for general distribution. Page 57 EFTA01343035 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e s, AT&T Run Date: Run Timm: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn TERI TEST MAR Dn MODEL 1399 03/09/20 23:51:40 5:17 192 Onxtgonpho no APPLE 'PROEMS 1400 03/09/20 23:51:41 5:17 0 0 nxtgonpho no APPLE 'PEONES 1401 03/09/20 23:56:58 8:46 192 0 nxtgonpho no APPLE 'PEONES 1402 03/09/20 23:56:59 8:46 0 0 nxtgonpho no APPLE 'PEONES 1403 03/10/20 00:05:45 12:31 192 0 nxtgonpho no APPLE 'PHONES 1404 03/10/20 00:05:46 12:31 0 0 nxtgonpho ne APPLE 'PHONES 1405 03/10/20 00:18:17 23:13 0 0 nxtgonpho ne APPLE 'PHONES 1406 03/10/20 00:33:43 60:00 8604 3052 ims 1407 03/10/20 00:41:29 8:25 192 °asty:mph* no APPLE 'PHONES 1408 03/10/20 00:41:31 8:24 0 0 nxtgonpho no APPLE 'PHONES 1409 03/10/20 00:49:55 17:25 0 0 nxtgonpho no APPLE 'PHONES 1410 03/10/20 01:07:20 58:34 192 0 nxtgonpho no APPLE 'PHONES 1411 03/10/20 01:07:21 58:34 0 0 nxtgonpho no APPLE 'PHONES 1412 03/10/20 01:33:43 60:00 9928 3176 ims 1413 03/10/20 02:05:55 60:00 0 0 nxtgonpho no APPLE 'PHONES 1414 03/10/20 02:33:43 60:00 8496 3160 ims 1415 03/10/20 03:05:55 50:07 0 0 nxtgonpho no APPLE 'PHONES 1416 03/10/20 03:33:43 60:00 8012 2804 ims 1417 03/10/20 03:56:02 16:34 192 0 nxtgonpho no APPLE 'PHONES 1418 03/10/20 03:56:03 16:34 0 0 nxtgonpho no APPLE 'PHONES 1419 03/10/20 04:12:37 41:56 192 0 nxtgonpho no APPLE 'PHONES 1420 03/10/20 04:12:38 41:56 0 0 nxtgonpho no APPLE 'PHONES 1421 03/10/20 04:33:43 60:00 16636 6232 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 58 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170978 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343036 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 45, AT&T Run Data: Run Time: Data usage For: Item conn. Data 06/17/2020 Si= Conn. Time (OTC/ Originating Ez Bytes up Bytes Apn INEZ IMSI MAKE on MODEL 1422 03/10/20 04:54:34 60:00 0 Onmtgenpho ne APPLE 'PROMS 1423 03/10/20 05:33:43 60:00 8604 3252 ims 1424 03/10/20 05:54:34 50:23 0 0 nxtgenpho ne APPLE 'PROMS 1425 03/10/20 06:33:43 60:00 6848 2680 ims 1426 03/10/20 06:44:57 28:57 192 Onmtgenpho ne APPLE 'PROMS 1427 03/10/20 06:44:58 28:57 0 0 nxtgenpho ne APPLE 'PHONES 1428 03/10/20 07:13:55 60:00 0 0 nxtgenpho ne APPLE IPHONE8 1429 03/10/20 07:33:43 60:00 8496 3052 ims 1430 03/10/20 08:13:55 49:45 0 0 nxtgenpho ne APPLE 'PHONES 1431 03/10/20 08:33:43 60:00 11596 4160 ism 1432 03/10/20 09:03:39 2:23 192 Onstgenpho ne APPLE 'PHONES 1433 03/10/20 09:03:40 2:23 0 0 nxtgenpho ne APPLE 'PHONES 1434 03/10/20 09:06:03 9:09 192 0 nxtgenpho ne APPLE 'PHONES 1435 03/10/20 09:06:04 9:09 0 0 nxtgenpho ne APPLE 'PHONES 1436 03/10/20 09:15:12 9:23 192 0 nxtgenpho ne APPLE IPHONE8 1437 03/10/20 09:15:13 9:23 0 0 nxtgenpho ne APPLE IPHONE8 1438 03/10/20 09:24:36 6:46 192 0 nxtgenpho ne APPLE IPHONE8 1439 03/10/20 09:24:37 6:46 0 0 nxtgenpho ne APPLE IPHONE8 1440 03/10/20 09:31:23 56:05 0 0 nxtgenpho ne APPLE IPHONE8 1441 03/10/20 09:33:43 60:00 15092 4908 ims 1442 03/10/20 10:27:27 14:56 192 Onstgenpho ne APPLE IPHONE8 1443 03/10/20 10:27:28 14:56 0 0 nxtgenpho ne APPLE IPHONE8 1444 03/10/20 10:33:43 60:00 9928 3176 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 59 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170979 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343037 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e s, AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Siam Conn. Time (OTC) Originating Numbor ET Bytes Up Bytes Apn Dn DMZ IMBI MDME MODEL 1445 03/10/20 10:42:2 2:10 0 0 nxtgonpho no APPLE IPROME8 1446 03/10/20 10:44:3 60:00 0 0 nxtgonpho no APPLE 'PEONES 1447 03/10/20 10:44:3 84:53 192 0 nxtgonpho no APPLE 'PEONES 1448 03/10/20 11:33:43 60:00 6956 2680 ims 1449 03/10/20 11:44:3 24:54 0 0 nxtgenpho no APPLE IPEONE8 1450 03/10/20 12:09:2 34:27 0 0 nxtgonpho no APPLE !PHONES 1451 03/10/20 12:33:43 60:00 9928 3176 ims 1452 03/10/20 12:43:5 2:10 192 0 nxtgonpho no APPLE !PHONES 1453 03/10/20 12:43:5 2:10 0 0 nxtgonpho no APPLE !PHONES 1454 03/10/20 12:46:05 60:00 0 0 nxtgenpho ne APPLE !PHONES 1455 03/10/20 13:33:43 60:00 8604 3052 ims 1456 03/10/20 13:46:0 19:47 0 0 nxtgonpho ne APPLE !PHONES 1457 03/10/20 14:05:5 0:40 192 0 nxtgonpho ne APPLE !PHONES 1458 03/10/20 14:05:5 0:40 0 0 nxtgonpho ne APPLE !PHONES 1459 03/10/20 14:06:3 1:23 0 Onxtgonpho ne APPLE !PHONES 1460 03/10/20 14:07:5 8:25 192 0 nxtgonpho ne APPLE !PHONES 1461 03/10/20 14:07:5 8:24 0 0 nxtgonpho no APPLE !PHONES 1462 03/10/20 14:16:2 58:09 0 0 nxtgonpho no APPLE !PHONES 1463 03/10/20 14:33:43 60:00 13912 6092 ims 1464 03/10/20 15:14:2 1:16 192 0 nxtgonpho no APPLE !PHONES 1465 03/10/20 15:14:3 1:16 0 0 nxtgonpho no APPLE !PHONES 1466 03/10/20 15:15:46 2:14 0 0 nxtgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 60 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00170480 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343038 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. cro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Numbor ET Bytes Up Bytes Apn Dn MMEI IMSI MAKE MODEL 1467 03/10/20 15:17:59 0:57 192 Onstgonpho ne APPLE 'PEONES 1468 03/10/20 15:18:00 0:57 0 0 nxtgenpho ne APPLE 'PEONES 1469 03/10/20 15:18:57 4:52 0 0 nxtgenpho ne APPLE 'PEONES 1470 03/10/20 15:23:48 20:00 192 0 nxtgenpho ne APPLE 'PEONES 1471 03/10/20 15:23:49 27:14 0 0 nxtgenpho ne APPLE 'PEONES 1472 03/10/20 15:33:43 53:28 16092 5276 ims 1473 03/10/20 15:51:03 36:17 0 Onstgonpho ne APPLE 'PEONES 1474 03/10/20 16:27:20 1:23 192 0 nxtgenpho ne APPLE 'PEONES 1475 03/10/20 16:27:21 1:22 7232 6864 ims APPLE IPEOME8 1476 03/10/20 16:27:21 1:23 0 0 nxtgenpho ne APPLE 'PHONES 1477 03/10/20 16:27:22 1:22 6796 6968 ims APPLE 'PHONES 1478 03/10/20 16:28:35 60:00 18395 12138 ims 1479 03/10/20 16:28:44 0:05 0 Onstgonpho no APPLE 'PHONES 1480 03/10/20 16:29:06 1:09 192 0 nxtgonpho no APPLE 'PHONES 1481 03/10/20 16:29:07 1:09 0 0 nxtgenpho ne APPLE 'PHONES 1482 03/10/20 16:30:16 7:18 0 0 nxtgenpho ne APPLE 'PHONES 1483 03/10/20 16:37:33 2:30 192 0 nxtgenpho ne APPLE 'PHONES 1484 03/10/20 16:37:34 2:31 0 0 nxtgenpho ne APPLE 'PHONES 1485 03/10/20 16:40:04 24:25 192 0 nxtgenpho ne APPLE !PHONES 1486 03/10/20 16:40:05 24:25 0 0 nxtgonpho no APPLE !PHONES 1487 03/10/20 17:04:31 0:36 0 0 nxtgonpho no APPLE !PHONES 1488 03/10/20 17:05:06 2:10 192 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170981 The information contained here is for use by authorized persons only and is not for general distribution. Page 61 EFTA01343039 ---PAGE BREAK--- pu020 MOBILITY 411B. AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm ...1/477,„• `""s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 lad= Conn. Originating ET Time Number (OTC/ Bytes Up Bytes AP^ DOLT INSI MAKE Dn MODEL 1489 03/10/20 17:05:07 2:10 0 0 nstgonphe ne APPLE 'PHONES 1490 03/10/20 17:07:17 6:45 0 0 nstgonphe ne APPLE 'PHONES 1491 03/10/20 17:14:01 2:09 192 0 nstgonpho ne APPLE 'PHONES 1492 03/10/20 17:14:02 2:09 0 0 nstgonpho ne APPLE 'PHONES 1493 03/10/20 17:16:11 1:26 0 0 nstgonpho ne APPLE 'PHONES 1494 03/10/20 17:17:36 4:47 192 0 nstgonpho ne APPLE 'PHONES 1495 03/10/20 17:17:37 4:47 0 0 nstgonpho ne APPLE 'PHONES 1496 03/10/20 17:22:25 2:41 0 0 nstgonpho ne APPLE 'PHONES 1497 03/10/20 17:25:06 18:51 0 0 nstgonpho ne APPLE 'PHONES 1498 03/10/20 17:28:35 60:00 25256 17492 ims 1499 03/10/20 17:41:29 0:04 0 4743 ims 1500 03/10/20 17:43:37 0:21 0 40524 ims 1501 03/10/20 17:43:57 38:21 192 Onstgonpho ne APPLE 'PHONES 1502 03/10/20 17:43:58 38:21 0 0 nstgonpho ne APPLE 'PHONES 1503 03/10/20 18:22:19 2:30 0 0 nstgonpho ne APPLE 'PHONES 1504 03/10/20 18:24:49 0:40 192 0 nstgonpho ne APPLE 'PHONES 1505 03/10/20 18:24:50 0:40 0 0 nstgonpho ne APPLE 'PHONES 1506 03/10/20 18:25:30 4:37 0 0 nstgonpho ne APPLE 'PHONES 1507 03/10/20 18:28:35 60:00 16008 10668 ims 1508 03/10/20 18:30:06 2:10 192 0 nstgonpho ne APPLE 'PHONES 1509 03/10/20 18:30:07 2:10 0 0 nstgonpho ne APPLE 'PHONES 1510 03/10/20 18:32:17 5:41 0 0 nstgonpho ne APPLE 'PHONES 1511 03/10/20 18:36:19 0:03 0 4743 ims AT&T Proprietary The AT&T network constantly communicates with Internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170982 The information contained here is for use by authorized persons only and is not for general distribution. Page 62 EFTA01343040 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. ci sme AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 "MI= Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn EMBI IMSI MAKE MODEL 1512 03/10/20 18:37:58 52:57 192 0 'mtg.:mph* no APPLE 'PROMO 1513 03/10/20 18:37:59 52:57 0 0 nxtgenphe no APPLE 'PROMO 1514 03/10/20 19:28:35 60:00 13460 4500 ims 1515 03/10/20 19:30:56 54:37 0 0 nxtgenphe no APPLE 'PROMO 1516 03/10/20 20:25:32 2:14 192 0 nxtgonpho no APPLE 'PROMO 1517 03/10/20 20:25:33 2:14 0 0 nxtgonpho no APPLE 'PROMO 1518 03/10/20 20:27:47 19:12 0 0 nxtgenphe ne APPLE IPNONE8 1519 03/10/20 20:28:35 60:00 6924 2788 ims 1520 03/10/20 20:46:58 15:19 192 0 nxtgonpho ne APPLE !PHONES 1521 03/10/20 20:46:59 15:19 0 0 nxtgenphe ne APPLE 'PHONES 1522 03/10/20 21:02:18 21:25 0 0 nxtgenphe ne APPLE 'PHONES 1523 03/10/20 21:23:42 3:11 192 0 nxtgonpho ne APPLE !PHONES 1524 03/10/20 21:23:43 3:11 0 0 nxtgonpho ne APPLE !PHONES 1525 03/10/20 21:26:53 8:23 192 0 nxtgenphe no APPLE 'PHONES 1526 03/10/20 21:26:54 8:23 0 0 nxtgenphe no APPLE 'PHONES 1527 03/10/20 21:28:35 60:00 10656 4288 ims 1528 03/10/20 21:35:17 1:15 0 0 nxtgenphe no APPLE 'PHONES 1529 03/10/20 21:36:32 7:33 0 0 nxtgonpho no APPLE !PHONES 1530 03/10/20 21:44:05 10:19 192 0 nxtgonphe ne APPLE 'PHONES 1531 03/10/20 21:44:06 10:19 0 0 nxtgenphe ne APPLE 'PHONES 1532 03/10/20 21:54:25 2:09 192 0 nxtgenphe ne APPLE 'PHONES 1533 03/10/20 21:54:26 2:09 0 0 nxtgenphe ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 63 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170983 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343041 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. „lee AT&T Run Dato: Run Time: Data usage For: Item conn. Date 06/17/2020 Si= Conn. Time (OTC/ Originating Number ET Bytes up Bytes Apn Dn IMEI IMSI MIME MODEL 1534 03/10/20 21:56:35 27:45 0 Onstgenpho ne APPLE 'PEONES 1535 03/10/20 22:24:20 64:28 192 0 nxtgenpho ne APPLE 'PEONES 1536 03/10/20 22:24:21 60:00 0 0 nxtgenpho ne APPLE 'PEONES 1537 03/10/20 22:28:35 60:00 24512 11828 ims 1538 03/10/20 23:20:52 0:01 0 0 ims 1539 03/10/20 23:20:55 0:03 0 1356 ims 1540 03/10/20 23:24:21 4:28 0 0 nxtgenpho ne APPLE 'PEONES 1541 03/10/20 23:28:35 60:00 11796 4376 ims 1542 03/10/20 23:28:49 47:34 0 0 nxtgenpho ne APPLE 'PHONES 1543 03/11/20 00:16:23 0:54 0 0 nxtgenpho ne APPLE 'PHONES 1544 03/11/20 00:17:16 2:09 192 0 nxtgenpho ne APPLE 'PHONES 1545 03/11/20 00:17:17 2:10 0 0 nxtgenpho ne APPLE 'PHONES 1546 03/11/20 00:19:26 5:58 0 0 nxtgenpho ne APPLE 'PHONES 1547 03/11/20 00:25:23 5:22 192 0 nxtgenpho ne APPLE !PHONES 1548 03/11/20 00:25:24 5:22 0 0 nxtgenpho ne APPLE !PHONES 1549 03/11/20 00:28:35 60:00 7048 2912 ims 1550 03/11/20 00:30:46 60:00 0 0 nxtgenpho ne APPLE !PHONES 1551 03/11/20 01:28:35 59:42 8604 3160 ims 1552 03/11/20 01:30:46 52:17 0 0 nxtgenpho ne APPLE !PHONES 1553 03/11/20 02:24:15 2:47 0 0 nxtgenpho ne APPLE !PHONES 1554 03/11/20 02:27:01 70:00 192 0 nxtgenpho ne APPLE !PHONES 1555 03/11/20 02:27:02 60:00 0 0 nxtgenpho ne APPLE !PHONES 1556 03/11/20 02:27:28 15:13 6353 33200 ims APPLE !PHONES 1557 03/11/20 02:27:29 15:13 6672 6089 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170984 The information contained here is for use by authorized persons only and is not for general distribution. Page 64 EFTA01343042 ---PAGE BREAK--- P.020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm ...1/47,e,# ""s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ‘‘.......tzse OTC. Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Numbor ET Bytes Up Bytes Apn Dn IMMIX IMEI MAKE MODEL 1558 03/11/20 02:28:17 60:00 8371 6178 ims 1559 03/11/20 02:42:36 60:00 15069 8676 ims 1560 03/11/20 03:27:02 60:00 0 0 nxtgonpho no 31 APPLE 'PHONES 1561 03/11/20 03:28:17 60:00 0 0 ims 1562 03/11/20 03:42:36 56:47 13320 5856 ims 1563 03/11/20 04:27:02 4:24 0 0 nxtgonpho no 31 APPLE 'PHONES 1564 03/11/20 04:28:17 3:12 0 0 ims 1565 03/11/20 04:31:26 3:35 0 0 nxtgonpho no 31 APPLE 'PHONES 1566 03/11/20 04:31:29 0:00 0 0 ims 31 APPLE 'PHONES 1567 03/11/20 04:35:00 7:56 192 0 nxtgonpho no 31 APPLE 'PHONES 1568 03/11/20 04:35:01 7:56 0 0 nxtgonpho no 31 APPLE 'PHONES 1569 03/11/20 04:39:23 60:00 16467 9128 ims 1570 03/11/20 04:42:57 21:02 0 0 nxtgonpho no 31 APPLE 'PHONES 1571 03/11/20 05:03:58 8:20 192 0 nxtgonpho no 31 APPLE 'PHONES 1572 03/11/20 05:03:59 8:20 0 0 nxtgonpho no 31 APPLE 'PHONES 1573 03/11/20 05:12:19 8:19 0 0 nxtgonpho no 3! APPLE 'PHONES 1574 03/11/20 05:20:37 21:06 192 0 nxtgonpho no 3 APPLE 'PHONES 1575 03/11/20 05:20:38 21:06 0 0 nxtgonpho no 3 APPLE 'PHONES 1576 03/11/20 05:39:23 60:00 7032 2756 ims 1577 03/11/20 05:41:44 29:04 0 0 nxtgonpho no 3 APPLE 'PHONES 1578 03/11/20 06:10:47 2:09 192 0 nxtgonpho no 3 APPLE 'PHONES 1579 03/11/20 06:10:49 2:08 0 0 nxtgonpho no 3 APPLE 'PHONES 1580 03/11/20 06:12:58 60:00 0 0 nxtgonpho no 3 APPLE 'PHONES 1581 03/11/20 06:39:23 60:00 6816 2540 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 65 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170985 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343043 ---PAGE BREAK--- pm. MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. cre AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Siam Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn LBSI IMSI MAKE MODEL 1582 03/11/20 07:12:58 60:00 0 0 nxtgonpho no APPLE 'PHONES 1583 03/11/20 07:39:23 60:00 8388 3144 ims 1584 03/11/20 08:12:58 33:16 0 0 nxtgonpho ne APPLE 'PHONES 1585 03/11/20 08:39:23 60:00 6816 2896 ims 1586 03/11/20 08:46:13 2:09 192 0 nxtgonpho ne APPLE 'PHONES 1587 03/11/20 08:46:14 2:09 0 0 nxtgonpho ne APPLE 'PHONES 1588 03/11/20 08:48:23 55:08 0 0 nxtgonpho ne APPLE 'PHONES 1589 03/11/20 09:39:23 60:00 13524 5520 ims 1590 03/11/20 09:43:30 2:09 192 0 nxtgonpho ne APPLE 'PHONES 1591 03/11/20 09:43:31 2:09 0 0 nxtgonpho ne APPLE 'PHONES 1592 03/11/20 09:45:40 60:00 0 0 nxtgonpho ne APPLE 'PHONES 1593 03/11/20 10:39:23 60:00 7140 2788 ims 1594 03/11/20 10:45:40 60:00 0 0 nxtgonpho no APPLE 'PHONES 1595 03/11/20 11:39:23 44:33 3516 1340 ims 1596 03/11/20 11:45:40 36:54 0 0 nxtgonpho ne APPLE 'PHONES 1597 03/11/20 12:22:33 2:10 192 0 nxtgonpho ne APPLE 'PHONES 1598 03/11/20 12:22:34 2:10 0 0 nxtgonpho ne APPLE 'PHONES 1599 03/11/20 12:22:38 2:05 6439 8606 ims APPLE 'PHONES 1600 03/11/20 12:22:39 2:05 8462 6175 ims APPLE 'PHONES 1601 03/11/20 12:23:56 60:00 16789 9202 ims 1602 03/11/20 12:24:44 22:13 0 Onactgonpho ne APPLE 'PHONES 1603 03/11/20 12:46:56 8:20 192 0 nxtgonpho ne APPLE 'PHONES 1604 03/11/20 12:46:57 8:20 0 0 nxtgonpho ne APPLE 'PHONES 1605 03/11/20 12:55:17 60:00 0 0 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 66 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00170486 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343044 ---PAGE BREAK--- MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:50:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. c to AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytos Up Bytes Apn Dn ENE! INSI MAKE MODEL 1606 03/11/20 13:23:56 60:00 6956 2988 ims 1607 03/11/20 13:55:17 60:00 0 Onmtgenpho ne APPLE !PHONES 1608 03/11/20 14:23:56 60:00 6940 2756 ims 1609 03/11/20 14:55:17 19:02 0 0 nmtgenpho ne APPLE !PHONES 1610 03/11/20 15:14:18 2:01 192 0 nxtgenpho ne APPLE !PHONES 1611 03/11/20 15:14:19 2:01 0 0 nxtgenpho ne APPLE !PHONES 1612 03/11/20 15:16:20 0:32 0 0 nxtgenpho ne APPLE !PHONES 1613 03/11/20 15:16:51 2:10 192 0 nxtgenpho ne APPLE !PHONES 1614 03/11/20 15:16:52 2:10 0 0 nxtgenpho ne APPLE !PHONES 1615 03/11/20 15:19:02 32:43 0 0 nxtgenpho ne APPLE !PHONES 1616 03/11/20 15:23:56 16:09 3532 1324 ims APPLE !PHONES 1617 03/11/20 15:40:05 0:24 2768 1324 ims APPLE !PHONES 1618 03/11/20 15:40:05 0:24 2704 1324 ims APPLE !PHONES 1619 03/11/20 15:40:29 11:44 4964 1680 ims APPLE !PHONES 1620 03/11/20 15:51:45 2:09 192 Onmtgenpho ne APPLE !PHONES 1621 03/11/20 15:51:46 2:09 0 0 nxtgenpho ne APPLE !PHONES 1622 03/11/20 15:52:12 1:05 6370 7972 ims APPLE !PHONES 1623 03/11/20 15:52:13 1:05 7972 6106 ims APPLE !PHONES 1624 03/11/20 15:52:58 0:21 11358 6562 ims 1625 03/11/20 15:53:16 0:38 6244 6668 ims APPLE !PHONES 1626 03/11/20 15:53:17 0:38 6668 5980 ims APPLE !PHONES 1627 03/11/20 15:53:46 0:56 8511 6170 ims 1628 03/11/20 15:53:55 0:42 0 Onmtgenpho ne APPLE !PHONES 1629 03/11/20 15:54:36 2:10 192 0 nxtgenpho ne APPLE !PHONES 1630 03/11/20 15:54:37 2:10 0 0 nxtgenpho ne APPLE !PHONES 1631 03/11/20 15:54:40 2:06 6262 6666 ims APPLE !PHONES 1632 03/11/20 15:54:42 2:05 6666 5998 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170987 The information contained here is for use by authorized persons only and is not for general distribution. Page 67 EFTA01343045 ---PAGE BREAK--- MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Tame MC/ Originating Number CT Bytes Up Bytes Apn Dn Ian SAES MOM 1633 03/11/20 15:55:34 60:00 18402 10186 ims 1634 03/11/20 15:56:47 23:07 0 0 nxtgenpho ne APPLE 'PEONES 1635 03/11/20 16:19:54 2:19 192 0 nxtgonphe ne APPLE 'PEONES 1636 03/11/20 16:19:55 2:20 0 0 nxtgonphe ne APPLE 'PEONES 1637 03/11/20 16:22:15 31:18 0 0 nxtgonphe ne APPLE 'PEONES 1638 03/11/20 16:53:32 8:20 192 0 nxtgonphe ne APPLE 'PEONES 1639 03/11/20 16:53:33 8:21 0 0 nxtgonphe ne APPLE IPHOME8 1640 03/11/20 16:55:34 60:00 8496 3144 ims 1641 03/11/20 17:01:53 7:53 0 0 nxtgonphe ne APPLE !PHONES 1642 03/11/20 17:09:46 0:47 0 0 nxtgonphe ne APPLE !PHONES 1643 03/11/20 17:10:32 2:09 192 0 nxtgonphe ne APPLE !PHONES 1644 03/11/20 17:10:33 2:09 0 0 nxtgonphe ne APPLE !PHONES 1645 03/11/20 17:12:42 30:27 0 0 nxtgonphe ne APPLE !PHONES 1646 03/11/20 17:43:08 2:10 192 0 nxtgonphe ne APPLE !PHONES 1647 03/11/20 17:43:10 2:09 0 0 nxtgonphe ne APPLE !PHONES 1648 03/11/20 17:45:19 11:39 0 0 nxtgonphe ne APPLE !PHONES 1649 03/11/20 17:55:34 60:00 8496 3036 ims 1650 03/11/20 17:56:58 61:35 192 0 nxtgonphe ne APPLE !PHONES 1651 03/11/20 17:56:59 60:00 0 0 nxtgonphe ne APPLE !PHONES 1652 03/11/20 18:55:34 60:00 8588 3052 ims 1653 03/11/20 18:56:59 1:35 0 0 nxtgonphe ne APPLE !PHONES 1654 03/11/20 18:58:34 6:44 0 0 nxtgonphe ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 68 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00170488 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343046 ---PAGE BREAK--- MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. k..70 .0 AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn MBE! INSI MAKE MODEL 1655 03/11/20 19:05:17 21:01 192 Onactgonpho ne APPLE !PHONES 1656 03/11/20 19:05:18 21:01 0 0 nxtgenpho ne APPLE !PHONES 1657 03/11/20 19:26:19 14:15 0 0 nxtgenpho ne APPLE !PHONES 1658 03/11/20 19:40:33 2:09 192 0 nxtgenpho ne APPLE !PHONES 1659 03/11/20 19:40:34 2:09 0 0 nxtgenpho ne APPLE !PHONES 1660 03/11/20 19:42:43 10:04 0 0 nxtgenpho ne APPLE !PHONES 1661 03/11/20 19:52:46 2:10 192 Onactgonpho ne APPLE !PHONES 1662 03/11/20 19:52:48 2:09 0 0 nxtgenpho ne APPLE !PHONES 1663 03/11/20 19:54:57 27:31 0 0 nxtgenpho ne APPLE !PHONES 1664 03/11/20 19:55:34 60:00 7188 2804 ims 1665 03/11/20 20:22:27 4:17 192 0 nxtgenpho ne APPLE !PHONES 1666 03/11/20 20:22:28 4:17 0 Onactgonpho ne APPLE !PHONES 1667 03/11/20 20:26:45 31:09 0 0 nxtgenpho ne APPLE !PHONES 1668 03/11/20 20:55:34 60:00 41608 20964 ims 1669 03/11/20 20:57:06 0:24 19460 45298 ims 1670 03/11/20 20:57:54 5:20 192 Onactgonpho ne APPLE !PHONES 1671 03/11/20 20:57:55 5:20 0 0 nxtgenpho ne APPLE !PHONES 1672 03/11/20 21:03:16 24:05 0 0 nxtgenpho ne APPLE !PHONES 1673 03/11/20 21:27:20 2:10 192 Onactgonpho ne APPLE !PHONES 1674 03/11/20 21:27:21 2:10 0 Onactgonpho ne APPLE !PHONES 1675 03/11/20 21:29:31 5:23 0 0 nxtgenpho ne APPLE !PHONES 1676 03/11/20 21:34:53 2:45 192 0 nxtgenpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 69 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170589 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343047 ---PAGE BREAK--- MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn EBBS IMSI MAKE MODEL 1677 03/11/20 21:34:54 2:45 0 Onxtgonpho ne APPLE !PHONES 1678 03/11/20 21:36:21 0:24 16926 44638 ims 1679 03/11/20 21:37:38 8:33 192 Onxtgonpho no APPLE !PHONES 1680 03/11/20 21:37:39 8:33 0 0 nxtgonpho no APPLE !PHONES 1681 03/11/20 21:46:12 2:53 0 0 nxtgonpho no APPLE 'PHONES 1682 03/11/20 21:48:10 0:24 36612 45576 ims 1683 03/11/20 21:49:04 1:41 192 0 nxtgonpho no APPLE 'PHONES 1684 03/11/20 21:49:05 1:41 0 0 nxtgonpho no APPLE 'PHONES 1685 03/11/20 21:50:45 2:09 192 0 nxtgenpho no APPLE 'PHONES 1686 03/11/20 21:50:46 2:09 0 0 nxtgenpho no APPLE 'PHONES 1687 03/11/20 21:52:55 4:37 0 0 nxtgenpho no APPLE 'PHONES 1688 03/11/20 21:55:34 60:00 23372 11084 ims 1689 03/11/20 21:56:29 0:24 15044 47925 ims 1690 03/11/20 21:57:31 2:32 192 0 nxtgonpho ne APPLE 'PHONES 1691 03/11/20 21:57:32 2:32 0 0 nxtgenpho ne APPLE !PHONES 1692 03/11/20 22:00:04 16:53 0 0 nxtgonpho no APPLE 'PHONES 1693 03/11/20 22:16:57 2:09 192 0 nxtgonpho no APPLE 'PHONES 1694 03/11/20 22:16:58 2:09 0 0 nxtgonpho ne APPLE 'PHONES 1695 03/11/20 22:19:08 33:25 0 0 nxtgonpho no APPLE 'PHONES 1696 03/11/20 22:52:32 8:24 192 0 nxtgonpho no APPLE 'PHONES 1697 03/11/20 22:52:33 8:24 0 0 nxtgenpho no APPLE 'PHONES 1698 03/11/20 22:55:34 11:56 0 0 ims 1699 03/11/20 23:00:57 1:54 0 0 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 70 customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00170990 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343048 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro ‘•- .ai. