Skip to main content
Skip to content
Case File
sd-10-EFTA01342703Dept. of JusticeOther

EFTA Document EFTA01342703

III111111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ..,„„,• ••-•s". AT&T Run Date: Run Time: voice Usage For: 0""n.. Ite Conn. Conn. Seizure ET Originating Terminating Eat CT Feature Cell Location Date Time Time Number Slumber (UTC) 1 06/02/20 14:44:00 0:10 17:35 KT (NIOP:VCORR] 2 06/02/20 14

Date
Unknown
Source
Dept. of Justice
Reference
sd-10-EFTA01342703
Pages
123
Persons
0
Integrity
Loading PDF viewer...

Summary

III111111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ..,„„,• ••-•s". AT&T Run Date: Run Time: voice Usage For: 0""n.. Ite Conn. Conn. Seizure ET Originating Terminating Eat CT Feature Cell Location Date Time Time Number Slumber (UTC) 1 06/02/20 14:44:00 0:10 17:35 KT (NIOP:VCORR] 2 06/02/20 14

Ask AI About This Document

0Share
PostReddit

Extracted Text (OCR)

EFTA Disclosure
Text extracted via OCR from the original document. May contain errors from the scanning process.
III111111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ••-•s". AT&T Run Date: Run Time: voice Usage For: 0""n.. Ite Conn. Conn. Seizure ET Originating Terminating Eat CT Feature Cell Location Date Time Time Number Slumber (UTC) 1 06/02/20 14:44:00 0:10 17:35 KT (NIOP:VCORR] 2 06/02/20 14:44:00 0:11 10:35 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0, 023310608:91057:- 71.9598779:43.2972525:150:-1.0] 3 06/02/2014:54:35 0:00 0:19 NO (VCORR] (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 4 06/02/2014:54:54 0:00 6:41 NO (Ni-Fi] (000000008:0:0.0:0.0: -1: -1.0] 5 06/02/2017:04:25 0:03 10:19 NT (NIOP:VCORR] 6 06/02/2017:04:25 0:04 10:19 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.01 7 06/02/20 17:33:58 0:10 0:54 NT (Ni-Fi:NIOP] [000000008:0:0.0:0.0: -1: -1.0] 8 06/03/2000:07:18 0:16 6:39 NT (NIOP:VCORR] 9 06/03/2000:07:18 0:16 6:39 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.01 10 06/03/2019:09:20 0:23 0:00 NT (NIOP:CWW] 11 06/03/2019:09:26 0:29 0:02 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.01 12 06/03/2019:09:26 0:29 0:02 NT (NIOP:CFNA:CNV :VN] 13 06/03/2020:31:08 0:07 17:32 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0, 023310608:91057:- 71.9598779:43.2972525:150:-1.01 14 06/03/2020:31:08 0:07 60:39 NT (NIOP:VCORR] 15 06/03/2020:48:40 0:00 21:03 NO (] (023310608:91057:- 71.9598779:43.2972525:150:-1.01 16 06/03/2021:09:43 0:00 22:05 NO (Ni-Fi] [000000008:0:0.0:0.0: -1: -1.0] 17 06/04/20 14:30:08 0:11 1:42 NT (Ni-Fi:NIOP] (000000008:0:0.0:0.0:-1: -1.0] 18 06/05/2019:34:05 0:26 0:00 NT (Ni-Fi:NIOP] (000000008:0:0.0:0.0: -1: -1.0] The information contained here for is for use by authorized persons only and is not general distribution. Page 1 SDNY_GM_00170641 EFTA01342703 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. tr-ji`a l. AT&T Run Date: Run Time: Voice Usage For: 06/29/2020 Sim Ite Conn. Conn. Seizure ET Originating Terminating =CI CT Feature Cell Location Date Time Time Number Number (MTC) 19 06/05/20 19:34:06 0:27 0:02 40 [VCORR] 20 06/05/20 19:34:06 0:27 0:02 er (14i- (000000008:0:0.0:0.0:-1:-1.0] Fi:NIOP:CFNA:V M] 21 06/05/2019:34:36 0:25 0:00 Ifi [Ni-Fi:NIOP] [000000008:0:0.0:0.0:-1:-1.0] 22 06/05/20 19:34:38 0:27 0:02 40 [VCORR] 23 06/05/20 19:34:38 0:27 0:02 [Ni- [000000008:0:0.0:0.0: -1: -1.0] Fi:NIOP:CFNA:V M] 24 06/05/20 20:45:34 0:24 0:00 (NIOP] 25 06/05/20 20:45:41 0:31 0:02 YI [NIOP:CFNA:VM] 26 06/05/2020:45:41 0:31 0:02 +0 (Ni-Fi] [000000008:0:0.0:0.0:-1:-1.0] 27 06/05/20 20:46:31 0:24 0:00 YI [NIOP] 28 06/05/20 20:46:37 0:30 0:02 YI [NIOP:CFNA:VM] 29 06/05/2020:46:37 0:30 0:02 +0 (Ni-Fi] [000000008:0:0.0:0.0:-1:-1.0] 30 06/06/20 22:41:11 0:23 0:00 YI [NIOP] 31 06/06/20 22:41:16 0:28 1:04 YI [NIOP:CFNA:VM] 32 06/06/2022:41:16 0:28 0:06 40 [Ni-Fi] [000000008:0:0.0:0.0:-1:-1.0, 023310608:91057:- 71.9598779:43.2972525:150:-1.0] 33 06/06/2022:41:22 0:00 0:58 40 [VCORE] [023310608:91057:- 71.9598779:43.2972525:150:-1.0, 023310601:91057:- 71.9598779:43.2972525:150:-1.0] 34 06/06/20 22:43:40 0:04 3:36 40 [VCORR] 35 06/06/20 22:43:40 0:04 1:01 Ifi [NIOP:VCORR] [023310601:91057:- 71.9598779:43.2972525:150:-1.0, 023310608:91057:- 71.9598779:43.2972525:150:-1.0] 36 06/06/2022:44:41 0:00 2:35 Ifi [Ni-Fi:NIOP] [000000008:0:0.0:0.0:-1:-1.0] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 2 SDNY_GM_00170642 EFTA01342704 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 41110 AT&T Run Date: Run Time: Voice Usage For: 06/29/2020 Ite Conn. Conn. Seizure ST Originating Terminating flat INSI CT Feature Cell Location m Date Time Time Number Number (OTC) 37 06/09/20 20:00:48 0:01 2:22 NO (Ni-Fi] [000000008:0:0.0:0.0: -1: -1.0] 38 06/09/2020:59:57 0:10 40:05 NT (NIOP:VCORR] 39 06/09/2020:59:57 0:11 40:05 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 40 06/09/2021:46:06 0:39 0:03 NO -Fi] [000000008:0:0.0:0.0: -1: -1.0] 41 06/09/20 21:46:34 0:11 0:00 NT On -Fi:NIOP] 42 06/09/20 21:46:34 0:11 0:00 NT (NIOP] 43 06/09/20 21:46:39 0:16 0:01 NT (NIOP:CF8:VN] 44 06/09/2021:46:39 0:17 0:01 NO -Fi] [000000008:0:0.0:0.0: -1: -1.0] 45 06/09/2023:19:32 0:10 0:03 NO -Fi] [000000008:0:0.0:0.0: -1: -1.0] 46 06/09/20 23:19:41 0:03 0:00 NT [Ni-Fi:NIOP] 47 06/09/20 23:19:41 0:03 0:00 NT [Ni-Fi:NIOP] 48 06/09/20 23:19:46 0:08 0:02 NT Fi:NIOP:CF8:VN 49 06/09/2023:19:46 0:09 0:02 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 50 06/09/20 23:58:57 0:02 0:00 NT [Ni-Fi:NIOP] 51 06/09/20 23:58:57 0:02 0:00 NT [Ni-Fi:NIOP] 52 06/09/20 23:59:00 0:05 0:02 NT Fi:NIOP:CF8:VN 53 06/09/2023:59:00 0:06 0:02 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 54 06/10/20 14:55:12 0:23 0:00 NT (NIOP] 55 06/10/20 14:55:12 0:23 0:00 NT (Ni-Fi:NIOP] 56 06/10/20 14:55:16 0:27 0:02 NT Fi:NIOP:CFNA:V N] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 3 SDNY_GM_00170643 EFTA01342705 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 411110 AT&T Run Date: Run Time: Voice Osage For: 0""n0.0 Ite Conn. Conn. Seizure ST Originating Terminating DILI 1NSI CT Feature Cell Location m Date Time Time Number Number (OTC) 57 06/10/2014:55:16 0:27 0:02 NO [Ili -Fi] [000000008:0:0.0:0.0: -1: -1.0] 58 06/10/2014:55:36 0:10 0:05 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 59 06/10/20 18:51:20 0:23 0:00 MT (NIOP] 60 06/10/20 18:51:27 0:30 0:02 MT (NIOP:CFNA:VN] 61 06/10/20 18:51:27 0:31 0:02 NO (Ni-Fi] [000000008:0:0.0:0.0: -1: -1.0] 62 06/10/20 19:11:49 0:21 0:00 NT (NIOP] 63 06/10/20 19:11:53 0:25 0:02 NO (Ni-Fi] [000000008:0:0.0:0.0: -1: -1.0] 64 06/10/2019:11:53 0:25 0:02 NT (NIOP:CFNA:VN] 65 06/10/2022:21:12 0:23 0:00 NT (NIOP] 66 06/10/2022:21:17 0:28 0:02 NO (000000008:0:0.0:0.0: -1: -1.0] 67 06/10/2022:21:17 0:28 0:02 MT (NIOP:CFNA:VN] 68 06/11/2000:50:40 0:22 0:00 NT (NIOP] 69 06/11/2000:50:40 0:22 0:00 NT [Ni-Fi:NIOP] 70 06/11/2000:50:45 0:27 0:01 NT (Ni- Fi:NIOP:CFNA:V 14] 71 06/11/2000:50:45 0:27 0:01 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 72 06/11/2001:00:17 0:06 44:39 NT (NIOP:VCORR] 73 06/11/2001:00:17 0:07 44:39 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 74 06/11/20 14:12:28 0:38 0:03 NO (Ni-Fi] [000000008:0:0.0:0.0: -1: -1.0] 75 06/11/20 23:57:41 0:00 0:00 MT (NIOP:CNN] 76 06/11/20 23:57:47 0:06 0:04 MT (NIOP:CFD:CNN: VN] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 4 SDNY_GM_00170644 EFTA01342706 MOBILITY 020 (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in •••-es.""° AT&T OTC. Run Date: Run Time: voice Usage For: 0""n.. Ite Conn. Conn. Seizure ST Originating Terminating liar INS! CT Feature Cell Location m Date Time Time Number Member (OTC) 77 06/11/20 23:57:47 0:07 0:04 MO [Wi -Fi] [000000008:0:0.0:0.0: -1: -1.0] 78 06/12/2000:35:53 0:39 0:04 MO [Ni-Fi] [000000008:0:0.0:0.0: -1: -1.0] 79 06/12/20 00:36:33 0:24 0:00 HT [NIOP] 80 06/12/20 00:36:39 0:30 0:02 HT [NIOP:CFNA:VM] 81 06/12/2000:36:39 0:31 0:02 MO [Ni-Fi] [000000008:0:0.0:0.0: -1: -1.0] 82 06/12/20 13:40:56 0:17 0:38 HT [Ni-Fi:NIOP] [000000008:0:0.0:0.0: -1: -1.0] 83 06/12/20 13:41:49 0:02 0:00 MO [Ni-Fi] [000000008:0:0.0:0.0: -1: -1.0] 84 06/12/20 16:43:56 0:25 0:00 HT [Ni-Fi:NIOP] (000000008:0:0.0:0.0: -1: -1.0] 85 06/12/20 16:43:57 0:26 0:05 HT [Ni- [000000008:0:0.0:0.0:-1:-1.0] Fi:NIOP:CFNA:V M] 86 06/12/20 16:44:48 0:06 0:00 HT (Wi-fi:MIOP] (000000008:0:0.0:0.0:-1:-1.0] 87 06/12/20 16:47:03 0:36 0:03 MO pia -Pi] (000000008:0:0.0:0.0: -1: -1.0] 88 06/12/20 16:47:08 0:00 0:00 MO pia -Pi] (000000008:0:0.0:0.0: -1: -1.0] 89 06/12/20 16:47:56 0:35 0:05 MO pia -Pi] (000000008:0:0.0:0.0: -1: -1.0] 90 06/12/20 16:48:26 0:18 0:00 MO pia -Pi] (000000008:0:0.0:0.0: -1: -1.0] 91 06/12/20 16:49:51 0:13 0:43 MO pia -Pi] (000000008:0:0.0:0.0: -1: -1.0] 92 06/16/20 23:26:00 0:24 0:00 NT (Wi-Fi:NIOP] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 5 SDNY_GM_00170645 EFTA01342707 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 41.0 ters as "-a. AT&T Run Date: Run Time: voice Usage For: 06/29/2020 Ite Conn. Conn. Seizure ST Originating Terminating =CI ENSI CT Feature Cell Location Date Time Time Number Member (UTC) 93 06/16/2023:28:06 0:30 0:06 HT [14i- Fi:NIOP:CFNA:V 14] 94 06/16/2023:28:06 0:30 0:06 HO (Ni -Pi] [000000008:0:0.0:0.0: -1: -1.0] 95 06/16/2023:37:55 0:24 0:00 HT [14i-Pi:NIOP] 96 06/16/2023:38:03 0:32 0:00 HT (Wi- Fi:NIOP:CFNA:V 14] 97 06/16/2023:38:03 0:32 0:00 HO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 98 06/17/20 17:48:24 0:07 0:00 HT (Ni-Fi:NIOP] (000000008:0:0.0:0.0: -1: -1.0] 99 06/18/20 00:39:03 0:05 0:00 HT [MICR] 100 06/18/20 00:39:03 0:06 0:00 HO (Ni -Pi] [000000008:0:0.0:0.0: -1: -1.0] 101 06/18/20 13:07:09 0:02 0:00 HO (Ni -Pi] [000000008:0:0.0:0.0: -1: -1.0] 102 06/18/20 13:07:53 0:13 43:34 HO (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0, 023310608:91057:- 71.9598779:43.2972525:150:-1.01 103 06/18/20 13:51:27 0:00 0:56 HO (NIOR:VCORR] (023310608:91057:- 71.9598779:43.2972525:150:-1.01 104 06/18/20 13:52:25 0:00 14:36 HO (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 105 06/19/20 17:59:03 0:07 0:00 HT (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 106 06/19/2020:15:59 0:10 0:02 HO (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 107 06/21/2016:45:33 0:06 0:00 HT [MICR] 108 06/22/20 20:05:36 0:03 0:00 HT [MICR] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 6 SDNY_GNL00170646 EFTA01342708 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in Inc. AT&T Run Date: Run Time: Voice Usage For: Ite Conn. Conn. Date Time (OTC) 06/29/2020 Seizure Sum ST Originating Terminating =MI IXSI Number Mambos CT Feature Cell Location 109 06/22/20 20:05:38 0:03 0:00 MO (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 110 06/22/20 20:06:21 0:24 0:00 MT (NIOP] 111 06/22/2020:06:30 0:33 0:09 MT (NIOP:CFNA:VM] 112 06/22/2020:06:30 0:33 0:09 MO (Ni-Pi] [000000008:0:0.0:0.0: -1: -1.0] 113 06/22/20 23:32:01 0:28 0:00 MT (Ni-Pi:NIOP] (000000008:0:0.0:0.0:-1:-1.0] 114 06/22/2023:32:03 0:30 0:03 MO (VCORR] 115 06/22/2023:32:03 0:30 0:03 MT (Ni- (000000008:0:0.0:0.0:-1:-1.0] Fi:NIOP:CFNA:V M] 116 06/25/20 14:02:08 0:01 0:00 MT (NIOP] 117 06/25/20 14:02:12 0:00 0:00 MT (NIOP] 118 06/25/20 15:01:02 0:18 0:15 MO (Vi-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 