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 INA= Conn. Originating BT Time Number (07C) Bytes Up Bytes Apn INKS INSI BARB Dn MODEL 1700 03/11/20 23:02:51 14:31 192 Onxtgonpho ne APPLE 'PHONES 1701 03/11/20 23:02:52 14:32 0 0 nxtgenpho ne APPLE 'PHONES 1702 03/11/20 23:03:05 14:17 6204 6742 ims APPLE 'PHONES 1703 03/11/20 23:03:06 14:18 6674 5940 ims APPLE 'PHONES 1704 03/11/20 23:17:24 10:02 0 Onxtgonpho ne APPLE 'PHONES 1705 03/11/20 23:17:29 60:00 16825 9216 ims 1706 03/11/20 23:27:25 8:34 192 0 nxtgenpho ne APPLE 'PHONES 1707 03/11/20 23:27:26 8:34 0 0 nxtgenpho ne APPLE 'PHONES 1708 03/11/20 23:36:00 40:21 0 0 nxtgenpho ne APPLE 'PHONES 1709 03/12/20 00:16:20 6:06 192 0 nxtgenpho ne APPLE 'PHONES 1710 03/12/20 00:16:21 6:06 0 0 nxtgonpho no APPLE 'PHONES 1711 03/12/20 00:17:29 9:41 0 0 ims 1712 03/12/20 00:22:27 39:48 0 0 nxtgenpho no APPLE 'PHONES 1713 03/12/20 00:32:04 0:00 0 0 ims APPLE 'PHONES 1714 03/12/20 00:32:10 0:16 6670 5998 ims APPLE 'PHONES 1715 03/12/20 00:32:26 3:19 13976 7532 ims APPLE 'PHONES 1716 03/12/20 00:35:45 0:32 4276 1696 ims APPLE 'PHONES 1717 03/12/20 00:36:17 60:00 12136 4376 ims APPLE 'PHONES 1718 03/12/20 01:02:14 14:09 192 Onxtgonpho ne APPLE 'PHONES 1719 03/12/20 01:02:15 14:10 0 0 nxtgenpho ne APPLE 'PHONES 1720 03/12/20 01:16:25 20:21 0 0 nxtgenpho ne APPLE 'PHONES 1721 03/12/20 01:36:17 54:55 8388 3020 ims APPLE 'PHONES 1722 03/12/20 01:36:46 14:19 0 0 nxtgenpho ne APPLE 'PHONES 1723 03/12/20 01:51:04 2:35 192 0 nxtgenpho ne APPLE 'PHONES 1724 03/12/20 01:51:05 2:35 0 0 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170991 The information contained here is for use by authorized persons only and is not for general distribution. Page 71 EFTA01343049 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. cro AT&T Run Data: Run Tina: Data Usage Tor: Item Conn. Data 06/17/2020 INA= Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn LBSS IMSI MAKE MOD= 1725 03/12/20 01:53:40 8:44 192 Onxtgonpho ne APPLE 'PEONES 1726 03/12/20 01:53:41 8:44 0 0 nxtgonpho ne APPLE 'PEONES 1727 03/12/20 02:02:25 4:58 0 0 nxtgonpho ne APPLE 'PEONES 1728 03/12/20 02:07:22 90:00 192 0 nxtgonpho ne APPLE 'PEONES 1729 03/12/20 02:07:23 60:00 0 0 nxtgonpho ne APPLE 'PEONES 1730 03/12/20 02:31:11 70:00 6226 6646 ims APPLE 'PEONES 1731 03/12/20 02:31:12 60:00 6646 6070 ims APPLE 'PEONES 1732 03/12/20 02:33:14 60:00 16043 9169 ims 1733 03/12/20 03:07:23 60:00 0 0 nxtgonpho no APPLE IPH0t1E8 1734 03/12/20 03:31:12 55:35 0 0 ims APPLE !PHONES 1735 03/12/20 03:33:14 60:00 6816 2648 ims 1736 03/12/20 04:07:23 19:24 0 Onxtgonpho ne APPLE !PHONES 1737 03/12/20 04:26:46 240:03 192 0 nxtgonpho ne APPLE !PHONES 1738 03/12/20 04:26:47 60:00 0 0 nxtgonpho ne APPLE !PHONES 1739 03/12/20 04:33:14 60:00 6816 2788 ims 1740 03/12/20 05:26:47 60:00 0 0 nxtgonpho no APPLE !PHONES 1741 03/12/20 05:33:14 60:00 8836 3144 ims 1742 03/12/20 06:26:47 60:00 0 0 nxtgonpho ne APPLE !PHONES 1743 03/12/20 06:33:14 60:00 6816 2680 ims 1744 03/12/20 07:26:47 60:00 0 0 nxtgonpho ne APPLE !PHONES 1745 03/12/20 07:33:14 60:00 15312 6108 ims 1746 03/12/20 08:26:47 0:03 0 0 nxtgonpho ne APPLE !PHONES 1747 03/12/20 08:33:14 60:00 6924 2680 ims 1748 03/12/20 08:48:31 114:46 192 0 nxtgonpho ne APPLE !PHONES 1749 03/12/20 08:48:32 60:00 0 0 nxtgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170992 The information contained here is for use by authorized persons only and is not for general distribution. Page 72 EFTA01343050 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. t,; ssio AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Si= Conn. Originating ET Time Number (OTC/ Bytes Up Bytes Apn Dn flat IMSI MAKE MODEL 1750 03/12/20 09:33:14 60:00 6816 2680 ims 1751 03/12/20 09:48:32 54:46 0 Onmtgonpho no APPLE 'PHONES 1752 03/12/20 10:33:14 60:00 13352 4716 ims 1753 03/12/20 10:43:18 55:17 192 0 nmtgonpho ne APPLE 'PHONES 1754 03/12/20 10:43:19 55:17 0 0 nmtgonpho ne APPLE 'PHONES 1755 03/12/20 11:33:14 60:00 7048 2696 ims 1756 03/12/20 11:38:36 60:00 0 0 nmtgonpho no APPLE 'PHONES 1757 03/12/20 12:33:14 46:01 23828 16392 ims 1758 03/12/20 12:38:36 10:29 0 0 nmtgonpho ne APPLE 'PHONES 1759 03/12/20 12:49:04 1:58 192 0 nmtgonpho ne APPLE 'PHONES 1760 03/12/20 12:49:06 1:57 0 0 nmtgonpho ne APPLE 'PHONES 1761 03/12/20 12:51:03 4:18 0 0 nmtgonpho no APPLE 'PHONES 1762 03/12/20 12:55:20 2:13 192 0 nmtgonpho no APPLE 'PHONES 1763 03/12/20 12:55:21 2:13 0 0 nmtgonpho ne APPLE 'PHONES 1764 03/12/20 12:57:34 5:28 0 0 nmtgonpho ne APPLE 'PHONES 1765 03/12/20 13:03:01 3:17 192 0 nmtgonpho no APPLE 'PHONES 1766 03/12/20 13:03:02 3:17 0 0 nmtgonpho no APPLE 'PHONES 1767 03/12/20 13:06:19 0:37 0 0 nmtgonpho ne APPLE 'PHONES 1768 03/12/20 13:06:55 8:47 192 0 nmtgonpho ne APPLE 'PHONES 1769 03/12/20 13:06:56 8:48 0 0 nmtgonpho ne APPLE 'PHONES 1770 03/12/20 13:15:43 2:19 192 0 nmtgonpho ne APPLE 'PHONES 1771 03/12/20 13:15:44 2:19 0 0 nmtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 73 customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170993 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343051 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. „two AT&T Run Date: Run Tim: Data Usage For: Item Conn. Date 06/17/2020 alai= Conn. Tine (OTC) Originating Bytes up Bytes Apn on DMZ IIalI MDME MODEL 1772 03/12/20 13:18:03 2:44 0 0 nxtgenpho ne APPLE 'PHONED 1773 03/12/20 13:20:16 1:19 19792 12737 isms 1774 03/12/20 13:20:46 1:39 192 0 nxtgenpho ne APPLE 'PEONES 1775 03/12/20 13:20:48 1:38 0 0 nxtgenpho ne APPLE IP90NB8 1776 03/12/20 13:22:26 2:48 0 0 nxtgenpho ne APPLE IP90N18 1777 03/12/20 13:22:28 2:46 8904 7088 isms APPLE IPHOME8 1778 03/12/20 13:25:14 2:09 192 0 nxtgenpho ne APPLE IP90N18 1779 03/12/20 13:25:15 2:08 7096 6742 isms APPLE 'PHONES 1780 03/12/20 13:25:15 2:09 0 0 nxtgenpho ne APPLE IP90N18 1781 03/12/20 13:25:16 2:08 6742 6832 isms APPLE IP90N18 1782 03/12/20 13:26:04 60:00 16699 9051 isms 1783 03/12/20 13:27:24 60:00 0 0 nxtgenpho ne APPLE IP90N18 1784 03/12/20 14:26:04 60:00 7188 2896 isms 1785 03/12/20 14:27:24 60:00 0 0 nxtgenpho ne APPLE 'PHONES 1786 03/12/20 15:26:04 60:00 24520 13060 isms 1787 03/12/20 15:27:24 60:00 0 0 nxtgenpho ne APPLE 2990918 1788 03/12/20 16:00:27 7:27 1180538 1151123 isms 1789 03/12/20 16:26:04 60:00 7064 2896 isms 1790 03/12/20 16:27:24 60:01 0 Onxtgonpho ne APPLE 'PHONES 1791 03/12/20 17:26:04 60:00 12044 4672 isms 1792 03/12/20 17:27:26 45:17 0 0 nxtgenpho ne APPLE 'PHONES 1793 03/12/20 18:08:59 0:00 0 0 isms APPLE 'PHONES 1794 03/12/20 18:09:58 60:00 25799 15893 isms 1795 03/12/20 18:12:16 0:23 30532 40404 isms 1796 03/12/20 18:12:42 8:26 192 Onstgonpho ne APPLE 'PHONES 1797 03/12/20 18:12:43 8:26 0 Onxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170994 The information contained here is for use by authorized persons only and is not for general distribution. Page 74 EFTA01343052 ---PAGE BREAK--- MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. dre AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn L@2 INSI MAKE MODEL 1798 03/12/20 18:21:09 55:07 0 0 nxtgenpho ne APPLE !PHONES 1799 03/12/20 18:26:04 55:32 0 0 ism 1800 03/12/20 19:09:58 9:30 4856 2712 ism 1801 03/12/20 19:16:15 2:10 192 Onxtgonpho ne APPLE !PHONES 1802 03/12/20 19:16:16 2:10 0 Onxtgonpho ne APPLE !PHONES 1803 03/12/20 19:18:26 1:37 0 0 nxtgenpho ne APPLE !PHONES 1804 03/12/20 19:20:02 6:01 192 0 nxtgonpho ne APPLE !PHONES 1805 03/12/20 19:20:03 6:00 6352 6648 ism APPLE !PHONES 1806 03/12/20 19:20:03 6:01 0 Onxtgonpho ne APPLE !PHONES 1807 03/12/20 19:20:04 6:00 6648 6088 ism APPLE !PHONES 1808 03/12/20 19:21:36 0:56 15122 11060 ism 1809 03/12/20 19:22:44 0:30 13547 10699 ism 1810 03/12/20 19:23:30 60:00 44687 29586 ism 1811 03/12/20 19:26:04 7:32 0 0 nxtgonpho no APPLE !PHONES 1812 03/12/20 19:33:35 2:10 192 0 nxtgonpho ne APPLE !PHONES 1813 03/12/20 19:33:36 2:10 0 0 nxtgenpho ne APPLE !PROMS 1814 03/12/20 19:34:21 1:15 167363 118968 ism 1815 03/12/20 19:35:46 5:54 0 0 nxtgenpho ne APPLE !PHONES 1816 03/12/20 19:39:03 0:14 0 0 ism 1817 03/12/20 19:41:40 2:09 192 0 nxtgenpho ne APPLE !PHONES 1818 03/12/20 19:41:41 2:09 0 0 nxtgenpho no APPLE !PHONES 1819 03/12/20 19:43:50 1:07 0 0 nxtgonpho no APPLE !PHONES 1820 03/12/20 19:44:56 2:12 192 0 nxtgonpho no APPLE !PHONES 1821 03/12/20 19:44:57 2:12 0 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 75 customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170995 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343053 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 M.= Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn 17@I II 8f MAPS 1822 03/12/20 19:47:09 2:44 0 0 nactgonpho ne APPLE 1823 03/12/20 19:49:32 0:24 51463 45228 ims 1824 03/12/20 19:49:52 0:43 192 0 nactgonpho ne APPLE 1825 03/12/20 19:49:53 0:43 0 0 nactgonpho ne APPLE 1826 03/12/20 19:50:36 30:57 0 0 nactgonpho ne APPLE 1827 03/12/20 20:21:32 2:09 192 0 nactgonpho ne APPLE 1828 03/12/20 20:21:33 2:09 0 0 nactgonpho ne APPLE 1829 03/12/20 20:23:30 60:00 7048 3004 ims 1830 03/12/20 20:23:42 42:51 0 0 nactgonpho ne APPLE 1831 03/12/20 21:06:32 14:44 192 0 nactgonpho ne APPLE 1832 03/12/20 21:06:33 14:44 0 0 nactgonpho ne APPLE 1833 03/12/20 21:21:17 8:01 0 0 nactgonpho ne APPLE 1834 03/12/20 21:23:30 60:00 6924 2788 ims 1835 03/12/20 21:29:18 60:00 0 0 nactgonpho ne APPLE 1836 03/12/20 22:23:30 60:00 13476 4500 ims 1837 03/12/20 22:29:18 45:03 0 0 nactgonpho ne APPLE 1838 03/12/20 23:14:22 60:00 0 0 nactgonpho ne APPLE 1839 03/12/20 23:23:30 60:00 10300 3408 ims 1840 03/13/20 00:14:22 51:33 0 0 nactgonpho ne APPLE 1841 03/13/20 00:23:30 60:00 14864 4872 ims 1842 03/13/20 01:05:54 92:25 192 0 nottgonpho ne APPLE 1843 03/13/20 01:05:55 60:00 0 0 nactgonpho ne APPLE 1844 03/13/20 01:23:30 60:00 14600 4656 ims 1845 03/13/20 02:05:55 32:25 0 0 nactgonpho ne APPLE MODEL IPACETA IPACETA IPACETA IPACETA IPACETA IPNONE8 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES !PHONES !PHONES 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 76 customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170996 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343054 ---PAGE BREAK--- MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Date: Run Tine: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating Br Time Number (uzC) Bytes Up Bytes Apn L@I IMSI MAKE Dn MODEL 1846 03/13/20 02:23:30 60:00 8820 3252 ins 1847 03/13/20 02:38:20 60:00 192 Onstgonpho no APPLE 'PEONES 1848 03/13/20 02:38:21 60:00 0 0 nxtgonpho no APPLE 'PEONES 1849 03/13/20 03:23:30 40:50 12092 6752 ins 1850 03/13/20 03:38:21 12:11 0 0 nxtgonpho ne APPLE 'PEONES 1851 03/13/20 03:50:31 2:55 192 0 nxtgonpho ne APPLE 'PHONES 1852 03/13/20 03:50:32 2:55 0 0 nxtgonpho ne APPLE 'PHONES 1853 03/13/20 03:53:27 10:51 192 0 nxtgonpho no APPLE 'PHONES 1854 03/13/20 03:53:28 10:51 0 0 nxtgonpho no APPLE 'PHONES 1855 03/13/20 04:08:13 34:26 192 0 nxtgonpho no APPLE 'PHONES 1856 03/13/20 04:08:14 34:26 0 0 nxtgonpho no APPLE 'PHONES 1857 03/13/20 04:08:52 0:44 7459 8824 ins APPLE !PHONES 1858 03/13/20 04:08:53 0:44 8824 7107 ins APPLE !PHONES 1859 03/13/20 04:09:08 0:01 0 0 ins 1860 03/13/20 04:09:21 0:19 6244 6754 isms APPLE !PHONES 1861 03/13/20 04:09:22 0:19 6690 5980 isms APPLE 'PHONES 1862 03/13/20 04:09:37 0:03 2565 1210 isms 1863 03/13/20 04:09:39 0:20 6344 6674 isms APPLE !PHONES 1864 03/13/20 04:09:40 0:20 6674 6080 isms APPLE !PHONES 1865 03/13/20 04:09:56 0:04 2565 1212 isms 1866 03/13/20 04:09:59 0:36 8342 8629 isms APPLE 'PHONES 1867 03/13/20 04:10:00 0:36 8629 8078 isms APPLE 'PHONES 1868 03/13/20 04:10:14 0:01 0 0 isms 1869 03/13/20 04:10:19 32:22 7376 6864 isms APPLE 'PHONES 1870 03/13/20 04:10:20 32:22 6800 7112 isms APPLE !PHONES 1871 03/13/20 04:10:35 60:00 15405 9050 isms 1872 03/13/20 04:42:08 0:35 3412 9535 nxtgenpho ne 1873 03/13/20 04:42:42 62:11 192 0 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170997 The information contained here is for use by authorized persons only and is not for general distribution. Page 77 EFTA01343055 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. gre ‘•- .a# AT&T Run pato: Run Time: Data Usage Tor: Item Conn. Dato 06/17/2020 M.= Conn. Tim (OTC) Originating Number BT Bytes Op Bytes AP^ Dn 7:KEI IMSI HAKE MODEL 1874 03/13/20 04:42:43 60:00 0 0 nactgonpho ne APPLE !PHONES 1875 03/13/20 05:10:35 60:00 6848 2664 ims 1876 03/13/20 05:42:43 22:11 0 0 nactgonpho ne APPLE !PHONES 1877 03/13/20 06:04:53 2:22 192 0 nactgonpho no APPLE !PHONES 1878 03/13/20 06:04:54 2:22 0 0 nactgonpho ne APPLE !PHONES 1879 03/13/20 06:07:15 6:06 192 0 nactgonpho ne APPLE !PHONES 1880 03/13/20 06:07:17 6:05 0 0 nactgonpho ne APPLE !PHONES 1881 03/13/20 06:10:35 60:00 8372 2912 ism 1882 03/13/20 06:13:22 0:47 0 0 nactgonpho ne APPLE !PHONES 1883 03/13/20 06:14:09 18:41 192 0 nactgonpho ne APPLE !PHONES 1884 03/13/20 06:14:10 18:41 0 0 nactgonpho ne APPLE !PHONES 1885 03/13/20 06:32:51 58:16 0 0 nactgonpho ne APPLE !PHONES 1886 03/13/20 07:10:35 60:00 6956 2788 igloo 1887 03/13/20 08:10:35 60:00 17084 7312 igloo 1888 03/13/20 09:10:35 60:00 8496 3036 igloo 1889 03/13/20 10:10:35 60:00 9912 3176 igloo 1890 03/13/20 11:10:35 60:00 10052 3284 ism 1891 03/13/20 12:10:35 60:00 11920 4268 ism 1892 03/13/20 12:38:02 9:35 192 Onxtgonpho ne APPLE !PHONES 1893 03/13/20 12:38:03 9:35 0 0 nactgonpho ne APPLE !PHONES 1894 03/13/20 12:47:37 25:08 192 0 nactgonpho ne APPLE !PHONES 1895 03/13/20 12:47:38 25:08 0 0 nactgonpho ne APPLE !PHONES 1896 03/13/20 13:10:35 10:57 0 0 ism 1897 03/13/20 13:12:46 2:03 192 0 nactgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 78 customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00170998 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343056 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:58:68pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. *• 0 e t, AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC/ Originating Number ET Bytes Up Bytes Apn Dn DMZ 1848z MAKE MODEL 1898 03/13/20 13:12:47 2:03 0 0 nxtgonpho no APPLE 'PHONES 1899 03/13/20 13:14:50 21:25 0 0 nxtgonpho no APPLE 'PHONES 1900 03/13/20 13:21:33 60:00 15267 8752 ims 1901 03/13/20 13:36:15 4:11 0 0 nxtgonpho no APPLE 'PHONES 1902 03/13/20 13:40:25 120:00 192 0 nxtgonpho no APPLE 'PHONES 1903 03/13/20 13:40:26 60:00 0 0 nxtgonpho no APPLE 'PHONES 1904 03/13/20 14:21:33 60:00 8372 3112 ims 1905 03/13/20 14:40:26 60:00 0 0 nxtgenpho no APPLE 'PHONES 1906 03/13/20 15:21:33 60:00 8512 3912 ims 1907 03/13/20 15:40:26 55:16 0 0 nxtgonpho no APPLE 'PHONES 1908 03/13/20 16:21:33 59:35 18408 11284 ims 1909 03/13/20 16:33:05 0:25 42857 50460 ims 1910 03/13/20 16:35:42 1:50 0 0 nxtgonpho no APPLE 'PHONES 1911 03/13/20 16:37:31 2:17 192 0 nxtgonpho no APPLE 'PHONES 1912 03/13/20 16:37:32 2:17 0 0 nxtgonpho no APPLE 'PHONES 1913 03/13/20 16:39:49 22:25 0 0 nxtgonpho no APPLE 'PHONES 1914 03/13/20 16:54:03 22:47 15237 10960 ims 1915 03/13/20 17:02:13 5:32 192 0 nxtgonpho no APPLE 'PHONES 1916 03/13/20 17:02:14 5:32 0 0 nxtgonpho no APPLE 'PHONES 1917 03/13/20 17:07:46 13:19 192 0 nxtgonpho no APPLE 'PHONES 1918 03/13/20 17:07:47 13:19 0 0 nxtgonpho no APPLE 'PHONES 1919 03/13/20 17:17:55 8:43 8193 6048 ims 1920 03/13/20 17:21:06 39:09 192 0 nxtgonpho no APPLE 'PHONES 1921 03/13/20 17:21:07 39:09 0 0 nxtgonpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 79 customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00170999 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343057 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:59pm ...1/4ri "--6 AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 M.= Conn. Originating CT Time Number (OTC) Bytes Up Bytes Apn Dn DOLT INSI MAKE MODEL 1922 03/13/20 17:21:08 0:00 0 0 ims APPLE 'PHONES 1923 03/13/20 17:21:15 39:00 6372 6676 ims APPLE 'PHONES 1924 03/13/20 17:21:16 39:00 6676 6108 ims APPLE 'PHONES 1925 03/13/20 17:29:41 60:00 25131 14008 ims 1926 03/13/20 17:59:27 0:23 14717 40025 ims 1927 03/13/20 18:00:17 10:30 0 0 nmtgenpho ne APPLE 'PHONES 1928 03/13/20 18:10:46 79:05 192 0nmtgenpho ne APPLE 'PHONES 1929 03/13/20 18:10:47 60:00 0 0 nmtgenpho ne APPLE 'PHONES 1930 03/13/20 18:29:41 60:00 7156 2988 ims 1931 03/13/20 19:10:47 19:05 0 0 nmtgenpho ne APPLE 'PHONES 1932 03/13/20 19:29:41 60:00 6816 2756 ims 1933 03/13/20 19:29:51 53:02 192 0nmtgenpho ne APPLE 'PHONES 1934 03/13/20 19:29:52 53:02 0 0 nmtgenpho ne APPLE 'PHONES 1935 03/13/20 20:22:54 8:56 0 0 nmtgenpho ne APPLE 'PHONES 1936 03/13/20 20:29:41 30:16 3640 1448 ims 1937 03/13/20 20:31:49 2:04 192 0nmtgenpho ne APPLE 'PHONES 1938 03/13/20 20:31:50 2:04 0 0 nmtgenpho ne APPLE 'PHONES 1939 03/13/20 20:33:54 3:23 0 0 nmtgenpho ne APPLE 'PHONES 1940 03/13/20 20:37:16 2:03 192 0 nmtgenpho ne APPLE 'PHONES 1941 03/13/20 20:37:17 2:03 0 0 nxtgenpho ne APPLE 'PHONES 1942 03/13/20 20:39:20 5:40 0 0 nmtgenpho ne APPLE 'PHONES 1943 03/13/20 20:44:59 2:04 192 0nmtgenpho ne APPLE 'PHONES 1944 03/13/20 20:45:00 2:04 0 0 nmtgenpho ne APPLE 'PHONES 1945 03/13/20 20:47:04 0:37 0 0 nmtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 80 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171000 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343058 ---PAGE BREAK--- MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 M.= Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn =IT IMSI MARE MODEL 1946 03/13/20 20:47:40 2:04 192 0 nxtgenpho ne APPLE 'PHONES 1947 03/13/20 20:47:41 2:04 0 0 nxtgenpho ne APPLE 'PHONES 1948 03/13/20 20:49:45 1:18 0 0 nxtgenpho ne APPLE 'PHONES 1949 03/13/20 20:51:02 8:51 192 0 nxtgenpho ne APPLE 'PHONES 1950 03/13/20 20:51:03 8:51 0 0 nxtgenpho ne APPLE 'PHONES 1951 03/13/20 20:51:10 13:44 8373 6106 ims 1952 03/13/20 20:59:54 2:10 192 Onxtgonpho ne APPLE 'PHONES 1953 03/13/20 20:59:55 2:11 0 0 nxtgenpho ne APPLE 'PHONES 1954 03/13/20 20:59:56 2:08 7136 6746 ims APPLE 'PHONES 1955 03/13/20 20:59:57 2:09 6746 6872 ims APPLE 'PHONES 1956 03/13/20 21:02:06 3:47 0 Onxtgonpho ne APPLE 'PHONES 1957 03/13/20 21:05:53 5:41 192 0 nxtgenpho ne APPLE 'PHONES 1958 03/13/20 21:05:54 5:42 0 0 nxtgenpho ne APPLE 'PHONES 1959 03/13/20 21:07:53 2:08 5700 4896 ims 1960 03/13/20 21:09:59 1:35 8160 6868 ims APPLE 'PHONES 1961 03/13/20 21:10:00 1:36 6868 7896 ims APPLE 'PHONES 1962 03/13/20 21:11:36 0:34 0 0 nxtgenpho ne APPLE 'PHONES 1963 03/13/20 21:12:09 26:51 192 0 nxtgenpho ne APPLE 'PHONES 1964 03/13/20 21:12:10 26:51 0 0 nxtgenpho ne APPLE 'PHONES 1965 03/13/20 21:17:20 10:53 8073 10078 ims 1966 03/13/20 21:24:14 6:02 0 0 ims 1967 03/13/20 21:28:12 3:25 14031 10764 ims 1968 03/13/20 21:32:41 2:10 7138 6754 ims APPLE 'PHONES 1969 03/13/20 21:32:42 2:10 6754 6874 ims APPLE 'PHONES 1970 03/13/20 21:34:37 1:31 84 288 ims 1971 03/13/20 21:34:50 2:14 7116 6744 ims APPLE 'PHONES 1972 03/13/20 21:34:51 2:14 6744 6852 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171001 The information contained here is for use by authorized persons only and is not for general distribution. Page 81 EFTA01343059 ---PAGE BREAK--- MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. cro 1/4-4.4 AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating m”..0-0.,- ET Bytes Up Bytes Apn Dn IRRI IRMI MAKZ MODEL 1973 03/13/20 21:36:09 0:56 6601 5083 ims 1974 03/13/20 21:37:04 1:56 7234 6798 isms APPLE 'PEONES 1975 03/13/20 21:37:05 1:56 6798 6970 ims APPLE 'PROEM 1976 03/13/20 21:39:01 1:17 0 Onmtgonpho ne APPLE 'PROEM 1977 03/13/20 21:39:06 1:12 8122 6924 ims APPLE 'PHONES 1978 03/13/20 21:40:17 2:04 192 Onmtgonpho ne APPLE 'PHONES 1979 03/13/20 21:40:18 2:03 6056 6330 ims APPLE 'PHONES 1980 03/13/20 21:40:18 2:04 0 Onmtgonpho ne APPLE 'PHONES 1981 03/13/20 21:40:19 2:03 6330 5792 ims APPLE 'PHONES 1982 03/13/20 21:42:22 0:06 0 Onmtgonpho ne APPLE 'PHONES 1983 03/13/20 21:42:39 0:45 0 Onmtgonpho ne APPLE 'PHONES 1984 03/13/20 21:42:41 0:43 7940 7712 ims APPLE 'PHONES 1985 03/13/20 21:43:23 8:15 192 Onmtgonpho ne APPLE 'PHONES 1986 03/13/20 21:43:24 8:14 6202 6676 ims APPLE 'PHONES 1987 03/13/20 21:43:24 8:15 0 Onmtgonpho ne APPLE 'PHONES 1988 03/13/20 21:43:25 8:14 6676 5938 ims APPLE !PHONES 1989 03/13/20 21:51:39 12:14 0 Onmtgonpho ne APPLE IPHOME8 1990 03/13/20 21:51:43 12:10 19770 12004 ims APPLE 'PHONES 1991 03/13/20 22:03:52 2:10 192 Onmtgonpho ne APPLE !PHONES 1992 03/13/20 22:03:53 2:09 6225 6776 ims APPLE !PHONES 1993 03/13/20 22:03:53 2:10 0 Onmtgonpho ne APPLE !PHONES 1994 03/13/20 22:03:54 2:09 6668 5961 ims APPLE !PHONES 1995 03/13/20 22:06:03 6:11 0 Onmtgonpho ne APPLE !PHONES 1996 03/13/20 22:06:06 6:08 12060 9324 ims APPLE !PHONES 1997 03/13/20 22:12:13 2:16 192 Onmtgonpho ne APPLE !PHONES 1998 03/13/20 22:12:14 2:15 6228 6774 ims APPLE !PHONES 1999 03/13/20 22:12:14 2:16 0 Onmtgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171002 The information contained here is for use by authorized persons only and is not for general distribution. Page 82 EFTA01343060 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:58:58pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ce. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Ma= Conn. Time (OTC) Originating Mtivehn BT Bytes Up Bytes Apn INEX IMES MAKE Dn MODEL 2000 03/13/20 22:12:16 2:14 6666 5964 ims APPLE 'PEONES 2001 03/13/20 22:14:30 2:24 0 Onmtgonpho ne APPLE 'PEONES 2002 03/13/20 22:14:34 2:20 18586 10968 ims APPLE 'PEONES 2003 03/13/20 22:16:53 2:04 192 Onmtgonpho no APPLE 'PEONES 2004 03/13/20 22:16:55 2:02 7268 6904 ims APPLE 'PEONES 2005 03/13/20 22:16:55 2:03 0 Onmtgonpho no APPLE 'PEONES 2006 03/13/20 22:16:56 2:02 6796 7004 ims APPLE !PEONES 2007 03/13/20 22:18:58 1:09 0 Onmtgonpho no APPLE IPEOI88 2008 03/13/20 22:19:00 1:07 8992 6178 ims APPLE 'PHONES 2009 03/13/20 22:20:06 5:12 192 Onmtgonpho no APPLE 'PHONES 2010 03/13/20 22:20:07 3:30 7136 6846 ims APPLE 'PHONES 2011 03/13/20 22:20:07 5:12 0 Onmtgonpho no APPLE 'PHONES 2012 03/13/20 22:20:08 3:30 6738 6872 ims APPLE 'PHONES 2013 03/13/20 22:23:40 1:38 6242 6670 ims APPLE 'PHONES 2014 03/13/20 22:23:42 1:37 6670 5978 ims APPLE 'PHONES 2015 03/13/20 22:25:19 2:37 0 Onmtgonpho ne APPLE 'PHONES 2016 03/13/20 22:25:21 2:35 6676 5999 ims APPLE 'PHONES 2017 03/13/20 22:27:55 2:07 192 Onmtgonpho ne APPLE 'PHONES 2018 03/13/20 22:27:56 2:06 6386 7516 ims APPLE 'PHONES 2019 03/13/20 22:27:56 2:07 0 Onmtgonpho ne APPLE 'PHONES 2020 03/13/20 22:27:58 2:05 7408 6122 ims APPLE 'PHONES 2021 03/13/20 22:30:03 0:05 0 Onmtgonpho ne APPLE 'PHONES 2022 03/13/20 22:30:19 16:13 0 0 nxtgonpho ne APPLE !PHONES 2023 03/13/20 22:30:22 12:57 7408 6122 ims APPLE !PHONES 2024 03/13/20 22:43:19 0:12 640 372 ims APPLE !PHONES 2025 03/13/20 22:46:31 24:52 192 Onxtgonpho ne APPLE !PHONES 2026 03/13/20 22:46:32 24:52 0 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 83 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171003 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343061 ---PAGE BREAK--- MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Sim Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn DMZ ISIS! MANS Dn 2027 03/13/20 22:46:32 1:30 6244 6670 ims APPLE 2028 03/13/20 22:46:33 1:30 6670 5980 ims APPLE 2029 03/13/20 22:46:52 11:25 9869 7850 ims 2030 03/13/20 22:48:02 23:21 7320 6790 ims APPLE 2031 03/13/20 22:48:03 23:21 6790 7056 ims APPLE 2032 03/13/20 22:58:17 20:53 12027 6926 ims 2033 03/13/20 23:11:24 1:05 0 Onmtgonpho ne APPLE 2034 03/13/20 23:12:28 3:14 192 Onmtgonpho ne APPLE 2035 03/13/20 23:12:29 3:14 0 Onmtgonpho ne APPLE 2036 03/13/20 23:14:33 0:07 0 0 ims 2037 03/13/20 23:15:43 12:51 0 Onmtgonpho ne APPLE 2038 03/13/20 23:15:47 5:59 9909 6354 ims 2039 03/13/20 23:19:10 60:00 0 0 ims 2040 03/13/20 23:21:46 60:00 15283 8910 ims 2041 03/13/20 23:28:33 1:36 192 Onmtgonpho no APPLE 2042 03/13/20 23:28:35 1:35 0 Onmtgonpho no APPLE 2043 03/13/20 23:30:10 1:48 0 Onmtgonpho no APPLE 2044 03/13/20 23:31:58 31:47 192 Onmtgonpho no APPLE 2045 03/13/20 23:31:59 31:47 0 Onmtgonpho no APPLE 2046 03/14/20 00:03:45 8:26 192 Onmtgonpho no APPLE 2047 03/14/20 00:03:46 8:26 0 Onmtgonpho no APPLE 2048 03/14/20 00:12:12 3:18 192 Onmtgonpho ne APPLE 2049 03/14/20 00:12:13 3:18 0 Onmtgonpho ne APPLE 2050 03/14/20 00:15:31 0:59 0 Onmtgonpho ne APPLE 2051 03/14/20 00:16:29 4:05 192 Onmtgonpho ne APPLE IPECNEB !PEONES !PEONES !PEONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00171004 The information contained here is for use by authorized persons only and is not for general distribution. Page 84 EFTA01343062 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. de. AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn L62 IMSI MAKE MODEL 2052 03/14/20 00:16:30 4:05 0 0 nxtgonpho no APPLE !PEONES 2053 03/14/20 00:19:10 60:00 0 0 ims 2054 03/14/20 00:20:35 0:40 0 0 nxtgonpho no APPLE !PEONES 2055 03/14/20 00:21:14 15:25 192 0 nxtgonpho no APPLE !PEONES 2056 03/14/20 00:21:15 15:25 0 0 nxtgonpho no APPLE !PEONES 2057 03/14/20 00:21:46 60:00 6816 2648 ims 2058 03/14/20 00:36:39 12:26 192 0 nxtgonpho no APPLE !PEONES 2059 03/14/20 00:36:40 12:26 0 0 nxtgonpho no APPLE !PEONES 2060 03/14/20 00:49:06 1:08 0 0 nxtgonpho no APPLE !PEONES 2061 03/14/20 00:50:14 12:34 192 0 nxtgonpho no APPLE !PEONES 2062 03/14/20 00:50:14 12:35 0 0 nxtgonpho no APPLE !PEONES 2063 03/14/20 01:02:48 1:18 192 0 nxtgonpho no APPLE !PEONES 2064 03/14/20 01:02:50 1:17 0 0 nxtgonpho no APPLE 'PHONES 2065 03/14/20 01:04:06 36:37 192 0 nxtgonpho no APPLE 'PHONES 2066 03/14/20 01:04:07 36:37 0 0 nxtgenpho ne APPLE 'PHONES 2067 03/14/20 01:19:10 60:00 0 0 ims 2068 03/14/20 01:21:46 60:00 7156 2880 ims 2069 03/14/20 01:40:44 34:01 0 0 nxtgonpho ne APPLE 'PHONES 2070 03/14/20 02:14:44 2:09 192 0 nxtgonpho ne APPLE 'PHONES 2071 03/14/20 02:14:46 2:08 0 0 nxtgonpho ne APPLE !PHONES 2072 03/14/20 02:16:54 15:31 0 0 nxtgonpho ne APPLE !PHONES 2073 03/14/20 02:19:10 60:00 0 0 ims 2074 03/14/20 02:21:46 60:00 16096 4716 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 85 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171005 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343063 ---PAGE BREAK--- MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn MMEI IM9I MAKE MODEL 2075 03/14/20 02:32:24 2:32 192 Onmtgonpho ne APPLE !PHONES 2076 03/14/20 02:32:25 2:32 0 0 nxtgonpho ne APPLE !PHONES 2077 03/14/20 02:34:56 6:04 192 0 nxtgonpho ne APPLE !PHONES 2078 03/14/20 02:34:57 6:04 0 0 nxtgonpho ne APPLE !PHONES 2079 03/14/20 02:41:01 11:31 0 0 nxtgonpho ne APPLE !PHONES 2080 03/14/20 02:52:32 2:14 192 Onmtgonpho ne APPLE !PHONES 2081 03/14/20 02:52:33 2:14 0 Onmtgonpho ne APPLE !PHONES 2082 03/14/20 02:54:47 28:35 0 0 nxtgonpho ne APPLE !PHONES 2083 03/14/20 03:19:10 0:01 0 0 ims 2084 03/14/20 03:21:46 60:00 6940 3740 ims 2085 03/14/20 03:23:21 8:26 192 Onmtgonpho no APPLE !PHONES 2086 03/14/20 03:23:22 8:27 0 0 nxtgonpho no APPLE !PHONES 2087 03/14/20 03:31:49 1:43 0 0 nxtgonpho ne APPLE !PHONES 2088 03/14/20 03:33:31 2:10 192 Onmtgonpho ne APPLE !PHONES 2089 03/14/20 03:33:32 2:10 0 Onmtgonpho ne APPLE !PHONES 2090 03/14/20 03:35:42 60:00 0 0 nxtgonpho ne APPLE !PHONES 2091 03/14/20 04:21:46 60:00 11904 4612 ims 2092 03/14/20 04:35:42 60:00 0 0 nxtgenpho no APPLE !PHONES 2093 03/14/20 05:21:46 60:00 6924 2648 ims 2094 03/14/20 05:35:42 60:00 0 0 nxtgonpho ne APPLE !PHONES 2095 03/14/20 06:21:46 60:00 10068 3144 ims 2096 03/14/20 06:35:42 60:00 0 0 nxtgonpho ne APPLE !PHONES 2097 03/14/20 07:21:46 60:00 8388 2896 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 86 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171006 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343064 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. ce. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 INN= Conn. Originating AT Tame Number (OTC) Bytes Up Bytes Apn IMMIX INSI NARA Dn NODAL 2098 03/14/20 07:35:42 0:01 0 Onmtgonpho ne APPLE !PHONES 2099 03/14/20 07:35:45 60:00 0 0 nxtgenpho ne APPLE !PHONES 2100 03/14/20 08:21:46 60:00 11580 4112 ims 2101 03/14/20 08:35:45 60:00 0 0 nxtgenpho ne APPLE !PHONES 2102 03/14/20 09:21:46 60:00 16496 5124 ims 2103 03/14/20 09:35:45 60:00 0 0 nxtgenpho ne APPLE !PHONES 2104 03/14/20 10:21:46 60:00 8496 2896 ims 2105 03/14/20 10:35:45 60:01 0 Onmtgonpho ne APPLE !PHONES 2106 03/14/20 11:21:46 60:00 6924 2756 ims 2107 03/14/20 11:35:47 60:00 0 0 nxtgenpho ne APPLE !PHONES 2108 03/14/20 12:21:46 21:19 3408 1324 ims 2109 03/14/20 12:35:47 2:40 0 Onmtgonpho ne APPLE !PHONES 2110 03/14/20 12:38:26 0:27 192 0 nxtgenpho ne APPLE !PHONES 2111 03/14/20 12:38:27 0:27 0 0 nxtgenpho ne APPLE !PHONES 2112 03/14/20 12:38:54 1:51 0 0 nxtgenpho ne APPLE !PHONES 2113 03/14/20 12:39:01 1:58 8327 7901 ims APPLE !PHONES 2114 03/14/20 12:40:45 1:14 0 Onmtgonpho ne APPLE !PHONES 2115 03/14/20 12:40:59 0:33 5864 2431 ims APPLE !PHONES 2116 03/14/20 12:40:59 0:33 5800 2431 ims APPLE !PHONES 2117 03/14/20 12:41:32 5:59 32741 23233 ims APPLE !PHONES 2118 03/14/20 12:41:58 2:04 192 Onmtgonpho ne APPLE !PHONES 2119 03/14/20 12:41:59 2:04 0 0 nxtgenpho ne APPLE !PHONES 2120 03/14/20 12:43:33 0:29 8162 8180 ims APPLE !PHONES 2121 03/14/20 12:43:34 0:29 6872 7898 ims APPLE !PHONES 2122 03/14/20 12:44:04 1:27 0 0 nxtgenpho ne APPLE !PHONES 2123 03/14/20 12:44:07 1:24 8138 8664 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171007 The information contained here is for use by authorized persons only and is not for general distribution. Page 87 EFTA01343065 ---PAGE BREAK--- PRI020 MOBILITY 41110 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm ..,--fs.s 4*-6 AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Tim: Data Usage For: Item Conn. Date 06/17/2020 Conn. Tame (OTC) Originating Number ET Bytos Up Bytes Apn Dn MAKE MODEL 2124 03/14/20 12:45:31 1:59 0 Onstgenpho no APPLE 'PHONES 2125 03/14/20 12:45:36 0:34 756 0 Las APPLE 'PHONES 2126 03/14/20 12:46:10 0:27 172 0 Las APPLE 'PHONES 2127 03/14/20 12:46:10 0:27 0 0 Las APPLE 'PHONES 2128 03/14/20 12:46:37 60:00 8917 6504 Las APPLE 'PHONES 2129 03/14/20 12:47:29 2:04 192 Onxtgonpho no APPLE 'PHONES 2130 03/14/20 12:47:30 2:03 6224 6666 Las APPLE 'PHONES 2131 03/14/20 12:47:30 2:04 0 0 nxtgonpho no APPLE 'PHONES 2132 03/14/20 12:47:32 2:02 6666 5960 Las APPLE 'PHONES 2133 03/14/20 12:49:34 0:35 0 0 nxtgonpho no APPLE 'PHONES 2134 03/14/20 12:49:38 27:19 15352 14059 Las 2135 03/14/20 12:50:08 8:34 192 0 nxtgonpho no APPLE 'PHONES 2136 03/14/20 12:50:09 8:34 0 0 nxtgonpho no APPLE 'PHONES 2137 03/14/20 12:58:43 55:56 0 0 nxtgonpho no APPLE 'PHONES 2138 03/14/20 13:28:54 0:01 0 0 Las 2139 03/14/20 13:46:37 13:30 0 0 Las APPLE 'PHONES 2140 03/14/20 13:54:38 2:03 192 Onmtgonpho no APPLE 'PHONES 2141 03/14/20 13:54:39 2:03 0 0 nxtgonpho no APPLE 'PHONES 2142 03/14/20 13:54:45 9:09 8607 6380 Las 2143 03/14/20 13:56:42 0:58 0 0 nxtgonpho no APPLE 'PHONES 2144 03/14/20 13:57:39 16:49 192 0 nxtgonpho no APPLE 'PHONES 2145 03/14/20 13:57:40 16:49 0 0 nxtgonpho no APPLE 'PHONES 2146 03/14/20 14:00:06 14:22 6366 6792 Las APPLE 'PHONES 2147 03/14/20 14:00:07 14:22 6684 6102 Las APPLE 'PHONES 2148 03/14/20 14:03:54 23:55 14461 10712 Las 2149 03/14/20 14:14:29 12:50 0 Onmtgonpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 88 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171008 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343066 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. ce. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytom Apn flax IMSI DBMS Da MODEL 2150 03/14/20 14:27:18 1:57 192 Onstgonpho ne APPLE 'PEONES 2151 03/14/20 14:27:19 1:57 0 0 nactgonpho ne APPLE 'PEONES 2152 03/14/20 14:27:48 1:27 6262 6672 isms APPLE 'PEONES 2153 03/14/20 14:27:49 1:27 6672 5998 isms APPLE 'PHONES 2154 03/14/20 14:29:16 31:24 0 Onactgonpho ne APPLE 'PHONES 2155 03/14/20 14:29:18 10:23 8170 6962 isms APPLE 'PHONES 2156 03/14/20 14:39:41 60:00 3532 1340 isms APPLE 'PHONES 2157 03/14/20 15:00:39 0:35 192 Onactgonpho ne APPLE 'PHONES 2158 03/14/20 15:00:41 0:34 0 0 nxtgenpho ne APPLE 'PHONES 2159 03/14/20 15:01:15 0:44 0 0 nactgonpho ne APPLE 'PHONES 2160 03/14/20 15:01:20 0:39 8898 7086 isms APPLE 'PHONES 2161 03/14/20 15:01:59 0:59 192 Onactgonpho ne APPLE 'PHONES 2162 03/14/20 15:01:59 0:59 7134 6746 isms APPLE 'PHONES 2163 03/14/20 15:02:00 0:59 0 Onxtgonpho ne APPLE 'PHONES 2164 03/14/20 15:02:01 0:58 6746 6870 isms APPLE 'PHONES 2165 03/14/20 15:02:59 2:41 0 Onxtgonpho ne APPLE 'PHONES 2166 03/14/20 15:03:01 0:18 1690 6443 isms APPLE 'PHONES 2167 03/14/20 15:03:19 60:00 33670 22735 isms APPLE 'PHONES 2168 03/14/20 15:05:39 20:24 192 Onxtgonpho no APPLE 'PHONES 2169 03/14/20 15:05:40 20:24 0 0 nxtgonpho no APPLE 'PHONES 2170 03/14/20 15:26:04 4:38 0 0 nmtgonpho no APPLE !PHONES 2171 03/14/20 15:30:41 2:26 192 0 nmtgonpho no APPLE !PHONES 2172 03/14/20 15:30:43 2:25 0 0 nmtgonpho no APPLE !PHONES 2173 03/14/20 15:33:07 10:00 192 0 nmtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 89 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171009 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343067 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. ,1/4 \;wis AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn DMZ lent MAKE MODEL 2174 03/14/20 15:33:08 14:57 0 0 nactgonpho no APPLE 'PHONES 2175 03/14/20 15:39:23 0:22 0 30887 ims APPLE 'PHONES 2176 03/14/20 15:39:41 60:00 0 0 ims APPLE 'PHONES 2177 03/14/20 15:48:05 53:21 192 0 nactgonpho no APPLE 'PHONES 2178 03/14/20 15:48:06 53:21 0 0 nactgonpho no APPLE 'PHONES 2179 03/14/20 16:03:19 60:00 8512 3988 ims APPLE 'PHONES 2180 03/14/20 16:39:41 60:00 0 0 ims APPLE 'PHONES 2181 03/14/20 16:41:27 64:11 192 0 nactgonpho no APPLE 'PHONES 2182 03/14/20 16:41:28 60:00 0 0 nmtgonpho no APPLE 'PHONES 2183 03/14/20 17:03:19 60:00 7064 2880 ims APPLE 'PHONES 2184 03/14/20 17:39:41 60:00 0 0 ims APPLE 'PHONES 2185 03/14/20 17:41:28 4:11 0 0 nmtgonpho no APPLE 'PHONES 2186 03/14/20 17:45:39 40:01 192 0 nmtgonpho no APPLE 'PHONES 2187 03/14/20 17:45:40 40:01 0 0 nmtgonpho no APPLE 'PHONES 2188 03/14/20 18:03:19 60:00 7064 2772 ims APPLE 'PHONES 2189 03/14/20 18:25:41 2:43 0 0 nmtgonpho no APPLE 'PHONES 2190 03/14/20 18:28:23 8:21 192 0 nmtgonpho no APPLE 'PHONES 2191 03/14/20 18:28:24 8:21 0 0 nmtgonpho no APPLE 'PHONES 2192 03/14/20 18:36:45 1:40 0 0 nmtgonpho no APPLE 'PHONES 2193 03/14/20 18:38:24 108:33 192 0 nmtgonpho no APPLE 'PHONES 2194 03/14/20 18:38:25 60:00 0 0 nmtgonpho no APPLE 'PHONES 2195 03/14/20 18:39:41 2:22 0 0 ims APPLE 'PHONES 2196 03/14/20 19:03:19 60:00 17008 6092 ims APPLE 'PHONES 2197 03/14/20 19:38:25 48:33 0 0 nactgonpho no APPLE 'PHONES 2198 03/14/20 20:03:19 60:00 44644 28772 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 90 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171010 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343068 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. cee AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ZT Bytes Up Bytes Apn Dn ZIOLI INSI MAKE MODEL 2199 03/14/20 20:26:58 9:01 0 Onactgonpho no APPLE 'PHONES 2200 03/14/20 20:35:58 2:04 192 Onactgonpho no APPLE 'PHONES 2201 03/14/20 20:35:59 2:04 0 0 nxtgonpho no APPLE 'PHONES 2202 03/14/20 20:38:03 6:44 0 0 nxtgonpho no APPLE 'PHONES 2203 03/14/20 20:44:46 9:04 192 0 nxtgonpho no APPLE 'PHONES 2204 03/14/20 20:44:47 9:04 0 0 nxtgonpho no APPLE 'PHONES 2205 03/14/20 20:53:51 0:52 0 0 nxtgonpho no APPLE 'PHONES 2206 03/14/20 20:54:42 2:17 192 Onactgonpho no APPLE 'PHONES 2207 03/14/20 20:54:43 2:17 0 Onactgonpho no APPLE 'PHONES 2208 03/14/20 20:56:02 0:05 4279 12317 ims APPLE 'PHONES 2209 03/14/20 20:56:08 0:05 2482 11716 ims APPLE 'PHONES 2210 03/14/20 20:56:15 0:08 4618 14384 ims APPLE 'PHONES 2211 03/14/20 20:56:41 0:04 3092 10606 ims APPLE 'PHONES 2212 03/14/20 20:57:00 0:55 0 Onactgonpho no APPLE 'PHONES 2213 03/14/20 20:57:55 16:22 192 0 nxtgonpho no APPLE 'PHONES 2214 03/14/20 20:57:56 16:23 0 0 nxtgonpho no APPLE 'PHONES 2215 03/14/20 21:03:19 39:39 3532 3952 ims APPLE 'PHONES 2216 03/14/20 21:14:18 163:28 192 Onmtgonpho no APPLE 'PHONES 2217 03/14/20 21:14:19 60:00 0 0 nxtgenpho no APPLE 'PHONES 2218 03/14/20 21:38:59 22:35 7232 6866 ims APPLE 'PHONES 2219 03/14/20 21:39:00 22:35 6798 6968 ims APPLE 'PHONES 2220 03/14/20 21:58:06 3:29 8874 10570 ims 2221 03/14/20 22:01:34 3:23 7356 6800 ims APPLE 'PHONES 2222 03/14/20 22:01:35 3:23 6800 7004 ims APPLE 'PHONES 2223 03/14/20 22:04:21 0:37 4618 4712 ims 2224 03/14/20 22:04:56 13:03 7474 6796 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171011 The information contained here is for use by authorized persons only and is not for general distribution. Page 91 EFTA01343069 ---PAGE BREAK--- pm. MOBILITY 4Illo AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:88:88pm ...1/47:fis `"s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Siam Conn. Time (UTC) Originating Number BT Bytes Up Bytes Apn Dn EMI IMSI MARE MODEL 2225 03/14/20 22:04:57 13:03 6796 7210 ims APPLE 'PHONES 2226 03/14/20 22:08:30 0:39 5686 4904 ims 2227 03/14/20 22:11:41 8:46 6261 6676 ims APPLE 'PHONES 2228 03/14/20 22:11:43 8:45 6676 5997 ims APPLE 'PHONES 2229 03/14/20 22:14:19 60:00 0 0 nxtgonpho no APPLE 'PHONES 2230 03/14/20 22:18:29 4:24 10009 10506 ims 2231 03/14/20 22:20:27 31:59 6226 6672 ims APPLE 'PHONES 2232 03/14/20 22:20:27 32:00 6672 6070 ims APPLE 'PHONES 2233 03/14/20 22:22:53 32:36 24446 33790 ims 2234 03/14/20 22:52:25 65:21 6371 6672 ims APPLE 'PHONES 2235 03/14/20 22:52:26 60:00 6672 6107 ims APPLE 'PHONES 2236 03/14/20 22:55:29 60:00 32305 24638 ims 2237 03/14/20 23:14:19 43:28 0 Onxtgonpho no APPLE 'PHONES 2238 03/14/20 23:33:09 0:09 0 7031 ims 2239 03/14/20 23:52:26 5:21 0 0 ims APPLE 'PHONES 2240 03/14/20 23:55:29 35:09 4964 1804 ims 2241 03/14/20 23:57:47 0:34 0 0 nxtgonpho no APPLE 'PHONES 2242 03/14/20 23:58:20 8:13 192 0 nxtgonpho no APPLE 'PHONES 2243 03/14/20 23:58:21 8:13 0 0 nxtgonpho no APPLE 'PHONES 2244 03/15/20 00:06:35 4:30 0 0 nxtgonpho no APPLE 'PHONES 2245 03/15/20 00:11:04 34:40 192 0 nxtgenpho no APPLE 'PHONES 2246 03/15/20 00:11:05 34:40 0 0 nxtgenpho no APPLE 'PHONES 2247 03/15/20 00:28:17 17:27 6264 6676 ims APPLE 'PHONES 2248 03/15/20 00:28:18 17:27 6676 6108 ims APPLE 'PHONES 2249 03/15/20 00:30:39 10:18 9704 6134 ims 2250 03/15/20 00:40:57 60:00 22558 16428 ims 2251 03/15/20 00:45:44 1:24 192 Onxtgonpho no APPLE 'PHONES 2252 03/15/20 00:45:45 1:24 0 0 nxtgenpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171012 The information contained here is for use by authorized persons only and is not for general distribution. Page 92 EFTA01343070 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 1/44% AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Oa= Conn. Time (OTC) Originating Number ST Bytes Up Bytes Apn flat IMSI MAKS Dn MODEL 2253 03/15/20 00:47:09 21:54 192 0 nxtgonpho no APPIZ IPEOMEB 2254 03/15/20 00:47:10 21:54 0 0 nxtgonpho no APPIZ 'PROMS 2255 03/15/20 01:09:04 0:59 0 0 nxtgonpho no APPIZ 'PROMS 2256 03/15/20 01:10:02 58:23 192 0 nxtgenphe no APPIZ 'PROMS 2257 03/15/20 01:10:03 58:23 0 0 nxtgonpho no APPIZ 'PROMS 2258 03/15/20 01:40:57 60:00 10176 3252 ims 2259 03/15/20 02:08:26 6:18 0 0 nxtgonpho ne APPLE IPHCME8 2260 03/15/20 02:14:44 2:17 192 0 nxtgonpho no APPLE 'PEONES 2261 03/15/20 02:14:45 2:17 0 0 nxtgonpho no APPLE 'PHONES 2262 03/15/20 02:17:02 6:28 0 0 nxtgonpho no APPLE 'PHONES 2263 03/15/20 02:23:29 80:00 192 0 nxtgonphe ne APPLE 'PHONES 2264 03/15/20 02:23:30 60:00 0 0 nxtgonphe ne APPLE !PHONES 2265 03/15/20 02:40:57 60:00 7016 2540 ims 2266 03/15/20 03:23:30 60:00 0 0 nxtgonphe ne APPLE !PHONES 2267 03/15/20 03:40:57 60:00 6800 2756 ims 2268 03/15/20 04:23:30 60:00 0 0 nxtgonphe ne APPLE !PHONES 2269 03/15/20 04:40:57 60:00 16652 5952 ims 2270 03/15/20 05:23:30 60:00 0 0 nxtgonphe ne APPLE !PHONES 2271 03/15/20 05:40:57 60:00 3624 1448 ims 2272 03/15/20 06:18:55 60:00 19980 10414 ims 2273 03/15/20 06:23:30 0:02 0 0 nxtgonpho no APPLE 'PHONES 2274 03/15/20 06:40:57 60:00 0 0 ims 2275 03/15/20 07:18:55 60:00 6816 3004 ims 2276 03/15/20 07:40:57 60:00 0 0 ims 2277 03/15/20 08:18:55 60:00 8496 3144 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 93 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171013 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343071 ---PAGE BREAK--- 2278 03/15/20 08:40:57 2279 03/15/20 09:18:55 2280 03/15/20 09:37:51 2281 03/15/20 09:37:52 2282 03/15/20 09:40:57 2283 03/15/20 09:48:56 2284 03/15/20 10:05:07 2285 03/15/20 10:09:42 2286 03/15/20 10:48:56 2287 03/15/20 10:51:42 2288 03/15/20 10:51:43 2289 03/15/20 10:52:25 2290 03/15/20 11:05:07 2291 03/15/20 11:09:42 2292 03/15/20 11:19:54 2293 03/15/20 11:19:55 2294 03/15/20 11:34:33 2295 03/15/20 12:05:07 2296 03/15/20 12:09:42 2297 03/15/20 12:19:39 2298 03/15/20 12:19:40 2299 03/15/20 12:20:43 2300 03/15/20 12:21:18 2301 03/15/20 12:21:19 2302 03/15/20 12:21:20 111.020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Emma: Data Usage For: 06/17/2020 Item Conn. Conn. Originating EE Bytes Bytes Apn flat IMBI MAKE MODEL Date Time mane Up Dn (OTC/ 60:00 0 0 ims 50:48 7172 2944 ims 11:04 192 Onmtgonpho APPLE 'PHONES ne 11:04 0 Onmtgonpho APPLE 'PHONES ne 24:11 0 0 ims 60:00 0 Onmtgonpho APPLE 'PHONES ne 60:00 0 0 ims 60:00 18781 9775 isms 2:47 0 Onmtgonpho APPLE 'PHONES ne 0:42 192 Onmtgonpho APPLE 'PHONES ne 0:42 0 0 nxtgonpho APPLE 'PHONES ne 27:29 0 0 nxtgonpho APPLE 'PHONES no 60:00 0 0 isms 60:00 8480 2896 isms 14:38 192 Onmtgonpho APPLE 'PHONES ne 14:38 0 0 nxtgenpho APPLE 'PHONES ne 45:07 0 0 nxtgonpho APPLE 'PHONES ne 17:00 0 0 ims 10:37 3580 1852 ims 1:03 192 Onmtgonpho APPLE 'PHONES ne 1:03 0 0 nxtgenpho APPLE 'PHONES ne 0:36 0 0 nxtgonpho APPLE !PHONES ne 7:53 192 0 nxtgonpho APPLE !PHONES no 7:52 6229 6670 ims APPLE !PHONES 7:52 0 Onmtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171014 The information contained here is for use by authorized persons only and is not for general distribution. Page 94 EFTA01343072 ---PAGE BREAK--- MOBILITY 111.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Tame: Data Usage For: Item Conn. Date 06/17/2020 Si= Conn. Time (UTC) Originating KT Bytes Up Bytes Apn Dn 1101 late MODEL 2303 03/15/20 12:21:21 7:51 6670 6073 ims APPLE !PEONES 2304 03/15/20 12:22:07 14:05 10288 6713 ims 2305 03/15/20 12:29:12 2:10 0 Onstgenpho no APPLE !PEONES 2306 03/15/20 12:31:20 10:33 10716 12922 ims 2307 03/15/20 12:31:21 2:04 192 Onxtgonpho no APPLE !PEONES 2308 03/15/20 12:31:22 2:05 0 0 nxtgonpho no APPLE !PEONES 2309 03/15/20 12:33:26 1:09 0 0 nxtgonpho no APPLE !PEONES 2310 03/15/20 12:34:34 8:20 192 0 nxtgonpho ne APPLE 'PHONES 2311 03/15/20 12:34:35 8:20 0 0 nxtgonpho ne APPLE 'PHONES 2312 03/15/20 12:36:10 6:44 6246 6666 ims APPLE 'PHONES 2313 03/15/20 12:36:11 6:44 6666 5982 ims APPLE 'PHONES 2314 03/15/20 12:42:55 42:16 0 Onxtgonpho no APPLE 'PHONES 2315 03/15/20 12:42:57 42:14 9358 8200 ims APPLE 'PHONES 2316 03/15/20 13:25:11 14:44 0 Onxtgonpho ne APPLE 'PHONES 2317 03/15/20 13:25:13 1:31 6646 5899 isms APPLE 'PHONES 2318 03/15/20 13:26:44 0:21 11780 13060 isms APPLE 'PHONES 2319 03/15/20 13:35:22 10:29 1491 132 isms 2320 03/15/20 13:39:54 8:21 192 Onxtgonpho ne APPLE 'PHONES 2321 03/15/20 13:39:55 8:21 0 0 nxtgonpho ne APPLE 'PHONES 2322 03/15/20 13:40:00 8:15 8434 9028 ims APPLE 'PHONES 2323 03/15/20 13:40:01 8:15 8968 8170 ims APPLE 'PHONES 2324 03/15/20 13:46:03 60:00 16716 9893 ims 2325 03/15/20 13:48:16 4:58 0 Onxtgonpho ne APPLE 'PHONES 2326 03/15/20 13:53:13 2:14 192 0 nxtgonpho ne APPLE 'PHONES 2327 03/15/20 13:53:15 2:14 0 0 nxtgonpho ne APPLE 'PHONES 2328 03/15/20 13:55:29 43:50 0 0 nxtgonpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 95 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171015 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343073 ---PAGE BREAK--- 111.020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e t. AT&T Run Data: Run Tama: Data Usage For: Item Conn. Data 06/17/2020 Conn. Originating AT Time Number (OTC) Bytes Up Bytes Apn L@3 IMSI MAKE Dn MODEL 2329 03/15/20 14:37:06 1:42 6666 5959 ims APPLE 'PEONES 2330 03/15/20 14:38:48 60:00 12476 4360 ims APPLE 'PEONES 2331 03/15/20 14:39:18 21:07 192 Onstgonpho ne APPLE 'PEONES 2332 03/15/20 14:39:19 21:07 0 0 nxtgenpho ne APPLE 'PEONES 2333 03/15/20 14:46:03 60:00 0 0 ims 2334 03/15/20 15:00:26 22:52 0 0 nxtgenpho ne APPLE 'PEONES 2335 03/15/20 15:23:17 20:00 192 0 nxtgenpho ne APPLE 'PEONES 2336 03/15/20 15:23:18 21:30 0 0 nxtgenpho ne APPLE 'PEONES 2337 03/15/20 15:38:48 60:00 22664 10248 ims APPLE 'PHONES 2338 03/15/20 15:44:48 1:01 0 Onstgonpho ne APPLE 'PHONES 2339 03/15/20 15:45:48 1:32 192 0 nxtgenpho ne APPLE 'PHONES 2340 03/15/20 15:45:49 1:32 0 0 nxtgenpho ne APPLE 'PHONES 2341 03/15/20 15:46:02 0:14 0 6648 ims APPLE 'PHONES 2342 03/15/20 15:46:03 60:00 0 0 ims 2343 03/15/20 15:47:21 59:34 0 Onstgonpho ne APPLE 'PHONES 2344 03/15/20 16:38:48 36:33 3872 1572 ims APPLE 'PHONES 2345 03/15/20 16:46:03 24:31 0 0 ims 2346 03/15/20 16:46:54 172:16 192 Onstgonpho ne APPLE !PHONES 2347 03/15/20 16:46:55 60:00 0 0 nstgonpho no APPLE !PHONES 2348 03/15/20 17:10:33 0:10 440 144 ims APPLE 'PHONES 2349 03/15/20 17:10:34 0:10 144 0 ims APPLE 'PHONES 2350 03/15/20 17:10:46 22:56 7340 6794 ims APPLE 'PHONES 2351 03/15/20 17:10:46 22:57 6794 7076 ims APPLE 'PHONES 2352 03/15/20 17:15:21 18:56 8373 6012 ims 2353 03/15/20 17:33:42 125:28 13506 17240 ims APPLE !PHONES 2354 03/15/20 17:33:43 60:00 12048 10594 ims APPLE !PHONES 2355 03/15/20 17:34:18 10:22 0 0 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 96 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171016 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343074 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 1/44e. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Tame (UTC) Originating ET Number Bytes up Bytes Apn nizx IMSI MIMS on MODEL 2356 03/15/20 17:46:55 60:00 0 0 nxtgenpho ne APPLE 'PHONES 2357 03/15/20 18:33:43 60:00 5192 2648 ims APPLE 'PHONES 2358 03/15/20 18:46:55 52:16 0 0 nxtgenpho ne APPLE 'PHONES 2359 03/15/20 19:28:15 60:00 16707 8924 ims 2360 03/15/20 19:33:43 5:28 0 0 ims APPLE 'PHONES 2361 03/15/20 19:39:11 18:26 0 0 nxtgenpho ne APPLE 'PHONES 2362 03/15/20 19:57:36 2:09 192 0 nxtgenpho ne APPLE 'PHONES 2363 03/15/20 19:57:37 2:10 0 0 nxtgenpho ne APPLE 'PHONES 2364 03/15/20 19:59:47 14:14 0 0 nxtgenpho ne APPLE 'PHONES 2365 03/15/20 20:14:00 68:02 192 0 nxtgenphe ne APPLE 'PHONES 2366 03/15/20 20:14:01 60:00 0 0 nxtgenpho ne APPLE 'PHONES 2367 03/15/20 20:28:15 0:34 0 0 ims 2368 03/15/20 20:28:49 60:00 0 0 ims 2369 03/15/20 20:32:18 60:00 19964 9565 ims 2370 03/15/20 21:14:01 8:02 0 0 nxtgenpho ne APPLE 'PHONES 2371 03/15/20 21:22:03 6:02 0 0 nxtgenpho ne APPLE 'PHONES 2372 03/15/20 21:28:04 2:05 192 0 nxtgenphe ne APPLE 'PHONES 2373 03/15/20 21:28:06 2:04 0 0 nxtgenpho ne APPLE 'PHONES 2374 03/15/20 21:28:49 60:00 0 0 isms 2375 03/15/20 21:30:10 18:17 0 0 nxtgenpho ne APPLE 'PHONES 2376 03/15/20 21:32:18 60:00 7032 2680 isms 2377 03/15/20 21:48:27 42:37 192 0 nxtgenphe ne APPLE 'PHONES 2378 03/15/20 21:48:28 42:37 0 0 nxtgenpho ne APPLE 'PHONES 2379 03/15/20 22:28:49 60:00 0 0 isms AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171017 The information contained here is for use by authorized persons only and is not for general distribution. Page 97 EFTA01343075 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time MC/ Originating Mtivehn ET Bytes Up Bytes Apn Dn 73OLI INSI MAKE MODEL 2380 03/15/20 22:31:0 2:50 0 0 nxtgonpho ne APPLE 'PHONES 2381 03/15/20 22:32:1 60:00 8604 3052 isms 2382 03/15/20 22:33:5 8:19 192 0 nxtgonpho ne APPLE 'PHONES 2383 03/15/20 22:33:5 8:19 0 0 nxtgonpho ne APPLE 'PHONES 2384 03/15/20 22:42:1 60:00 0 0 nxtgonpho ne APPLE 'PHONES 2385 03/15/20 23:28:4 60:00 0 0 isms 2386 03/15/20 23:32:1 60:00 6924 2788 isms 2387 03/15/20 23:42:1 11:41 0 0 nxtgonpho ne APPLE 'PHONES 2388 03/15/20 23:53:5 0:37 192 0 nxtgonpho ne APPLE 'PHONES 2389 03/15/20 23:53:59 1 0:37 0 0 nxtgonpho ne APPLE 'PHONES 2390 03/15/20 23:54:34 2:37 288 0 nxtgonpho ne APPLE 'PHONES 2391 03/15/20 23:54:3 2:37 0 0 nxtgonpho ne APPLE 'PHONES 2392 03/15/20 23:57:1 1:22 0 0 nxtgonpho ne APPLE 'PHONES 2393 03/15/20 23:58:3 7:13 192 0 nxtgonpho ne APPLE 'PHONES 2394 03/15/20 23:58:3s 7:13 0 0 nxtgonpho ne APPLE 'PHONES 2395 03/16/20 00:05:4 2:43 192 0 nxtgonpho ne APPLE 'PHONES 2396 03/16/20 00:05:4 2:43 0 0 nxtgonpho ne APPLE 'PHONES 2397 03/16/20 00:08:2 1:58 0 0 nxtgenpho ne APPLE 'PHONES 2398 03/16/20 00:10:2 2:04 192 0 nxtgenpho ne APPLE 'PHONES 2399 03/16/20 00:10:2 2:03 0 0 nxtgenpho ne APPLE 'PHONES 2400 03/16/20 00:12:34 4:09 0 0 nxtgonpho ne APPLE 'PHONES 2401 03/16/20 00:16:4C 3:53 192 0 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 98 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171018 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343076 ---PAGE BREAK--- MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:57:52pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Dato: Run Tine: Data Usage for: Item Conn. Data 06/17/2020 Si= Conn. Originating Tiara (UTC) Elf Bytes Up Bytes Apn on DELI IMSI MS= MODEL 2402 03/16/20 00:16:41 3:53 0 0 nxtgonpho no APPLE IPSOMEB 2403 03/16/20 00:20:33 4:14 192 0 nxtgenpho no APPLE IDIOMS 2404 03/16/20 00:20:34 4:14 0 0 nxtgenpho no APPLE 'PROMO 2405 03/16/20 00:24:47 2:05 192 0 nxtgenpho no APPLE IDIOMS 2406 03/16/20 00:24:48 2:05 0 0 nxtgenpho no APPLE 'PROMO 2407 03/16/20 00:26:53 9:29 0 0 nxtgonpho no APPLE 'PROMO 2408 03/16/20 00:28:49 0:01 0 0 ims 2409 03/16/20 00:32:18 13:27 5088 2084 ims 2410 03/16/20 00:36:22 3:12 0 Onstgonpho no APPLE IDIOMS 2411 03/16/20 00:39:34 16:30 192 0 nxtgenpho no APPLE 'PHONES 2412 03/16/20 00:39:35 16:30 0 0 nxtgonpho no APPLE !PHONES 2413 03/16/20 00:51:49 3:35 13841 10953 ims 2414 03/16/20 00:55:27 25:51 20087 13330 ims 2415 03/16/20 00:56:05 3:43 0 Onstgonpho no APPLE !PHONES 2416 03/16/20 00:59:47 8:32 192 0 ructgonpho no APPLE !PHONES 2417 03/16/20 00:59:49 8:31 0 0 nxtgonpho no APPLE !PHONES 2418 03/16/20 01:08:20 3:17 0 0 nxtgonpho no APPLE !PHONES 2419 03/16/20 01:11:36 2:09 192 0 nxtgonpho no APPLE !PHONES 2420 03/16/20 01:11:37 2:09 0 0 nxtgonpho no APPLE !PHONES 2421 03/16/20 01:13:46 10:15 0 0 nxtgonpho no APPLE !PHONES 2422 03/16/20 01:22:33 60:00 19156 9476 ims 2423 03/16/20 01:24:01 19:07 192 Onstgonpho no APPLE !PHONES 2424 03/16/20 01:24:02 19:07 0 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 99 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171019 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343077 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:33:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ‘•-. 0° AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn DIET INSI MAKE MODEL 2425 03/16/20 01:43:09 22:23 0 0 nxtgonpho no APPLE 'PHONES 2426 03/16/20 02:05:31 2:05 192 0 nstgempho no APPLE 'PHONES 2427 03/16/20 02:05:33 2:04 0 0 nxtgonpho no APPLE 'PHONES 2428 03/16/20 02:07:37 1:08 0 0 nxtgonpho no APPLE 'PHONES 2429 03/16/20 02:08:44 2:04 192 0 nstgempho no APPLE 'PHONES 2430 03/16/20 02:08:45 2:04 0 0 nxtgonpho ne APPLE 'PHONES 2431 03/16/20 02:10:49 47:51 0 0 nxtgonpho ne APPLE 'PHONES 2432 03/16/20 02:22:33 60:00 8496 3036 ims 2433 03/16/20 02:58:39 11:57 192 °asty:mph* no APPLE 'PHONES 2434 03/16/20 02:58:40 11:57 0 0 astympho ne APPLE 'PHONES 2435 03/16/20 03:10:37 3:19 0 0 nxtgonpho no APPLE 'PHONES 2436 03/16/20 03:13:56 19:28 192 0 nstgempho no APPLE 'PHONES 2437 03/16/20 03:13:57 19:28 0 0 astympho ne APPLE 'PHONES 2438 03/16/20 03:22:33 60:00 7048 2804 ims 2439 03/16/20 03:33:25 11:15 0 0 nstgempho no APPLE 'PHONES 2440 03/16/20 03:44:39 5:34 192 0 astympho no APPLE 'PHONES 2441 03/16/20 03:44:40 5:34 0 0 nxtgenpho no APPLE 'PHONES 2442 03/16/20 03:50:14 2:57 0 0 nxtgonpho no APPLE 'PHONES 2443 03/16/20 03:53:10 93:54 192 0 nxtgonpho no APPLE 'PHONES 2444 03/16/20 03:53:11 60:00 0 0 nxtgonpho no APPLE 'PHONES 2445 03/16/20 04:22:33 60:00 8388 2928 ims 2446 03/16/20 04:53:11 33:54 0 0 nxtgonpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 100 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171020 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343078 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e • 1/4-00 AT&T Run Date: Run Timm: Data Usage For: Item Conn. Date 2447 03/16/20 2448 03/16/20 2449 03/16/20 2450 03/16/20 2451 03/16/20 2452 03/16/20 2453 03/16/20 2454 03/16/20 2455 03/16/20 2456 03/16/20 2457 03/16/20 2458 03/16/20 2459 03/16/20 2460 03/16/20 2461 03/16/20 2462 03/16/20 2463 03/16/20 2464 03/16/20 2465 03/16/20 2466 03/16/20 2467 03/16/20 2468 03/16/20 2469 03/16/20 2470 03/16/20 06/17/2020 Conn. Originating ET Bytes Bytes AP^ EMI INSI MAKE MODEL Time Number Up Dn (OTC) 05:22:33 60:00 11580 4160 ims 05:27:04 129:59 192 0nmtgonpho no APPLE 'PHONES 05:27:05 60:00 0 0 nwtgonpho ne APPLE 'PHONES 06:22:33 60:00 10624 4396 ims 06:27:05 60:00 0 0 ructgonpho ne APPLE 'PHONES 07:22:33 60:00 8388 2928 ims 07:27:05 9:59 0 0 nwtgonpho no APPLE 'PHONES 07:37:04 240:01 192 0 nwtgonpho ne APPLE 'PHONES 07:37:05 60:00 0 0 nwtgonpho ne APPLE 'PHONES 08:22:33 60:00 8388 3036 ims 08:37:05 60:00 0 0 nwtgonpho no APPLE 'PHONES 09:22:33 60:00 8388 2928 ims 09:37:05 60:00 0 0 ructgonpho ne APPLE 'PHONES 10:22:33 60:00 10564 4252 ims 10:37:05 60:00 0 0 ructgonpho ne APPLE 'PHONES 11:22:33 60:00 11796 4536 ims 11:37:05 0:01 0 0 ructgonpho no APPLE 'PHONES 11:37:14 61:22 192 0 ructgonpho no APPLE 'PHONES 11:37:15 60:00 0 0 ructgonpho no APPLE 'PHONES 12:22:33 60:00 8388 2928 ims 12:37:15 1:22 0 0 nwtgonpho no APPLE 'PHONES 12:38:37 11:24 0 0 nwtgonpho no APPLE 'PHONES 12:50:01 47:24 192 0 nwtgonpho no APPLE 'PHONES 12:50:02 47:24 0 0 nwtgonpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 101 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171021 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343079 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. cro AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn ffiI IMSI MAR MODEL 2471 03/16/20 13:22:33 60:00 8496 2928 ims 2472 03/16/20 13:37:26 12:23 0 Onmtgonpho ne APPLE 'PROMO 2473 03/16/20 13:49:48 2:05 192 0 nxtgenpho ne APPLE 'PROMO 2474 03/16/20 13:49:49 2:05 0 0 nxtgenpho ne APPLE 'PROMO 2475 03/16/20 13:51:54 7:21 0 0 nxtgenpho ne APPLE 'PROMO 2476 03/16/20 13:59:14 6:36 192 0 nxtgenpho ne APPLE 'PROMO 2477 03/16/20 13:59:15 6:36 0 0 nxtgenpho ne APPLE IPHOME8 2478 03/16/20 14:05:51 1:15 0 0 nxtgonpho no APPLE 'PHONES 2479 03/16/20 14:07:05 3:27 192 0 nxtgonpho no APPLE 'PHONES 2480 03/16/20 14:07:06 3:27 0 0 nxtgenpho ne APPLE 'PHONES 2481 03/16/20 14:10:33 2:06 0 0 nxtgonpho ne APPLE 'PHONES 2482 03/16/20 14:12:38 8:31 192 Onxtgonpho ne APPLE 'PHONES 2483 03/16/20 14:12:39 8:31 0 Onxtgonpho no APPLE 'PHONES 2484 03/16/20 14:21:10 4:53 0 0 nxtgenpho no APPLE 'PHONES 2485 03/16/20 14:22:33 60:00 8388 2928 ims 2486 03/16/20 14:26:02 20:41 192 0 nxtgonpho ne APPLE 'PHONES 2487 03/16/20 14:26:03 20:41 0 0 nxtgonpho no APPLE 'PHONES 2488 03/16/20 14:46:44 0:40 0 0 nxtgonpho no APPLE 'PHONES 2489 03/16/20 14:47:23 8:22 192 0 nxtgonpho no APPLE 'PHONES 2490 03/16/20 14:47:25 8:21 0 0 nxtgonpho no APPLE 'PHONES 2491 03/16/20 14:55:46 0:38 0 0 nxtgonpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 102 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171022 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343080 ---PAGE BREAK--- MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn =RI IMSI MAKE MODEL 2492 03/16/20 14:56:23 14:42 192 0 nxtgonpho ne APPLE 'PHONES 2493 03/16/20 14:56:24 14:42 0 0 nxtgonpho ne APPLE 'PHONES 2494 03/16/20 15:11:06 60:00 0 0 nxtgonpho ne APPLE 'PHONES 2495 03/16/20 15:22:33 60:00 15156 4872 isms 2496 03/16/20 16:11:06 18:59 0 0 nxtgonpho ne APPLE 'PHONES 2497 03/16/20 16:22:33 60:00 6940 2804 isms 2498 03/16/20 16:30:04 8:21 192 0 nxtgonpho ne APPLE 'PHONES 2499 03/16/20 16:30:05 8:21 0 0 nxtgonpho ne APPLE 'PHONES 2500 03/16/20 16:38:26 2:54 0 0 nxtgonpho ne APPLE 'PHONES 2501 03/16/20 16:41:20 2:03 192 0 nxtgonpho ne APPLE 'PHONES 2502 03/16/20 16:41:21 2:03 0 0 nxtgonpho ne APPLE 'PHONES 2503 03/16/20 16:43:24 10:32 0 0 nxtgonpho ne APPLE 'PHONES 2504 03/16/20 16:53:55 2:15 192 0 nxtgonpho ne APPLE 'PHONES 2505 03/16/20 16:53:56 2:15 0 0 nxtgonpho ne APPLE 'PHONES 2506 03/16/20 16:56:11 1:06 0 0 nxtgonpho ne APPLE 'PHONES 2507 03/16/20 16:57:16 4:52 192 0 nxtgonpho ne APPLE 'PHONES 2508 03/16/20 16:57:17 4:52 0 0 nxtgonpho ne APPLE 'PHONES 2509 03/16/20 17:02:09 0:33 0 0 nxtgonpho ne APPLE 'PHONES 2510 03/16/20 17:02:41 14:45 192 0 nxtgonpho ne APPLE 'PHONES 2511 03/16/20 17:02:42 14:45 0 0 nxtgonpho ne APPLE 'PHONES 2512 03/16/20 17:17:27 0:50 0 0 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 103 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171023 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343081 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:30:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn DMZ INSI HAKE 2513 03/16/20 17:18:16 53:17 192 0nmtgonpho no APPLE 2514 03/16/20 17:18:17 53:17 0 0nmtgonpho no APPLE 2515 03/16/20 17:22:33 60:00 12120 4660 ims 2516 03/16/20 18:11:34 2:55 0 0nmtgonpho no APPLE 2517 03/16/20 18:14:28 1:08 192 0nmtgonpho no APPLE 2518 03/16/20 18:14:29 1:08 0 0nmtgonpho no APPLE 2519 03/16/20 18:15:37 7:10 0 0nmtgonpho no APPLE 2520 03/16/20 18:22:33 60:00 8388 3712 ims 2521 03/16/20 18:22:46 204:00 192 0nmtgonpho no APPLE 2522 03/16/20 18:22:47 60:00 0 0nmtgonpho no APPLE 2523 03/16/20 19:22:33 60:00 15172 5888 ims 2524 03/16/20 19:22:47 60:00 0 0nmtgonpho no APPLE 2525 03/16/20 20:22:33 60:00 10068 3408 ims 2526 03/16/20 20:22:47 60:00 0 0nmtgonpho no APPLE 2527 03/16/20 21:22:33 39:47 13568 5136 ims 2528 03/16/20 21:22:47 24:00 0 0nmtgonpho no APPLE 2529 03/16/20 21:46:47 0:06 0 0nmtgonpho no APPLE 2530 03/16/20 21:47:15 40:04 192 0nmtgonpho no APPLE 2531 03/16/20 21:47:16 40:04 0 0nmtgonpho no APPLE 2532 03/16/20 22:09:00 18:19 7689 12910 ims APPLE 2533 03/16/20 22:09:01 18:19 12842 7533 ims APPLE 2534 03/16/20 22:09:17 0:01 0 0 ims 2535 03/16/20 22:10:19 23:51 10036 6592 ims 2536 03/16/20 22:27:20 0:35 0 0nmtgonpho no APPLE MODEL 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 104 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171024 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343082 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. cm. ‘•...a° AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn MAX INSI MAKE MODEL 2537 03/16/20 22:27:55 40:08 192 0nxtgonpho ne APPLE !PHONES 2538 03/16/20 22:27:56 40:08 0 0 nxtgenpho ne APPLE !PHONES 2539 03/16/20 22:31:07 36:56 7604 10041 ims APPLE !PHONES 2540 03/16/20 22:31:08 36:56 9952 7340 ims APPLE !PHONES 2541 03/16/20 23:08:04 0:41 0 0nxtgonpho ne APPLE !PHONES 2542 03/16/20 23:08:06 0:39 8822 7071 ims APPLE !PHONES 2543 03/16/20 23:08:44 8:33 192 0 nxtgenpho ne APPLE !PHONES 2544 03/16/20 23:08:45 8:32 7158 6748 ims APPLE !PHONES 2545 03/16/20 23:08:45 8:33 0 0 nxtgenpho ne APPLE !PHONES 2546 03/16/20 23:08:46 8:32 6748 6894 ims APPLE !PHONES 2547 03/16/20 23:17:18 0:49 0 0 nxtgenpho ne APPLE !PHONES 2548 03/16/20 23:17:20 0:47 12596 13562 ims APPLE !PHONES 2549 03/16/20 23:18:07 53:36 288 0 nxtgenpho ne APPLE !PHONES 2550 03/16/20 23:18:08 53:35 9000 11994 ims APPLE !PHONES 2551 03/16/20 23:18:08 53:36 0 0 nxtgenpho ne APPLE !PHONES 2552 03/16/20 23:18:09 53:35 11866 8736 ims APPLE !PHONES 2553 03/17/20 00:11:44 22:41 0 0 nxtgenpho ne APPLE !PHONES 2554 03/17/20 00:11:55 60:00 19480 9443 ims 2555 03/17/20 00:34:24 2:03 192 0 nxtgenpho ne APPLE !PHONES 2556 03/17/20 00:34:25 2:03 0 0 nxtgenpho ne APPLE !PHONES 2557 03/17/20 00:36:28 10:12 0 0 nxtgenpho ne APPLE !PHONES 2558 03/17/20 00:46:39 2:10 192 0 nxtgenpho ne APPLE !PHONES 2559 03/17/20 00:46:41 2:09 0 0 nxtgenpho ne APPLE !PHONES 2560 03/17/20 00:48:50 28:49 0 0 nxtgenpho ne APPLE !PHONES 2561 03/17/20 01:11:55 60:00 8388 2928 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 105 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171025 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343083 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. k..74 AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn DOLT IMSI MAKE MODEL 2562 03/17/20 01:17:39 27:32 192 0nstgonpho no APPLE 'PHONES 2563 03/17/20 01:17:40 27:32 0 0nstgonpho no APPLE 'PHONES 2564 03/17/20 01:45:12 1:07 0 0nstgonpho ne APPLE 'PHONES 2565 03/17/20 01:46:18 8:35 192 0nstgonpho no APPLE 'PHONES 2566 03/17/20 01:46:19 8:35 0 0nstgonpho no APPLE 'PHONES 2567 03/17/20 01:54:54 8:15 0 0nstgonpho no APPLE 'PHONES 2568 03/17/20 02:03:08 6:37 192 0nstgonpho no APPLE 'PHONES 2569 03/17/20 02:03:09 6:37 0 0nstgonpho no APPLE 'PHONES 2570 03/17/20 02:09:46 4:54 0 0nstgonpho no APPLE 'PHONES 2571 03/17/20 02:11:55 60:00 9928 3376 ims 2572 03/17/20 02:14:40 2:03 192 0nstgonpho ne APPLE 'PHONES 2573 03/17/20 02:14:41 2:03 0 0nstgonpho no APPLE 'PHONES 2574 03/17/20 02:16:44 0:34 0 0nstgonpho no APPLE 'PHONES 2575 03/17/20 02:17:17 2:18 192 0nstgonpho ne APPLE 'PHONES 2576 03/17/20 02:17:18 2:18 0 0nstgonpho ne APPLE 'PHONES 2577 03/17/20 02:19:35 3:07 192 0nstgonpho ne APPLE 'PHONES 2578 03/17/20 02:19:37 3:06 0 0nstgonpho ne APPLE 'PHONES 2579 03/17/20 02:22:43 9:31 0 0nstgonpho ne APPLE 'PHONES 2580 03/17/20 02:32:14 3:31 0 0nstgonpho no APPLE 'PHONES 2581 03/17/20 02:35:44 8:26 192 0nstgonpho no APPLE 'PHONES 2582 03/17/20 02:35:45 8:26 0 0nstgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 106 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171026 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343084 ---PAGE BREAK--- MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro ‘•-. 0. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Dunbar ET Bytes Up Bytes Apn Dn LESS IMBI MAKE MODEL 2583 03/17/20 02:44:11 4:18 0 0 nxtgonpho ne APPLE !PHONES 2584 03/17/20 02:48:29 0:44 0 0 nxtgonpho ne APPLE !PHONES 2585 03/17/20 02:49:13 34:19 192 0 nxtgonpho ne APPLE !PHONES 2586 03/17/20 02:49:14 34:19 0 0 nxtgonpho ne APPLE !PHONES 2587 03/17/20 03:11:55 15:38 3424 1340 ims 2588 03/17/20 03:23:33 17:56 0 0 nxtgonpho ne APPLE !PHONES 2589 03/17/20 03:28:08 0:26 6930 4178 ims APPLE !PHONES 2590 03/17/20 03:28:34 60:00 17131 11098 ims APPLE !PHONES 2591 03/17/20 03:41:28 27:16 192 0nxtgonpho ne APPLE !PHONES 2592 03/17/20 03:41:29 27:16 0 0 nxtgonpho ne APPLE !PHONES 2593 03/17/20 04:08:45 9:13 0 0 nxtgonpho ne APPLE !PHONES 2594 03/17/20 04:17:58 8:29 192 0 nxtgonpho ne APPLE !PHONES 2595 03/17/20 04:17:59 8:29 0 0 nxtgonpho ne APPLE !PHONES 2596 03/17/20 04:26:28 23:45 0 0 nxtgonpho ne APPLE !PHONES 2597 03/17/20 04:28:34 24:06 5072 1572 ims APPLE !PHONES 2598 03/17/20 04:50:12 55:06 192 0 nxtgonpho ne APPLE !PHONES 2599 03/17/20 04:50:13 60:00 0 0 nxtgonpho ne APPLE !PHONES 2600 03/17/20 04:54:18 60:00 15007 8738 ims 2601 03/17/20 05:50:13 60:00 0 0 nxtgonpho ne APPLE !PHONES 2602 03/17/20 05:54:18 3:03 0 0 ims 2603 03/17/20 06:05:16 1:38 0 0 ims 2604 03/17/20 06:09:29 14:57 8629 6424 ims 2605 03/17/20 06:35:42 11:59 8189 6016 ims 2606 03/17/20 06:50:13 60:00 0 0 nxtgonpho ne APPLE !PHONES 2607 03/17/20 06:53:34 11:08 8249 6072 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 107 customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171027 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343085 ---PAGE BREAK--- MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Tine: Data Usage For: Item Conn. Date 06/17/2020 MS= Conn. Tame (UTC) Originating Number ET Bytos Up Bytes Apn Dn MINT MPS 2608 03/17/20 07:06:33 1:38 0 0 ims 2609 03/17/20 07:10:15 11:07 9759 6207 ims 2610 03/17/20 07:26:34 0:07 0 0 ims 2611 03/17/20 07:31:09 3:34 8189 6046 ims 2612 03/17/20 07:42:29 60:00 15005 8986 ims 2613 03/17/20 07:50:13 60:00 0 Onxtgonphe ne APPLE 2614 03/17/20 08:42:29 60:00 6924 2680 ims 2615 03/17/20 08:50:13 0:02 0 0 nxtgonphe ne APPLE 2616 03/17/20 09:42:29 9:49 0 0 ims 2617 03/17/20 09:56:08 60:00 16577 9082 ims 2618 03/17/20 10:56:08 53:28 8496 2928 ims 2619 03/17/20 11:52:58 20:02 8351 6051 ims 2620 03/17/20 12:19:55 20:03 8361 5998 ims 2621 03/17/20 12:30:21 0:05 0 Onxtgonphe ne APPLE 2622 03/17/20 12:31:17 0:06 0 0 nxtgonphe ne APPLE 2623 03/17/20 12:31:29 60:00 0 0 nxtgonphe no APPLE 2624 03/17/20 12:42:30 13:58 9768 6196 ims 2625 03/17/20 13:03:49 59:58 19046 9302 ims 2626 03/17/20 13:31:29 60:00 0 0 nxtgonpho no APPLE 2627 03/17/20 14:14:13 60:00 19300 9472 ims 2628 03/17/20 14:31:29 11:04 0 0 nxtgonphe ne APPLE 2629 03/17/20 14:42:33 30:03 192 0 nxtgonphe ne APPLE 2630 03/17/20 14:42:34 30:03 0 0 nxtgonphe ne APPLE 2631 03/17/20 15:12:37 0:33 0 0 nxtgonphe ne APPLE 2632 03/17/20 15:13:09 2:14 192 0 nxtgonphe ne APPLE 2633 03/17/20 15:13:11 2:13 0 0 nxtgonphe ne APPLE 2634 03/17/20 15:14:13 60:00 8744 5976 ims AT&T Proprietary -fly. 'PEONES 'PEONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 108 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171028 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343086 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. e s, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn EMU IMSI NXEE Dn MODEL 2635 03/17/20 15:15:24 0:35 0 0 nxtgonpho no APPLE 'PHONES 2636 03/17/20 15:15:58 2:03 192 0 nxtgenpho no APPLE 'PHONES 2637 03/17/20 15:15:59 2:03 0 0 nxtgenpho no APPLE 'PHONES 2638 03/17/20 15:18:02 1:55 0 0 nxtgenpho no APPLE 'PHONES 2639 03/17/20 15:19:56 2:09 192 0 nxtgonpho no APPLE 'PHONES 2640 03/17/20 15:19:58 2:08 0 0 nxtgonpho no APPLE 'PHONES 2641 03/17/20 15:22:06 60:00 0 0 nxtgenpho no APPLE 'PHONES 2642 03/17/20 16:14:13 6:00 0 0 ims 2643 03/17/20 16:20:14 60:00 21092 10632 ims 2644 03/17/20 16:22:06 3:35 0 0 nxtgenpho ne APPLE 'PHONES 2645 03/17/20 16:25:40 20:42 192 0 nxtgonpho ne APPLE 'PHONES 2646 03/17/20 16:25:41 20:42 0 0 nxtgonpho ne APPLE 'PHONES 2647 03/17/20 16:46:23 4:40 0 0 nxtgonpho ne APPLE 'PHONES 2648 03/17/20 16:51:02 2:06 192 0 nxtgonpho ne APPLE 'PHONES 2649 03/17/20 16:51:04 2:05 0 0 nxtgonpho ne APPLE 'PHONES 2650 03/17/20 16:53:09 2:58 0 0 nxtgonpho ne APPLE 'PHONES 2651 03/17/20 16:56:06 31:00 192 0 nxtgonpho ne APPLE 'PHONES 2652 03/17/20 16:56:07 31:00 0 0 nxtgonpho ne APPLE 'PHONES 2653 03/17/20 17:20:14 60:00 9944 3408 ims 2654 03/17/20 17:27:07 51:24 0 0 nxtgenpho no APPLE 'PHONES 2655 03/17/20 18:18:30 155:32 192 0 nxtgenpho no APPLE 'PHONES 2656 03/17/20 18:18:31 60:00 0 0 nxtgenpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 109 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171029 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343087 ---PAGE BREAK--- MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 1/4-so AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating Time (OTC/ ET Bytes Up Bytes Apn Dn DOLT IMEI MAKE MODEL 2657 03/17/20 18:20:14 60:00 11516 4300 ims 2658 03/17/20 19:18:31 60:00 0 0 nxtgonpho ne APPLE 'PHONES 2659 03/17/20 19:20:14 55:38 12244 4408 ims 2660 03/17/20 20:15:28 38:34 7306 6810 ims APPLE 'PHONES 2661 03/17/20 20:15:28 38:35 6742 6954 ims APPLE 'PHONES 2662 03/17/20 20:15:51 60:00 20945 14596 ims 2663 03/17/20 20:18:31 35:32 0 0 nxtgonpho ne APPLE 'PHONES 2664 03/17/20 20:54:03 60:00 0 0 nxtgonpho ne APPLE 'PHONES 2665 03/17/20 21:15:51 60:00 8604 3052 ims 2666 03/17/20 21:54:03 4:43 0 0 nxtgonpho ne APPLE 'PHONES 2667 03/17/20 21:58:45 8:40 192 0 nxtgonpho ne APPLE 'PHONES 2668 03/17/20 21:58:46 8:40 0 0 nxtgonpho ne APPLE 'PHONES 2669 03/17/20 22:07:26 31:55 0 0 nxtgonpho ne APPLE 'PHONES 2670 03/17/20 22:15:51 60:00 10268 3424 ims 2671 03/17/20 22:39:20 2:10 192 0nxtgonpho ne APPLE 'PHONES 2672 03/17/20 22:39:21 2:10 0 0 nxtgonpho ne APPLE 'PHONES 2673 03/17/20 22:41:31 1:10 0 0 nxtgonpho ne APPLE 'PHONES 2674 03/17/20 22:42:41 68:13 192 0 nxtgonpho ne APPLE 'PHONES 2675 03/17/20 22:42:42 60:00 0 0 nxtgonpho ne APPLE 'PHONES 2676 03/17/20 23:15:51 60:00 11844 3624 ims 2677 03/17/20 23:42:42 8:13 0 0 nxtgonpho ne APPLE 'PHONES 2678 03/17/20 23:50:54 18:33 192 0nxtgonpho ne APPLE 'PHONES 2679 03/17/20 23:50:55 18:33 0 0 nxtgonpho ne APPLE 'PHONES 2680 03/18/20 00:09:28 8:46 0 0 nxtgonpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 110 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171030 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343088 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:30:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. e s, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Sidi= Conn. TIM* (OTC) Originating Number ET Bytos Up Bytes Apn Dn INKS INSI MAKE MODEL 2681 03/18/20 00:15:51 60:00 13804 6628 ism 2682 03/18/20 00:18:14 10:53 192 Onmtgonpho no APPLE 'PHONES 2683 03/18/20 00:18:14 10:54 0 0 nxtgenpho no APPLE 'PHONES 2684 03/18/20 00:29:08 56:10 0 0 nxtgenpho no APPLE 'PHONES 2685 03/18/20 01:15:51 60:00 10036 3176 ism 2686 03/18/20 01:25:18 21:55 192 0 nxtgenpho no APPLE 'PHONES 2687 03/18/20 01:25:19 21:55 0 0 nxtgenpho no APPLE 'PHONES 2688 03/16/20 01:47:13 19:14 192 0 nxtgenpho no APPLE 'PHONES 2689 03/18/20 01:47:14 19:14 0 0 nxtgenpho no APPLE 'PHONES 2690 03/18/20 02:06:28 60:00 0 0 nxtgenpho no APPLE 'PHONES 2691 03/18/20 02:15:51 60:00 10252 3300 ism 2692 03/18/20 03:06:28 6:23 0 0 nxtgenpho ne APPLE 'PHONES 2693 03/18/20 03:12:50 28:42 192 0 nxtgenpho ne APPLE 'PHONES 2694 03/18/20 03:12:51 28:42 0 0 nxtgenpho ne APPLE 'PHONES 2695 03/18/20 03:15:51 60:00 10380 4252 ims 2696 03/18/20 03:41:33 15:21 0 0 nxtgenpho ne APPLE 'PHONES 2697 03/18/20 03:56:54 0:05 0 0 nxtgenpho ne APPLE 'PHONES 2698 03/18/20 04:15:51 60:00 6848 2896 ims 2699 03/18/20 05:15:51 60:00 12028 4536 ims 2700 03/18/20 06:15:51 60:00 10272 4236 ims 2701 03/18/20 07:15:51 60:00 6956 2912 ims 2702 03/18/20 08:15:51 60:00 6956 2788 ims 2703 03/18/20 09:15:51 60:00 8496 3160 ims 2704 03/18/20 10:15:51 60:00 8604 3160 ims 2705 03/18/20 11:15:51 31:46 15236 6264 ims 2706 03/18/20 11:47:31 5:19 0 Onactgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 111 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171031 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343089 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. c o . AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Sidi= Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn 73OLI INS! MAR Mori. 2707 03/18/20 11:52:50 60:00 0 0 nmtgonpho no APPLE 'PEONES 2708 03/18/20 11:52:52 60:00 14426 11616 ims APPLE 'PEONES 2709 03/18/20 12:52:50 60:00 0 0 nmtgonpho no APPLE 'PEONES 2710 03/18/20 12:52:52 60:00 5408 2756 ims APPLE !PHONES 2711 03/18/20 13:52:50 36:19 0 0 nmtgonpho no APPLE !PHONES 2712 03/18/20 13:52:52 26:54 2596 1324 ims APPLE !PHONES 2713 03/18/20 14:19:46 3:57 3316 1324 ims APPLE !PHONES 2714 03/18/20 14:23:43 4:05 3952 1448 ims APPLE !PHONES 2715 03/18/20 14:27:48 60:00 8012 2772 ims APPLE !PHONES 2716 03/18/20 14:29:08 2:23 192 Onmtgonpho no APPLE !PHONES 2717 03/18/20 14:29:09 2:23 0 0 nmtgonpho no APPLE !PHONES 2718 03/18/20 14:31:31 3:00 192 0 nmtgonpho ne APPLE !PHONES 2719 03/18/20 14:31:33 2:59 0 0 nmtgonpho ne APPLE !PHONES 2720 03/18/20 14:34:31 52:23 0 0 nmtgonpho no APPLE !PHONES 2721 03/18/20 15:02:33 60:00 18492 9824 ims 2722 03/18/20 15:26:53 2:31 192 0 nmtgonpho no APPLE !PHONES 2723 03/16/20 15:26:54 2:31 0 0 nmtgonpho no APPLE !PHONES 2724 03/18/20 15:27:48 4:43 0 0 ims APPLE !PHONES 2725 03/18/20 15:29:25 43:06 0 0 nmtgonpho no APPLE !PHONES 2726 03/18/20 15:32:31 60:00 22853 16088 ims 2727 03/18/20 16:02:33 55:23 0 0 ims 2728 03/16/20 16:12:31 1:13 192 0 nmtgonpho no APPLE !PHONES 2729 03/18/20 16:12:32 1:13 0 0 nmtgonpho no APPLE !PHONES 2730 03/18/20 16:13:44 2:04 192 0 nmtgonpho no APPLE !PHONES 2731 03/18/20 16:13:46 2:03 0 0 nmtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 112 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171032 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343090 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e s, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Numbor ET Bytes Up Bytes Apn Dn DEM IMSI MAPS MODEL 2732 03/18/20 16:15:49 43:56 0 Onxtgonpho ne APPLE 'PEONES 2733 03/18/20 16:32:31 60:00 5072 1696 ims 2734 03/18/20 16:57:55 60:00 19408 10910 ims 2735 03/18/20 16:59:44 8:18 192 Onxtgonpho ne APPLE 'PEONES 2736 03/18/20 16:59:45 8:18 0 0 nxtgenphe ne APPLE 'PEONES 2737 03/18/20 17:08:03 49:11 0 0 nxtgenphe ne APPLE !PHONES 2738 03/18/20 17:32:31 29:42 0 0 ims 2739 03/18/20 17:57:13 6:34 192 0 nxtgenphe no APPLE 'PHONES 2740 03/18/20 17:57:14 6:34 0 0 nxtgenphe no APPLE 'PHONES 2741 03/18/20 17:57:55 4:18 0 0 ims 2742 03/18/20 18:02:11 1:36 6264 6820 ims APPLE 'PHONES 2743 03/18/20 18:02:13 1:35 6676 6000 ims APPLE 'PHONES 2744 03/18/20 18:03:04 60:00 18853 10233 ims 2745 03/18/20 18:03:48 3:10 0 0 nxtgenphe no APPLE 'PHONES 2746 03/18/20 18:06:57 9:07 192 0 nxtgenphe no APPLE 'PHONES 2747 03/18/20 18:06:59 9:06 0 0 nxtgenpho no APPLE 'PHONES 2748 03/16/20 18:16:05 2:18 0 0 ructgenpho no APPLE IPHONE8 2749 03/18/20 18:18:22 8:15 192 0 nxtgenphe no APPLE 'PHONES 2750 03/18/20 18:18:23 8:15 0 0 nxtgenphe no APPLE 'PHONES 2751 03/18/20 18:26:38 1:07 0 0 nxtgenphe ne APPLE IPHONE8 2752 03/18/20 18:27:44 2:03 192 0 nxtgenphe ne APPLE IPHONE8 2753 03/18/20 18:27:45 2:03 0 0 nxtgenphe ne APPLE IPHONE8 2754 03/18/20 18:29:48 21:07 0 0 nxtgenphe ne APPLE IPHONE8 2755 03/18/20 18:50:54 8:34 192 0 nxtgenphe ne APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 113 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171033 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343091 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:33:53pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ce• AT&T Run pato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn 73MLI INS' MAKE MODEL 2756 03/18/20 18:50:55 8:34 0 0 nxtgonpho no APPLE 'PHONES 2757 03/18/20 18:59:29 39:33 0 0 nxtgonpho no APPLE 'PHONES 2758 03/18/20 19:03:04 58:01 8048 3588 Las 2759 03/18/20 19:39:01 14:50 192 0 nxtgonpho no APPLE 'PHONES 2760 03/18/20 19:39:02 14:50 0 0 nxtgonpho no APPLE 'PHONES 2761 03/18/20 19:53:52 5:18 0 0 nxtgonpho no APPLE 'PHONES 2762 03/18/20 19:59:09 8:18 192 0 nxtgonpho no APPLE 'PHONES 2763 03/18/20 19:59:10 8:18 0 0 nxtgonpho no APPLE 'PHONES 2764 03/18/20 20:00:39 1:21 7096 6816 Las APPLE 'PHONES 2765 03/18/20 20:00:40 1:21 6748 6832 Las APPLE 'PHONES 2766 03/18/20 20:01:05 2:01 8095 5982 Las 2767 03/18/20 20:01:59 5:28 6334 6666 Las APPLE 'PHONES 2768 03/18/20 20:02:01 5:27 6666 6070 ism APPLE 'PHONES 2769 03/18/20 20:03:06 20:56 11686 8040 ism 2770 03/18/20 20:07:28 0:05 0 0 nxtgonpho no APPLE 'PHONES 2771 03/18/20 20:07:44 39:49 0 0 nxtgonpho no APPLE 'PHONES 2772 03/16/20 20:18:47 28:46 6666 5980 ism APPLE 'PHONES 2773 03/18/20 20:47:32 4:12 192 0 nxtgonpho no APPLE 'PHONES 2774 03/18/20 20:47:33 4:12 0 0 nxtgonpho no APPLE 'PHONES 2775 03/18/20 20:51:44 13:13 192 0 nxtgonpho ne APPLE 'PHONES 2776 03/18/20 20:51:45 13:13 0 0 nxtgonpho ne APPLE 'PHONES 2777 03/18/20 20:52:00 12:57 6336 6988 Las APPLE 'PHONES 2778 03/18/20 20:52:01 12:57 6864 6072 Las APPLE 'PHONES 2779 03/18/20 21:04:58 60:00 0 0 nxtgonpho no APPLE 'PHONES 2780 03/18/20 21:39:56 0:01 0 0 ism 2781 03/18/20 21:46:22 50:48 25152 16800 Las APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 114 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00171034 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343092 ---PAGE BREAK--- MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ‘•.. .e# AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn EBBE IM9I MAKE MODEL 2782 03/18/20 22:04:58 60:00 0 0 nxtgenpho no APPLE !PHONES 2783 03/18/20 22:37:10 60:00 15448 5088 ims APPLE !PHONES 2784 03/18/20 23:04:58 40:02 0 Onmtgonpho no APPLE !PHONES 2785 03/18/20 23:37:10 30:08 5072 1572 ims APPLE !PHONES 2786 03/18/20 23:44:59 19:47 192 Onmtgonpho no APPLE !PHONES 2787 03/18/20 23:45:00 19:47 0 0 nxtgonpho no APPLE !PHONES 2788 03/19/20 00:04:47 1:21 0 0 nxtgonpho no APPLE !PHONES 2789 03/19/20 00:06:07 8:21 192 0 nxtgonpho no APPLE !PHONES 2790 03/19/20 00:06:08 8:21 0 0 nxtgonpho no APPLE !PHONES 2791 03/19/20 00:06:19 8:09 7226 6814 ims APPLE !PHONES 2792 03/19/20 00:06:20 8:09 6746 6962 ims APPLE !PHONES 2793 03/19/20 00:07:18 15:11 9894 8570 ims 2794 03/19/20 00:14:29 6:44 0 Onmtgonpho no APPLE !PHONES 2795 03/19/20 00:21:12 8:04 192 0 nxtgonpho no APPLE !PHONES 2796 03/19/20 00:21:13 8:04 0 0 nxtgonpho no APPLE !PHONES 2797 03/19/20 00:22:27 1:34 6263 6744 ims APPLE !PHONES 2798 03/19/20 00:22:29 1:33 6676 5999 ims APPLE !PHONES 2799 03/19/20 00:24:02 17:34 8528 6160 ims APPLE !PHONES 2800 03/19/20 00:29:17 2:55 0 0 nxtgonpho no APPLE !PHONES 2801 03/19/20 00:32:12 6:23 192 0 nxtgonpho no APPLE !PHONES 2802 03/19/20 00:32:13 6:23 0 0 nxtgonpho no APPLE !PHONES 2803 03/19/20 00:38:36 3:08 0 0 nxtgonpho no APPLE !PHONES 2804 03/19/20 00:41:43 2:03 192 0 nxtgonpho no APPLE !PHONES 2805 03/19/20 00:41:44 2:02 6225 6672 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 115 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171035 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343093 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. dro ••-•ss AT&T Run Date: Run Tine: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Tame Number (OTC) Bytos Up Bytes Apn Dn DMZ INSI HAKE MODEL 2806 03/19/20 00:41:44 2:03 0 0 nmtgonphe no APPLE 'PHONES 2807 03/19/20 00:41:45 2:02 6672 5961 ims APPLE 'PHONES 2808 03/19/20 00:43:47 3:06 0 0 nmtgonphe no APPLE 'PHONES 2809 03/19/20 00:43:49 1:05 6692 6000 ims APPLE 'PHONES 2810 03/19/20 00:44:54 0:20 3872 1572 ims APPLE 'PHONES 2811 03/19/20 00:45:14 1:39 2644 1324 ims APPLE 'PHONES 2812 03/19/20 00:46:52 19:04 192 0nmtgonpho no APPLE 'PHONES 2813 03/19/20 00:46:53 19:04 0 0 nmtgonphe no APPLE 'PHONES 2814 03/19/20 00:46:54 19:02 6351 6674 ims APPLE 'PHONES 2815 03/19/20 00:46:55 19:02 6674 6087 ims APPLE 'PHONES 2816 03/19/20 00:47:12 60:00 20306 9690 ims 2817 03/19/20 01:05:57 7:41 0 0nmtgonpho no APPLE 'PHONES 2818 03/19/20 01:13:37 2:15 192 0 nmtgonpho no APPLE 'PHONES 2819 03/19/20 01:13:38 2:15 0 0 nmtgonpho no APPLE 'PHONES 2820 03/19/20 01:15:53 2:58 0 0 nmtgonpho no APPLE 'PHONES 2821 03/19/20 01:18:50 2:14 192 0 nmtgonpho no APPLE 'PHONES 2822 03/19/20 01:18:51 2:14 0 0 nmtgonpho no APPLE 'PHONES 2823 03/19/20 01:21:05 0:47 0 0 nmtgonphe no APPLE 'PHONES 2824 03/19/20 01:21:51 8:14 192 0 nmtgonphe no APPLE 'PHONES 2825 03/19/20 01:21:52 8:14 0 0 nmtgonphe no APPLE 'PHONES 2826 03/19/20 01:30:06 5:35 0 0 nmtgonphe no APPLE 'PHONES 2827 03/19/20 01:35:40 14:38 192 0 nmtgonphe no APPLE 'PHONES 2828 03/19/20 01:35:41 14:38 0 0 nmtgonphe no APPLE 'PHONES 2829 03/19/20 01:47:12 60:00 7064 2880 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 116 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171036 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343094 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. c r. ‘*-00 AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. T11011 lint/ Originating Number ET Bytes Up Bytes Apn Dn 73@I IM9I MAKE MODEL 2830 03/19/20 01:50:19 2:48 0 0 nmtgonpho ne APPLE !PHONES 2831 03/19/20 01:53:06 2:10 192 0 nmtgonpho ne APPLE !PHONES 2832 03/19/20 01:53:07 2:10 0 0 nmtgonpho ne APPLE !PHONES 2833 03/19/20 01:55:17 3:05 0 0 nmtgonpho ne APPLE !PHONES 2834 03/19/20 01:58:21 2:05 192 0 nmtgonpho ne APPLE !PHONES 2835 03/19/20 01:58:23 2:04 0 0 nmtgonpho ne APPLE !PHONES 2836 03/19/20 02:00:27 4:49 0 0 nmtgonpho ne APPLE !PHONES 2837 03/19/20 02:05:15 18:26 192 0 nmtgonpho ne APPLE !PHONES 2838 03/19/20 02:05:16 18:26 0 0 nmtgonpho ne APPLE !PHONES 2839 03/19/20 02:23:41 7:51 192 0 nmtgonpho ne APPLE !PHONES 2840 03/19/20 02:23:42 7:51 0 0 nmtgonpho no APPLE !PHONES 2841 03/19/20 02:31:33 8:23 192 0 nmtgonpho no APPLE !PHONES 2842 03/19/20 02:31:34 8:23 0 0 nmtgonpho no APPLE !PHONES 2843 03/19/20 02:39:56 6:12 192 0 nmtgonpho no APPLE !PHONES 2844 03/19/20 02:39:57 6:12 0 0 nmtgonpho ne APPLE !PHONES 2845 03/19/20 02:46:09 12:23 0 0 nmtgonpho ne APPLE !PHONES 2846 03/19/20 02:47:12 60:00 8388 2896 ims 2847 03/19/20 02:58:31 2:11 192 0 nmtgonpho ne APPLE !PHONES 2848 03/19/20 02:58:32 2:11 0 0 nmtgonpho ne APPLE !PHONES 2849 03/19/20 03:00:43 0:34 0 0 nmtgonpho ne APPLE !PHONES 2850 03/19/20 03:01:16 40:00 192 0 nmtgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 117 customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171037 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343095 ---PAGE BREAK--- MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. dro AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Sidi= Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn IMBI IBBI MAKZ MODEL 2851 03/19/20 03:01:17 52:53 0 0 nxtgenpho ne APPLE 'PEONES 2852 03/19/20 03:47:12 60:00 11596 4004 ims 2853 03/19/20 03:54:10 2:09 192 0 nxtgenpho ne APPLE 'PEONES 2854 03/19/20 03:54:11 2:09 0 0 nxtgenpho ne APPLE !PHONES 2855 03/19/20 03:56:20 0:34 0 0 nxtgenpho ne APPLE 'PHONES 2856 03/19/20 03:56:53 8:33 192 0 nxtgenpho ne APPLE 'PHONES 2857 03/19/20 03:56:54 8:33 0 0 nxtgenpho ne APPLE 'PHONES 2858 03/19/20 04:05:26 8:32 192 0 nxtgenpho ne APPLE 'PHONES 2859 03/19/20 04:05:28 8:31 0 0 nxtgenpho ne APPLE 'PHONES 2860 03/19/20 04:13:59 19:14 0 0 nxtgenpho ne APPLE 'PHONES 2861 03/19/20 04:33:12 14:52 192 0 nxtgenpho ne APPLE 'PHONES 2862 03/19/20 04:33:13 14:52 0 0 nxtgenpho ne APPLE 'PHONES 2863 03/19/20 04:47:12 60:00 8604 3112 ims 2864 03/19/20 04:48:05 1:29 0 0 nxtgenpho ne APPLE !PHONES 2865 03/19/20 04:49:34 21:18 192 0 nxtgenpho ne APPLE !PHONES 2866 03/19/20 04:49:34 21:19 0 0 nxtgenpho ne APPLE !PHONES 2867 03/19/20 05:10:52 27:29 192 0 nxtgenpho ne APPLE !PHONES 2868 03/19/20 05:10:53 27:29 0 0 nxtgenpho ne APPLE !PHONES 2869 03/19/20 05:38:22 0:34 0 0 nxtgenpho ne APPLE !PHONES 2870 03/19/20 05:38:55 72:10 192 0 nxtgenpho ne APPLE !PHONES 2871 03/19/20 05:38:56 60:00 0 0 nxtgenpho ne APPLE !PHONES 2872 03/19/20 05:47:12 36:19 6848 2932 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 118 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171038 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343096 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ce. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn L@I IISI MDME MODEL 2873 03/19/20 06:24:17 26:48 6246 6666 ims APPLE 'PEONES 2874 03/19/20 06:24:18 26:48 6666 5982 ims APPLE 'PEONES 2875 03/19/20 06:38:56 12:10 0 0 ructgonpho ne APPLE 'PEONES 2876 03/19/20 06:51:06 0:51 0 0 ructgonpho ne APPLE 'PEONES 2877 03/19/20 06:51:56 21:18 192 0 ructgonpho no APPLE 'PEONES 2878 03/19/20 06:51:57 21:18 0 0 ructgonpho no APPLE 'PEONES 2879 03/19/20 06:56:36 60:00 16703 9200 ims 2880 03/19/20 07:13:15 8:39 192 0 ructgonpho ne APPLE 'PHONES 2881 03/19/20 07:13:16 8:39 0 0 nxtgonpho ne APPLE !PHONES 2882 03/19/20 07:21:55 46:41 192 0 nxtgonpho ne APPLE !PHONES 2883 03/19/20 07:21:56 46:41 0 0 nxtgonpho no APPLE !PHONES 2884 03/19/20 07:56:36 60:00 6972 2664 ims 2885 03/19/20 08:08:36 21:07 192 0 'mtg.:mph* no APPLE !PHONES 2886 03/19/20 08:08:37 21:07 0 0 nxtgonpho ne APPLE !PHONES 2887 03/19/20 08:29:44 0:36 0 0 nxtgonpho ne APPLE !PHONES 2888 03/19/20 08:30:19 40:22 192 0 nxtgonpho ne APPLE !PHONES 2889 03/19/20 08:30:20 40:22 0 0 nxtgonpho no APPLE !PHONES 2890 03/19/20 08:56:36 60:00 10236 3360 ims 2891 03/19/20 09:10:42 14:55 192 0 nxtgonpho ne APPLE !PHONES 2892 03/19/20 09:10:43 14:55 0 0 nxtgonpho no APPLE !PHONES 2893 03/19/20 09:25:37 33:55 192 0 ructgonpho no APPLE !PHONES 2894 03/19/20 09:25:38 33:55 0 0 ructgonpho no APPLE !PHONES 2895 03/19/20 09:56:36 60:00 9928 3252 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 119 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171039 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343097 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cee AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (UTC) Bytos Up Bytes Apn Dn ENE! INSI MAKE MODEL 2896 03/19/20 09:59:33 0:38 0 0 nxtgenpho ne APPLE 'PHONES 2897 03/19/20 10:00:10 2:49 192 0 nxtgenpho ne APPLE 'PHONES 2898 03/19/20 10:00:11 2:49 0 0 nxtgenpho ne APPLE 'PHONES 2899 03/19/20 10:03:00 0:33 0 0 nxtgenpho ne APPLE 'PHONES 2900 03/19/20 10:03:32 28:46 192 0 nxtgenpho ne APPLE 'PHONES 2901 03/19/20 10:03:33 28:46 0 0 nxtgenpho ne APPLE 'PHONES 2902 03/19/20 10:32:19 55:25 0 0 nxtgenpho ne APPLE 'PHONES 2903 03/19/20 10:56:36 60:00 8264 2772 ims 2904 03/19/20 11:27:43 31:53 192 0 nxtgenpho ne APPLE 'PHONES 2905 03/19/20 11:27:44 31:53 0 0 nxtgenpho ne APPLE 'PHONES 2906 03/19/20 11:56:36 60:00 13568 4752 ims 2907 03/19/20 11:59:37 11:37 192 0 nxtgenpho ne APPLE 'PHONES 2908 03/19/20 11:59:38 11:37 0 0 nxtgenpho ne APPLE 'PHONES 2909 03/19/20 12:11:15 8:01 0 0 nxtgenpho ne APPLE 'PHONES 2910 03/19/20 12:19:15 15:40 192 0 nxtgenpho ne APPLE 'PHONES 2911 03/19/20 12:19:16 15:40 0 0 nxtgenpho ne APPLE 'PHONES 2912 03/19/20 12:34:55 60:00 0 0 nxtgenpho ne APPLE 'PHONES 2913 03/19/20 12:47:26 60:00 18813 9516 ims 2914 03/19/20 12:56:36 60:00 0 0 ims 2915 03/19/20 13:34:55 60:00 0 0 nxtgenpho ne APPLE 'PHONES 2916 03/19/20 13:47:26 60:00 8372 3036 ims 2917 03/19/20 13:56:36 60:00 0 0 ims 2918 03/19/20 14:34:55 32:28 0 0 nxtgenpho ne APPLE 'PHONES 2919 03/19/20 14:47:26 60:00 4748 2248 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 120 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171040 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343098 ---PAGE BREAK--- pu020 MOBILITY 41111, AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm trs `s -a. AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Tine: Data Usage For: Item Conn. Date 06/17/2020 SS= Conn. Originating Time Number (OTC) ET Bytes Up Bytes Apn Dn flat IMSI MAKE MODEL 2920 03/19/20 14:56:36 4:16 0 0 ims 2921 03/19/20 15:00:52 60:00 19541 11190 ims 2922 03/19/20 15:07:22 2:06 192 Onxtgonpho ne APPLE 'PHONES 2923 03/19/20 15:07:23 2:06 0 Onxtgonpho ne APPLE 'PHONES 2924 03/19/20 15:09:29 2:19 0 Onxtgonpho ne APPLE 'PHONES 2925 03/19/20 15:11:48 2:02 192 Onxtgonpho ne APPLE 'PHONES 2926 03/19/20 15:11:49 2:03 0 Onxtgonpho ne APPLE 'PHONES 2927 03/19/20 15:13:52 1:14 0 0 nxtgonpho ne APPLE 'PHONES 2928 03/19/20 15:15:05 1:56 192 0 nxtgonpho ne APPLE 'PHONES 2929 03/19/20 15:15:06 1:56 0 0 nxtgonpho ne APPLE 'PHONES 2930 03/19/20 15:17:02 4:44 0 0 nxtgonpho ne APPLE 'PHONES 2931 03/19/20 15:21:45 20:00 192 0 nxtgonpho ne APPLE 'PHONES 2932 03/19/20 15:21:46 35:07 0 0 nxtgonpho ne APPLE 'PHONES 2933 03/19/20 15:47:26 60:00 0 0 ims 2934 03/19/20 15:56:53 0:34 0 Onxtgonpho ne APPLE 'PHONES 2935 03/19/20 15:57:27 38:59 192 0 nxtgonpho ne APPLE 'PHONES 2936 03/19/20 15:57:27 39:00 0 0 nxtgonpho ne APPLE 'PHONES 2937 03/19/20 16:00:52 60:00 15244 12636 isms 2938 03/19/20 16:29:56 0:40 1857 0 isms 2939 03/19/20 16:36:27 12:41 0 Onxtgonpho ne APPLE 'PHONES 2940 03/19/20 16:47:26 23:01 0 0 ims 2941 03/19/20 16:49:07 2:21 192 Onxtgonpho ne APPLE 'PHONES 2942 03/19/20 16:49:09 2:20 0 0 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 121 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171041 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343099 ---PAGE BREAK--- MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. cro AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn EMU IMSI MAKE MODEL 2943 03/19/20 16:51:29 0:42 0 0 nxtgenpho ne APPLE 'PEONES 2944 03/19/20 16:52:10 2:41 192 Onxtgonpho ne APPLE 'PEONES 2945 03/19/20 16:52:11 2:41 0 0 nxtgenpho ne APPLE 'PEONES 2946 03/19/20 16:54:52 2:22 192 0 nxtgonpho ne APPLE 'PEONES 2947 03/19/20 16:54:53 2:22 0 0 nxtgenpho ne APPLE 'PEONES 2948 03/19/20 16:57:15 41:17 0 Onxtgonpho ne APPLE 'PEONES 2949 03/19/20 17:00:52 14:42 4840 2680 ims 2950 03/19/20 17:10:27 43:09 15853 12072 ims 2951 03/19/20 17:38:32 17:57 192 Onxtgonpho ne APPLE 'PHONES 2952 03/19/20 17:38:33 17:57 0 Onxtgonpho ne APPLE IPHONE8 2953 03/19/20 17:53:12 3:17 7220 6844 ims APPLE 'PHONES 2954 03/19/20 17:53:13 3:17 6736 6956 ims APPLE 'PHONES 2955 03/19/20 17:53:36 60:00 11309 6742 ims 2956 03/19/20 17:56:30 8:45 0 Onxtgonpho ne APPLE 'PHONES 2957 03/19/20 18:05:14 2:18 192 0 nxtgonpho ne APPLE 'PHONES 2958 03/19/20 18:05:16 2:17 0 0 nxtgonpho ne APPLE 'PHONES 2959 03/19/20 18:07:11 0:21 6244 6674 ims APPLE 'PHONES 2960 03/19/20 18:07:12 0:21 6674 5980 ims APPLE 'PHONES 2961 03/19/20 18:07:33 1:34 0 0 nxtgenpho ne APPLE 'PHONES 2962 03/19/20 18:07:34 0:01 0 0 ims APPLE 'PHONES 2963 03/19/20 18:07:42 0:40 6672 5964 isms APPLE 'PHONES 2964 03/19/20 18:08:22 60:00 13768 4700 isms APPLE 'PHONES 2965 03/19/20 18:09:06 5:51 192 Onxtgonpho ne APPLE 'PHONES 2966 03/19/20 18:09:07 5:51 0 Onxtgonpho ne APPLE 'PHONES 2967 03/19/20 18:14:58 0:32 0 0 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 122 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171042 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343100 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cto AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn SUSI INSI NA= MODEL 2968 03/19/20 18:15:29 81:06 192 Onxtgonpho ne APPLE IPHONE8 2969 03/19/20 18:15:30 60:00 0 0 nxtgenpho ne APPLE !PHONES 2970 03/19/20 18:53:36 54:41 0 0 ims 2971 03/19/20 19:08:22 45:19 13716 7424 ims APPLE !PHONES 2972 03/19/20 19:15:30 21:06 0 0 nxtgenpho ne APPLE !PHONES 2973 03/19/20 19:26:32 0:19 0 520 ims APPLE !PHONES 2974 03/19/20 19:36:36 5:02 0 0 nxtgenpho ne APPLE !PHONES 2975 03/19/20 19:41:37 2:10 192 0 nxtgenpho ne APPLE !PHONES 2976 03/19/20 19:41:38 2:10 0 0 nxtgenpho ne APPLE !PHONES 2977 03/19/20 19:43:48 2:12 0 0 nxtgenpho ne APPLE !PHONES 2978 03/19/20 19:45:59 2:09 192 0 nxtgenpho ne APPLE !PHONES 2979 03/19/20 19:46:00 2:09 0 0 nxtgenpho ne APPLE !PHONES 2980 03/19/20 19:48:09 40:37 0 0 nxtgenpho ne APPLE !PHONES 2981 03/19/20 19:48:16 0:01 0 0 ims APPLE !PHONES 2982 03/19/20 19:48:30 0:04 48 0 ims APPLE !PHONES 2983 03/19/20 19:54:35 60:00 26556 11232 ims 2984 03/19/20 20:28:45 8:30 192 Onxtgonpho ne APPLE !PHONES 2985 03/19/20 20:28:46 8:30 0 0 nxtgenpho ne APPLE !PHONES 2986 03/19/20 20:37:16 6:10 0 0 nxtgenpho ne APPLE !PHONES 2987 03/19/20 20:43:26 8:26 192 0 nxtgenpho ne APPLE !PHONES 2988 03/19/20 20:43:27 8:26 0 0 nxtgonpho no APPLE !PHONES 2989 03/19/20 20:51:53 39:04 0 0 nxtgonpho no APPLE !PHONES 2990 03/19/20 20:54:35 47:17 3424 1340 ims 2991 03/19/20 21:30:57 61:25 192 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 123 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171043 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343101 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. de o AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating CT Time Number (OTC) Bytes Up Bytes Apn Dn MINT TWIT la= MODEL. 2992 03/19/20 21:30:58 60:00 0 0 nactgonpho ne APPLE 'PEONES 2993 03/19/20 21:51:45 40:37 8164 6868 imn APPLE 'PEONES 2994 03/19/20 21:51:46 40:37 6868 8008 imn APPLE 'PEONES 2995 03/19/20 21:52:05 9:49 10815 8812 imn 2996 03/19/20 22:01:54 30:28 9700 10530 imn APPLE 'PEONES 2997 03/19/20 22:01:55 30:28 10530 9436 imn APPLE 'PEONES 2998 03/19/20 22:30:58 1:25 0 Onactgonpho ne APPLE 'PEONES 2999 03/19/20 22:32:23 1:26 0 0 nactgonpho ne APPLE 'PEONES 3000 03/19/20 22:33:48 8:41 192 0 nactgonpho ne APPLE 'PEONES 3001 03/19/20 22:33:49 8:41 0 0 nactgonpho ne APPLE 'PHONES 3002 03/19/20 22:36:21 60:00 21342 12618 imn 3003 03/19/20 22:42:30 0:05 0 0 nmtgonpho no APPLE !PHONES 3004 03/19/20 22:42:59 37:24 192 0 nmtgonpho no APPLE !PHONES 3005 03/19/20 22:43:00 37:24 0 0 nmtgonpho no APPLE !PHONES 3006 03/19/20 23:20:24 8:28 0 0 nottgonpho no APPLE 'PHONED 3007 03/19/20 23:28:52 43:12 192 Onmtgonpho ne APPLE IPEOME8 3008 03/19/20 23:28:53 43:12 0 0 nactgonpho ne APPLE IPBONE8 3009 03/19/20 23:36:21 60:00 8496 3020 imn 3010 03/20/20 00:12:05 17:27 0 0 nottgonpho ne APPLE IPBONE8 3011 03/20/20 00:29:32 11:20 192 0 nottgonpho ne APPLE 'PHONED 3012 03/20/20 00:29:33 11:20 0 0 nottgonpho ne APPLE 'PHONED 3013 03/20/20 00:36:21 60:00 8728 3128 imn 3014 03/20/20 00:40:53 4:32 0 0 nactgonpho ne APPLE 'PHONED 3015 03/20/20 00:45:24 2:11 192 0 nactgonpho ne APPLE 'PHONED AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 124 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SONYGAt 00171044 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343102 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn INKS IMSI MAKE MODEL 3016 03/20/20 00:45:25 2:11 0 0nxtgonpho no APPLE !PHONES 3017 03/20/20 00:47:36 0:39 0 0 nxtgonpho no APPLE 'PHONES 3018 03/20/20 00:48:15 8:45 192 0 nxtgonpho no APPLE 'PHONES 3019 03/20/20 00:48:16 8:45 0 0 nxtgonpho no APPLE 'PHONES 3020 03/20/20 00:57:01 1:40 0 0 nxtgonpho ne APPLE 'PHONES 3021 03/20/20 00:58:40 2:03 192 0 nxtgonpho no APPLE 'PHONES 3022 03/20/20 00:58:41 2:03 0 0 nxtgenpho no APPLE 'PHONES 3023 03/20/20 01:00:44 14:40 0 0 nxtgonpho no APPLE 'PHONES 3024 03/20/20 01:15:24 14:56 192 0 nxtgonpho no APPLE 'PHONES 3025 03/20/20 01:15:24 14:57 0 0 nxtgonpho no APPLE 'PHONES 3026 03/20/20 01:30:21 1:11 0 0 nxtgonpho ne APPLE !PHONES 3027 03/20/20 01:31:31 39:34 192 0 nxtgonpho ne APPLE 'PHONES 3028 03/20/20 01:31:32 39:34 0 0 nxtgonpho ne APPLE 'PHONES 3029 03/20/20 01:36:21 24:43 3424 1432 ims 3030 03/20/20 02:01:02 10:03 7228 6804 ims APPLE !PHONES 3031 03/20/20 02:01:03 10:03 6736 6964 ims APPLE !PHONES 3032 03/20/20 02:02:44 60:00 15057 8834 ims 3033 03/20/20 02:11:05 2:11 192 0nxtgonpho ne APPLE !PHONES 3034 03/20/20 02:11:06 2:11 0 0 nxtgonpho ne APPLE !PHONES 3035 03/20/20 02:13:17 10:19 0 0 nxtgonpho ne APPLE 'PHONES 3036 03/20/20 02:23:35 8:16 192 0 nxtgonpho no APPLE !PHONES 3037 03/20/20 02:23:36 8:16 0 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 125 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171045 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343103 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (UTC) Bytes Up Bytes Apn Dn TIE' IMSI MAKE MODEL 3038 03/20/20 02:31:52 39:29 0 Onmtgonpho ne APPLE 'PEONES 3039 03/20/20 03:02:44 60:00 8388 3004 ims 3040 03/20/20 03:11:21 30:00 192 Onmtgonpho ne APPLE 'PEONES 3041 03/20/20 03:11:22 35:10 0 0 nxtgonpho no APPLE 'PEONES 3042 03/20/20 03:46:32 2:09 192 0 nxtgonpho no APPLE 'PEONES 3043 03/20/20 03:46:33 2:09 0 0 nxtgonpho no APPLE 'PEONES 3044 03/20/20 03:48:42 1:14 0 0 nxtgonpho no APPLE IPHCME8 3045 03/20/20 03:49:55 21:12 192 0 nxtgonpho no APPLE 'PHONES 3046 03/20/20 03:49:56 21:12 0 0 nxtgonpho ne APPLE 'PHONES 3047 03/20/20 04:02:44 60:00 8388 3020 ims 3048 03/20/20 04:11:08 50:01 0 0 nxtgonpho no APPLE 'PHONES 3049 03/20/20 05:01:08 28:52 192 0 nxtgenpho no APPLE 'PHONES 3050 03/20/20 05:01:09 28:52 0 0 nxtgenpho no APPLE 'PHONES 3051 03/20/20 05:02:44 60:00 10036 3176 ims 3052 03/20/20 05:30:02 21:58 0 0 nxtgonpho ne APPLE 'PHONES 3053 03/20/20 05:51:59 14:46 192 0 nxtgonpho ne APPLE 'PHONES 3054 03/20/20 05:52:00 14:46 0 0 nxtgonpho ne APPLE 'PHONES 3055 03/20/20 06:02:44 60:00 16992 6140 ims 3056 03/20/20 06:06:46 60:00 0 0 nxtgonpho ne APPLE !PHONES 3057 03/20/20 07:02:44 60:00 7064 2788 ims 3058 03/20/20 07:06:46 8:54 0 0 nxtgenpho ne APPLE 'PHONES 3059 03/20/20 07:15:39 2:04 192 0 nxtgonpho ne APPLE !PHONES 3060 03/20/20 07:15:41 2:03 0 0 nxtgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 126 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171046 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343104 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm tras ""ss AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Conn. Date Time (OTC) 3061 03/20/20 07:17:44 3062 03/20/20 07:20:49 3063 03/20/20 07:20:50 3064 03/20/20 07:24:11 3065 03/20/20 07:24:12 3066 03/20/20 07:58:20 3067 03/20/20 08:02:44 3068 03/20/20 08:53:00 3069 03/20/20 08:53:01 3070 03/20/20 09:02:44 3071 03/20/20 09:08:30 3072 03/20/20 09:08:31 3073 03/20/20 09:17:06 3074 03/20/20 09:17:58 3075 03/20/20 09:17:59 3076 03/20/20 09:27:11 3077 03/20/20 09:27:12 3078 03/20/20 10:02:44 3079 03/20/20 10:27:12 3080 03/20/20 11:02:44 3081 03/20/20 11:27:12 3082 03/20/20 12:02:44 3083 03/20/20 12:09:48 Originating ET Bytes Bytes Apn MEI II I MARE MODEL Up Dn 3:06 0 0 nxtgenpho APPLE 'PHONES ne 3:21 192 0 nxtgenpho APPLE 'PHONES ne 3:21 0 0 nxtgenpho APPLE 'PHONES ne 34:08 192 0 nxtgenpho APPLE 'PHONES ne 34:08 0 0 nxtgenpho APPLE 'PHONES ne 54:41 0 0 nxtgenpho APPLE !PHONES ne 60:00 8388 2928 ims 15:29 192 0 nxtgenpho APPLE 'PHONES ne 15:29 0 0 nxtgenpho APPLE 'PHONES ne 60:00 7172 2912 ims 8:35 192 0 nxtgenpho APPLE 'PHONES ne 8:35 0 0 nxtgenpho APPLE !PHONES ne 0:53 0 0 nxtgenpho APPLE !PHONES ne 9:12 192 Onxtgonpho APPLE 'PHONES ne 9:12 0 0 nxtgenpho APPLE !PHONES ne 162:37 192 0 nxtgenpho APPLE 'PHONES ne 60:00 0 0 nxtgenpho APPLE !PHONES ne 60:00 10256 4236 ims 60:00 0 0 nxtgenpho APPLE 'PHONES ne 60:00 15016 4924 ims 42:37 0 0 nxtgenpho APPLE 'PHONES ne 60:00 6956 2896 ims 9:26 192 0 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 127 customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171C47 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343105 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e s, ‘•- .a° AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 IAN= Conn. Originating ET Time Number (UTC) Bytes Up Bytes Apn Dn DMZ INSI MAKE MODEL 3084 03/20/20 12:09:50 9:25 0 0nactgonpho ne APPLE 'PHONES 3085 03/20/20 12:19:14 6:07 192 0nactgonpho ne APPLE 'PHONES 3086 03/20/20 12:19:15 6:07 0 0nactgonpho ne APPLE 'PHONES 3087 03/20/20 12:25:22 0:05 0 0nactgonpho ne APPLE 'PHONES 3088 03/20/20 12:25:38 40:55 0 0nactgonpho ne APPLE 'PHONES 3089 03/20/20 13:02:44 60:00 11580 4252 ims 3090 03/20/20 13:06:32 2:04 192 0nxtgonpho no APPLE 'PHONES 3091 03/20/20 13:06:34 2:03 0 0nxtgonpho no APPLE 'PHONES 3092 03/20/20 13:08:37 42:12 0 0nxtgonpho no APPLE 'PHONES 3093 03/20/20 13:50:48 2:21 192 0nxtgonpho no APPLE 'PHONES 3094 03/20/20 13:50:50 2:20 0 0nxtgonpho no APPLE 'PHONES 3095 03/20/20 13:53:10 21:26 0 0nxtgonpho no APPLE 'PHONES 3096 03/20/20 14:02:44 60:00 9784 3300 ism 3097 03/20/20 14:14:36 8:05 192 0nxtgonpho no APPLE 'PHONES 3098 03/20/20 14:14:37 8:05 0 0nxtgonpho no APPLE 'PHONES 3099 03/20/20 14:22:42 5:08 0 0nxtgonpho no APPLE 'PHONES 3100 03/20/20 14:27:49 18:33 192 0nmtgonpho no APPLE 'PHONES 3101 03/20/20 14:27:50 18:33 0 0nmtgonpho no APPLE 'PHONES 3102 03/20/20 14:46:23 5:23 0 0nmtgonpho no APPLE 'PHONES 3103 03/20/20 14:51:45 15:28 192 0nmtgonpho no APPLE 'PHONES 3104 03/20/20 14:51:46 15:28 0 0nmtgonpho no APPLE 'PHONES 3105 03/20/20 15:02:44 60:00 8668 4176 imp AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 128 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171048 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343106 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro ••- .a° AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 dal= Conn. Originating ET Time Number luTC) Bytes Up Bytes Apn Dn MINT TItOT MAKE MODEL 3106 03/20/20 15:07:13 20:57 192 Onmtgonpho no APPLE !PHONES 3107 03/20/20 15:07:14 20:58 0 0 nxtgonpho no APPLE !PHONES 3108 03/20/20 15:28:12 9:32 0 0 nxtgonpho no APPLE !PHONES 3109 03/20/20 15:37:44 14:50 192 0 nxtgonpho no APPLE !PHONES 3110 03/20/20 15:37:45 14:50 0 0 nxtgonpho ne APPLE !PHONES 3111 03/20/20 15:52:36 11:36 0 0 nxtgonpho ne APPLE !PHONES 3112 03/20/20 16:02:44 60:00 18056 6404 ims 3113 03/20/20 16:04:11 2:04 192 0 nxtgonpho ne APPLE !PHONES 3114 03/20/20 16:04:12 2:04 0 0 nxtgonpho ne APPLE !PHONES 3115 03/20/20 16:06:16 0:34 0 0 nxtgonpho ne APPLE !PHONES 3116 03/20/20 16:06:49 8:17 192 Onxtgonpho ne APPLE !PHONES 3117 03/20/20 16:06:50 8:17 0 0 nxtgonpho no APPLE !PHONES 3118 03/20/20 16:15:07 7:04 0 0 nxtgonpho no APPLE !PHONES 3119 03/20/20 16:22:10 27:08 192 0 nxtgonpho ne APPLE !PHONES 3120 03/20/20 16:22:11 27:08 0 0 nxtgonpho ne APPLE !PHONES 3121 03/20/20 16:49:19 5:38 0 0 nxtgonpho ne APPLE !PHONES 3122 03/20/20 16:54:56 14:56 192 0 nxtgonpho ne APPLE !PHONES 3123 03/20/20 16:54:57 14:56 0 0 nxtgonpho ne APPLE !PHONES 3124 03/20/20 17:02:44 60:00 8744 4680 ims 3125 03/20/20 17:09:53 0:47 0 0 nxtgonpho ne APPLE !PHONES 3126 03/20/20 17:10:39 8:26 192 0 nxtgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 129 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171049 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343107 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e • 1/4-00 AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Tame Number (UTC) Bytes Up Bytes Apn flax INSI MAKE Dn MODEL 3127 03/20/20 17:10:40 8:26 0 0 nxtgenpho ne APPLE 'PHONES 3128 03/20/20 17:19:06 3:40 0 0 nxtgenpho ne APPLE 'PHONES 3129 03/20/20 17:22:46 15:11 192 0 nxtgenpho ne APPLE 'PHONES 3130 03/20/20 17:22:47 15:11 0 0 nxtgonpho ne APPLE 'PHONES 3131 03/20/20 17:37:57 2:23 192 0 nxtgonpho ne APPLE 'PHONES 3132 03/20/20 17:37:58 2:23 0 0 nxtgonpho ne APPLE 'PHONES 3133 03/20/20 17:40:21 6:09 192 0 nxtgonpho ne APPLE 'PHONES 3134 03/20/20 17:40:22 6:09 0 0 nxtgonpho ne APPLE 'PHONES 3135 03/20/20 17:46:31 1:00 0 0 nxtgonpho ne APPLE 'PHONES 3136 03/20/20 17:47:30 8:23 192 0 nxtgenpho ne APPLE 'PHONES 3137 03/20/20 17:47:31 8:23 0 0 nxtgenpho ne APPLE 'PHONES 3138 03/20/20 17:55:54 44:08 0 0 nxtgonpho ne APPLE 'PHONES 3139 03/20/20 18:02:44 60:00 8156 3712 ims 3140 03/20/20 18:40:02 2:04 192 0 nxtgenpho ne APPLE 'PHONES 3141 03/20/20 18:40:03 2:04 0 0 nxtgenpho ne APPLE 'PHONES 3142 03/20/20 18:42:07 55:32 0 0 nxtgonpho ne APPLE 'PHONES 3143 03/20/20 19:02:44 60:00 16436 5228 ims 3144 03/20/20 19:37:38 8:36 192 0 nxtgenpho ne APPLE 'PHONES 3145 03/20/20 19:37:40 8:36 0 0 nxtgenpho ne APPLE 'PHONES 3146 03/20/20 19:46:15 6:04 192 0 nxtgenpho ne APPLE 'PHONES 3147 03/20/20 19:46:16 6:04 0 0 nxtgenpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 130 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171050 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343108 ---PAGE BREAK--- MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ‘•- .a° AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn INKS IMSI NAM MODEL 3148 03/20/20 19:52:20 9:41 0 0 nxtgenpho ne APPLE 'PHONES 3149 03/20/20 20:02:00 2:03 192 0 nxtgenpho ne APPLE 'PHONES 3150 03/20/20 20:02:01 2:03 0 0 nxtgenpho ne APPLE 'PHONES 3151 03/20/20 20:02:44 60:00 5072 1588 ims 3152 03/20/20 20:04:04 57:34 0 0 nxtgenpho ne APPLE 'PHONES 3153 03/20/20 20:36:24 1:34 7802 6302 ims APPLE 'PHONES 3154 03/20/20 20:37:58 60:00 13672 5576 ims APPLE 'PHONES 3155 03/20/20 21:01:37 13:48 192 Onmtgonpho ne APPLE 'PHONES 3156 03/20/20 21:01:38 13:48 0 0 nxtgenpho ne APPLE 'PHONES 3157 03/20/20 21:02:44 60:00 0 0 ims 3158 03/20/20 21:15:26 2:04 0 0 nxtgenpho ne APPLE 'PHONES 3159 03/20/20 21:17:30 2:10 192 0 nxtgenpho ne APPLE 'PHONES 3160 03/20/20 21:17:31 2:10 0 0 nxtgenpho ne APPLE 'PHONES 3161 03/20/20 21:19:41 0:05 0 0 nxtgenpho ne APPLE 'PHONES 3162 03/20/20 21:20:02 60:00 0 0 nxtgenpho ne APPLE 'PHONES 3163 03/20/20 21:37:58 60:00 8728 3020 ims APPLE 'PHONES 3164 03/20/20 22:02:44 60:00 0 0 ims 3165 03/20/20 22:20:02 60:00 0 0 nxtgenpho ne APPLE 'PHONES 3166 03/20/20 22:37:58 60:00 13768 4824 ims APPLE 'PHONES 3167 03/20/20 23:02:44 60:00 0 0 ims 3168 03/20/20 23:20:02 29:13 0 0 nxtgenpho ne APPLE 'PHONES 3169 03/20/20 23:37:58 60:00 8604 3128 ims APPLE 'PHONES 3170 03/20/20 23:49:14 7:42 192 Onmtgonpho ne APPLE 'PHONES 3171 03/20/20 23:49:15 7:42 0 0 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 131 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171051 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343109 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ‘sel. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (UTC) Bytes Up Bytes Apn Dn IMMIX INS! MAKE MODEL 3172 03/20/20 23:56:57 22:40 0 0 nmtgonpho ne APPLE !PHONES 3173 03/21/20 00:02:44 24:06 0 0 ims 3174 03/21/20 00:19:36 2:11 192 0 nmtgonpho ne APPLE !PHONES 3175 03/21/20 00:19:38 2:10 0 0 nmtgonpho ne APPLE !PHONES 3176 03/21/20 00:21:48 60:00 0 0 nmtgonpho ne APPLE !PHONES 3177 03/21/20 00:37:58 60:00 10036 3268 Las APPLE !PHONES 3178 03/21/20 01:21:48 36:26 0 0 nmtgonpho ne APPLE !PHONES 3179 03/21/20 01:37:58 60:00 13568 4752 Las APPLE !PHONES 3180 03/21/20 01:58:13 13:55 192 0 nmtgonpho ne APPLE !PHONES 3181 03/21/20 01:58:14 13:55 0 0 nmtgonpho ne APPLE !PHONES 3182 03/21/20 02:12:08 1:21 192 0 nmtgonpho ne APPLE !PHONES 3183 03/21/20 02:12:09 1:21 0 0 nmtgonpho ne APPLE !PHONES 3184 03/21/20 02:13:30 11:29 0 0 nmtgonpho no APPLE !PHONES 3185 03/21/20 02:24:59 4:09 0 0 nmtgonpho no APPLE !PHONES 3186 03/21/20 02:29:07 47:53 192 0 nmtgonpho no APPLE !PHONES 3187 03/21/20 02:29:08 47:53 0 0 nmtgonpho no APPLE !PHONES 3188 03/21/20 02:37:58 16:32 5072 1572 Las APPLE !PHONES 3189 03/21/20 02:54:03 22:57 6228 6736 Las APPLE !PHONES 3190 03/21/20 02:54:04 22:57 6668 6072 Las APPLE !PHONES 3191 03/21/20 02:54:30 60:00 16504 9140 Las 3192 03/21/20 03:17:01 20:00 192 Onmtgonpho ne APPLE !PHONES 3193 03/21/20 03:17:02 31:06 0 0 nmtgonpho ne APPLE !PHONES 3194 03/21/20 03:48:08 8:34 0 0 nmtgonpho ne APPLE !PHONES 3195 03/21/20 03:54:30 60:00 10036 3392 Las AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 132 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171052 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343110 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Si= Conn. Time (OTC) Originating Numbor ET Bytes Up Bytes Apn Dn MEI IMSI MAKE MODEL 3196 03/21/20 03:56:41 97:16 192 Onmtgonpho no APPLE !PHONES 3197 03/21/20 03:56:42 60:00 0 0 nxtgenpho ne APPLE IPHOME8 3198 03/21/20 04:54:30 60:00 9928 3268 Less 3199 03/21/20 04:56:42 37:16 0 0 nxtgonpho ne APPLE !PHONES 3200 03/21/20 05:33:58 0:06 0 0 nxtgonpho ne APPLE 'PHONES 3201 03/21/20 05:49:12 3:35 192 0 nxtgonpho ne APPLE 'PHONES 3202 03/21/20 05:49:13 3:35 0 0 nxtgenpho no APPLE 'PHONES 3203 03/21/20 05:52:48 4:43 0 0 nxtgonpho no APPLE 'PHONES 3204 03/21/20 05:54:30 60:00 8496 3128 Less 3205 03/21/20 05:57:30 13:55 192 0 nxtgonpho no APPLE 'PHONES 3206 03/21/20 05:57:31 13:55 0 0 nxtgonpho no APPLE 'PHONES 3207 03/21/20 06:11:26 24:31 0 0 nxtgonpho no APPLE !PHONES 3208 03/21/20 06:35:56 8:15 192 0 nxtgonpho no APPLE !PHONES 3209 03/21/20 06:35:57 8:15 0 0 nxtgonpho no APPLE !PHONES 3210 03/21/20 06:44:12 14:22 192 0 nxtgonpho no APPLE 'PHONES 3211 03/21/20 06:44:13 14:22 0 0 nxtgonpho no APPLE 'PHONES 3212 03/21/20 06:54:30 60:00 10828 4484 Less 3213 03/21/20 06:58:35 4:51 0 0 nxtgonpho no APPLE 'PHONES 3214 03/21/20 07:03:26 4:01 0 0 nxtgenpho no APPLE 'PHONES 3215 03/21/20 07:07:26 9:27 192 0 nxtgonpho no APPLE 'PHONES 3216 03/21/20 07:07:27 9:27 0 0 nxtgonpho no APPLE 'PHONES 3217 03/21/20 07:16:54 1:37 0 0 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 133 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171053 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343111 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ce. AT&T Run Data: Run Time: Data Usage For: 06/17/2020 Item Conn. Conn. Date Time (OTC) 3218 03/21/20 07:18:31 3219 03/21/20 07:18:32 3220 03/21/20 07:54:30 3221 03/21/20 08:15:42 3222 03/21/20 08:46:35 3223 03/21/20 08:54:30 3224 03/21/20 08:54:36 3225 03/21/20 08:54:37 3226 03/21/20 08:57:48 3227 03/21/20 09:25:47 3228 03/21/20 09:25:48 3229 03/21/20 09:29:01 3230 03/21/20 09:50:01 3231 03/21/20 09:52:52 3232 03/21/20 09:54:30 3233 03/21/20 09:54:31 3234 03/21/20 10:02:28 3235 03/21/20 10:02:29 3236 03/21/20 10:03:42 3237 03/21/20 10:07:31 3238 03/21/20 10:54:30 3239 03/21/20 11:07:31 Originating Number AT Bytes Bytes Apn DEBI IMSI MAKE MODEL Up Dn 57:10 192 0 nxtgonpho no APPLE 'PHONES 57:10 0 0 nxtgonpho no APPLE 'PHONES 60:00 12244 4860 isms 30:53 0 0 nxtgonpho no APPLE 'PHONES 8:02 0 0 nxtgonpho no APPLE 'PHONES 60:00 7172 3128 ims 3:11 192 0 nxtgonpho no APPLE 'PHONES 3:11 0 0 nxtgonpho no APPLE 'PHONES 28:00 0 0 nxtgonpho no APPLE 'PHONES 3:13 192 Onxtgonpho no APPLE 'PHONES 3:13 0 0 nxtgonpho no APPLE !PHONES 21:00 0 0 nxtgenpho no APPLE 'PHONES 2:51 0 0 nxtgonpho no APPLE 'PHONES 0:06 0 0 nxtgonpho no APPLE 'PHONES 60:00 13908 4996 ims 7:58 0 0 nxtgonpho no APPLE 'PHONES 1:13 192 Onxtgonpho no APPLE 'PHONES 1:13 0 0 nxtgonpho no APPLE !PHONES 3:48 0 0 nxtgonpho no APPLE 'PHONES 60:00 0 0 nxtgenpho no APPLE 'PHONES 60:00 10036 3392 ims 2:38 0 0 nxtgenpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 134 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171054 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343112 ---PAGE BREAK--- ..020 MOBILITY alb AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm ...1/47.1• 4's AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Tim (OTC) Originating Number ET Bytes Up Bytes Apn Dn L@Z IMSI MAKE MODEL 3240 03/21/20 11:10:09 1:25 0 0 nxtgonpho no APPLE 'PHONES 3241 03/21/20 11:11:33 2:44 192 0 nxtgenpho no APPLE 'PHONES 3242 03/21/20 11:11:34 2:44 0 0 nxtgenpho no APPLE 'PHONES 3243 03/21/20 11:14:18 19:09 0 0 nxtgonpho no APPLE 'PHONES 3244 03/21/20 11:33:28 14:25 0 0 nxtgonpho ne APPLE 'PHONES 3245 03/21/20 11:47:53 26:28 0 0 nxtgenpho ne APPLE 'PHONES 3246 03/21/20 11:54:30 60:00 8728 3052 isms 3247 03/21/20 12:14:21 10:50 0 0 nxtgenpho ne APPLE 'PHONES 3248 03/21/20 12:25:11 16:19 0 0 nxtgenpho ne APPLE 'PHONES 3249 03/21/20 12:41:30 0:44 192 0 nxtgenpho ne APPLE 'PHONES 3250 03/21/20 12:41:31 0:44 0 0 nxtgenpho ne APPLE 'PHONES 3251 03/21/20 12:42:15 29:50 0 0 nxtgenpho ne APPLE 'PHONES 3252 03/21/20 12:54:30 60:00 12028 4640 isms 3253 03/21/20 13:12:04 2:03 192 0 nxtgenpho ne APPLE 'PHONES 3254 03/21/20 13:12:05 2:03 0 0 nxtgenpho ne APPLE 'PHONES 3255 03/21/20 13:14:08 60:00 0 0 nxtgenpho ne APPLE 'PHONES 3256 03/21/20 13:54:30 60:00 8496 3036 isms 3257 03/21/20 14:14:08 14:56 0 0 nxtgonpho no APPLE 'PHONES 3258 03/21/20 14:29:03 2:04 192 0 nxtgonpho no APPLE 'PHONES 3259 03/21/20 14:29:04 2:04 0 0 nxtgonpho ne APPLE 'PHONES 3260 03/21/20 14:31:08 60:00 0 0 nxtgenpho ne APPLE 'PHONES 3261 03/21/20 14:54:30 60:00 8728 3160 isms AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 135 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171055 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343113 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro `•- . is AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Sidi= Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn EBBS IM9I MAKE MODEL 3262 03/21/20 15:31:08 53:21 0 Onmtgonpho ne APPLE !PHONES 3263 03/21/20 15:54:30 60:00 15496 5476 ims 3264 03/21/20 16:24:29 6:53 0 0 nxtgenpho ne APPLE !PHONES 3265 03/21/20 16:31:22 34:11 0 0 nxtgenpho ne APPLE !PHONES 3266 03/21/20 16:54:30 60:00 7188 2804 ims 3267 03/21/20 17:05:32 12:47 192 Onmtgonpho no APPLE !PHONES 3268 03/21/20 17:05:33 12:47 0 0 nxtgonpho no APPLE !PHONES 3269 03/21/20 17:18:20 58:17 0 0 nxtgonpho no APPLE !PHONES 3270 03/21/20 17:54:30 60:00 10252 3408 ims 3271 03/21/20 18:22:28 42:10 192 0 nxtgonpho ne APPLE !PHONES 3272 03/21/20 18:22:29 42:10 0 0 nxtgonpho ne APPLE !PHONES 3273 03/21/20 18:54:30 60:00 11796 4484 ims 3274 03/21/20 19:04:38 4:18 192 0 nxtgonpho ne APPLE !PHONES 3275 03/21/20 19:04:40 4:17 0 0 nxtgonpho ne APPLE !PHONES 3276 03/21/20 19:08:57 60:00 0 0 nxtgenpho no APPLE !PHONES 3277 03/21/20 19:54:30 60:00 8496 3144 ims 3278 03/21/20 20:08:57 16:46 0 0 nxtgenpho no APPLE !PHONES 3279 03/21/20 20:25:42 37:54 192 0 nxtgenpho no APPLE !PHONES 3280 03/21/20 20:25:43 37:54 0 0 nxtgenpho no APPLE !PHONES 3281 03/21/20 20:54:30 60:00 13460 4624 ims 3282 03/21/20 21:03:37 60:00 0 0 nxtgonpho no APPLE !PHONES 3283 03/21/20 21:54:30 60:00 10252 3300 ims 3284 03/21/20 22:03:37 60:00 0 0 nxtgonpho no APPLE !PHONES 3285 03/21/20 22:54:30 46:10 3440 1464 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 136 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171056 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343114 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. dro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn EMI II I MAKE MODEL 3286 03/21/20 23:03:37 17:19 0 0 nxtgonpho ne APPLE 'PHONES 3287 03/21/20 23:20:55 2:03 192 0 nxtgonpho ne APPLE 'PHONES 3288 03/21/20 23:20:56 2:03 0 0 nxtgonpho ne APPLE 'PHONES 3289 03/21/20 23:22:59 60:00 0 0 nxtgonpho ne APPLE 'PHONES 3290 03/21/20 23:40:40 3:35 6668 5859 imp APPLE 'PHONES 3291 03/21/20 23:40:40 3:35 6604 5859 imp APPLE 'PHONES 3292 03/21/20 23:44:15 60:00 13892 4716 imp APPLE 'PHONES 3293 03/22/20 00:22:59 7:07 0 0 nxtgonpho ne APPLE 'PHONES 3294 03/22/20 00:30:05 2:03 192 0 nxtgonpho ne APPLE 'PHONES 3295 03/22/20 00:30:06 2:03 0 0 nxtgonpho ne APPLE 'PHONES 3296 03/22/20 00:32:09 18:47 0 0 nxtgonpho ne APPLE 'PHONES 3297 03/22/20 00:44:15 60:00 6848 2788 imp APPLE 'PHONES 3298 03/22/20 00:50:55 8:14 192 0nxtgonpho ne APPLE 'PHONES 3299 03/22/20 00:50:56 8:14 0 0 nxtgonpho ne APPLE 'PHONES 3300 03/22/20 00:59:10 1:16 0 0 nxtgonpho ne APPLE 'PHONES 3301 03/22/20 01:00:25 0:57 192 0 nxtgonpho ne APPLE 'PHONES 3302 03/22/20 01:00:26 0:57 0 0 nxtgonpho ne APPLE 'PHONES 3303 03/22/20 01:01:23 4:58 0 0 nxtgonpho ne APPLE 'PHONES 3304 03/22/20 01:06:20 13:22 192 0 nxtgonpho ne APPLE 'PHONES 3305 03/22/20 01:06:21 13:22 0 0 nxtgonpho ne APPLE 'PHONES 3306 03/22/20 01:19:43 2:02 0 0 nxtgonpho ne APPLE 'PHONES 3307 03/22/20 01:21:44 2:11 192 0 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 137 customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171057 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343115 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. c o . ‘•- .a# AT&T Run pato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 MS= Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn MERE IM9I MAKE MODEL 3308 03/22/20 01:21:45 2:11 0 Onmtgonpho ne APPLE !PHONES 3309 03/22/20 01:23:56 0:44 0 0 nxtgenpho ne APPLE !PHONES 3310 03/22/20 01:24:39 2:04 192 0 nxtgenpho ne APPLE !PHONES 3311 03/22/20 01:24:41 2:03 0 0 nxtgenpho ne APPLE !PHONES 3312 03/22/20 01:26:44 0:35 0 0 nxtgenpho ne APPLE !PHONES 3313 03/22/20 01:27:19 2:03 192 0 nxtgenpho ne APPLE !PHONES 3314 03/22/20 01:27:20 2:03 0 0 nxtgenpho no APPLE !PHONES 3315 03/22/20 01:29:23 60:00 0 0 nxtgonpho no APPLE !PHONES 3316 03/22/20 01:44:15 32:14 5180 1804 Las APPLE !PHONES 3317 03/22/20 02:11:05 60:00 11882 8628 Las APPLE !PHONES 3318 03/22/20 02:29:23 60:00 0 0 nxtgonpho no APPLE !PHONES 3319 03/22/20 03:11:05 47:00 2596 1324 Las APPLE !PHONES 3320 03/22/20 03:29:23 60:00 0 0 nxtgenpho ne APPLE !PHONES 3321 03/22/20 03:58:05 60:00 11888 4220 Las APPLE !PHONES 3322 03/22/20 04:29:23 60:00 0 0 nxtgenpho ne APPLE !PHONES 3323 03/22/20 04:58:05 60:00 8712 3020 Las APPLE !PHONES 3324 03/22/20 05:29:23 0:01 0 0 nxtgenpho ne APPLE !PHONES 3325 03/22/20 05:29:27 60:00 0 0 nxtgenpho ne APPLE !PHONES 3326 03/22/20 05:58:05 60:00 6956 2648 Las APPLE !PHONES 3327 03/22/20 06:29:27 60:00 0 0 nxtgonpho no APPLE !PHONES 3328 03/22/20 06:58:05 60:00 13228 4520 Las APPLE !PHONES 3329 03/22/20 07:29:27 60:00 0 0 nxtgonpho no APPLE !PHONES 3330 03/22/20 07:58:05 60:00 8496 3004 Las APPLE !PHONES 3331 03/22/20 08:29:27 60:00 0 0 nxtgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 138 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171058 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343116 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e to AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating CT Time Number (UTC) Bytos Up Bytes Apn Dn L@I IIS! MAKS MODEL 3332 03/22/20 08:58:05 60:00 10488 4312 ism APPLE !PEONES 3333 03/22/20 09:29:27 0:01 0 Onxtgonpho ne APPLE !PEONES 3334 03/22/20 09:29:31 60:00 0 0 mactgonpho no APPLE !PEONES 3335 03/22/20 09:58:05 60:00 6956 2880 ism APPLE 'PHONES 3336 03/22/20 10:29:31 60:00 0 0 nxtgonpho ne APPLE IPHONE8 3337 03/22/20 10:58:05 60:00 6848 2540 ism APPLE IPHONE8 3338 03/22/20 11:29:31 60:00 0 0 nxtgonpho ne APPLE 'PHONES 3339 03/22/20 11:58:05 60:00 13696 5472 ism APPLE 'PHONES 3340 03/22/20 12:29:31 2:36 0 Onmtgonpho no APPLE 'PHONES 3341 03/22/20 12:32:07 41:03 0 Onactgonpho no APPLE 'PHONES 3342 03/22/20 12:58:05 60:00 8388 3004 ism APPLE 'PHONES 3343 03/22/20 13:13:09 2:21 192 Onxtgonpho ne APPLE 'PHONES 3344 03/22/20 13:13:11 2:20 0 0 nxtgonpho ne APPLE 'PHONES 3345 03/22/20 13:15:31 6:03 192 Onxtgonpho ne APPLE 'PHONES 3346 03/22/20 13:15:32 6:03 0 0 nxtgonpho no APPLE 'PHONES 3347 03/22/20 13:21:35 32:01 0 Onactgonpho no APPLE 'PHONES 3348 03/22/20 13:53:36 0:03 0 Onactgonpho no APPLE !PHONES 3349 03/22/20 13:53:39 58:11 0 Onactgonpho no APPLE !PHONES 3350 03/22/20 13:58:05 60:00 10036 3176 ism APPLE !PHONES 3351 03/22/20 14:54:13 60:00 0 Onactgonpho no APPLE !PHONES 3352 03/22/20 14:58:05 60:00 9912 3020 ism APPLE !PHONES 3353 03/22/20 15:54:13 60:00 0 Onmtgonpho ne APPLE !PHONES 3354 03/22/20 15:58:05 60:00 13352 4576 ism APPLE !PHONES 3355 03/22/20 16:54:13 60:00 0 Onxtgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 139 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171059 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343117 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e s, ‘•-is• AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time MC/ Originating Number ET Bytes Up Bytes Apn Dn IN= II I MAKE MODEL 3356 03/22/20 16:58:05 60:00 6956 2756 ims APPLE 'PHONES 3357 03/22/20 17:54:13 39:58 0 Onxtgonpho ne APPLE !PHONES 3358 03/22/20 17:58:05 60:00 11812 4720 ims APPLE !PHONES 3359 03/22/20 18:34:10 0:42 192 Onxtgonpho ne APPLE !PHONES 3360 03/22/20 18:34:11 0:42 0 0 nxtgenpho ne APPLE 'PHONES 3361 03/22/20 18:34:53 3:14 0 0 nxtgenpho ne APPLE !PHONES 3362 03/22/20 18:38:06 23:03 192 0 nxtgenpho ne APPLE 'PHONES 3363 03/22/20 18:38:07 23:04 0 0 nxtgenpho ne APPLE 'PHONES 3364 03/22/20 18:58:05 60:00 15020 4716 ims APPLE !PHONES 3365 03/22/20 19:01:11 1:37 0 0 nxtgenpho ne APPLE 'PHONES 3366 03/22/20 19:02:47 12:30 192 0 nxtgenpho ne APPLE !PHONES 3367 03/22/20 19:02:48 12:30 0 0 nxtgenpho ne APPLE 'PHONES 3368 03/22/20 19:15:18 44:20 0 0 nxtgenpho ne APPLE !PHONES 3369 03/22/20 19:58:05 60:00 10036 3144 ims APPLE !PHONES 3370 03/22/20 19:59:37 2:10 192 Onxtgonpho ne APPLE !PHONES 3371 03/22/20 19:59:39 2:09 0 0 nxtgenpho ne APPLE 'PHONES 3372 03/22/20 20:01:48 9:18 0 0 nxtgenpho ne APPLE !PHONES 3373 03/22/20 20:11:05 1:23 192 0 nxtgenpho ne APPLE !PHONES 3374 03/22/20 20:11:06 1:23 0 0 nxtgenpho ne APPLE 'PHONES 3375 03/22/20 20:12:28 9:21 192 0 nxtgenpho ne APPLE 'PHONES 3376 03/22/20 20:12:29 9:21 0 0 nxtgenpho ne APPLE 'PHONES 3377 03/22/20 20:21:49 6:09 192 0 nxtgenpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 140 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171060 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343118 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cee AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn EBB! IASI MAKE MODEL 3378 03/22/20 20:21:50 6:09 0 0 nxtgonpho no APPLE 'PHONES 3379 03/22/20 20:27:59 17:03 0 0 nxtgonpho no APPLE 'PHONES 3380 03/22/20 20:45:01 7:26 192 0 nxtgenpho no APPLE 'PHONES 3381 03/22/20 20:45:02 7:27 0 0 nxtgonpho no APPLE 'PHONES 3382 03/22/20 20:52:29 14:32 0 0 nxtgonpho no APPLE 'PHONES 3383 03/22/20 20:58:05 18:40 14120 3456 ims APPLE 'PHONES 3384 03/22/20 21:07:00 9:46 192 0 nxtgonpho no APPLE 'PHONES 3385 03/22/20 21:07:01 9:46 0 0 nxtgonpho no APPLE 'PHONES 3386 03/22/20 21:16:47 11:17 0 0 nxtgonpho no APPLE 'PHONES 3387 03/22/20 21:16:50 0:03 0 0 ims APPLE 'PHONES 3388 03/22/20 21:16:59 60:00 21488 9906 ims 3389 03/22/20 21:28:03 4:51 192 0 nxtgonpho ne APPLE 'PHONES 3390 03/22/20 21:28:05 4:50 0 0 nxtgenpho no APPLE 'PHONES 3391 03/22/20 21:32:55 3:36 0 0 nxtgonpho no APPLE 'PHONES 3392 03/22/20 21:36:31 2:03 192 0 nxtgonpho no APPLE 'PHONES 3393 03/22/20 21:36:32 2:03 0 0 nxtgonpho ne APPLE 'PHONES 3394 03/22/20 21:38:35 60:00 0 0 nxtgonpho ne APPLE 'PHONES 3395 03/22/20 22:16:59 60:00 6848 2772 ims 3396 03/22/20 22:38:35 60:00 0 0 nxtgenpho no APPLE 'PHONES 3397 03/22/20 23:16:59 60:00 7064 2664 ims 3398 03/22/20 23:38:35 48:53 0 0 nxtgenpho no APPLE 'PHONES 3399 03/23/20 00:16:59 60:00 7388 2928 ims 3400 03/23/20 00:27:27 2:17 192 Onxtgonpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 141 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171061 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343119 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro ‘•- .a# AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 MS= Conn. T1100 (OTC) Originating Number ET Bytes Up Bytes Apn DOLT INSI MAKE Dn MODEL 3401 03/23/20 00:27:29 2:16 0 Onmtgonpho ne APPLE !PHONES 3402 03/23/20 00:29:45 6:04 192 0 nxtgenpho ne APPLE !PHONES 3403 03/23/20 00:29:46 6:04 0 0 nxtgenpho ne APPLE !PHONES 3404 03/23/20 00:35:50 2:09 0 0 nxtgenpho ne APPLE !PHONES 3405 03/23/20 00:37:58 2:04 192 0 nxtgenpho ne APPLE !PHONES 3406 03/23/20 00:38:00 2:04 0 0 nxtgenpho ne APPLE !PHONES 3407 03/23/20 00:40:03 0:50 0 0 nxtgenpho ne APPLE !PHONES 3408 03/23/20 00:40:52 2:03 192 0 nxtgenpho ne APPLE !PHONES 3409 03/23/20 00:40:53 2:03 0 0 nxtgenpho ne APPLE !PHONES 3410 03/23/20 00:42:56 28:33 0 0 nxtgenpho ne APPLE !PHONES 3411 03/23/20 01:11:28 2:03 192 0 nxtgenpho ne APPLE !PHONES 3412 03/23/20 01:11:29 2:03 0 0 nxtgenpho ne APPLE !PHONES 3413 03/23/20 01:13:32 9:15 0 0 nxtgenpho ne APPLE !PHONES 3414 03/23/20 01:16:59 60:00 7280 2912 ims 3415 03/23/20 01:22:47 9:04 192 0 nxtgenpho ne APPLE !PHONES 3416 03/23/20 01:22:48 9:04 0 0 nxtgenpho ne APPLE !PHONES 3417 03/23/20 01:31:52 13:32 0 0 nxtgenpho ne APPLE !PHONES 3418 03/23/20 01:45:23 2:04 192 0 nxtgenpho ne APPLE !PHONES 3419 03/23/20 01:45:24 2:04 0 0 nxtgenpho ne APPLE !PHONES 3420 03/23/20 01:47:28 47:29 0 0 nxtgenpho ne APPLE !PHONES 3421 03/23/20 01:56:45 0:00 0 0 ims APPLE !PHONES 3422 03/23/20 01:56:56 60:00 18301 9608 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 142 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171062 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343120 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 MS= Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn MOLT INS! NAPS *Mel. 3423 03/23/20 02:16:59 60:00 0 0 ims 3424 03/23/20 02:34:56 2:04 192 0 ructgonpho no APPLE 'PEONES 3425 03/23/20 02:34:57 2:04 0 0 nottgonpho no APPLE 'PEONES 3426 03/23/20 02:37:01 7:01 0 0 nottgonpho no APPLE !PHONES 3427 03/23/20 02:44:01 2:03 192 0 nottgonpho no APPLE !PHONES 3428 03/23/20 02:44:02 2:03 0 0 ructgonpho no APPLE !PHONES 3429 03/23/20 02:46:05 60:00 0 0 ructgonpho no APPLE !PHONES 3430 03/23/20 02:56:56 60:00 8496 3500 ims 3431 03/23/20 03:16:59 60:00 0 0 ims 3432 03/23/20 03:46:05 17:46 0 0 ructgonpho no APPLE !PHONES 3433 03/23/20 03:56:56 60:00 21140 10312 ims 3434 03/23/20 04:01:14 0:23 0 1749 ims 3435 03/23/20 04:03:50 20:27 192 0 ructgonpho no APPLE !PHONES 3436 03/23/20 04:03:51 20:27 0 0 ructgonpho no APPLE !PHONES 3437 03/23/20 04:16:59 60:00 0 0 ims 3438 03/23/20 04:24:18 3:45 0 0 nottgonpho no APPLE !PHONES 3439 03/23/20 04:28:03 8:33 192 0 nottgonpho no APPLE IPHONE8 3440 03/23/20 04:28:04 8:33 0 0 nottgonpho no APPLE IPHONE8 3441 03/23/20 04:36:37 0:05 0 0 ructgonpho no APPLE IPHONE8 3442 03/23/20 04:36:56 60:00 0 0 ructgonpho no APPLE IPHONE8 3443 03/23/20 04:56:56 60:00 8512 3036 ims 3444 03/23/20 05:16:59 25:30 0 0 ims 3445 03/23/20 05:36:56 60:00 0 0 ructgonpho no APPLE IPHONE8 3446 03/23/20 05:56:56 60:00 10380 4144 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 143 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGAt 00171063 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343121 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 1/44e. ‘•e# AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Si= Conn. Timo (OTC) Originating Nomber ET Bytos Up Bytes Apn Dn MAX IASI NAM MODEL 3447 03/23/20 06:36:56 60:00 0 0 nxtgenpho no APPLE !PHONES 3448 03/23/20 06:56:56 60:00 10380 4036 ims 3449 03/23/20 07:36:56 60:00 0 0 nxtgenpho no APPLE !PHONES 3450 03/23/20 07:56:56 60:00 6848 2880 ims 3451 03/23/20 08:36:56 0:01 0 0 nxtgenpho no APPLE !PHONES 3452 03/23/20 08:36:58 60:00 0 0 nxtgenpho ne APPLE !PHONES 3453 03/23/20 08:56:56 60:00 11812 4376 ims 3454 03/23/20 09:36:58 60:00 0 0 nxtgenpho no APPLE !PHONES 3455 03/23/20 09:56:56 60:00 7064 2912 ims 3456 03/23/20 10:36:58 60:00 0 0 nxtgenpho no APPLE !PHONES 3457 03/23/20 10:56:56 60:00 6848 2788 ims 3458 03/23/20 11:36:58 60:00 0 0 nxtgenpho no APPLE !PHONES 3459 03/23/20 11:56:56 60:00 15344 5732 ims 3460 03/23/20 12:36:58 0:01 0 0 nxtgenpho ne APPLE !PHONES 3461 03/23/20 12:37:01 60:00 0 0 nxtgenpho ne APPLE !PHONES 3462 03/23/20 12:56:56 60:00 6848 2788 ims 3463 03/23/20 13:37:01 60:00 0 0 nxtgenpho ne APPLE !PHONES 3464 03/23/20 13:56:56 42:04 4964 1588 ims 3465 03/23/20 14:22:56 1:03 6852 6179 ims APPLE !PHONES 3466 03/23/20 14:23:59 15:01 5180 1712 ims APPLE !PHONES 3467 03/23/20 14:37:01 60:00 0 0 nxtgenpho ne APPLE !PHONES 3468 03/23/20 14:39:00 15:49 6674 5980 ims APPLE !PHONES 3469 03/23/20 14:54:49 46:05 8404 3988 ims APPLE !PHONES 3470 03/23/20 15:37:01 60:00 0 0 nxtgenpho ne APPLE !PHONES 3471 03/23/20 15:40:54 60:00 11840 8718 ims APPLE !PHONES 3472 03/23/20 16:37:01 0:01 0 0 nxtgenpho ne APPLE !PHONES 3473 03/23/20 16:40:54 4:01 0 0 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 144 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171064 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343122 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e s, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Si= Conn. Time (DTC) Originating Number ET Bytes Up Bytes Apn Dn EMBI INSI MAKE MODEL 3474 03/23/20 16:44:55 55:42 8852 3468 ims APPLE !PHONES 3475 03/23/20 17:28:56 7:41 0 Onmtgonphe ne APPLE !PHONES 3476 03/23/20 17:36:37 60:00 0 0 nmtgonphe ne APPLE !PHONES 3477 03/23/20 17:36:42 5:20 8156 6944 ims APPLE !PHONES 3478 03/23/20 17:42:02 60:00 13584 4608 ims APPLE !PHONES 3479 03/23/20 18:36:37 19:50 0 Onmtgonphe ne APPLE !PHONES 3480 03/23/20 18:42:02 14:26 124 372 ims APPLE !PHONES 3481 03/23/20 18:56:26 4:33 192 Onmtgonphe ne APPLE !PHONES 3482 03/23/20 18:56:27 4:32 6184 6738 ims APPLE !PHONES 3483 03/23/20 18:56:27 4:33 0 Onmtgonphe ne APPLE !PHONES 3484 03/23/20 18:56:28 4:32 6670 5920 ims APPLE !PHONES 3485 03/23/20 19:01:00 22:42 0 Onmtgonphe ne APPLE !PHONES 3486 03/23/20 19:01:23 1:26 6646 5904 ims APPLE !PHONES 3487 03/23/20 19:02:49 11:48 3532 1432 ims APPLE !PHONES 3488 03/23/20 19:14:37 9:05 9586 6195 ims APPLE !PHONES 3489 03/23/20 19:23:42 2:51 192 Onmtgonphe ne APPLE !PHONES 3490 03/23/20 19:23:43 2:51 0 0 nmtgonphe ne APPLE !PHONES 3491 03/23/20 19:26:34 6:22 0 0 nmtgonphe ne APPLE !PHONES 3492 03/23/20 19:32:55 2:23 192 0 nmtgonphe ne APPLE !PHONES 3493 03/23/20 19:32:56 2:23 0 0 nxtgenpho ne APPLE !PHONES 3494 03/23/20 19:35:19 3:26 0 0 nmtgonpho ne APPLE !PHONES 3495 03/23/20 19:38:44 1:10 192 0 nmtgonpho ne APPLE !PHONES 3496 03/23/20 19:38:45 1:10 0 0 nmtgonpho ne APPLE !PHONES 3497 03/23/20 19:39:55 10:36 0 0 nmtgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 145 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171065 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343123 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:58:68pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytos Up Bytes Apn Dn nizx INSI MAKE 3498 03/23/20 19:50:30 0:23 192 0 nxtgenpho no APPLE 3499 03/23/20 19:50:32 0:22 0 0 nxtgenpho no APPLE 3500 03/23/20 19:50:54 0:58 0 0 nxtgenpho no APPLE 3501 03/23/20 19:51:51 8:53 192 0 nxtgenpho no APPLE 3502 03/23/20 19:51:52 8:54 0 0 nxtgonpho no APPLE 3503 03/23/20 20:00:45 0:06 0 0 nxtgonpho no APPLE 3504 03/23/20 20:01:02 5:27 0 0 nxtgonpho no APPLE 3505 03/23/20 20:04:58 12:20 9917 6442 ims 3506 03/23/20 20:06:28 2:04 192 0 nxtgonpho no APPLE 3507 03/23/20 20:06:29 2:04 0 0 nxtgonpho no APPLE 3508 03/23/20 20:08:33 9:55 0 0 nxtgonpho no APPLE 3509 03/23/20 20:15:42 2:46 6690 5980 ims APPLE 3510 03/23/20 20:18:27 2:04 192 0 nxtgonpho no APPLE 3511 03/23/20 20:18:29 2:03 0 0 nxtgonpho no APPLE 3512 03/23/20 20:20:05 0:26 6246 6666 ims APPLE 3513 03/23/20 20:20:06 0:26 6666 5982 ims APPLE 3514 