119 06/25/2015:06:11 0:05 54:26 MO (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 120 06/25/2016:30:49 0:03 0:57 MO (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 121 06/25/20 17:56:18 0:23 0:00 MT (Vi-Pi:NIOP] (000000008:0:0.0:0.0:-1:-1.0] 122 06/25/2017:56:19 0:24 0:35 MT (Ni- (000000008:0:0.0:0.0:-1:-1.0] Fi:NIOP:CFNA:V M] 123 06/25/20 18:25:23 0:02 1:15 MO (Ni- (000000008:0:0.0:0.0:-1:-1.0] Pi:NIOR:VM] 124 06/25/2018:45:57 0:24 0:00 MT (Mi-Pi:NIOP] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 7 SDNY_GM_00170647 EFTA01342709 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Data: Run Tina: voice Usage For: Ito Conn. Conn. Data Time (UTC) 0""n02. Seizure Time ET Originating Terminating Din IMSI CT Humber Number Feature Coll Location 125 06/25/2018:46:03 0:30 0:05 MT [Hi- Fi:HIOP:CFNA:V M] 126 06/25/2018:46:03 0:31 0:05 MO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 127 06/25/2019:38:06 0:08 8:45 MT (HIOP:VCORR] 128 06/25/2019:38:06 0:09 8:45 MO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 129 06/25/2019:51:53 0:08 0:53 MT (Vi-Fi:HIOP] [000000008:0:0.0:0.0: -1: -1.0] 130 06/25/2019:53:32 0:14 0:00 MT (1 131 06/25/2019:53:32 0:25 0:00 ST (NIOP] 132 06/25/2019:53:33 0:26 0:03 MO (14i-Fi] 133 06/25/2019:53:33 0:26 0:03 ST (NIOP:CFNA:VM] 134 06/25/2019:55:08 0:06 0:38 MT (Ni-Fi:NIOP] 135 06/25/2019:55:08 0:07 27:11 MO (14i-Fi] (000000008:0:0.0:0.0:-1:-1.0] 136 06/25/2019:55:46 0:00 26:33 MT (NIOP:VCORR] 137 06/25/2020:44:24 0:21 0:00 MT (NIOP] (023310608:91057: - 71.9598779:43.2972525:150: -1.0] 138 06/25/2020:47:13 0:14 0:00 HT CHIOS] (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 139 06/25/2022:27:31 0:09 1:09 MO (VCORR] 140 06/25/2022:27:31 0:09 1:09 MT (Ni-Fi:NIOP] (000000008:0:0.0:0.0:-1:-1.0] 141 06/26/20 22:20:31 0:24 0:00 MT (Hi -Fi:H108] (000000008:0:0.0:0.0: -1: -1.0] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 8 SDNY_GNL00170648 EFTA01342710 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. . AT&T Run Date: 06/29/2020 Run Time: Data Usage For: MS= Item Conn. Conn. Data Tama (OTC) Originating Number ET Bytes Up Bytes Apn Dn DEBI 1MSI MAKE MODEL Cell Location 1 06/01/20 04:02:50 2:13 288 48nxtgenp APPLE !PHONES (366491269:1431606::::0) U.S. Cellular, hone _USA 2 06/01/20 04:02:51 2:13 48 Onxtgenp hone APPLE !PHONES (311580084491269:1217109705044::::0) 3 06/01/20 04:05:04 60:00 7584 6400 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 4 06/01/20 04:49:04 60:00 6940 2896 ins APPLE !PHONES 5 06/01/20 05:05:04 60:00 1213 1207 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 6 06/01/20 05:49:04 60:00 10272 4128 ins APPLE !PHONES 7 06/01/20 06:05:04 60:00 692 420 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 8 06/01/20 06:49:04 60:00 8388 2928 ins APPLE !PHONES 9 06/01/20 07:05:04 60:00 924 840 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 10 06/01/20 07:49:04 60:00 12028 4628 ins APPLE !PHONES 11 06/01/20 08:05:04 60:00 976 945 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 12 06/01/20 08:49:04 60:00 8388 2928 ins APPLE !PHONES 13 06/01/20 09:05:04 60:00 1033 840 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 14 06/01/20 09:49:04 60:00 10844 4268 ins APPLE !PHONES 15 06/01/20 10:05:04 60:00 808 630 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 16 06/01/20 10:49:04 60:00 8264 2928 ins APPLE !PHONES 17 06/01/20 11:05:04 60:00 1176 676nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 18 06/01/20 11:49:04 60:00 10036 3176 ins APPLE !PHONES 19 06/01/20 12:05:04 60:00 6242 8975nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 20 06/01/20 12:49:04 60:00 11796 4736 ins APPLE !PHONES 21 06/01/20 13:05:04 60:00 1292 938 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 22 06/01/20 13:49:04 60:00 12028 4268 ins APPLE !PHONES 23 06/01/20 14:05:04 52:50 97659 63430nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 24 06/01/20 14:49:04 1:01 6304 2224 ins APPLE !PHONES 25 06/01/20 14:50:09 18:13 9393 8466 ins APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170649 The information contained here is for use by authorized persons only and is not for general distribution. Page 1 EFTA01342711 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:13:13pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. u AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DOM 1MSI MAKE MODEL Cell Location Data Tim Number Up Dn (MC) 26 06/01/20 14:57: 19:38 53238 283837nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 27 06/01/20 15:08: 9:10 3052 1432 Leis APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.01 28 06/01/20 15:08: 9:10 2920 1432 Leis APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.01 29 06/01/20 15:17: 2:04 54413 18936nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 30 06/01/20 15:17: 2:03 6228 6689 Leis APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, _USA 31 06/01/20 15:17: 2:04 16936 54125nxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::01 32 06/01/20 15:17: 2:02 6669 5964 Leis APPLE !PHONES (311580084491266:1217109705044::::01 33 06/01/20 15:19: 60:00 235957 176510nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 34 06/01/20 15:19: 31:40 9383 7358 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 35 06/01/20 15:51: 16:00 3672 1556 ims APPLE !PHONES 36 06/01/20 16:07: 0:15 6676 1820 Leis APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 37 06/01/20 16:07: 43:40 6632 2648 Leis APPLE !PHONES 38 06/01/20 16:19: 60:00 81016 209053nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 39 06/01/20 16:51: 0:51 2644 1324 Leis APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.01 40 06/01/20 16:52: 12:52 3532 1432 Leis APPLE !PHONES 41 06/01/20 17:04: 1:09 2644 1324 Leis APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.01 42 06/01/20 17:06: 60:00 11996 4328 Leis APPLE !PHONES 43 06/01/20 17:19: 60:00 1138 1936nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 44 06/01/20 18:06: 60:00 8480 3020 Leis APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170650 The information contained here is for use by authorized persons only and is not for general distribution. Page 2 EFTA01342712 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided UTC. •--is"" a AT&T Run Date: 06/29/2020 Run Time: Data Usage Per: Item Conn. Conn. Date Tame (OTC) IS= Originating Number ET Bytes up Bytes Apn On IMEI IMSI MAKE MODEL Cell Location 45 06/01/20 18:19:36 60:00 36198 25369nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 46 06/01/20 19:06:05 21:04 5072 1572 ims APPLE !PHONES 47 06/01/20 19:19:36 60:00 80090 154219nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0. 023310785:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 48 06/01/20 19:27:09 14:38 2644 1324 iota APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 49 06/01/20 19:41:47 60:00 12136 4684 ims APPLE !PHONES 50 06/01/20 20:19:36 60:00 9626 23893 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 51 06/01/20 20:41:47 60:00 11060 4952 ims APPLE !PHONES 52 06/01/20 21:19:36 35:09 12444 6123 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 1.0] 53 06/01/20 21:41:47 54:22 8480 2896 ims APPLE !PHONES 54 06/01/20 21:54:44 2:03 266 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 55 06/01/20 21:54:45 2:03 48 Onxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::01 56 06/01/20 21:56:48 1:48 48 Onxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 57 06/01/20 21:58:36 3:37 48 Onxtgenp APPLE !PHONES [023310608:91057:hone 71.9598779:43.2972525:150:-1.01 58 06/01/20 22:02:12 1:45 266 48 nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 59 06/01/20 22:02:13 1:45 48 Onxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::01 60 06/01/20 22:03:58 60:00 74045 78426 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 61 06/01/20 22:36:09 21:23 26404 1412 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 62 06/01/20 22:36:09 21:23 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 63 06/01/20 22:57:32 11:56 8260 2820 ims APPLE !PHONES 64 06/01/20 23:03:58 60:00 4095 4941 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170651 The information contained here is for use by authorized persons only and is not for general distribution. Page 3 EFTA01342713 ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 41! teS 4a"11. AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Date Timo (OTC) Originating Number ET Bytes Up Bytes Apn On Mei 1MSI MAKE MODEL Col/ Location 65 06/01/20 23:09:2 0:02 0 0 Las APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 66 06/01/20 23:09:2 0:02 0 0 Lau APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 67 06/01/20 23:09:41 60:00 35795 18581 Lau 68 06/02/20 00:03:5 60:00 5974 7569nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 69 06/02/20 00:09:41 60:00 6726 3252 Lau 70 06/02/20 01:03:5 60:00 3725 892nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 71 06/02/20 01:09:41 60:00 10160 3284 Lau 72 06/02/20 02:03:5 30:02 490 1155nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 73 06/02/20 02:09:41 60:00 8496 3036 Lau 74 06/02/20 02:33:5 0:35 5168 6230nxtgenp APPLE !PHONES (366491269:1431606::::01 U.S. Cellular, hone _USA 75 06/02/20 02:34:0C 0:35 6230 4880nxtgenp hone APPLE !PHONES (311580084491269:1217109705044::::01 76 06/02/20 02:34:3 51:01 19228 7931nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 77 06/02/20 03:09:41 60:00 15344 5768 Lau 78 06/02/20 03:25:3 0:54 268 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 79 06/02/20 03:25:3 0:53 48 Onxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::01 80 06/02/20 03:26:3C 60:00 7623 6111nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 81 06/02/20 04:09:41 60:00 6956 2664 Lau 82 06/02/20 04:26:3C 60:00 1559 1365nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 83 06/02/20 05:09:41 60:00 6956 2788 Lau 84 06/02/20 05:26:3C 60:00 1443 1155nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 85 06/02/20 06:09:41 60:00 6848 2680 Lau 86 06/02/20 06:26:3C 60:00 1722 2051nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 87 06/02/20 07:09:41 60:00 7064 2804 Lau 88 06/02/20 07:26:3C 60:00 9292 13711nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 89 06/02/20 08:09:41 60:00 15452 5768 Lau AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SONY_GM_00170652 The information contained here is for use by authorized persons only and is not for general distribution. Page 4 EFTA01342714 ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in UTC. 4III, AT&T Run Date: 06/29/2020 Run Tine: Data Usage For: Item Conn. Conn. Date Tame (OTC) Originating Number ET Bytos Up Bytes Apn On =MI IMSI MARE MODEL Cell Location 90 06/02/20 08:26:30 60:00 1097 945 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 91 06/02/20 09:09:41 60:00 6646 2572 Las 92 06/02/20 09:26:30 60:00 606 630 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 93 06/02/20 10:09:41 60:00 6956 2804 Lau 94 06/02/20 10:26:30 60:00 3604 996 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 95 06/02/20 11:09:41 60:00 12060 6052 Lau 96 06/02/20 11:26:30 60:00 740 420 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 97 06/02/20 12:09:41 60:00 6956 2772 Lau 98 06/02/20 12:26:30 60:00 576 630 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 99 06/02/20 13:09:41 60:00 10466 4288 Lau 100 06/02/20 13:26:30 60:00 467 210 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 101 06/02/20 14:09:41 44:54 20066 10876 isle APPLE !PHONES 102 06/02/20 14:26:30 60:00 49577 154114 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 103 06/02/20 14:43:50 10:45 1146262 2105550 Les APPLE IPHONE6 104 06/02/20 14:54:35 0:15 5526 2840 Les APPLE IPHONE6 (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 105 06/02/20 14:54:35 0:15 5192 2840 Les APPLE IPHONE6 [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 106 06/02/20 14:54:35 0:15 52007 29291 Les APPLE IPHONE6 [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 107 06/02/20 14:54:35 0:15 52074 29291 Les APPLE IPHONE6 (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 108 06/02/20 14:54:50 6:46 1277744 902121 isle APPLE !PHONES 109 06/02/20 14:54:50 10:37 10112 4792 isle APPLE !PHONES 110 06/02/20 15:05:27 2:59 2660 1340 isle APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 111 06/02/20 15:05:27 2:59 2596 1340 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170653 The information contained here is for use by authorized persons only and is not for general distribution. Page 5 EFTA01342715 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Date Tim (OTC) SWIM Originating Number ET Bytes DP Bytes Apn On DMZ 1MSI MAKE MODEL Cell Location 112 06/02/20 15:08:30 0:16 6689 5999 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0] 113 06/02/20 15:08:46 4:21 3532 1340 Las APPLE !PHONES 114 06/02/20 15:13:07 10:32 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 115 06/02/20 15:23:39 60:00 12028 4484 ins APPLE !PHONES 116 06/02/20 15:26:30 60:00 99974 67663nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 117 06/02/20 16:23:39 60:00 14832 9324 ins APPLE !PHONES 118 06/02/20 16:26:30 60:00 43565 32662 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 119 06/02/20 17:04:21 10:23 1523437 1820730 ins APPLE !PHONES 120 06/02/20 17:23:39 60:00 25120 13800 ins APPLE !PHONES 121 06/02/20 17:26:30 25:51 6237 7511nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 122 06/02/20 17:33:52 1:01 126707 153540 ins APPLE !PHONES 123 06/02/20 17:52:21 60:00 15314 18255 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 124 06/02/20 18:23:39 60:00 6956 2680 ins APPLE !PHONES 125 06/02/20 18:52:21 60:00 751 735nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 126 06/02/20 19:23:39 60:00 12136 4592 ins APPLE !PHONES 127 06/02/20 19:52:21 60:00 34062 35324 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 128 06/02/20 20:23:39 60:00 12368 4444 ins APPLE !PHONES 129 06/02/20 20:52:21 60:00 16138 17233nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 130 06/02/20 21:23:39 28:19 124 496 ims APPLE IPE0NE8 131 06/02/20 21:43:17 8:41 10410 6526 ims 132 06/02/20 21:51:58 60:00 0 0 ims 133 06/02/20 21:52:21 60:00 83690 71751nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 134 06/02/20 21:53:02 19785258484 9:02 9853 6222 ims 3587080982063727 310410214827503 APPLE IPE0NE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170654 The information contained here is for use by authorized persons only and is not for general distribution. Page 6 EFTA01342716 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. a ``a° AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Date Tame (DSC) Originating ET Bytes Up Bytes Apn On flat IMSI MAKE MODEL Cell Location 135 06/02/20 22:02:04 7:42 2620 1340 /ma APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 136 06/02/20 22:02:04 7:42 2666 1340 Las APPLE 'PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 137 06/02/20 22:09:46 0:20 3408 1324 Lau APPLE 'PHONES 138 06/02/20 22:10:06 2:06 2660 1324 Lau APPLE 'PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 139 06/02/20 22:10:06 2:06 2596 1324 Lau APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 140 06/02/20 22:12:12 60:00 11996 4392 Lau APPLE !PHONES 141 06/02/20 22:51:58 60:00 0 0 Lau 142 06/02/20 22:52:21 60:00 53259 29558 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 143 06/02/20 23:12:12 60:00 16884 9908 Lau APPLE IPHONE8 144 06/02/20 23:51:58 60:00 0 0 Lau 145 06/02/20 23:52:21 60:00 113776 20487nxtgonp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.01 146 06/03/20 00:07:02 6:55 1488519 757807 Lau APPLE !PHONES 147 06/03/20 00:12:12 60:00 9280 3612 Lau APPLE IPHONE8 148 06/03/20 00:51:58 60:00 0 0 Lau 149 06/03/20 00:52:21 59:45 616690 47854nxtgonp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.01 150 06/03/20 01:12:12 36:32 3408 1340 Lms APPLE !PHONES 151 06/03/20 01:48:43 1:43 61788 1340 Lms APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 152 06/03/20 01:48:44 1:42 2596 1340 Lms APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 153 06/03/20 01:50:26 0:20 3408 1340 Lau APPLE !PHONES 154 06/03/20 01:50:46 1:17 2660 1340 Lau APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 155 06/03/20 01:50:46 1:17 2596 1340 Lau APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170655 The information contained here is for use by authorized persons only and is not for general distribution. Page 7 EFTA01342717 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 41110 ...,1/4-rs e,• `—‘ AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Data Time (OTC) SS= OrIganatIng Number BY Bytes Up Bytes Apn On DEBI HISS MAKE MODEL Coll Location 156 06/03/20 01:51:5 0:01 0 0 Las 157 06/03/20 01:52:0 60:00 24624 7240 Les APPLE !PHONES 158 06/03/20 01:52:0 1:07 268 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 159 06/03/20 01:52:0 1:07 48 0nxtgenp hone APPLE !PHONES [311580084491266:1217109705044::::01 160 06/03/20 01:53:1 60:00 107627 64507nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 161 06/03/20 02:52:0 60:00 6616 2680 Les APPLE !PHONES 162 06/03/20 02:53:1 60:00 514 525nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 163 06/03/20 03:52:0 8:25 0 0 Les APPLE !PHONES 164 06/03/20 03:53:1 60:00 514 525nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 165 06/03/20 04:00:2 4:35 48740 1340 Les APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 166 06/03/20 04:00:2 4:33 2596 1340 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 167 06/03/20 04:05:01 60:00 12120 4732 Les APPLE !PHONES 168 06/03/20 04:53:1 60:00 578 630nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 169 06/03/20 05:05:01 60:00 8496 3036 Les APPLE !PHONES 170 06/03/20 05:53:1 60:00 462 420nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 171 06/03/20 06:05:01 60:00 6616 2664 Les APPLE !PHONES 172 06/03/20 06:53:1 60:00 603 840nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 173 06/03/20 07:05:01 33:19 4980 1588 Les APPLE !PHONES 174 06/03/20 07:38:20 0:02 0 0 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 175 06/03/20 07:38:20 0:02 0 0 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 176 06/03/20 07:45:1 60:00 11869 8788 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 177 06/03/20 07:53:13 60:00 3620 996nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 178 06/03/20 08:45:1 35:25 2596 1340 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 179 06/03/20 08:53:13 60:00 514 525nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170656 The information contained here is for use by authorized persons only and is not for general distribution. Page 8 EFTA01342718 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 4111. AT&T Run Date: Run Time: Data Usage For: Item Conn. Conn. Date Tama (UTe) 06/29/2020 Originating Number ET Bytes Up Bytes Apn On DELI HIBI MAKE MODEL Cell Location 180 06/03/20 09:20:4 0:01 0 0 ins APPLE !PHONES 181 06/03/20 09:20:5 60:00 18242 9408 ins 182 06/03/20 09:53:1 60:00 578 630nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 183 06/03/20 10:20:5 60:00 6956 2772 ins 184 06/03/20 10:53:1 60:00 3488 786nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 185 06/03/20 11:20:5 60:00 13460 4624 ins 186 06/03/20 11:53:1 43:06 346 210nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 187 06/03/20 12:20:5 60:00 8496 2928 ins 188 06/03/20 12:36:1 60:00 17171 19006nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 189 06/03/20 13:20:5 60:00 6848 2680 ins 190 06/03/20 13:36:1 60:00 1076 5194nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 191 06/03/20 14:20:5 60:00 17440 7140 ins 192 06/03/20 14:36:1 60:00 33285 20450nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 193 06/03/20 15:20:5 60:00 8366 2928 ins 194 06/03/20 15:36:1 60:00 68804 52255nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 1.0) 195 06/03/20 16:20:59 19785258484 25:43 3532 1340 iota 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SONY_GM_00170657 The information contained here is for use by authorized persons only and is not for general distribution. Page 9 EFTA01342719 ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided UTC. in AT&T Run Date: Run Ties: Data usage For: Item Conn. Conn. Data Tim 06/29/2020 Originating BB Bytes Number Bytom Apn on INEI ItlSI maim NOBEL Cell Location 196 06/03/20 (UTC) 16:36:1 60:00 73150 319642 nxtgonp hone 3 APPLE !PHONES 1024577552:96006:- 71.9906006:43.3717995:210:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 197 06/03/20 16:46:42 35:56 16696 2804 ims 3 APPLE !PHONES 1023310601:91057:- 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.01 198 06/03/20 16:46:42 35:56 6500 2804 ims 3 APPLE !PHONES 1023310601:91057:- 71.9598779:43.2972525:150:-1.01 199 06/03/20 17:22:38 60:00 12152 5500 ins 3 APPLE !PHONES 200 06/03/20 17:36:19 60:00 6217 8569nxtgenp 3 APPLE !PHONES 1023310608:91057:hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 201 06/03/20 18:22:38 50:15 20272 14536 ims 3. APPLE !PHONES 202 06/03/20 18:36:19 60:00 65601 74295nxtgenp 3 APPLE !PHONES 1023310608:91057:hone 71.9598779:43.2972525:150:-1.01 203 06/03/20 19:08:57 0:32 3390 17716 ims 3 APPLE !PHONES 204 06/03/20 19:12:53 1:08 29664 1588 ims 3 APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 205 06/03/20 19:12:53 1:08 4244 1588 ims 3! APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 206 06/03/20 19:14:011 60:00 15452 6108 ins 3 APPLE !PHONES 207 06/03/20 19:36:19 49:02 154491 104472nxtgenp 3 APPLE !PHONES 1023310608:91057:hone 71.9598779:43.2972525:150:-1.01 208 06/03/20 20:14:01 12:54 0 0 ins 3 APPLE !PHONES 209 06/03/20 20:25:20 1:52 118093 19163nxtgenp 3 APPLE !PHONES 1366491269:1431606::::01 U.S. Cellular, hone _USA AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. Page 10 SDNY_GM_00170668 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342720 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in Inc. tz-, 4*-1:• AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DEBI IBS' BARB MODEL Cell Location Data Tam Number Up On (UTC) 210 06/03/20 20:25:2 1:51 6244 6715 ims APPLE !PHONES (366491269:1431606::::0) U.S. Cellular, 211 06/03/20 20:25:2 1:52 19163 117805nxtgonp APPLE _USA !PHONES (311580084491269:1217109705044 hone 311580084513798:1217109705132.... 