03/23/20 20:20:32 2:58 0 0 nxtgonpho no APPLE 3515 03/23/20 20:20:38 60:00 18680 11564 ims 3516 03/23/20 20:23:30 21:03 192 0 nxtgonpho no APPLE 3517 03/23/20 20:23:31 21:04 0 0 nxtgonpho no APPLE 3518 03/23/20 20:44:34 60:00 0 0 nxtgonpho no APPLE 3519 03/23/20 21:18:04 27:23 6648 5998 ims APPLE 3520 03/23/20 21:20:38 2:51 0 0 ims 3521 03/23/20 21:44:34 0:53 0 Onxtgonpho no APPLE MODEL 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 146 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171066 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343124 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. cro ‘•- .ai. AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Siam Conn. Tame (OTC) Originating Number ET Bytes Up Bytes Apn Dn flat lent MAKE MODEL 3522 03/23/20 21:45:26 2:04 192 0nxtgonpho no APPLE !PHONES 3523 03/23/20 21:45:27 2:04 0 0 nxtgonpho no APPLE !PHONES 3524 03/23/20 21:47:31 1:36 0 0 nxtgonpho no APPLE !PHONES 3525 03/23/20 21:48:32 0:35 7332 6052 ims APPLE !PHONES 3526 03/23/20 21:49:06 2:17 192 0 nstgenpho no APPLE !PHONES 3527 03/23/20 21:49:08 2:16 0 0 nxtgonpho no APPLE !PHONES 3528 03/23/20 21:51:24 6:04 192 0 nxtgonpho no APPLE !PHONES 3529 03/23/20 21:51:25 6:04 0 0 nxtgonpho no APPLE !PHONES 3530 03/23/20 21:53:02 22:28 11369 6710 ims 3531 03/23/20 21:57:29 3:45 0 0 nxtgonpho no APPLE !PHONES 3532 03/23/20 22:01:13 12:50 192 0 nxtgonpho no APPLE !PHONES 3533 03/23/20 22:01:14 12:51 0 0 nxtgonpho no APPLE !PHONES 3534 03/23/20 22:10:08 3:55 7160 6848 ims APPLE !PHONES 3535 03/23/20 22:10:10 3:55 6740 6896 ims APPLE !PHONES 3536 03/23/20 22:14:05 1:26 0 0 nxtgonpho ne APPLE !PHONES 3537 03/23/20 22:15:30 8:28 192 0 nxtgonpho no APPLE !PHONES 3538 03/23/20 22:15:31 8:28 0 0 nxtgonpho no APPLE !PHONES 3539 03/23/20 22:16:08 7:50 8234 6882 ims APPLE !PHONES 3540 03/23/20 22:16:09 7:50 6882 7970 ims APPLE !PHONES 3541 03/23/20 22:21:24 8:15 13552 7570 ims 3542 03/23/20 22:23:59 13:41 0 0nxtgonpho ne APPLE !PHONES 3543 03/23/20 22:36:39 1:01 7982 6106 ims APPLE !PHONES 3544 03/23/20 22:37:39 4:14 192 0 nxtgonpho no APPLE !PHONES 3545 03/23/20 22:37:41 4:13 0 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 147 customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171067 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343125 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number AI Bytes Up Bytes Apn MDR! IMSI MUM Dn MODEL 3546 03/23/20 22:40:10 1:43 7136 6758 ims APPLE 'PROMO 3547 03/23/20 22:40:11 1:43 6758 6872 ims APPLE 'PROMO 3548 03/23/20 22:41:54 1:34 0 0 nxtgenpho ne APPLE 'PROMO 3549 03/23/20 22:43:27 2:27 192 0 nxtgonpho ne APPLE 'PROMO 3550 03/23/20 22:43:28 2:27 0 0 nxtgenpho no APPLE 'PROMO 3551 03/23/20 22:45:00 0:54 8221 6934 ims APPLE 'PHONES 3552 03/23/20 22:45:01 0:54 6934 7957 ims APPLE 'PHONES 3553 03/23/20 22:45:55 1:30 0 0 nxtgonpho no APPLE 'PHONES 3554 03/23/20 22:46:06 1:19 6346 5812 ims APPLE 'PHONES 3555 03/23/20 22:47:24 0:37 192 Onstgonpho no APPLE 'PHONES 3556 03/23/20 22:47:25 0:37 0 0 nxtgonpho no APPLE 'PHONES 3557 03/23/20 22:48:02 41:42 0 0 nxtgonpho no APPLE 'PHONES 3558 03/23/20 22:48:21 18:31 7402 6103 ims APPLE 'PHONES 3559 03/23/20 23:06:52 60:00 18688 5212 ims APPLE 'PHONES 3560 03/23/20 23:29:43 2:04 192 Onstgonpho ne APPLE 'PHONES 3561 03/23/20 23:29:44 2:04 0 0 nxtgonpho no APPLE 'PHONES 3562 03/23/20 23:31:48 6:59 0 0 nxtgonpho no APPLE 'PHONES 3563 03/23/20 23:38:46 2:03 192 0 nxtgonpho no APPLE !PHONES 3564 03/23/20 23:38:47 2:03 0 0 nxtgonpho no APPLE 'PHONES 3565 03/23/20 23:40:50 4:36 0 0 nxtgonpho no APPLE 'PHONES 3566 03/23/20 23:45:25 2:04 192 0 nxtgonpho no APPLE 'PHONES 3567 03/23/20 23:45:27 2:03 0 0 nxtgonpho no APPLE 'PHONES 3568 03/23/20 23:47:30 5:32 0 0 nxtgonpho no APPLE 'PHONES 3569 03/23/20 23:53:01 8:37 192 0 nxtgonpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 148 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171068 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343126 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ce. ‘ft.ai. AT&T Run Date: Run Time: Data Usage For: Item Conn. Data 06/17/2020 Conn. Time (UTC) Originating Number BT Bytes Up Bytes Apn Dn EMBI IMSI Man MODEL 3570 03/23/20 23:53:02 8:37 0 0 nxtgenpho ne APPLE !PHONES 3571 03/24/20 00:01:39 60:00 0 0 nxtgenpho ne APPLE !PHONES 3572 03/24/20 00:06:52 60:00 30384 14136 ims APPLE !PHONES 3573 03/24/20 00:20:08 0:35 5279 27348 ims APPLE !PHONES 3574 03/24/20 01:01:39 53:19 0 Onxtgonpho ne APPLE !PHONES 3575 03/24/20 01:06:52 49:46 10128 3252 ims APPLE !PHONES 3576 03/24/20 01:46:13 0:00 0 0 ims APPLE !PHONES 3577 03/24/20 01:46:21 8:37 6674 5904 ims APPLE !PHONES 3578 03/24/20 01:54:57 2:03 192 Onxtgonpho ne APPLE !PHONES 3579 03/24/20 01:54:58 2:03 0 0 nxtgenpho ne APPLE !PHONES 3580 03/24/20 01:57:01 1:24 0 0 nxtgenpho ne APPLE !PHONES 3581 03/24/20 01:57:20 1:05 8148 6948 ims APPLE !PHONES 3582 03/24/20 01:58:24 2:10 192 Onxtgonpho ne APPLE !PHONES 3583 03/24/20 01:58:25 2:10 0 Onxtgonpho ne APPLE !PHONES 3584 03/24/20 01:58:36 1:58 6244 6690 ims APPLE !PHONES 3585 03/24/20 01:58:37 1:58 6690 5980 ims APPLE !PHONES 3586 03/24/20 02:00:35 18:49 0 Onxtgonpho ne APPLE !PHONES 3587 03/24/20 02:01:26 12:34 13808 7971 ims 3588 03/24/20 02:05:28 1:09 6674 5980 ims APPLE !PHONES 3589 03/24/20 02:06:37 7:23 5056 1572 ims APPLE !PHONES 3590 03/24/20 02:14:00 0:57 6672 5997 ims APPLE !PHONES 3591 03/24/20 02:14:57 44:43 10484 3408 ims APPLE !PHONES 3592 03/24/20 02:19:23 2:03 192 Onxtgonpho ne APPLE !PHONES 3593 03/24/20 02:19:24 2:03 0 0 nxtgenpho ne APPLE !PHONES 3594 03/24/20 02:21:27 47:19 0 0 nxtgenpho ne APPLE !PHONES 3595 03/24/20 02:54:19 13:51 6676 5998 ims APPLE !PHONES 3596 03/24/20 03:08:10 60:00 15232 5748 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 149 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171069 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343127 ---PAGE BREAK--- MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e s, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. T11011 (UTC) Originating Number ET Bytes Up Bytes Apn Dn DMZ IMBI WANE MODEM 3597 03/24/20 03:08:45 2:10 192 Onxtgonpho no APPLE 'PEONES 3598 03/24/20 03:08:46 2:10 0 0 nxtgonpho no APPLE 'PEONES 3599 03/24/20 03:10:56 60:00 0 0 nxtgonpho no APPLE !PEONES 3600 03/24/20 04:01:33 37:51 9266 7304 ims APPLE !PHONES 3601 03/24/20 04:08:10 3:35 0 0 ims APPLE !PHONES 3602 03/24/20 04:10:56 28:28 0 0 nxtgonpho no APPLE !PHONES 3603 03/24/20 04:39:23 130:17 192 0 mmtgonpho no APPLE !PHONES 3604 03/24/20 04:39:24 60:00 0 0 mmtgonpho no APPLE !PHONES 3605 03/24/20 05:39:24 60:00 0 0 nxtgonpho no APPLE 'PHONES 3606 03/24/20 05:50:02 40:18 12957 7433 ims 3607 03/24/20 06:39:24 10:17 0 0 nxtgonpho no APPLE 'PHONES 3608 03/24/20 06:54:54 60:00 18413 10174 ims 3609 03/24/20 07:54:54 60:00 8960 3160 ims 3610 03/24/20 08:54:54 60:00 11532 4316 ims 3611 03/24/20 09:54:54 60:00 8388 2928 ims 3612 03/24/20 10:02:03 127:28 192 Onxtgonpho no APPLE 'PHONES 3613 03/24/20 10:02:04 60:00 0 0 nxtgonpho no APPLE 'PHONES 3614 03/24/20 10:54:54 60:00 15188 5060 ims 3615 03/24/20 11:02:04 60:00 0 0 nxtgonpho no APPLE 'PHONES 3616 03/24/20 11:54:54 60:00 16512 4844 ims 3617 03/24/20 12:02:04 7:28 0 0 nxtgonpho no APPLE 'PHONES 3618 03/24/20 12:09:32 17:15 0 0 nxtgonpho no APPLE !PHONES 3619 03/24/20 12:26:46 2:16 192 0 nxtgonpho no APPLE !PHONES 3620 03/24/20 12:26:48 2:15 0 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 150 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171070 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343128 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e s, AT&T Run Data: Run Tine: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time luTC) Originating ET Bytes Up Bytes Apn Dn EBBE MI= MAKE MODEL 3621 03/24/20 12:29:03 8:08 0 0 nxtgenpho no APPLE 'PHONES 3622 03/24/20 12:37:11 2:05 192 0 nxtgenpho no APPLE 'PHONES 3623 03/24/20 12:37:12 2:05 0 0 nxtgenpho no APPLE 'PHONES 3624 03/24/20 12:39:17 4:35 0 0 nxtgenpho no APPLE 'PHONES 3625 03/24/20 12:43:51 8:56 192 0 nxtgonpho no APPLE 'PHONES 3626 03/24/20 12:43:52 8:56 0 0 nxtgonpho no APPLE 'PHONES 3627 03/24/20 12:52:48 1:51 0 0 nxtgonpho ne APPLE 'PHONES 3628 03/24/20 12:54:38 17:44 192 0 nxtgonpho ne APPLE 'PHONES 3629 03/24/20 12:54:39 17:44 0 0 nxtgonpho ne APPLE 'PHONES 3630 03/24/20 12:54:54 60:00 7388 2928 ins 3631 03/24/20 13:12:23 0:39 0 0 nxtgonpho ne APPLE 'PHONES 3632 03/24/20 13:13:01 2:04 192 0 nxtgonpho no APPLE 'PHONES 3633 03/24/20 13:13:02 2:04 0 0 nxtgenpho no APPLE 'PHONES 3634 03/24/20 13:15:06 1:20 0 0 nxtgonpho no APPLE 'PHONES 3635 03/24/20 13:16:25 4:53 192 0 nxtgonpho ne APPLE 'PHONES 3636 03/24/20 13:16:27 4:52 0 0 nxtgenpho ne APPLE 'PHONES 3637 03/24/20 13:21:19 24:18 0 0 nxtgonpho ne APPLE 'PHONES 3638 03/24/20 13:45:36 2:05 192 0 nxtgonpho ne APPLE 'PHONES 3639 03/24/20 13:45:38 2:04 0 0 nxtgenpho ne APPLE 'PHONES 3640 03/24/20 13:47:42 14:39 0 0 nxtgonpho ne APPLE 'PHONES 3641 03/24/20 13:54:54 11:31 3516 1340 ins AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 151 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171071 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343129 ---PAGE BREAK--- MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ce. .1/4-fa AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. TIM* (OTC) Originating Number ET Bytes Up Bytes Apn Dn EBBS INSI MAKE MODEL 3642 03/24/20 14:02:20 2:42 192 0 nxtgenpho no APPLE !PHONES 3643 03/24/20 14:02:21 2:42 0 0 nxtgenpho no APPLE 'PHONES 3644 03/24/20 14:05:03 68:36 192 0 nxtgenpho no APPLE 'PHONES 3645 03/24/20 14:05:04 60:00 0 0 nxtgenpho ne APPLE 'PHONES 3646 03/24/20 14:06:04 8:43 7264 6720 ims APPLE 'PHONES 3647 03/24/20 14:06:05 8:43 6720 7000 Less APPLE 'PHONES 3648 03/24/20 14:06:25 11:13 12288 7988 Less 3649 03/24/20 14:14:47 35:50 7264 6748 Less APPLE 'PHONES 3650 03/24/20 14:14:48 35:50 6748 7000 Less APPLE 'PHONES 3651 03/24/20 14:17:38 33:40 21172 10440 Less 3652 03/24/20 14:50:37 23:02 7248 6746 Less APPLE 'PHONES 3653 03/24/20 14:50:38 23:02 6746 6984 Less APPLE 'PHONES 3654 03/24/20 14:51:18 60:00 17051 9621 Less 3655 03/24/20 15:05:04 8:36 0 Onmtgonpho ne APPLE !PHONES 3656 03/24/20 15:13:40 3:00 0 0 nxtgenpho ne APPLE 'PHONES 3657 03/24/20 15:16:39 2:21 192 0 nxtgenpho ne APPLE 'PHONES 3658 03/24/20 15:16:41 2:20 0 0 nxtgenpho ne APPLE 'PHONES 3659 03/24/20 15:19:01 22:37 0 0 nxtgenpho ne APPLE 'PHONES 3660 03/24/20 15:41:37 2:09 192 0 nxtgenpho ne APPLE 'PHONES 3661 03/24/20 15:41:38 2:09 0 0 nxtgenpho ne APPLE 'PHONES 3662 03/24/20 15:43:48 11:43 0 0 nxtgenpho ne APPLE 'PHONES 3663 03/24/20 15:51:18 29:34 4856 2572 Less 3664 03/24/20 15:55:29 2:04 192 0 nxtgenpho ne APPLE 'PHONES 3665 03/24/20 15:55:31 2:03 0 0 nxtgenpho ne APPLE 'PHONES 3666 03/24/20 15:57:34 23:48 0 0 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 152 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171072 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343130 ---PAGE BREAK--- MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ‘•- . 20 AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 St= Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn flat INSI HAKE MODEL 3667 03/24/20 16:13:25 0:07 0 0 imp APPLE 'PHONES 3668 03/24/20 16:14:29 6:53 7398 6106 imp APPLE 'PHONES 3669 03/24/20 16:21:21 8:54 192 Onxtgonpho no APPLE 'PHONES 3670 03/24/20 16:21:23 8:53 0 Onxtgonpho no APPLE 'PHONES 3671 03/24/20 16:23:53 6:22 6244 6674 imp APPLE 'PHONES 3672 03/24/20 16:23:54 6:22 6674 5980 imp APPLE 'PHONES 3673 03/24/20 16:30:16 60:00 0 Onxtgonpho no APPLE 'PHONES 3674 03/24/20 16:30:26 0:59 8150 6962 imp APPLE 'PHONES 3675 03/24/20 16:31:25 6:14 3748 1464 imp APPLE 'PHONES 3676 03/24/20 16:37:39 15:42 7408 6122 imp APPLE 'PHONES 3677 03/24/20 16:53:21 60:00 12244 5252 imp APPLE 'PHONES 3678 03/24/20 17:30:16 41:13 0 Onxtgonpho ne APPLE 'PHONES 3679 03/24/20 17:53:21 60:00 8620 3192 imp APPLE 'PHONES 3680 03/24/20 18:11:28 1:48 192 Onxtgonpho ne APPLE 'PHONES 3681 03/24/20 18:11:29 1:48 0 Onxtgonpho ne APPLE 'PHONES 3682 03/24/20 18:13:17 14:27 192 Onxtgonpho ne APPLE 'PHONES 3683 03/24/20 18:13:18 14:27 0 Onxtgonpho ne APPLE 'PHONES 3684 03/24/20 18:27:45 1:04 0 Onxtgonpho ne APPLE 'PHONES 3685 03/24/20 18:28:48 15:14 192 Onxtgonpho no APPLE 'PHONES 3686 03/24/20 18:28:49 15:14 0 Onxtgonpho no APPLE 'PHONES 3687 03/24/20 18:44:03 0:41 0 Onxtgonpho no APPLE 'PHONES 3688 03/24/20 18:44:43 8:25 192 Onxtgonpho no APPLE 'PHONES 3689 03/24/20 18:44:45 8:24 0 Onxtgonpho ne APPLE 'PHONES 3690 03/24/20 18:53:09 13:16 0 Onxtgonpho ne APPLE 'PHONES 3691 03/24/20 18:53:21 21:37 5104 2068 imp APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 153 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171073 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343131 ---PAGE BREAK--- PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. TIM* (OTC/ Originating Number BT Bytes Up Bytes Apn Dn DELT IMBI MaKE MODEL 3692 03/24/20 19:06:24 14:58 192 Onxtgonpho ne APPLE 'PEONES 3693 03/24/20 19:06:25 14:58 0 Onxtgonpho ne APPLE 'PEONES 3694 03/24/20 19:10:03 11:19 6228 6732 ims APPLE !PEONES 3695 03/24/20 19:10:04 11:19 6664 5964 ims APPLE !PHONES 3696 03/24/20 19:21:23 6:31 0 Onxtgonpho ne APPLE !PHONES 3697 03/24/20 19:27:53 2:03 192 0 nxtgonpho ne APPLE !PHONES 3698 03/24/20 19:27:54 2:03 0 0 nxtgonpho no APPLE !PHONES 3699 03/24/20 19:29:57 19:58 0 0 nxtgenpho no APPLE !PHONES 3700 03/24/20 19:40:37 9:18 9188 8084 ims APPLE !PHONES 3701 03/24/20 19:49:54 8:17 192 Onxtgonpho ne APPLE !PHONES 3702 03/24/20 19:49:55 8:17 0 0 nxtgonpho ne APPLE !PHONES 3703 03/24/20 19:53:52 4:19 6244 6670 ims APPLE !PHONES 3704 03/24/20 19:53:53 4:19 6670 5980 ims APPLE !PHONES 3705 03/24/20 19:57:07 60:00 20581 10944 ims 3706 03/24/20 19:58:12 2:08 0 0 nxtgenpho ne APPLE !PHONES 3707 03/24/20 20:00:20 0:59 0 0 nxtgonpho ne APPLE !PHONES 3708 03/24/20 20:01:19 20:59 192 0 nxtgonpho no APPLE !PHONES 3709 03/24/20 20:01:20 20:59 0 0 nxtgonpho no APPLE !PHONES 3710 03/24/20 20:22:19 9:12 0 0 nxtgonpho no APPLE !PHONES 3711 03/24/20 20:31:30 2:57 192 0 nxtgonpho no APPLE !PHONES 3712 03/24/20 20:31:31 2:57 0 0 nxtgonpho no APPLE !PHONES 3713 03/24/20 20:34:28 0:05 0 0 nxtgonpho no APPLE !PHONES 3714 03/24/20 20:36:13 35:36 192 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 154 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171074 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343132 ---PAGE BREAK--- MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Originating BT Time Number (OTC) Bytes Up Bytes Apn MMAI IMSI MAR On MODEL 3715 03/24/20 20:36:14 35:36 0 Onmtgonpho ne APPLE 'PEONES 3716 03/24/20 20:57:07 50:26 0 0 ims 3717 03/24/20 21:03:22 60:00 14972 9410 ims 3718 03/24/20 21:11:50 60:00 0 Onmtgonpho ne APPLE 'PEONES 3719 03/24/20 21:47:33 1:31 6674 5979 ims APPLE 'PEONES 3720 03/24/20 21:49:04 16:16 3640 1432 ims APPLE 'PEONES 3721 03/24/20 22:03:22 1:58 0 0 ims 3722 03/24/20 22:05:20 18:30 6672 5998 ims APPLE IPEOME8 3723 03/24/20 22:11:50 33:01 0 Onxtgonpho ne APPLE 'PHONES 3724 03/24/20 22:23:50 60:00 15968 4888 ims APPLE 'PHONES 3725 03/24/20 22:44:50 2:16 192 0 nxtgonpho ne APPLE 'PHONES 3726 03/24/20 22:44:51 2:16 0 Onxtgonpho ne APPLE 'PHONES 3727 03/24/20 22:47:07 19:34 0 0 nxtgonpho ne APPLE !PHONES 3728 03/24/20 23:06:40 24:26 192 0 nxtgonpho ne APPLE 'PHONES 3729 03/24/20 23:06:41 24:26 0 0 nxtgonpho ne APPLE !PHONES 3730 03/24/20 23:23:50 60:00 31544 23152 ims APPLE 'PHONES 3731 03/24/20 23:31:07 14:04 0 0 nxtgonpho ne APPLE !PHONES 3732 03/24/20 23:44:21 0:12 15211 33872 ims APPLE 'PHONES 3733 03/24/20 23:44:43 0:34 14704 31615 ims APPLE 'PHONES 3734 03/24/20 23:45:10 2:17 192 Onmtgonpho ne APPLE 'PHONES 3735 03/24/20 23:45:12 2:16 0 0 nxtgonpho ne APPLE 'PHONES 3736 03/24/20 23:47:28 35:37 0 0 nxtgonpho ne APPLE !PHONES 3737 03/25/20 00:23:04 2:10 192 0 nxtgonpho ne APPLE !PHONES 3738 03/25/20 00:23:06 2:09 0 0 nxtgonpho ne APPLE !PHONES 3739 03/25/20 00:23:50 60:00 8496 3036 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 155 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171075 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343133 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. ‘•.. .a# AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn DOLT INSI MAKE MODEL 3740 03/25/20 00:25:15 50:25 0 Onxtgonpho ne APPLE !PHONES 3741 03/25/20 01:15:40 14:26 192 0 nxtgonpho ne APPLE !PHONES 3742 03/25/20 01:15:41 14:26 0 0 nxtgonpho ne APPLE !PHONES 3743 03/25/20 01:23:50 41:29 12904 3780 ims APPLE !PHONES 3744 03/25/20 01:30:07 25:21 0 Onxtgonpho no APPLE !PHONES 3745 03/25/20 01:55:27 2:04 192 0 nxtgonpho no APPLE !PHONES 3746 03/25/20 01:55:28 2:04 0 0 nxtgenpho no APPLE !PHONES 3747 03/25/20 01:57:32 1:59 0 0 nxtgonpho no APPLE !PHONES 3748 03/25/20 01:59:30 8:33 192 0 nxtgonpho no APPLE !PHONES 3749 03/25/20 01:59:32 8:32 0 0 nxtgonpho no APPLE !PHONES 3750 03/25/20 02:00:26 7:37 6243 6742 igloo APPLE !PHONES 3751 03/25/20 02:00:28 7:36 6674 5979 igloo APPLE !PHONES 3752 03/25/20 02:08:04 55:21 0 Onxtgonpho ne APPLE !PHONES 3753 03/25/20 02:09:11 5:58 8830 7985 ism APPLE !PHONES 3754 03/25/20 02:15:09 6:05 3640 1464 ism APPLE !PHONES 3755 03/25/20 02:21:15 42:10 12156 9242 ism APPLE !PHONES 3756 03/25/20 03:03:24 40:00 192 Onxtgonpho ne APPLE !PHONES 3757 03/25/20 03:03:25 60:00 0 0 nxtgenpho ne APPLE !PHONES 3758 03/25/20 03:04:07 16:25 9741 6354 ism 3759 03/25/20 03:17:41 20:00 7337 8822 ism APPLE !PHONES 3760 03/25/20 03:17:42 31:54 11418 8397 ism APPLE !PHONES 3761 03/25/20 03:37:41 11:54 1324 2596 ism APPLE !PHONES 3762 03/25/20 03:48:27 5:50 8437 6426 ism 3763 03/25/20 03:49:35 12:57 7374 6800 ism APPLE !PHONES 3764 03/25/20 03:49:36 12:57 6800 7110 igloo APPLE !PHONES 3765 03/25/20 03:54:17 10:12 9261 6696 igloo 3766 03/25/20 04:02:32 14:03 6370 6676 igloo APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 156 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171076 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343134 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. cat. AT&T Run Date: Run Time: Data usage for: Item conn. Data 06/17/2020 ISM= Conn. Time (OTC) Originating Number ET Bytes up Bytes Apn L@3 IMSI MAKE on MODEL 3767 03/25/20 04:02:33 14:03 6676 6106 ims APPLE 'PEONES 3768 03/25/20 04:03:25 60:00 0 0 nxtgenpho no APPLE 'PEONES 3769 03/25/20 04:07:15 14:19 8261 6177 ims 3770 03/25/20 04:16:34 75:27 9874 12042 ims APPLE IPEOME8 3771 03/25/20 04:16:35 60:00 11934 9610 ims APPLE 'PHONES 3772 03/25/20 05:03:25 28:37 0 0 nxtgenpho ne APPLE 'PHONES 3773 03/25/20 05:16:35 15:27 0 0 ims APPLE 'PHONES 3774 03/25/20 05:32:01 0:23 192 0 nxtgenpho no APPLE 'PHONES 3775 03/25/20 05:32:03 0:22 0 0 nxtgenpho no APPLE 'PHONES 3776 03/25/20 05:32:25 19:15 0 0 nxtgonpho ne APPLE 'PHONES 3777 03/25/20 05:32:29 17:46 6780 5938 ims APPLE 'PHONES 3778 03/25/20 05:50:15 60:00 11920 4500 ims APPLE 'PHONES 3779 03/25/20 05:51:39 2:42 192 Onstgonpho no APPLE 'PHONES 3780 03/25/20 05:51:40 2:42 0 0 nxtgenpho no APPLE 'PHONES 3781 03/25/20 05:54:22 0:34 0 0 nxtgenpho no APPLE 'PHONES 3782 03/25/20 05:54:56 2:04 192 0 nxtgonpho no APPLE 'PHONES 3783 03/25/20 05:54:57 2:04 0 0 nxtgonpho no APPLE 'PHONES 3784 03/25/20 05:57:00 4:19 0 0 nxtgonpho ne APPLE 'PHONES 3785 03/25/20 06:01:18 35:56 192 0 nxtgonpho ne APPLE 'PHONES 3786 03/25/20 06:01:19 35:56 0 0 nxtgonpho ne APPLE 'PHONES 3787 03/25/20 06:37:15 29:02 0 0 nxtgonpho ne APPLE !PHONES 3788 03/25/20 06:50:15 60:00 6956 2912 ims APPLE 'PHONES 3789 03/25/20 07:06:16 2:03 192 0 nxtgonpho ne APPLE 'PHONES 3790 03/25/20 07:06:17 2:03 0 0 nxtgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 157 customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171077 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343135 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:58:58pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e s, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. T1100 (OTC) Originating Number AT Bytes Up Bytes Apn DMZ IMBI MAR Dn MODEL 3791 03/25/20 07:08:20 24:31 0 0 nactgonphe ne APPLE 'PEONES 3792 03/25/20 07:32:50 7:25 192 0 nactgonphe ne APPLE 'PEONES 3793 03/25/20 07:32:51 7:25 0 0 nactgonphe ne APPLE 'PEONES 3794 03/25/20 07:40:16 3:48 0 0 nactgonphe ne APPLE 'PEONES 3795 03/25/20 07:44:03 14:49 192 0 nactgonphe ne APPLE 'PHONES 3796 03/25/20 07:44:04 14:49 0 0 nactgonphe ne APPLE !PHONES 3797 03/25/20 07:50:15 60:00 8372 2928 isms APPLE !PHONES 3798 03/25/20 07:58:53 60:00 0 0 nactgonphe ne APPLE !PHONES 3799 03/25/20 08:50:15 60:00 8388 3036 isms APPLE !PHONES 3800 03/25/20 08:58:53 42:29 0 0 nottgonphe ne APPLE !PHONES 3801 03/25/20 09:41:21 180:48 192 0 nottgonphe ne APPLE !PHONES 3802 03/25/20 09:41:22 60:00 0 0 nactgonphe ne APPLE !PHONES 3803 03/25/20 09:50:15 60:00 13804 6060 isms APPLE !PHONES 3804 03/25/20 10:41:22 60:00 0 0 nottgonphe ne APPLE !PHONES 3805 03/25/20 10:50:15 60:00 7064 3036 isms APPLE !PHONES 3806 03/25/20 11:41:22 60:00 0 0 nottgonphe ne APPLE !PHONES 3807 03/25/20 11:50:15 60:00 8712 3160 isms APPLE !PHONES 3808 03/25/20 12:41:22 0:48 0 0 nottgonphe ne APPLE !PHONES 3809 03/25/20 12:42:10 3:38 0 0 nottgonphe ne APPLE !PHONES 3810 03/25/20 12:45:48 135:22 192 0 nottgonphe ne APPLE !PHONES 3811 03/25/20 12:45:49 60:00 0 0 nottgonphe ne APPLE !PHONES 3812 03/25/20 12:50:15 60:00 11920 4268 isms APPLE !PHONES 3813 03/25/20 13:45:49 60:00 0 0 nottgonphe ne APPLE !PHONES 3814 03/25/20 13:50:15 37:01 6148 1480 Lms APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 158 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171078 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343136 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 4.45, AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 MS= Conn. MAO (OTC) Originating Number ET Bytes Up Bytes Apn Dn LEST MAKE MODEL 3815 03/25/20 14:25:56 35:14 6334 6648 ims APPLE 'PEONES 3816 03/25/20 14:25:57 35:14 6648 6070 ims APPLE 'PEONES 3817 03/25/20 14:27:16 60:00 23909 10568 ims 3818 03/25/20 14:45:49 15:22 0 0 nxtgonpho no APPLE 'PEONES 3819 03/25/20 15:01:11 40:00 192 0 nxtgonpho no APPLE 'PEONES 3820 03/25/20 15:01:12 60:00 0 0 nxtgonpho no APPLE 'PEONES 3821 03/25/20 15:22:06 20:00 7373 6800 ims APPLE !PEONES 3822 03/25/20 15:22:07 60:00 6800 7109 ims APPLE !PEONES 3823 03/25/20 15:27:16 2:33 0 0 ims 3824 03/25/20 15:29:49 60:00 17160 9341 ims 3825 03/25/20 16:01:12 46:50 0 0 nxtgonpho no APPLE IPHONA8 3826 03/25/20 16:22:07 25:55 0 0 ims APPLE 'PHONES 3827 03/25/20 16:29:49 60:00 9804 3160 ims 3828 03/25/20 16:48:02 60:00 0 0 nxtgonpho no APPLE 'PHONES 3829 03/25/20 17:12:59 60:00 19697 10560 isms 3830 03/25/20 17:29:49 60:00 0 0 ims 3831 03/25/20 17:48:02 20:35 0 0 nxtgonpho no APPLE 'PHONES 3832 03/25/20 18:08:36 3:40 192 0 nxtgonpho no APPLE 'PHONES 3833 03/25/20 18:08:37 3:40 0 0 nxtgonpho no APPLE 'PHONES 3834 03/25/20 18:12:17 9:16 192 0 nxtgonpho no APPLE !PHONES 3835 03/25/20 18:12:18 9:16 0 0 nxtgonpho no APPLE !PHONES 3836 03/25/20 18:12:59 60:00 13168 6992 ims 3837 03/25/20 18:21:34 2:10 0 0 nxtgonpho no APPLE !PHONES 3838 03/25/20 18:23:43 9:06 192 0 nxtgonpho no APPLE !PHONES 3839 03/25/20 18:23:44 9:06 0 0 nxtgonpho no APPLE !PHONES 3840 03/25/20 18:29:49 60:00 0 0 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 159 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171079 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343137 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro ‘•-.a. ° AT&T Run Date: Run Time: Data Usage For: Item Conn. Data 06/17/2020 Conn. Time (OTC/ Originating ST Bytes Op Bytes Apn Dn DOM INSI MAKE MODEL 3841 03/25/20 18:32:50 60:00 0 0 nottgonphe ne APPLE !PHONES 3842 03/25/20 19:12:59 60:00 13368 4764 ims 3843 03/25/20 19:29:49 57:37 0 0 ims 3844 03/25/20 19:32:50 8:17 0 Onmtgonphe ne APPLE !PHONES 3845 03/25/20 19:41:06 2:06 192 Onactgonphe ne APPLE !PHONES 3846 03/25/20 19:41:07 2:06 0 Onmtgonphe ne APPLE !PHONES 3847 03/25/20 19:43:13 1:41 0 0 ructgonphe ne APPLE !PHONES 3848 03/25/20 19:44:53 3:52 192 0 ructganpho ne APPLE !PHONES 3849 03/25/20 19:44:54 3:52 0 0 nxtganpho ne APPLE !PHONES 3850 03/25/20 19:48:46 0:06 0 0 nxtganpho ne APPLE !PHONES 3851 03/25/20 19:49:14 0:06 0 0 nxtganpho ne APPLE !PHONES 3852 03/25/20 19:49:42 2:28 192 0 nxtganpho ne APPLE !PHONES 3853 03/25/20 19:49:43 2:28 0 0 nxtganpho ne APPLE !PHONES 3854 03/25/20 19:52:10 7:46 192 0 ructganpho ne APPLE !PHONES 3855 03/25/20 19:52:11 7:46 0 0 ructganpho ne APPLE !PHONES 3856 03/25/20 19:59:57 9:08 192 0 ructganpho ne APPLE !PHONES 3857 03/25/20 19:59:58 9:08 0 0 ructganpho ne APPLE !PHONES 3858 03/25/20 20:09:06 3:38 192 0 ructganpho ne APPLE !PHONES 3859 03/25/20 20:09:07 3:38 0 0 ructganpho no APPLE !PHONES 3860 03/25/20 20:12:45 22:16 0 0 nxtganpho no APPLE !PHONES 3861 03/25/20 20:12:59 19:28 216 108 ims 3862 03/25/20 20:27:23 60:00 11861 7496 