311580084491269:1217109705044 311580084491266:1217109705044::::0) 212 06/03/20 20:25:22 1:51 6647 5980 Las APPLE !PHONES (311580084491269:1217109705044::::0) 213 06/03/20 20:26:55 21:44 15066 11650 Las APPLE !PHONES 214 06/03/20 20:27:13 60:00 29699 22731nxtgonp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 215 06/03/20 20:31:0 17:38 2582971 3580061 Las APPLE !PHONES 216 06/03/20 20:48:3 20:58 3222937 4174165 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 217 06/03/20 20:48:3 20:58 9450 5464 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 218 06/03/20 20:48:39, 20:58 3222937 4174165 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 1.0] 219 06/03/20 20:48:39, 20:58 9200 5464 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 220 06/03/20 21:09:37 22:11 3048535 4722292 Las APPLE !PHONES 221 06/03/20 21:09:37 60:00 25284 10868 Las APPLE !PHONES 222 06/03/20 21:27:13 56:17 30089 21364nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 223 06/03/20 22:09:3 60:00 8604 3144 Las APPLE !PHONES 224 06/03/20 22:23:2 0:34 288 48nxtgenp APPLE !PHONES (366491266:1431606::::0) U.S. Cellular, hone _USA 225 06/03/20 22:23:30 0:34 48 Onxtgonp hone APPLE !PHONES (311580084491266:1217109705044::::0) AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 11 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170659 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342721 ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/29/2020 Run Tiro: Data Usage For: Item Conn. Conn. Date Time (OTC) Ma= Originating Number ET Bytes: Up Bytes Apn DEBI IM0I MAKE Dn MODEL Coll Location 226 06/03/20 22:24:03 60:00 167526 117996nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 227 06/03/20 23:09:37 60:00 6636 3160 ins APPLE !PHONES 228 06/03/20 23:24:03 60:00 44474 24371nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 229 06/04/20 00:09:37 60:00 10144 3176 ims APPLE !PHONES 230 06/04/20 00:24:03 60:00 1976 5865 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 231 06/04/20 01:09:37 60:00 6956 2680 ins APPLE !PHONES 232 06/04/20 01:24:03 23:49 35215 21990nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 233 06/04/20 01:47:52 60:00 56507 36707nxtgonp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 234 06/04/20 02:09:37 60:00 16640 6280 ims APPLE !PHONES 235 06/04/20 02:47:52 60:00 7541 1994 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 236 06/04/20 03:09:37 60:00 6646 2896 ins APPLE !PHONES 237 06/04/20 03:47:52 60:00 2264 3777 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 238 06/04/20 04:09:37 60:00 6604 2928 ims APPLE !PHONES 239 06/04/20 04:47:52 60:00 1670 1785nxtgonp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 240 06/04/20 05:09:37 60:00 6366 2928 ins APPLE !PHONES 241 06/04/20 05:47:52 60:00 1651 1575nxtgonp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 242 06/04/20 06:09:37 60:00 11920 4144 ins APPLE !PHONES 243 06/04/20 06:47:52 60:00 1092 1155 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 244 06/04/20 07:09:37 60:00 11920 4412 ins APPLE !PHONES 245 06/04/20 07:47:52 60:00 450 420 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 246 06/04/20 08:09:37 60:00 6646 2680 ins APPLE !PHONES 247 06/04/20 08:47:52 60:00 514 525 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 248 06/04/20 09:09:37 60:00 11920 4592 ins APPLE !PHONES 249 06/04/20 09:47:52 60:00 3251 576nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. Page 12 SDNY_GM_00170660 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342722 ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. a tre,J 4*--f• AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Date 1.10.0 (UTC) Originating Number ET Bytes Up Bytes Apn On flat INS! MAKE MODEL Cell Location 250 06/04/20 10:09:3 60:00 6848 2680 ims APPLE !PHONES 251 06/04/20 10:47:5 60:00 42253 3025 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0. 023413008:91457:-72.166667:43.205:100:-1.01 252 06/04/20 11:09:3' 38:20 3424 1340 ims APPLE !PHONES 253 06/04/20 11:47:5 24:27 10549 17309nxtgenp APPLE IPHONt8 (023413008:91457:-72.166667:43.205:100:-1.0. hone 023310785:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150: 1.01 254 06/04/20 11:47:5' 7:10 195712 2208 ims APPLE !PHONES (023310785:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150: 1.01 255 06/04/20 11:47:5' 7:10 7524 2208 ims APPLE !PHONES (023310785:91057:- 71.9598779:43.2972525:150:-1.01 256 06/04/20 11:55:0' 18:31 3532 1340 ims APPLE !PHONES 257 06/04/20 12:12:1 2:04 286 48 nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 258 06/04/20 12:12:1 2:04 48 O nxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::01 259 06/04/20 12:13:3 0:46 6471 7525 ims APPLE !PHONES (366491269:1431606::::0) U.S. Cellular, _USA 260 06/04/20 12:13:3 0:46 7525 6207 ims APPLE !PHONES (311580084491269:1217109705044::::0) 261 06/04/20 12:14:2 52:50 19803 32618 nxtgenp APPLE !PHONES (023310608:91057: hone 71.9598779:43.2972525:150: -1.01 262 06/04/20 12:14:2 2:22 6663 5919 ims APPLE !PHONES (023310608:91057: - 71.9598779:43.2972525:150: -1.01 263 06/04/20 12:16:4 51:41 11920 4344 ims APPLE !PHONES 264 06/04/20 13:07:1 0:45 266 48 nxtgenp APPLE !PHONES (366513795:1431694::::0) U.S. Cellular, hone _USA 265 06/04/20 13:07:1 0:44 48 O nxtgenp hone APPLE !PHONES (311580084513795:1217109705132::::01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170661 The information contained here is for use by authorized persons only and is not for general distribution. Page 13 EFTA01342723 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. AT&T Run Date: Run Time: Data Usage For: 06/29/2020 NM= Item Conn. Conn. Data Tam (OTC) 266 06/04/20 13:07:59 Originating ET Bytes Number up Bytes Apn Dn 60:00 90315 877381nxtgenp hone 267 06/04/20 13:08:27 4:47 2736 1536 ims 268 06/04/20 13:08:27 4:47 2736 1448 ims 269 06/04/20 13:13:14 0:29 3206 1216 ims 270 06/04/20 13:13:43 2:34 2752 1412 ims 271 06/04/20 13:13:43 2:34 2752 1324 ims 272 06/04/20 13:16:17 1:51 3532 1340 ims 273 06/04/20 13:18:08 20:43 2644 1412 ims 274 06/04/20 13:18:08 20:43 2644 1324 ims 275 06/04/20 13:38:51 1:46 3424 1324 ims flat INSI MAKE MODEL Coll Location APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 023310785:91057:-71.9598779:43. 023310601:91057:-71.9598779:43. 023310608:91057:-71.9598779:43. 023310601:91057:-71.9598779:43. 023310608:91057:-71.9598779:43. 023310601:91057:-71.9598779:43. 2972525:150:- [repeated 6 times] 023310608:91057:-71.9598779:43.2972525:150:- 1.0] APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) APPLE !PHONES APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) APPLE APPLE !PHONES !PHONES (023310785:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] APPLE !PHONES (023310785:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 1.0] APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170662 The information contained here is for use by authorized persons only and is not for general distribution. Page 14 EFTA01342724 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. a AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Sid= Item Conn. Conn. originating ET Date Time Number (OTC) Bytes Up Bytes Apn on flat RUBS mum MODEL Cell Location 276 06/04/20 13:40:3 4:42 3500 2412 ime APPLE !PEONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 277 06/04/20 13:40:3 4:42 3500 2324 ime APPLE !PEONES (023310601:91057:- 71.9598779:43.2972525:150:-1.01 278 06/04/20 13:45:15 2:47 3424 1324 ime APPLE IPEONES 279 06/04/20 13:48:0C 2:08 3952 1536 ime APPLE IPEONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 280 06/04/20 13:48:0i 2:08 3952 1448 ime APPLE !PEONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 281 06/04/20 13:50:1 60:00 29360 13004 ims APPLE IPEONES 282 06/04/20 14:07:5 46:54 11593 1675nxtgenp APPLE IPEONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 283 06/04/20 14:30:0 1:48 273405 246324 ime APPLE IPEONES 284 06/04/20 14:50:1 60:00 8496 3004 ime APPLE IPEONES 285 06/04/20 14:54:5 1:41 266 48nxtgenp APPLE IPEONES (366491266:1431606::::01 U.S. Cellular, hone _USA 286 06/04/20 14:54:5 1:41 48 Onxtgonp hone APPLE IPEONES (311580084491266:1217109705044::::01 287 06/04/20 14:56:3 60:00 162660 104092nxtgenp APPLE !PEONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 288 06/04/20 15:50:1 60:00 8496 2896 ims APPLE !PEONES 289 06/04/20 15:56:3 60:00 53947 4385nxtgenp APPLE IPEONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 290 06/04/20 16:50:1 60:00 16776 6092 ims APPLE IPEONES 291 06/04/20 16:56:3 60:00 1944 6715nxtgenp APPLE IPEONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 292 06/04/20 17:50:14 51:35 5396 1680 ims APPLE IPEONES 293 06/04/20 17:56:35 60:00 35568 39441 nxtgenp APPLE IPEONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 15 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170663 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342725 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. i 4`"-.1" AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Date Tama CUTC) NM= Originating unehm ET Bytes Up Bytes Apn On flat HIBI RARE MODEL Cell Location 294 06/04/20 18:41:49 1:00 60184 2412 /ma APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 295 06/04/20 18:41:49 1:00 3484 2324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 296 06/04/20 18:42:49 60:00 15680 5072 ims APPLE !PHONES 297 06/04/20 18:56:35 60:00 10263 5883 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 298 06/04/20 19:42:49 60:00 8496 3020 ims APPLE !PHONES 299 06/04/20 19:56:35 60:00 8052 6043 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 300 06/04/20 20:42:49 39:08 5072 1572 ims APPLE !PHONES 301 06/04/20 20:56:35 60:00 4093 1356 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 302 06/04/20 21:21:57 0:26 2644 1412 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 303 06/04/20 21:21:57 0:26 2644 1324 /ma APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 304 06/04/20 21:22:23 60:00 15000 4716 Loa APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170664 The information contained here is for use by authorized persons only and is not for general distribution. Page 16 EFTA01342726 ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Date: Run Time: Data Osage For: 06/29/2020 Item Conn. Conn. Date Tam (OTC) 305 06/04/20 21:56:3! 306 06/04/20 307 06/04/20 308 06/04/20 309 06/04/20 310 06/04/20 22:22:2 22:34:2! 22:34:2! 22:35:4 22:37:0! Originating ET Bytos Bytes Apn Unvehm,. PP on 39:14 5719913 14280470nxtgenp hone flat IMSI MARE MODEL Cell Location APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43. 2972525:150:- 024577552:96006:-71.9906006:43. 3717995:210:- 023310608:91057:-71.9598779:43. 2972525:150:- 024577552:96006:-71.9906006:43. 3717995:210:- 023310608:91057:-71.9598779:43. 2972525:150:- 024577552:96006:-71.9906006:43. 3717995:210:- 023310608:91057:-71.9598779:43. 2972525:150:- 024577552:96006:-71.9906006:43. 3717995:210:- 023310608:91057:-71.9598779:43. 2972525:150:- 024577552:96006:-71.9906006:43. 3717995:210:- 023310608:91057:-71.9598779:43. 2972525:150:- 024577552:96006:-71.9906006:43. 3717995:210:- 023310608:91057:-71.9598779:43. 2972525:150:- 024577552:96006:-71.9906006:43. 3717995:210:- 023310608:91057:-71.9598779:43. 