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 160 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171080 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343138 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC/ Originating Number ET Bytes Up Byte. Apn Dn DMZ INS! NAVE MODEL 3863 03/25/20 20:35:00 15:10 192 0 nstgenpho ne APPLE IPACEEB 3864 03/25/20 20:35:01 15:10 0 0 nottgonpho ne APPLE IPACEEB 3865 03/25/20 20:50:11 1:03 0 0 nottgonphe ne APPLE IPACEEB 3866 03/25/20 20:51:13 8:28 192 0 nottgonpho ne APPLE IPACEEB 3867 03/25/20 20:51:14 8:28 0 0 nottgonpho ne APPLE !PHONES 3868 03/25/20 20:59:42 15:47 0 0 nottgonpho ne APPLE !PHONES 3869 03/25/20 21:14:38 0:00 0 0 ism APPLE !PHONES 3870 03/25/20 21:15:28 8:31 192 0 nottgonpho ne APPLE !PHONES 3871 03/25/20 21:15:29 8:31 0 0 nottgonpho ne APPLE !PHONES 3872 03/25/20 21:15:37 21:10 9247 6126 ism 3873 03/25/20 21:24:00 60:00 0 o nactgenpho ne APPLE !PHONES 3874 03/25/20 21:27:23 58:11 0 0 ism 3875 03/25/20 21:40:16 60:00 15518 8368 ism 3876 03/25/20 22:24:00 51:30 0 0 nactgonpho ne APPLE !PHONES 3877 03/25/20 22:25:34 1:12 6676 5998 ism APPLE !PHONES 3878 03/25/20 22:26:46 60:00 11168 4236 ism APPLE !PHONES 3879 03/25/20 22:40:16 60:00 0 0 ism 3880 03/25/20 23:15:29 2:03 192 0 nmtgonpho no APPLE !PHONES 3881 03/25/20 23:15:30 2:03 0 0 nmtgonpho no APPLE !PHONES 3882 03/25/20 23:17:34 60:00 0 0 nmtgonpho no APPLE !PHONES 3883 03/25/20 23:26:46 60:00 7188 2896 ism APPLE !PHONES 3884 03/25/20 23:40:16 60:00 0 0 ism 3885 03/26/20 00:17:34 51:03 0 0 nmtgonpho no APPLE !PHONES 3886 03/26/20 00:26:46 60:00 8836 3052 ism APPLE !PHONES 3887 03/26/20 00:40:16 60:00 0 0 ism AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 161 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171081 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343139 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. k.;:sa ls# AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn EBB! INSI MAKE MODEL 3888 03/26/20 01:08:37 5:55 192 Onactgonpho no APPLE !PHONES 3889 03/26/20 01:08:38 5:55 0 0 nactgonpho no APPLE !PHONES 3890 03/26/20 01:14:33 60:00 0 0 nactgonpho no APPLE !PHONES 3891 03/26/20 01:26:46 60:00 15000 4656 ism APPLE !PHONES 3892 03/26/20 01:40:16 45:16 0 0 ism 3893 03/26/20 02:14:33 52:17 0 Onactgonpho no APPLE !PHONES 3894 03/26/20 02:26:46 60:00 0 0 ism APPLE !PHONES 3895 03/26/20 02:29:23 60:00 15093 8712 ism 3896 03/26/20 03:26:46 60:00 0 0 ism APPLE !PHONES 3897 03/26/20 03:29:23 60:00 7048 2696 ism 3898 03/26/20 04:26:46 60:00 0 0 ism APPLE !PHONES 3899 03/26/20 04:29:23 60:00 6924 2556 ism 3900 03/26/20 05:26:46 58:57 0 0 isms APPLE !PHONES 3901 03/26/20 05:29:23 60:00 9960 3284 isms 3902 03/26/20 06:29:23 60:00 15636 6124 isms 3903 03/26/20 07:29:23 60:00 6924 2680 ism 3904 03/26/20 08:29:23 60:00 8620 3052 ism 3905 03/26/20 09:29:23 60:00 6924 2680 ism 3906 03/26/20 10:29:23 60:00 11904 4268 ism 3907 03/26/20 11:29:23 60:00 8496 3160 ism 3908 03/26/20 12:29:23 60:00 11796 4536 ism 3909 03/26/20 13:29:23 60:00 13476 4732 ism 3910 03/26/20 14:29:23 60:00 8496 3020 ism 3911 03/26/20 15:29:23 60:00 8172 3036 ism 3912 03/26/20 16:29:23 5:29 5088 2496 ism 3913 03/26/20 16:38:56 60:00 20749 9747 ism 3914 03/26/20 17:38:56 60:00 10068 3160 ism 3915 03/26/20 18:38:56 60:00 6924 2680 ism 3916 03/26/20 19:38:56 60:00 10240 4144 ism 3917 03/26/20 20:38:56 60:00 7032 2788 ism 3918 03/26/20 21:38:56 60:00 10548 4396 ism 3919 03/26/20 22:38:56 60:00 8636 3036 ism 3920 03/26/20 23:38:56 60:00 18284 9756 ism AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 162 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171082 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343140 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e s, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Tame (OTC) Originating Number ET Bytes Up Bytes Dn Apn EMMI INS! NAPS -fly. 3921 03/26/20 23:55:40 0:17 0 2381 Las -1 3922 03/27/20 00:38:56 60:00 13584 4840 Las -1 3923 03/27/20 01:38:56 60:00 20328 11224 Las -1 3924 03/27/20 02:21:27 0:06 0 2069 Las -1 3925 03/27/20 02:38:56 60:00 13476 5124 Las -1 3926 03/27/20 03:38:56 60:00 7248 2804 Las -1 3927 03/27/20 04:38:56 60:00 11796 5160 Las -1 3928 03/27/20 05:38:56 60:00 10176 4068 Las -1 3929 03/27/20 06:38:56 60:00 9960 3176 Las -1 3930 03/27/20 07:38:56 60:00 10440 4504 Las -1 3931 03/27/20 08:38:56 60:00 10068 3392 Las -1 3932 03/27/20 09:38:56 60:00 12012 4500 Las -1 3933 03/27/20 10:38:56 60:00 8388 2928 Las -1 3934 03/27/20 11:38:56 60:00 8728 3052 Las -1 3935 03/27/20 12:38:56 26:35 15293 7737 Las -1 3936 03/27/20 13:10:29 60:00 33905 20494 Las -1 3937 03/27/20 14:05:29 0:13 2956 16052 Las -1 3938 03/27/20 14:10:29 60:00 6816 2772 Las -1 3939 03/27/20 15:10:29 60:00 8604 3176 Las -1 3940 03/27/20 16:10:29 60:00 10880 3316 Las -1 3941 03/27/20 17:08:19 23:27 8133 6105 Las -1 3942 03/27/20 17:10:29 0:15 0 0 Las -1 3943 03/27/20 17:27:52 47:51 14832 7978 Las -1 3944 03/27/20 18:11:52 9:52 8647 6516 Las -1 3945 03/27/20 18:17:27 60:00 15331 8752 Las -1 3946 03/27/20 19:17:27 13:38 0 0 Las -1 3947 03/27/20 19:27:33 24:13 8189 6016 Las -1 3948 03/27/20 19:49:11 60:00 10073 6602 Las -1 3949 03/27/20 20:02:53 60:00 62408 29060 Las -1 3950 03/27/20 20:17:34 0:04 0 7574 Las -1 3951 03/27/20 20:49:11 60:00 0 0 Las -1 3952 03/27/20 20:52:35 0:07 0 8835 Las -1 3953 03/27/20 21:02:53 60:00 8836 3252 Las -1 3954 03/27/20 21:49:11 60:00 0 0 Las -1 3955 03/27/20 22:02:53 60:00 6816 2788 Las -1 3956 03/27/20 22:49:11 60:00 0 0 Las -1 AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 163 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171083 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343141 ---PAGE BREAK--- MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 1/44% AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 MI= Conn. Time (UTC) Originating Number ET Bytos Up Bytes Dn Apn EMBI MAXIS MOBIL 3957 03/27/20 23:02:53 60:00 10408 3376 ims -1 3958 03/27/20 23:49:11 16:25 0 0 ims -1 3959 03/28/20 00:02:53 60:00 21632 6868 ims -1 3960 03/28/20 01:02:53 60:00 10068 3176 ims -1 3961 03/28/20 02:02:53 60:00 6924 2804 ims -1 3962 03/28/20 03:02:53 60:00 6816 2680 ims -1 3963 03/28/20 04:02:53 60:00 11904 4160 ims -1 3964 03/28/20 05:02:53 60:00 10332 4288 ims -1 3965 03/28/20 06:02:53 60:00 9960 3176 ims -1 3966 03/28/20 07:02:53 60:00 6924 2804 ims -1 3967 03/28/20 08:02:53 60:00 10068 3176 ims -1 3968 03/28/20 09:02:53 60:00 6908 2680 ims -1 3969 03/28/20 10:02:53 60:00 13632 5844 ims -1 3970 03/28/20 11:02:53 60:00 8620 3052 ims -1 3971 03/28/20 12:02:53 60:00 8496 3036 ims -1 3972 03/28/20 13:02:53 60:00 8604 3144 ims -1 3973 03/28/20 14:02:53 60:00 13028 4408 ims -1 3974 03/28/20 15:02:53 60:00 10176 3392 ims -1 3975 03/28/20 16:02:53 60:00 13584 4924 ims -1 3976 03/28/20 17:02:53 60:00 9960 3284 ims -1 3977 03/28/20 18:02:53 60:00 14940 4872 ims -1 3978 03/28/20 19:02:53 60:00 6924 2680 ims -1 3979 03/28/20 20:02:53 60:00 8388 2928 ims -1 3980 03/28/20 21:02:53 60:00 10332 4412 ims -1 3981 03/28/20 22:02:53 60:00 13988 4872 ims -1 3982 03/28/20 23:02:53 60:00 10284 3532 ims -1 3983 03/29/20 00:02:53 60:00 6924 2572 ims -1 3984 03/29/20 01:02:53 60:00 13290 7713 ims -1 3985 03/29/20 02:02:53 60:00 11904 4592 ims -1 3986 03/29/20 03:02:53 60:00 8604 2928 ims -1 3987 03/29/20 04:02:53 60:00 6924 2680 ims -1 3988 03/29/20 05:02:53 60:00 8496 2928 ims -1 3989 03/29/20 06:02:53 60:00 6816 2680 ims -1 3990 03/29/20 07:02:53 60:00 19920 6620 ims -1 3991 03/29/20 08:02:53 60:00 8388 2820 ims -1 3992 03/29/20 09:02:53 60:00 6924 2896 ims -1 AT&T Proprietary The AT&T network constantly communicates with internet enabled de when they are powered on. These communications will show as data usag- customer records but do not necessarily indicate a customer initiated a transaction. Page 164 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171084 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343142 ---PAGE BREAK--- MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 ISM= Conn. Originating ET Time Number (UTC) Bytes Up Bytes Dn E1721 T1@I UWE 10JUL 3993 03/29/20 10:02:53 60:00 8496 3144 ims -1 3994 03/29/20 11:02:53 60:00 16992 6356 ims -1 3995 03/29/20 12:02:53 60:00 6816 2680 ims -1 3996 03/29/20 13:02:53 60:00 8496 2928 ims -1 3997 03/29/20 14:02:53 60:00 6924 2788 ims -1 3998 03/29/20 15:02:53 60:00 11580 4268 ims -1 3999 03/29/20 16:02:53 60:00 13924 4892 ims -1 4000 03/29/20 17:02:53 60:00 6816 2788 ims -1 4001 03/29/20 18:02:53 60:00 8496 3036 ims -1 4002 03/29/20 19:02:53 51:30 13260 3672 ims -1 4003 03/29/20 19:49:05 60:00 21488 9904 ims -1 4004 03/29/20 20:49:05 60:00 10300 3176 ims -1 4005 03/29/20 21:49:05 60:00 10176 3376 ims -1 4006 03/29/20 22:49:05 60:00 0 0 ims -1 4007 03/29/20 22:51:54 60:00 25444 10932 ims -1 4008 03/29/20 23:49:05 60:00 0 0 ims -1 4009 03/29/20 23:51:54 60:00 8604 3036 ims -1 4010 03/30/20 00:49:05 60:00 0 0 ims -1 4011 03/30/20 00:51:54 60:00 8620 3788 ims -1 4012 03/30/20 01:49:05 44:23 0 0 ims -1 4013 03/30/20 01:51:54 60:00 9960 3376 ims -1 4014 03/30/20 02:51:54 60:00 13368 4532 ims -1 4015 03/30/20 03:51:54 60:00 12352 5772 ims -1 4016 03/30/20 04:51:54 60:00 8836 3160 ims -1 4017 03/30/20 05:51:54 60:00 10408 3316 ims -1 4018 03/30/20 06:51:54 60:00 7032 3144 ims -1 4019 03/30/20 07:51:54 60:00 13368 5284 ims -1 4020 03/30/20 08:51:54 60:00 10332 4412 ims -1 4021 03/30/20 09:51:54 60:00 10068 3176 ims -1 4022 03/30/20 10:51:54 60:00 8388 2928 ims -1 4023 03/30/20 11:51:54 60:00 8604 2928 ims -1 4024 03/30/20 12:51:54 60:00 10564 5020 ims -1 4025 03/30/20 13:51:54 60:00 8388 2820 ims -1 4026 03/30/20 14:51:54 60:00 11904 4428 ims -1 4027 03/30/20 15:51:54 30:01 3408 1340 ims -1 4028 03/30/20 16:22:01 25:48 14212 7007 ims -1 IIODBL AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 165 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171085 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343143 ---PAGE BREAK--- MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. 45, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Dn Apn flat INS! NAPS MOMS. 4029 03/30/20 16:46:13 34:04 16845 25082 ims -1 4030 03/30/20 17:12:33 12:33 12041 8604 ims -1 4031 03/30/20 17:20:17 21:57 12080 6640 ims -1 4032 03/30/20 17:25:06 33:45 12986 11660 ims -1 4033 03/30/20 17:42:14 35:24 8473 9288 ims -1 4034 03/30/20 17:58:51 19:50 29297 21296 ims -1 4035 03/30/20 18:17:38 60:00 21830 13216 ims -1 4036 03/30/20 19:17:38 60:00 8712 3896 ims -1 4037 03/30/20 20:17:38 60:00 8388 2896 ims -1 4038 03/30/20 21:17:38 60:00 10160 3252 ims -1 4039 03/30/20 22:17:38 60:00 15264 5056 ims -1 4040 03/30/20 23:17:38 60:00 26472 11676 ims -1 4041 03/30/20 23:55:25 0:19 0 2746 ims -1 4042 03/31/20 00:17:38 60:00 8728 3128 ims -1 4043 03/31/20 01:17:38 60:00 3408 1432 ims -1 4044 03/31/20 01:25:37 60:00 23874 10212 ims -1 4045 03/31/20 02:17:38 60:00 0 0 ims -1 4046 03/31/20 02:25:37 60:00 9944 3144 ims -1 4047 03/31/20 03:17:38 60:00 0 0 ims -1 4048 03/31/20 03:25:37 60:00 10176 3144 ims -1 4049 03/31/20 04:17:38 60:00 0 0 ims -1 4050 03/31/20 04:25:37 60:00 11580 4220 ims -1 4051 03/31/20 05:17:38 7:49 0 0 ims -1 4052 03/31/20 05:25:37 60:00 10548 4380 ims -1 4053 03/31/20 06:25:37 60:00 8496 3004 ims -1 4054 03/31/20 07:25:37 60:00 6816 2648 ims -1 4055 03/31/20 08:25:37 60:00 13476 4468 ims -1 4056 03/31/20 09:25:37 60:00 8604 3004 ims -1 4057 03/31/20 10:25:37 60:00 10408 3392 ims -1 4058 03/31/20 11:25:37 60:00 12028 5272 ims -1 4059 03/31/20 12:25:37 60:00 13476 4468 ims -1 4060 03/31/20 13:25:37 60:00 10068 3376 ims -1 4061 03/31/20 14:25:37 20:28 3764 1448 ims -1 4062 03/31/20 15:53:12 60:00 18557 9445 ims -1 4063 03/31/20 16:53:12 12:04 0 0 ims -1 4064 03/31/20 17:01:34 60:00 36523 22430 ims -1 AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 166 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171086 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343144 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. cro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Dn Apn =sr IIISI INOZIL MOWS. 4065 03/31/20 17:28:05 0:01 0 1163 ims -1 4066 03/31/20 17:28:11 4:47 516565 1094626 ims -1 4067 03/31/20 18:01:34 60:00 5088 1572 ims -1 4068 03/31/20 18:34:47 60:00 21708 10015 ims -1 4069 03/31/20 19:01:34 60:00 0 0 ims -1 4070 03/31/20 19:34:47 60:00 9944 3284 ims -1 4071 03/31/20 20:01:34 60:00 0 0 ims -1 4072 03/31/20 20:34:47 60:00 10176 3392 ims -1 4073 03/31/20 21:01:34 60:00 0 0 ims -1 4074 03/31/20 21:34:47 60:00 8620 3788 ims -1 4075 03/31/20 22:01:34 17:03 0 0 ims -1 4076 03/31/20 22:34:47 60:00 18580 6228 ims -1 4077 03/31/20 23:34:47 60:00 8496 3144 ims -1 4078 04/01/20 00:34:47 60:00 8604 3160 ims -1 4079 04/01/20 01:34:47 60:00 12012 4608 ims -1 4080 04/01/20 02:34:47 60:00 6924 2788 ims -1 4081 04/01/20 03:34:47 60:00 8712 3284 ims -1 4082 04/01/20 04:34:47 60:00 11904 4500 ims -1 4083 04/01/20 05:34:47 60:00 10116 4144 ims -1 4084 04/01/20 06:34:47 60:00 8820 3144 ims -1 4085 04/01/20 07:34:47 60:00 8388 3036 ims -1 4086 04/01/20 08:34:47 60:00 8388 2820 ims -1 4087 04/01/20 09:34:47 60:00 11904 4716 ims -1 4088 04/01/20 10:34:47 60:00 7048 3680 ims -1 4089 04/01/20 11:34:47 60:00 10332 4128 ims -1 4090 04/01/20 12:34:47 60:00 8728 3160 ims -1 4091 04/01/20 13:34:47 60:00 10564 4484 ims -1 4092 04/01/20 14:34:47 60:00 7156 2804 ims -1 4093 04/01/20 15:34:47 60:00 10084 4176 ims -1 4094 04/01/20 16:09:53 60:00 44265 25658 ims -1 4095 04/01/20 16:34:47 60:00 0 0 ims -1 4096 04/01/20 16:49:32 0:19 3439 14876 ims -1 4097 04/01/20 16:49:59 44:46 9122409 5951191 ims -1 4098 04/01/20 17:09:53 60:00 11148 4800 ims -1 4099 04/01/20 17:34:47 60:00 0 0 isms -1 4100 04/01/20 18:09:53 60:00 8728 3160 ims -1 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 167 customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171087 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343145 ---PAGE BREAK--- MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. 1/4-4 .evi AT&T Run Data: Run Tina: Data Usage For: Item Conn. Date 06/17/2020 NM= Conn. Originating ET Time Number (OTC) Bytes Up Bytes Dn Apn INS! !OJOS MOWS. 4101 04/01/20 18:34:47 60:00 0 0 ims -1 4102 04/01/20 19:09:53 60:00 8728 3160 ims -1 4103 04/01/20 19:34:47 34:13 0 0 ims -1 4104 04/01/20 20:09:53 60:00 10348 5020 ims -1 4105 04/01/20 21:09:53 60:00 24612 13268 ims -1 4106 04/01/20 21:53:57 0:28 2176 14903 ims -1 4107 04/01/20 22:09:53 60:00 22420 10184 ims -1 4108 04/01/20 22:49:39 57:35 11972374 8027714 ims -1 4109 04/01/20 23:09:53 60:00 16216 9776 ims -1 4110 04/01/20 23:47:14 4:10 686613 925183 ims -1 4111 04/02/20 00:09:53 60:00 6816 2788 ims -1 4112 04/02/20 01:09:53 60:00 7156 2912 ims -1 4113 04/02/20 02:09:53 60:00 13864 7304 ims -1 4114 04/02/20 03:09:53 60:00 8264 2804 ims -1 4115 04/02/20 04:09:53 60:00 7048 2804 ims -1 4116 04/02/20 05:09:53 60:00 13584 4640 ims -1 4117 04/02/20 06:09:53 60:00 6924 2680 ims -1 4118 04/02/20 07:09:53 60:00 10456 4304 ims -1 4119 04/02/20 08:09:53 60:00 10332 4020 ims -1 4120 04/02/20 09:09:53 60:00 6816 2680 ims -1 4121 04/02/20 10:09:53 60:00 6816 2572 ims -1 4122 04/02/20 11:09:53 60:00 7032 2804 ims -1 4123 04/02/20 12:09:53 60:00 13848 5736 ims -1 4124 04/02/20 13:09:53 60:00 7032 2928 ims -1 4125 04/02/20 14:09:53 60:00 10300 3300 ims -1 4126 04/02/20 15:09:53 60:00 8496 3036 ims -1 4127 04/02/20 16:09:53 60:00 8480 2928 ims -1 4128 04/02/20 17:09:53 14:58 4980 1588 ims -1 4129 04/02/20 17:27:13 60:00 17057 9338 ims -1 4130 04/02/20 18:27:13 60:00 8512 3712 ims -1 4131 04/02/20 19:27:13 60:00 8496 3160 ims -1 4132 04/02/20 20:27:13 60:00 8712 3144 ims -1 4133 04/02/20 21:27:13 60:00 8604 3176 ims -1 4134 04/02/20 22:27:13 54:40 12012 4536 ims -1 4135 04/02/20 23:22:57 60:00 18568 9660 ims -1 4136 04/03/20 00:22:57 60:00 8944 3176 ims -1 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 168 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171088 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343146 ---PAGE BREAK--- ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ce• AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn DM IMSI ISMS MODEL 4137 04/03/20 01:22:57 60:00 6924 2696 ims 4138 04/03/20 02:22:57 60:00 8388 2928 ims 4139 04/03/20 03:22:57 60:00 15760 5908 ims 4140 04/03/20 04:22:57 60:00 8836 3052 ims 4141 04/03/20 05:22:57 37:29 10392 6580 ims 4142 04/03/20 12:23:15 60:00 16857 9144 ims 4143 04/03/20 12:23:54 0:50 192 0 nxtgenpho ne APPLR IPROS8 4144 04/03/20 12:23:55 0:50 0 0 nxtgenpho ne APPLR IPROS8 4145 04/03/20 12:24:36 0:10 1305 5631 nxtgenpho ne 4146 04/03/20 12:24:44 2:11 192 Onmtgonpho ne APPLE !PHONES 4147 04/03/20 12:24:45 2:11 0 Onmtgonpho ne APPLE !PHONES 4148 04/03/20 12:25:44 11:35 3225 5417 nxtgenpho ne 4149 04/03/20 12:26:56 17:20 0 Onxtgonpho ne APPLE !PHONES 4150 04/03/20 12:44:15 2:00 192 Onxtgonpho ne APPLE !PHONES 4151 04/03/20 12:44:16 2:00 0 0 nxtgenpho ne APPLE !PHONES 4152 04/03/20 12:46:15 2:26 192 Onmtgonpho ne APPLE !PHONES 4153 04/03/20 12:46:16 2:26 0 Onmtgonpho no APPLE !PHONES 4154 04/03/20 12:48:42 5:46 192 0 nxtgonpho no APPLE !PHONES 4155 04/03/20 12:48:43 5:46 0 0 nxtgenpho ne APPLE !PHONES 4156 04/03/20 12:54:29 14:38 192 0 nxtgenpho ne APPLE !PHONES 4157 04/03/20 12:54:29 14:39 0 0 nxtgenpho ne APPLE !PHONES 4158 04/03/20 13:09:08 27:17 192 0 nxtgenpho ne APPLE !PHONES 4159 04/03/20 13:09:09 27:17 0 0 nxtgenpho ne APPLE !PHONES 4160 04/03/20 13:23:15 60:00 10068 3268 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 169 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171089 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343147 ---PAGE BREAK--- MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. ceo• ‘•-.0# AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (uzz) Bytes Up Bytes Apn ENE! INSI MAKE Dn MODEL 4161 04/03/20 13:36:26 0:41 0 0nxtgonpho ne APPLE !PHONES 4162 04/03/20 13:37:07 0:44 0 0 nxtgenpho ne APPLE !PHONES 4163 04/03/20 13:37:50 14:43 192 0 nxtgenpho ne APPLE !PHONES 4164 04/03/20 13:37:51 14:43 0 0 nxtgenpho ne APPLE !PHONES 4165 04/03/20 13:52:34 0:55 0 0 nxtgenpho ne APPLE !PHONES 4166 04/03/20 13:53:28 2:10 192 0 nxtgenpho ne APPLE !PHONES 4167 04/03/20 13:53:29 2:10 0 0 nxtgenpho ne APPLE !PHONES 4168 04/03/20 13:55:39 30:41 0 0 nxtgenpho ne APPLE !PHONES 4169 04/03/20 14:23:15 12:20 11140 6868 ism 4170 04/03/20 14:24:18 0:12 0 4598 ism 4171 04/03/20 14:26:19 63:58 192 0nxtgonpho ne APPLE !PHONES 4172 04/03/20 14:26:20 60:00 0 0 nxtgenpho ne APPLE !PHONES 4173 04/03/20 14:37:17 3:50 0 0 ism 4174 04/03/20 14:37:41 52:36 6352 6754 ism APPLE !PHONES 4175 04/03/20 14:37:42 52:36 6686 6088 ism APPLE !PHONES 4176 04/03/20 14:41:07 60:00 21261 12240 ism 4177 04/03/20 15:26:20 3:58 0 0 nxtgenpho ne APPLE !PHONES 4178 04/03/20 15:30:18 10:00 192 0 nxtgenpho ne APPLE !PHONES 4179 04/03/20 15:30:19 56:58 0 0 nxtgenpho ne APPLE !PHONES 4180 04/03/20 15:41:07 60:00 10036 3160 ism 4181 04/03/20 16:27:17 31:12 192 0 nxtgenpho ne APPLE !PHONES 4182 04/03/20 16:27:18 31:12 0 0 nxtgenpho ne APPLE !PHONES 4183 04/03/20 16:41:07 2:30 0 0 ism 4184 04/03/20 16:43:15 15:14 6337 6734 ism APPLE !PHONES 4185 04/03/20 16:43:16 15:14 6666 6073 ism APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 170 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171090 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343148 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC/ Bytes Up Bytes Apn L@I INSI MAKE Dn MODEL 4186 04/03/20 16:43:37 60:00 18576 9466 ims 4187 04/03/20 16:58:30 16:57 0 Onxtgonpho ne APPLE 'PHONES 4188 04/03/20 17:15:26 20:55 192 0 nxtgenpho ne APPLE 'PHONES 4189 04/03/20 17:15:27 20:55 0 0 nxtgenpho ne APPLE 'PHONES 4190 04/03/20 17:36:22 2:07 0 0 nxtgenpho ne APPLE 'PHONES 4191 04/03/20 17:38:28 43:32 192 0 nxtgenpho ne APPLE 'PHONES 4192 04/03/20 17:38:29 43:33 0 0 nxtgenpho ne APPLE 'PHONES 4193 04/03/20 17:43:37 60:00 8604 3036 ims 4194 04/03/20 18:22:02 1:30 0 0 nxtgenpho ne APPLE 'PHONES 4195 04/03/20 18:23:31 33:11 192 Onxtgonpho ne APPLE 'PHONES 4196 04/03/20 18:23:32 33:11 0 0 nxtgenpho ne APPLE 'PHONES 4197 04/03/20 18:43:37 60:00 10036 3408 ims 4198 04/03/20 18:56:43 8:45 0 0 nxtgenpho ne APPLE 'PHONES 4199 04/03/20 19:05:28 15:03 192 0 nxtgenpho ne APPLE 'PHONES 4200 04/03/20 19:05:29 15:03 0 0 nxtgenpho ne APPLE 'PHONES 4201 04/03/20 19:20:32 1:07 0 0 nxtgenpho ne APPLE 'PHONES 4202 04/03/20 19:21:39 27:43 192 0 nxtgenpho ne APPLE 'PHONES 4203 04/03/20 19:21:40 27:43 0 0 nxtgenpho ne APPLE 'PHONES 4204 04/03/20 19:43:37 60:00 41164 21628 ims 4205 04/03/20 19:49:23 19:28 192 0 nxtgenpho ne APPLE 'PHONES 4206 04/03/20 19:49:24 19:28 0 0 nxtgenpho ne APPLE 'PHONES 4207 04/03/20 20:07:29 0:30 53214 52202 ims 4208 04/03/20 20:08:10 1:00 159700 98815 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 171 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171091 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343149 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:30:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Op Bytes Apn Dn flat INS! late 4209 04/03/20 20:08:52 1:54 0 0 nxtgonpho ne APPLE 4210 04/03/20 20:10:45 8:21 192 0 nxtgonpho no APPLE 4211 04/03/20 20:10:46 8:21 0 0 nxtgonpho no APPLE 4212 04/03/20 20:19:07 21:45 0 0 nxtgonpho no APPLE 4213 04/03/20 20:40:51 2:26 192 0 nxtgonpho no APPLE 4214 04/03/20 20:40:53 2:25 0 0 nxtgonpho no APPLE 4215 04/03/20 20:43:18 0:05 0 0 nxtgonpho ne APPLE 4216 04/03/20 20:43:37 60:00 10380 4128 ims 4217 04/03/20 20:44:43 4:25 0 0 nxtgonpho ne APPLE 4218 04/03/20 20:49:08 35:47 192 0 nxtgonpho ne APPLE 4219 04/03/20 20:49:09 35:47 0 0 nxtgonpho ne APPLE 4220 04/03/20 21:24:55 8:10 192 0 nxtgonpho ne APPLE 4221 04/03/20 21:24:56 8:10 0 0 nxtgonpho ne APPLE 4222 04/03/20 21:33:06 7:16 0 0 nxtgonpho ne APPLE 4223 04/03/20 21:40:22 21:44 192 0 nxtgonpho ne APPLE 4224 04/03/20 21:40:22 21:46 0 0 nxtgonpho ne APPLE 4225 04/03/20 21:43:37 60:00 13568 4784 ims 4226 04/03/20 22:02:07 0:34 0 0 nxtgonpho no APPLE 4227 04/03/20 22:02:40 1:45 192 0 nxtgonpho no APPLE 4228 04/03/20 22:02:42 1:44 0 0 nxtgonpho no APPLE 4229 04/03/20 22:04:26 60:00 0 0 nxtgonpho ne APPLE 4230 04/03/20 22:43:37 60:00 8388 3036 ims AT&T Proprietary MODZI. !PEONES !PEONES !PEONES !PEONES !PEONES !PEONES !PEONES IMMO 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 172 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171092 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343150 ---PAGE BREAK--- pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro AT&T Run Date: Run Tina: Data Usage For: Item Conn. Data 06/17/2020 Conn. Time (OTC) Originating Number AI Bytes Up Bytes Apn Dn EMBI IMSI MOWS MODEL 4231 04/03/20 23:04:26 60:00 0 0 nxtgenpho no APPLE IPROME8 4232 04/03/20 23:43:37 60:00 9928 3176 ims 4233 04/04/20 00:04:26 28:17 0 0 nxtgenpho ne APPLE IPE06E8 4234 04/04/20 00:32:43 60:00 0 0 nxtgenpho ne APPLE 'PEONES 4235 04/04/20 00:43:37 60:00 13352 4624 ism 4236 04/04/20 01:32:43 60:00 0 0 nxtgenpho ne APPLE 'PHONES 4237 04/04/20 01:43:37 60:00 10252 3300 Las 4238 04/04/20 02:32:43 60:00 0 0 nxtgenpho ne APPLE 'PHONES 4239 04/04/20 02:43:37 60:00 15988 5032 Las 4240 04/04/20 03:32:43 60:00 0 0 nxtgenpho ne APPLE 'PHONES 4241 04/04/20 03:43:37 60:00 8388 2928 ism 4242 04/04/20 04:32:43 0:01 0 0 nxtgenpho ne APPLE 'PHONES 4243 04/04/20 04:32:46 60:00 0 0 nxtgenpho ne APPLE 'PHONES 4244 04/04/20 04:43:37 60:00 11580 3548 ism 4245 04/04/20 05:32:46 60:00 0 0 nxtgenpho ne APPLE 'PHONES 4246 04/04/20 05:43:37 60:00 11812 4484 ism 4247 04/04/20 06:32:46 60:00 0 0 nxtgenpho no APPLE !PHONES 4248 04/04/20 06:43:37 60:00 6956 2680 ism 4249 04/04/20 07:32:46 60:00 0 0 nxtgenpho no APPLE IPHONE8 4250 04/04/20 07:43:37 60:00 13444 4676 isms 4251 04/04/20 08:32:46 0:01 0 0 nxtgenpho ne APPLE 'PHONES 4252 04/04/20 08:32:50 60:00 0 0 nxtgenpho ne APPLE 'PHONES 4253 04/04/20 08:43:37 60:00 13244 4640 ism 4254 04/04/20 09:32:50 60:00 0 0 nxtgenpho ne APPLE !PHONES 4255 04/04/20 09:43:37 60:00 10252 3284 ism AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 173 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171093 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343151 ---PAGE BREAK--- MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro AT&T Run Date: Run Time: Data Usage Per: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (UTC) Bytes Up Bytes Apn Dn =MI IMBI MAKE MODEL 4256 04/04/20 10:32:50 60:00 0 0 nxtgenpho ne APPLE 'PHONES 4257 04/04/20 10:43:37 60:00 8388 3036 ims 4258 04/04/20 11:32:50 12:22 0 Onxtgonpho ne APPLE 'PHONES 4259 04/04/20 11:43:37 60:00 13584 5680 ims 4260 04/04/20 11:45:11 65:36 192 Onxtgonpho ne APPLE 'PHONES 4261 04/04/20 11:45:12 60:00 0 0 nxtgenpho ne APPLE 'PHONES 4262 04/04/20 12:43:37 39:34 4964 1588 ims 4263 04/04/20 12:45:12 5:36 0 0 nxtgenpho ne APPLE !PHONES 4264 04/04/20 12:50:48 2:53 0 0 nxtgenpho ne APPLE !PHONES 4265 04/04/20 12:53:40 58:19 192 0 nxtgenpho ne APPLE 'PH