2972525:150:- 024577552:96006:-71.9906006:43. 3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 12:02 0 0 ices APPLE !PHONES 2:40 90252 2696 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 2:40 5240 2608 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1:46 1831454 6936581nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 0:31 17188 5524 ice APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. Page 17 SDNY_GNL00170665 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342727 1111111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. a AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Data Time Number (uTc) Bytes Up Bytes Apn LNEI Dn 1MSI MARE MODEL Cell Location 311 06/04/20 22:47:30 19785258484 60:00 123438 507848nxtgenp 3587080982063727 310410214827503 APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 312 06/04/20 22:47:3 1:23 6667 5982 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150: -1.0] 313 06/04/20 22:48:5 60:00 11920 4328 ims APPLE !PHONES 314 06/04/20 23:47:3 60:00 872 735nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0] 315 06/04/20 23:48:5 60:00 8604 2896 ims APPLE !PHONES 316 06/05/20 00:47:3 0:31 0 Onxtgenp APPLE !PHONES [023310608:91057: - hone 71.9598779:43.2972525:150: -1.0] 317 06/05/20 00:48:0 60:00 155415 89338 nxtgenp APPLE !PHONES [023310608:91057: - hone 71.9598779:43.2972525:150: -1.0] 318 06/05/20 00:48:5 60:00 8388 2896 ims APPLE !PHONES 319 06/05/20 01:48:0 60:00 12724 8711nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0] 320 06/05/20 01:48:5 60:00 11920 4112 ims APPLE !PHONES 321 06/05/20 02:48:0 60:00 969 735nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0] 322 06/05/20 02:48:5 60:00 6956 2540 ims APPLE !PHONES 323 06/05/20 03:48:0 15:20 173 105 nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0] 324 06/05/20 03:48:5 60:00 13352 4860 ims APPLE !PHONES 325 06/05/20 04:03:2 0:46 288 48nxtgenp APPLE !PHONES (366513795:1431694::::0) U.S. Cellular, hone _USA 326 06/05/20 04:03:2 0:46 48 Onxtgenp hone APPLE !PHONES (311580084513795:1217109705132::::0) 327 06/05/20 04:04:0 60:00 7363 6195 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 328 06/05/20 04:48:5 60:00 13568 4576 ism APPLE 'PHONES 329 06/05/20 05:04:0 60:00 635 525 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 330 06/05/20 05:48:5 60:00 11256 3268 ims APPLE !PHONES 331 06/05/20 06:04:0 60:00 667 630 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 332 06/05/20 06:48:5 60:00 6956 2664 ims APPLE !PHONES 333 06/05/20 07:04:0 60:00 635 525 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 334 06/05/20 07:48:5 60:00 8496 3004 ins APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 18 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170666 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342728 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 4`" --es AT&T Run Date: 06/29/2020 Run Tine: Data Usage For: Item Conn. Conn. Date Time (UTc) Originating Number ET Bytos Up Bytes Apn Dn Dar 1MSI MAKE MODEL Cell Location 335 06/05/20 08:04:08 60:00 635 525nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 336 06/05/20 08:48:56 60:00 13696 5364 ins APPLE !PHONES 337 06/05/20 09:04:08 60:00 751 735nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 338 06/05/20 09:48:56 60:00 8712 3220 ins APPLE !PHONES 339 06/05/20 10:04:08 60:00 578 630nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 340 06/05/20 10:48:56 60:00 6848 2648 ins APPLE !PHONES 341 06/05/20 11:04:08 60:00 398 315nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 342 06/05/20 11:48:56 60:00 8604 3252 ins APPLE !PHONES 343 06/05/20 12:04:08 60:00 6730 5064nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 344 06/05/20 12:48:56 60:00 6832 2648 ins APPLE !PHONES 345 06/05/20 13:04:08 60:00 450 420nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 346 06/05/20 13:48:56 60:00 15684 6940 ism APPLE !PHONES 347 06/05/20 14:04:08 60:00 450 420nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 348 06/05/20 14:48:56 60:00 6848 2648 ins APPLE !PHONES 349 06/05/20 15:04:08 60:00 659 4452nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 350 06/05/20 15:48:56 60:00 8496 2896 ins APPLE !PHONES 351 06/05/20 16:04:08 60:00 3372 472nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 352 06/05/20 16:48:56 60:00 8496 2896 ins APPLE IPHONE8 353 06/05/20 17:04:08 15:22 0 Onxtgenp APPLE IPHONE8 (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 354 06/05/20 17:19:30 60:00 35972 24529nxtgenp APPLE IPHONE8 (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 355 06/05/20 17:48:56 60:00 8604 3128 ins APPLE IPHONE8 356 06/05/20 18:19:30 60:00 3536 682nxtgenp APPLE IPHONE8 (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 357 06/05/20 18:48:56 60:00 41944 22316 ins APPLE IPHONE8 358 06/05/20 19:19:30 60:00 6492 17785nxtgenp APPLE IPHONE8 (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 359 06/05/20 19:33:43 0:22 0 320 ims APPLE IPHONE8 360 06/05/20 19:34:13 0:24 0 320 ims APPLE !PHONES 361 06/05/20 19:48:56 60:00 40528 31092 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170667 The information contained here is for use by authorized persons only and is not for general distribution. Page 19 EFTA01342729 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 4111111. AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Sid= Item Conn. Conn. Originating ET Date Time Number Curc) Bytes Up Bytes Apn Dn flat IMBI MAKE MODEL Cell Location 362 06/05/20 20:19:30 60:00 3424 577 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 363 06/05/20 20:45:10 0:33 3038 17869 ims APPLE IPHONE8 364 06/05/20 20:46:07 0:33 3750 20453 ims APPLE IPHONE8 365 06/05/20 20:48:56 60:00 7172 2988 ims APPLE IPHONE8 366 06/05/20 21:19:30 60:00 1012 4808 nxtgenp APPLE IPHONE8 (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 367 06/05/20 21:48:56 58:49 13568 4592 ims APPLE !PHONES 368 06/05/20 22:19:30 60:00 1220 687 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 369 06/05/20 22:47:45 2:43 118304 1412 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 370 06/05/20 22:47:45 2:43 2752 1324 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 371 06/05/20 22:50:28 60:00 11044 4344 ims APPLE !PHONES 372 06/05/20 23:19:30 60:00 462 420 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 373 06/05/20 23:50:28 60:00 15232 5108 ims APPLE !PHONES 374 06/06/20 00:19:30 60:00 711 4833 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 375 06/06/20 00:50:28 60:00 15324 4840 ims APPLE !PHONES 376 06/06/20 01:19:30 60:00 32521 22185 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 377 06/06/20 01:50:28 60:00 6848 2540 ims APPLE !PHONES 378 06/06/20 02:19:30 60:00 6756 5215 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 379 06/06/20 02:50:28 1:24 0 0 ims APPLE !PHONES 380 06/06/20 02:51:52 6:21 13120 1536 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 381 06/06/20 02:51:52 6:21 3376 1448 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 382 06/06/20 02:58:13 60:00 14876 4716 ims APPLE !PHONES 383 06/06/20 03:19:30 60:00 3718 682 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 384 06/06/20 03:58:13 60:00 8388 2896 ims APPLE !PHONES 385 06/06/20 04:19:30 60:00 872 735nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 386 06/06/20 04:58:13 60:00 9928 3144 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 20 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00170668 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342730 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Data Tam (OTC) Ma= Originating Number ET Bytes Up Bytes Apn on MIMI IMSI MAKE MODEL Cell Location 387 06/06/20 05:19:30 60:00 867 945 nxtgenp APPLE !PHONES 1023310608:91057:hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 1.01 388 06/06/20 05:58:13 60:00 15344 6044 ins APPLE !PHONES 389 06/06/20 06:19:30 60:00 908 1120 nxtgenp APPLE !PHONES 1023310601:91057:hone 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.01 390 06/06/20 06:58:13 60:00 8496 2896 ins APPLE !PHONES 391 06/06/20 07:19:30 60:00 635 525 nxtgenp APPLE !PHONES 1023310608:91057:hone 71.9598779:43.2972525:150:-1.01 392 06/06/20 07:58:13 60:00 8604 3004 ins APPLE !PHONES 393 06/06/20 08:19:30 60:00 346 210 nxtgenp APPLE !PHONES 1023310608:91057:hone 71.9598779:43.2972525:150:-1.01 394 06/06/20 08:58:13 60:00 10380 4204 Lois APPLE !PHONES 395 06/06/20 09:19:30 60:00 519 315 nxtgenp APPLE !PHONES 1023310608:91057:hone 71.9598779:43.2972525:150:-1.01 396 06/06/20 09:58:13 60:00 8496 2896 ins APPLE !PHONES 397 06/06/20 10:19:30 60:00 578 630 nxtgenp APPLE !PHONES 1023310608:91057:hone 71.9598779:43.2972525:150:-1.01 398 06/06/20 10:58:13 60:00 12152 4520 ins APPLE !PHONES 399 06/06/20 11:19:30 47:23 16469 13411nxtgenp APPLE !PHONES 1023310608:91057:hone 71.9598779:43.2972525:150:-1.01 400 06/06/20 11:58:13 60:00 7080 2988 ins APPLE !PHONES 401 06/06/20 12:06:53 60:00 6834 5371nxtgenp APPLE !PHONES 1023310608:91057:hone 71.9598779:43.2972525:150:-1.01 402 06/06/20 12:58:13 60:00 8496 2896 ins APPLE !PHONES 403 06/06/20 13:06:53 60:00 35211 18104 nxtgenp APPLE !PHONES 1023310608:91057:hone 71.9598779:43.2972525:150:-1.01 404 06/06/20 13:58:13 60:00 12028 4328 Lois APPLE !PHONES 405 06/06/20 14:06:53 60:00 1126 5579nxtgenp APPLE !PHONES 1023310608:91057:hone 71.9598779:43.2972525:150:-1.01 406 06/06/20 14:58:13 60:00 8388 2896 ins APPLE !PHONES 407 06/06/20 15:06:53 60:00 3922 4868 nxtgenp APPLE !PHONES 1023310608:91057:hone 71.9598779:43.2972525:150:-1.01 408 06/06/20 15:58:13 60:00 13676 4892 ism APPLE IPE0NE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 21 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170669 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342731 ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:13:13pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. r . AT&T Run Date: 06/29/2020 Run Tine: Data Usage For: Item Conn. Conn. Data Tina (OTC) Sid= Originating Number ET Bytom Up Bytes Apn On DMZ Mai RARE MODEL Cell Location 409 06/06/20 16:06:53 60:00 462 420 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 410 06/06/20 16:58:13 60:00 8496 3004 ims APPLE !PHONES 411 06/06/20 17:06:53 60:00 1012 5048 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 412 06/06/20 17:58:13 13:19 4964 1572 ims APPLE !PHONES 413 06/06/20 18:06:53 60:00 14636 14580 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 414 06/06/20 18:11:32 3:46 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 415 06/06/20 18:11:32 3:47 13456 1412 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 416 06/06/20 18:15:18 60:00 12028 4328 ims APPLE !PHONES 417 06/06/20 19:06:53 60:00 13602 14022 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 418 06/06/20 19:15:18 60:00 8604 3020 ims APPLE !PHONES 419 06/06/20 20:06:53 60:00 867 945 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 420 06/06/20 20:15:18 60:00 8388 3004 ims APPLE !PHONES 421 06/06/20 21:06:53 60:00 4045 10186 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 422 06/06/20 21:15:18 60:00 17224 6108 ims APPLE !PHONES 423 06/06/20 22:06:53 40:49 173 105nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 424 06/06/20 22:15:18 19:10 0 0 ims APPLE !PHONES 425 06/06/20 22:34:28 0:02 0 0 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 426 06/06/20 22:34:28 0:02 0 0 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 427 06/06/20 22:34:36 6:42 20846 19472 ims APPLE !PHONES 428 06/06/20 22:40:48 0:30 979 3143 ims APPLE !PHONES 429 06/06/20 22:41:18 3:19 19216 12680 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 430 06/06/20 22:41:18 3:19 17772 12680 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 22 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170670 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342732 111111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. "- `•-eo AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Date Tame (OTC) Originating Number ET Bytos Up Bytes Apn Dn flat INS! MAKE MODEL Cell Location 431 06/06/20 22:41:18 1:03 209603 84563 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 432 06/06/20 22:41:18 1:03 209603 84563 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 433 06/06/20 22:43:39 0:58 174366 84571 Las APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 434 06/06/20 22:43:39 0:58 174366 84571 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 435 06/06/20 22:44:37 2:40 407479 313778 ims APPLE !PHONES 436 06/06/20 22:44:37 2:45 23520 12096 ims APPLE !PHONES 437 06/06/20 22:47:33 60:00 20211 9806 ims 438 06/06/20 22:47:41 8:26 5065 6246nxtgenp APPLE IPHONE8 (366491269:1431606::::0) U.S. Cellular, hone _USA 439 06/06/20 22:47:43 8:25 6246 4777nxtgenp APPLE IPHONE8 (311580084491269:1217109705044— hone 311580084491266:1217109705044::::0) 440 06/06/20 22:56:08 60:00 8145 11569nxtgenp APPLE IPHONE8 (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 441 06/06/20 23:47:33 60:00 6924 2648 ims 442 06/06/20 23:56:08 60:00 1347 1262 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 443 06/07/20 00:47:33 60:00 10084 3036 ims 444 06/07/20 00:56:08 60:00 808 630 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 445 06/07/20 01:47:33 60:00 12244 4452 ims 446 06/07/20 01:56:08 60:00 692 420 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 447 06/07/20 02:47:33 60:00 13584 4644 ims 448 06/07/20 02:56:08 60:00 692 420 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 449 06/07/20 03:47:33 60:00 8728 2804 ims 450 06/07/20 03:56:08 60:00 865 525 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 451 06/07/20 04:47:33 60:00 9960 3036 ims 452 06/07/20 04:56:08 60:00 699 630 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 453 06/07/20 05:47:33 60:00 13368 4468 ims 454 06/07/20 05:56:08 60:00 865 525 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00170671 The information contained here is for use by authorized persons only and is not for general distribution. Page 23 EFTA01342733 MOBILITY (with cell location) 020 1/41' . 4"4 AT&T AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Data: 06/29/2020 Run Ties: Data usage For: Item Conn. Conn. Date Time (OTC) Originating ET Bytos Up Bytom Apn on DEBI DOI RAKE MODEL Coll Location 455 06/07/20 06:47:33 60:00 7264 2772 ins 456 06/07/20 06:56:08 60:00 751 735nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 457 06/07/20 07:47:33 60:00 13476 4644 ins 458 06/07/20 07:56:08 60:00 635 525nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 459 06/07/20 08:47:33 60:00 10068 3144 ins 460 06/07/20 08:56:08 60:00 519 315nxtgonp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 461 06/07/20 09:47:33 60:00 11904 4436 ism 462 06/07/20 09:56:08 60:00 519 315nxtgonp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 463 06/07/20 10:47:33 60:00 9960 3036 ins 464 06/07/20 10:56:08 60:00 5502 7165nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 465 06/07/20 11:47:33 60:00 6924 2988 ins 466 06/07/20 11:56:08 25:31 3199 471nxtgonp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 467 06/07/20 12:21:39 60:00 10267 5332nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 468 06/07/20 12:47:33 60:00 14816 4876 ins 469 06/07/20 13:21:39 60:00 763 735nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 470 06/07/20 13:47:33 60:00 13368 4360 ins 471 06/07/20 14:21:39 60:00 42891 28310nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 472 06/07/20 14:47:33 60:00 8496 2896 ins 473 06/07/20 15:21:39 60:00 3488 682nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 474 06/07/20 15:47:33 60:00 8604 2896 ins 475 06/07/20 16:21:39 16:38 75874 50048nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0. 023413008:91457:-72.166667:43.205:100:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 476 06/07/20 16:38:16 1:49 288 48nxtgenp APPLE !PHONES (366491266:1431606::::0) U.S. Cellular, hone _USA 477 06/07/20 16:38:17 1:49 48 Onxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::0) AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170672 The information contained here is for use by authorized persons only and is not for general distribution. Page 24 EFTA01342734 ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 41! AT&T Run Date: 06/29/2020 Run Ties: Data Usage For: Item Conn. Conn. Data Tama (OTC) Originating Number ET Bytes Up Bytom Apn Dn DELI 1MSI MAKE MODEL Coll Location 478 06/07/20 16:40:06 2:35 48 Onxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 479 06/07/20 16:42:40 0:41 5065 6246nxtgenp APPLE !PHONES (366491269:1431606::::0) U.S. Cellular, hone _USA 480 06/07/20 16:42:41 0:41 6246 4777nxtgenp hone APPLE !PHONES (311580084491269:1217109705044::::0) 481 06/07/20 16:43:22 60:00 28254 16020 nxtgenp APPLE !PHONES (023413008:91457:-72.166667:43.205:100:-1.0. hone 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 482 06/07/20 16:47:33 60:00 10176 3252 ims 483 06/07/20 17:43:22 60:00 364517 42816 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 484 06/07/20 17:47:33 60:00 18688 6356 ims 485 06/07/20 18:43:22 60:00 981 735nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 486 06/07/20 18:47:33 60:00 8712 3112 ims 487 06/07/20 19:43:22 60:00 924 840 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 488 06/07/20 19:47:33 60:00 7048 2772 ims 489 06/07/20 20:43:22 60:00 6110 8869nxtgenp APPLE !PHONES (023310601:91057:hone 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 490 06/07/20 20:47:33 60:00 10068 4020 ims 491 06/07/20 21:43:22 60:00 79051 47955nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 492 06/07/20 21:47:33 60:00 8496 2896 ims 493 06/07/20 22:43:22 13:06 34981 20953 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 25 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170673 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342735 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. tes.`"" as AT&T Run Date: 06/29/2020 Run Time: Data Usage For: MS= Item Conn. Conn. Originating Et Date Time Number (OTC) Bytes DP Bytes Apn 1MSI MAKE Dn MODEL Cell Location 494 06/07/20 22:47:33 60:00 13584 4644 ins 495 06/07/20 22:56:29 48:56 35766 37486nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 496 06/07/20 23:45:24 0:43 288 48nxtgenp APPLE IPE0NE8 (366491266:1431606::::0) U.S. Cellular, hone USA 497 06/07/20 23:45:25 0:43 48 Onxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::0) 498 06/07/20 23:46:08 60:00 52762 20554nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0, 023310785:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 499 06/07/20 23:47:33 60:00 10008 4080 ins 500 06/08/20 00:46:08 60:00 867 945nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 501 06/08/20 00:47:33 60:00 10284 3252 ins 502 06/08/20 01:46:08 60:00 746 1106nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 503 06/08/20 01:47:33 60:00 8496 3020 ins 504 06/08/20 02:46:08 60:00 6760 7607nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 505 06/08/20 02:47:33 60:00 10176 3144 ins 506 06/08/20 03:46:08 60:00 25665 16313nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 507 06/08/20 03:47:33 60:00 10332 4056 ins 508 06/08/20 04:46:08 60:00 9060 7108nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 509 06/08/20 04:47:33 60:00 12012 4560 ins 510 06/08/20 05:46:08 60:00 16026 13171nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 511 06/08/20 05:47:33 60:00 6924 2648 ins 512 06/08/20 06:46:08 60:00 7047 6226nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 513 06/08/20 06:47:33 60:00 8496 3004 ins 514 06/08/20 07:46:08 60:00 7616 8164nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 26 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00170614 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342736 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. a AT&T Run Data: 08/29/2020 Run Ties: Data usage For: Item Corm. Conn. Date Tim (UTC) MS= Originating Number ET Bytos Up Bytom Apn Dn DEBI 1MSI MAKE MODEL Coll Location 515 06/08/20 07:47:33 60:00 10332 3972 ins 516 06/08/20 08:46:08 60:00 9845 7517nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 517 06/08/20 08:47:33 60:00 12012 4504 ins 518 06/08/20 09:46:08 60:00 6976 8696 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 519 06/08/20 09:47:33 60:00 6366 2788 ins 520 06/08/20 10:46:08 60:00 995 840 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 521 06/08/20 10:47:33 60:00 6940 3524 ism 522 06/08/20 11:46:08 60:00 793663 55327 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 523 06/08/20 11:47:33 60:00 11796 4328 ins 524 06/08/20 12:46:08 60:00 50438 31769nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 525 06/08/20 12:47:33 3:06 0 0 ins 526 06/08/20 12:54:20 6:06 7193 6158 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 527 06/08/20 13:00:26 60:00 13552 4684 ins APPLE !PHONES 528 06/08/20 13:46:08 60:00 17843 6938 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 529 06/08/20 14:00:26 60:00 8712 3128 ins APPLE !PHONES 530 06/08/20 14:46:08 60:00 27331 86706nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 531 06/08/20 15:00:26 32:51 3424 1324 ins APPLE !PHONES 532 06/08/20 15:33:17 4:42 4076 2324 ins APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 533 06/08/20 15:37:59 60:00 14076 7740 ins APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 27 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170675 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342737 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided UTC. in . AT&T Run Date: Run Ciao: Data usage For: 06/29/2020 MS= Item Corm. Conn. Date TiOle (OTC) 534 06/08/20 15:46:08 535 06/08/20 16:37:59 536 06/08/20 16:46:08 537 06/08/20 17:37:59 538 06/08/20 17:41:22 539 06/08/20 17:43:30 540 06/08/20 17:43:52 541 06/08/20 17:46:08 542 06/08/20 17:46:10 543 06/08/20 17:46:39 544 06/08/20 17:47:05 545 06/08/20 17:47:21 546 06/08/20 17:47:53 Originating ET Bytes: Number UP Bytom Apn on 60:00 19067 9600 nxtgenp hone 60:00 13676 4768 ins 60:00 647969 594639nxtgenp hone 3:23 0 0 ims 2:08 2644 1324 ims 0:22 3640 1448 ims 2:18 2644 1324 ims 60:00 4306491 5451466 nxtgenp hone 0:29 3424 1216 ims 0:26 2644 1324 ims 0:16 5072 1680 ims 0:32 2644 1324 ims 1:35 3424 1324 ims DEBI INBI NARK NODEL Coll Location APPLE IPHONE8 (023310608:91057: - 71.9598779:43.2972525:150: -1.0) APPLE APPLE !PHONES !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- APPLE !PHONES APPLE 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0) !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) APPLE !PHONES APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- APPLE !PHONES APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) APPLE !PHONES APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) APPLE !PHONES 023310608:91057:-71.9598779:43. 024577552:96006:-71.9906006:43. 023310608:91057:-71.9598779:43. 024577552:96006:-71.9906006:43. 023310608:91057:-71.9598779:43. 023310601:91057:-71.9598779:43. 2972525:150:- 3717995:210:- 2972525:150:- 3717995:210:- 2972525:150:- 2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. Page 28 SDNY_GNL00170676 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342738 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: 06/29/2020 Run Tim: Data Osage For: Item Conn. Conn. Data Time (OTC) IS= Originating Number ET Bytes Up Bytes Apn On ?MI IMSI BABE BOOM Cell Location 547 06/08/20 17:49:28 2:36 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 548 06/08/20 17:52:04 24:12 10036 3036 ims APPLE !PHONES 549 06/08/20 18:16:16 11:54 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 550 06/08/20 18:28:10 0:44 3532 1540 ims APPLE !PHONES 551 06/08/20 18:28:54 16:28 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 552 06/08/20 18:45:22 0:13 3316 1648 ims APPLE !PHONES 553 06/08/20 18:45:35 3:36 2876 1432 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 554 06/08/20 18:46:08 60:00 60107 19783nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 555 06/08/20 18:49:11 60:00 11796 4328 ims APPLE !PHONES 556 06/08/20 19:46:08 60:00 12076 7056nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 557 06/08/20 19:49:11 60:00 7080 2664 ims APPLE !PHONES 558 06/08/20 20:46:08 60:00 1975 2926 nxtgenp APPLE !PHONES [023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 559 06/08/20 20:49:11 60:00 6956 2756 ims APPLE !PHONES 560 06/08/20 21:46:08 60:00 1379 1102 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 561 06/08/20 21:49:11 59:12 15684 6572 ims APPLE !PHONES 562 06/08/20 22:46:08 2:15 277 209 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 563 06/08/20 22:48:55 60:00 279778 966831 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 564 06/08/20 22:48:58 1:31 6673 5940 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 565 06/08/20 22:50:29 0:27 3532 1340 ims APPLE !PHONES 566 06/08/20 22:50:56 0:15 2644 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 567 06/08/20 22:51:11 60:00 12028 4608 ims APPLE !PHONES 568 06/08/20 23:48:55 60:00 860 735nxtgenp APPLE !PHONES [023310608:91057:hone 71.9598779:43.2972525:150:-1.01 569 06/08/20 23:51:11 60:00 8388 3128 ims APPLE !PHONES 570 06/09/20 00:48:55 60:00 20227 23698 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 29 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYWC00170677 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342739 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 1/4t- a -ri AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Data Tama (UTC) MS= Originating Number ET Bytos Up Bytes Apn On DEBI 1MSI MAKE MODEL Coll Location 571 06/09/20 00:51:11 60:00 10268 3408 ims APPLE !PHONES 572 06/09/20 01:48:55 60:00 751 735nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 573 06/09/20 01:51:11 60:00 8604 3036 ims APPLE !PHONES 574 06/09/20 02:48:55 60:00 578 630 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 575 06/09/20 02:51:11 60:00 15668 6108 ims APPLE !PHONES 576 06/09/20 03:48:55 60:00 578 630 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 577 06/09/20 03:51:11 60:00 7544 3820 ims APPLE !PHONES 578 06/09/20 04:48:55 60:00 828 867nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 579 06/09/20 04:51:11 60:00 6848 2680 ims APPLE !PHONES 580 06/09/20 05:48:55 60:00 225 210 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 581 06/09/20 05:51:11 60:00 7064 2804 ims APPLE !PHONES 582 06/09/20 06:48:55 60:00 289 315 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 583 06/09/20 06:51:11 60:00 11920 4500 ims APPLE !PHONES 584 06/09/20 07:48:55 60:00 398 315 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 585 06/09/20 07:51:11 60:00 7172 3020 ims APPLE !PHONES 586 06/09/20 08:48:55 60:00 225 210 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 587 06/09/20 08:51:11 60:00 10488 4536 ims APPLE !PHONES 588 06/09/20 09:48:55 60:00 277 262 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 589 06/09/20 09:51:11 3:50 0 0 ims APPLE !PHONES 590 06/09/20 09:58:39 0:38 6675 5980 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 591 06/09/20 09:59:17 60:00 10720 4420 ims APPLE !PHONES 592 06/09/20 10:48:55 60:00 341 367nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 593 06/09/20 10:59:17 60:00 8496 3128 ims APPLE !PHONES 594 06/09/20 11:48:55 60:00 3074 262 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 595 06/09/20 11:59:17 60:00 7172 3220 ims APPLE !PHONES 596 06/09/20 12:48:55 23:58 341 367nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 597 06/09/20 12:59:17 60:00 8388 3004 ins APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 30 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170678 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342740 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:12:12pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. t --•..da' AT&T Run Data: 06/29/2020 Run Time: Data Usage Tor: Item Conn. Conn. Data Tim (Unt) Sim Originating Number ET Bytes Up Bytes Apn On DEBI IMSI WARE MODEL Coll Location 598 06/09/20 13:12:53 11:46 98124 66778nxtgenp APPLE !PHONES [023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 599 06/09/20 13:24:39 60:00 7508 15117nxtgenp APPLE !PHONES [023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 600 06/09/20 13:59:17 52:10 15468 8244 ims APPLE !PHONES 601 06/09/20 14:24:39 22:50 0 0nxtgenp APPLE !PHONES [023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 602 06/09/20 14:47:28 2:05 5064 6314nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 603 06/09/20 14:47:29 2:05 6314 4776nxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::01 604 06/09/20 14:49:34 3:11 280 581nxtgenp APPLE !PHONES (023432209:91532:-71.947299:43.256953:280:hone 1.0] 605 06/09/20 14:51:33 10:30 8368 6156 ims 606 06/09/20 14:52:44 0:37 5453 6094nxtgenp APPLE !PHONES (366513795:1431694::::01 U.S. Cellular, hone _USA 607 06/09/20 14:52:46 0:35 6315 8165 ims APPLE !PHONES (366513795:1431694::::01 U.S. Cellular, _USA 608 06/09/20 14:52:46 0:36 6094 5165nxtgenp hone APPLE !PHONES (311580084513795:1217109705132::::01 609 06/09/20 14:52:47 0:35 8097 6051 ims APPLE !PHONES [311580084513795:1217109705132.... 311580084491266:1217109705044::::0] 610 06/09/20 14:53:22 44:46 2021706 2314792nxtgenp APPLE !PHONES [023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 611 06/09/20 14:53:24 2:22 0 0 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 612 06/09/20 14:55:55 0:00 0 0 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 613 06/09/20 14:56:10 0:37 10745 6428 ims APPLE !PHONES 614 06/09/20 14:56:47 33:26 17928 2804 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 615 06/09/20 14:56:47 33:26 5624 2804 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 616 06/09/20 15:30:13 60:00 10632 4236 ims APPLE !PHONES 617 06/09/20 15:38:07 0:32 5220 6314nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 618 06/09/20 15:38:09 0:31 6314 4932nxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::01 AT&T Proprietary The AT&T network constantly communicates with Internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 31 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170679 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342741 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. ap. tr. • 4*-1; AT&T Run Date: 06/29/2020 Run Tine: Data Usage For: IS= Item Conn. Conn. Date Tam (OTC) Originating Humber ET Bytos Up Bytom Apn Dn DMZ 1MSI MAKE MODEL Cell Location 619 06/09/20 15:38:40 60:00 45938 25244nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 620 06/09/20 16:30:13 60:00 6848 2680 ims APPLE !PHONES 621 06/09/20 16:38:40 60:00 142769 4687229nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 622 06/09/20 17:30:13 60:00 8496 2928 ims APPLE !PHONES 623 06/09/20 17:38:40 60:00 2367 875nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 624 06/09/20 18:30:13 60:00 6620 3052 ims APPLE !PHONES 625 06/09/20 18:38:40 60:00 160792 103730nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 626 06/09/20 19:30:13 60:00 26512 13248 ims APPLE !PHONES 627 06/09/20 19:38:40 60:00 2079 3220 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 628 06/09/20 20:00:47 2:23 372588 270899 ims APPLE !PHONES 629 06/09/20 20:30:13 60:00 15388 8752 ims APPLE IPHONt8 630 06/09/20 20:38:40 60:00 51601 38466 nxtgenp APPLE !PHONES (023310601:91057:hone 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 631 06/09/20 20:59:47 40:16 6008484 8878545 ims APPLE IPHON18 632 06/09/20 21:30:13 29:49 32156 20948 ims APPLE IPHONt8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 32 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00170680 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342742 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 4cas° AT&T Run Date: 06/29/2020 Run Time: Data Usage For: IS= Item Conn. Conn. Originating ET Bytos Bytes Apn neat i"Sr BARE MODEL Cell Location Data Tim Number Up On (OTC) 633 06/09/20 21:38:40 60:00 337102 301510 nxtgenp APPLE !PHONES 1023310608:91057:hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 634 06/09/20 21:45:27 0:43 6452 17206 ims APPLE !PHONES 635 06/09/20 21:46:22 0:19 1381 10147 ims APPLE !PHONES 636 06/09/20 22:00:02 0:44 179116 1712 ims APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 637 06/09/20 22:00:02 0:44 4744 1712 ims APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 638 06/09/20 22:00:4 1:09 3424 1340 ims APPLE !PHONES 639 06/09/20 22:01:55 0:43 2660 1340 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 640 06/09/20 22:01:55 0:43 2596 1340 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 641 06/09/20 22:02:38 32:47 6366 2928 ims APPLE !PHONES 642 06/09/20 22:35:25 0:53 2660 1340 ims APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 643 06/09/20 22:35:25 0:53 2596 1340 ims APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 644 06/09/20 22:36:18 0:52 4840 1588 ims APPLE !PHONES 645 06/09/20 22:37:1 13:39 2596 1340 ims APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 646 06/09/20 22:37:10 13:40 2660 1340 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 647 06/09/20 22:38:40 40:24 125226 85387nxtgenp APPLE !PHONES 1023310608:91057:hone 71.9598779:43.2972525:150:-1.01 648 06/09/20 22:50:49, 60:00 35576 21760 ims APPLE !PHONES 649 06/09/20 23:19:03 0:37 5285 6451nxtgenp APPLE !PHONES 1366491266:1431606::::01 U.S. Cellular, hone _USA 650 06/09/20 23:19:05 0:36 6451 4997nxtgenp hone APPLE !PHONES 1311580084491266:1217109705044::::01 651 06/09/20 23:19:22 0:14 3297 14724 ims APPLE IPHONE8 652 06/09/20 23:19:38 0:10 1431 12839 ims APPLE IPHONEB 653 06/09/20 23:19:41 60:00 106959 73126nxtgenp APPLE IPHONE8 (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170681 The information contained here is for use by authorized persons only and is not for general distribution. Page 33 EFTA01342743 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided UTC. 4111I, AT&T Run Date: Run Time: Data Usage For: Item Conn. Conn. Data Time (OTC) 06/29/2020 Sim Originating Member LT Bytes Up Bytes Apn On DEBI 1MSI MAKE MODEL Cell Location 654 06/09/20 23:50:4 0:00 19884 11412 ims APPLE !PHONES 655 06/09/20 23:58:5 0:08 2460 11189 ism APPLE !PHONES 656 06/10/20 00:19:4 1:32 39417 20149nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 657 06/10/20 00:21:1 2:03 288 48nxtgenp APPLE !PHONES (366491269:1431606::::01 U.S. Cellular, hone _USA 658 06/10/20 00:21:1 2:03 48 Onxtgenp hone APPLE !PHONES (311580084491269:1217109705044::::01 659 06/10/20 00:23:1 3:45 7211 8328nxtgenp APPLE !PHONES (366491269:1431606::::01 U.S. Cellular, hone _USA 660 06/10/20 00:23:1 3:45 8328 6923nxtgenp hone APPLE !PHONES (311580084491269:1217109705044::::01 661 06/10/20 00:27:0 2:48 78953 60993nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 662 06/10/20 00:29:4 4:08 7773 7645nxtgenp APPLE !PHONES (366491269:1431606::::01 U.S. Cellular, hone _USA 663 06/10/20 00:29:4 4:08 7645 7485nxtgenp hone APPLE !PHONES (311580084491269:1217109705044::::0] 664 06/10/20 00:50:4 4:49 3424 1340 Les APPLE !PHONES 665 06/10/20 00:53:5 3:57 48 Onxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0] 666 06/10/20 00:57:5 1:12 288 48nxtgenp APPLE !PHONES (366491269:1431606::::01 U.S. Cellular, hone _USA 667 06/10/20 00:57:5 1:11 48 Onxtgenp hone APPLE !PHONES (311580084491269:1217109705044::::0] 668 06/10/20 00:59:0 8:09 91843 405897nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 669 06/10/20 01:05:3 4:36 149256 3496 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 670 06/10/20 01:05:3 4:36 6160 3496 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 671 06/10/20 01:10:1 7:03 10176 8292 ism APPLE !PHONES 672 06/10/20 01:30:4 8:06 296180 975215nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 673 06/10/20 01:30:5 6:57 6671 5904 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 674 06/10/20 01:37:4 0:00 13568 4684 Les APPLE !PHONES 675 06/10/20 01:38:5 Z:43 288 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 676 06/10/20 01:38:5 Z:43 48 Onxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170682 The information contained here is for use by authorized persons only and is not for general distribution. Page 34 EFTA01342744 ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 4.• tr./ 4' 1i AT&T Run Date: 06/29/2020 Run Ties: Data Usage For: MS= Item Conn. Conn. Originating ST Bytes Bytes Apn DEBI INS' WM MODEL Coll Location Date Tim NUMber Up on (UTc) 677 06/10/20 01:53:391 5:39 8614 8797nxtgonp APPLE !PHONES [023310608:91057:hone 71.9598779:43.2972525:150:-1.01 678 06/10/20 01:59:18 60:00 15777 16256 nxtgenp APPLE !PHONES [023310608:91057:hone 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057: -71.9598779:43.2972525:150: - 1.0] 679 06/10/20 02:37:48 60:00 8496 3112 ism APPLE !PHONES 680 06/10/20 02:59:18 60:00 687 630 nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0) 681 06/10/20 03:37:48 60:00 7172 2756 ism APPLE !PHONES 682 06/10/20 03:59:18 60:00 578 630 nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0) 683 06/10/20 04:37:48 60:00 14892 4824 ism APPLE !PHONES 684 06/10/20 04:59:18 60:00 289 315 nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0] 685 06/10/20 05:37:48 60:00 13352 4752 ism APPLE !PHONES 686 06/10/20 05:59:18 60:00 462 420 nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0] 687 06/10/20 06:37:48 60:00 6956 2648 ism APPLE !PHONES 688 06/10/20 06:59:18 60:00 173 105 nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0) 689 06/10/20 07:37:48 60:00 8388 3004 ism APPLE !PHONES 690 06/10/20 07:59:18 60:00 346 210 nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0) 691 06/10/20 08:37:48 60:00 6848 2864 ism APPLE !PHONES 692 06/10/20 08:59:18 60:00 346 210 nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0) 693 06/10/20 09:37:48 60:00 8496 3112 ism APPLE !PHONES 694 06/10/20 09:59:18 60:00 792 910 nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0) 695 06/10/20 10:37:48 60:00 14020 5596 ism APPLE !PHONES 696 06/10/20 10:59:18 53:48 73033 46330nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0) 697 06/10/20 11:37:48 59:15 10036 3252 ism APPLE !PHONES 698 06/10/20 11:53:05 2:03 5221 6330nxtgenp APPLE !PHONES (366491269:1431606::::01 U.S. Cellular, hone _USA 699 06/10/20 11:53:0 2:03 6330 4933 nxtgenp APPLE !PHONES (311580084491269:1217109705044.... hone 311580084491266:1217109705044::::01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 35 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170683 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342745 1111111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. te-sa,•° `'s AT&T Run Date: 06/29/2020 Run Tana: Data Usage For: Iton Conn. Conn. Data Timm (OTC) Sim Originating er Bytes up Bytes Apn Dn Then 1MSI MAKE MODEL Cell Location 700 06/10/20 11:55:09 60:00 6915 5746nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0] 701 06/10/20 12:37:03 2:44 3376 1448 ins APPLE !PHONES (023310608:91057: - 71.9598779:43.2972525:150: -1.0] 702 06/10/20 12:39:47 60:00 15000 4716 ins APPLE !PHONES 703 06/10/20 12:55:09 56:15 1071 5832nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0] 704 06/10/20 13:39:47 60:00 8496 2896 ins APPLE IPE0NE8 705 06/10/20 13:51:23 2:04 5062 6328nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 706 06/10/20 13:51:24 2:04 6326 4774nxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::01 707 06/10/20 13:53:28 56:30 70376 54700nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0] 708 06/10/20 14:39:47 60:00 31844 22980 ins APPLE !PHONES 709 06/10/20 14:49:57 0:22 288 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 710 06/10/20 14:49:59 0:21 48 Onxtgenp hone APPLE IPHONt8 (311580084491266:1217109705044::::0) 711 06/10/20 14:50:20 8:44 48 Onxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 712 06/10/20 14:54:49 0:29 1590 14344 ins APPLE !PHONES 713 06/10/20 14:55:26 0:16 9756 24842 ins APPLE IPHONt8 714 06/10/20 14:59:03 3:32 286 48nxtgenp APPLE IPHONt8 (366491266:1431606::::01 U.S. Cellular, hone _USA 715 06/10/20 14:59:05 3:31 48 Onxtgenp hone APPLE IPHONt8 (311580084491266:1217109705044::::0) 716 06/10/20 15:02:36 60:00 92707 50816 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 717 06/10/20 15:39:47 60:00 15236 5936 ins APPLE !PHONES 718 06/10/20 16:02:36 60:00 2961 11328 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0) 719 06/10/20 16:39:47 60:00 10252 3376 ins APPLE !PHONES 720 06/10/20 17:02:36 24:14 4741 797nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 721 06/10/20 17:26:50 60:00 96839 37310nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 722 06/10/20 17:39:47 60:00 8388 2896 ins APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170684 The information contained here is for use by authorized persons only and is not for general distribution. Page 36 EFTA01342746 ill1111120 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided UTC. in tmaS AT&T Run Date: 06/29/2020 Run Ties: Data Usage For: Item Conn. Conn. Originating ET Data Tam Number (UTC) Bytes Up Bytes Apn on DELI IMSI MAR MODEL Cell Location 723 06/10/20 18:26:5 60:00 169501 105986 nxtgenp APPLE IPHONt8 (023310608:91057:hone 71.9598779:43.2972525:150:-1.0. 023432209:91532:-71.947299:43.256953:280:- 1.0] 724 06/10/20 18:39:4 60:00 34924 26900 ims APPLE !PHONES 725 06/10/20 18:50:5 0:33 2804 18349 ims APPLE !PHONES 726 06/10/20 19:11:2 0:27 2059 12714 ims APPLE 'PHONES 727 06/10/20 19:26:5 37:20 40083 29088 nxtgenp APPLE IPHONt8 (023432209:91532:-71.947299:43.256953:280:hone 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 728 06/10/20 19:39:4 60:00 13676 4684 ins APPLE !PHONES 729 06/10/20 20:04:1 2:03 5566 8034nxtgenp APPLE !PHONES (366513795:1431694::::01 U.S. Cellular, hone _USA 730 06/10/20 20:04:1 2:03 8034 5278nxtgenp hone APPLE !PHONES (311580084513795:1217109705132::::01 731 06/10/20 20:06:1 60:00 13685 12191 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 732 06/10/20 20:39:4 43:51 3408 1324 ins APPLE !PHONES 733 06/10/20 21:06:1 37:19 59742 42049 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150: 1.0] 734 06/10/20 21:23:3 0:35 163424 2912 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150: 1.0] 735 06/10/20 21:23:38 0:35 5240 2824 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 736 06/10/20 21:24:1 4:48 3424 1432 ims APPLE !PHONES 737 06/10/20 21:29:0 14:32 7580 2908 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 738 06/10/20 21:29:0 14:32 7580 2820 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 739 06/10/20 21:43:3 1:15 23581 106165 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 740 06/10/20 21:43:3 1:12 8191 6178 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. Page 37 SDNY_GNL00170685 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342747 ill1111120 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 4a`" d AT&T Run Date: 06/29/2020 Run Ties: Data Osage For: MS= Item corm. Conn. Originating LT Bytom Bytom Apn Mai Dar NARK MODEL Cell Location Date Tine Number Up On (OTC) 741 06/10/20 21:44:48 55:44 93041 251870zuctgenp APPLE !PHONES 1023310608:91057:bone 71.9598779:43.2972525:150:-1.0. 023310785:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 1.01 742 06/10/20 21:44:50 0:29 7407 6090 ims APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 743 06/10/20 21:45:19 3:27 3748 1556 ims APPLE !PHONES 744 06/10/20 21:48:46 1:03 2644 1324 ims APPLE !PHONES 1023310785:91057:- 71.9598779:43.2972525:150:-1.01 745 06/10/20 21:49:49 45:13 21796 15580 ims APPLE !PHONES 746 06/10/20 22:20:49 0:30 4259 15173 ims APPLE !PHONES 747 06/10/20 22:35:02 5:27 2752 1324 ims APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 748 06/10/20 22:40:2 2:19 4948 1680 ims APPLE !PHONES 749 06/10/20 22:40:31 2:03 5065 6314nxtgenp APPLE !PHONES [366491266:1431606::::01 U.S. Cellular, hone _USA 750 06/10/20 22:40:32 2:03 6314 4777nxtgonp APPLE !PHONES 1311580084491266:1217109705044— hone 311580084513795:1217109705132::::01 751 06/10/20 22:42:35 60:00 33070 35962nxtgenp APPLE !PHONES 1023310608:91057:hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 752 06/10/20 22:42:48 0:28 2644 1412 ims APPLE 'PHONES 1023310601:91057:- 71.9598779:43.2972525:150:-1.01 753 06/10/20 22:42:48 0:28 2644 1324 ims APPLE !PHONES 1023310601:91057:- 71.9598779:43.2972525:150:-1.01 754 06/10/20 22:43:16 17:45 3532 1324 ims APPLE !PHONES 755 06/10/20 23:05:46 5:35 6671 5979 ims APPLE !PHONES 1023310601:91057:- 71.9598779:43.2972525:150:-1.01 756 06/10/20 23:11:25 2:26 6667 5982 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 38 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNI_ 00170686 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342748 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e AT&T Run Date: 06/29/2020 Run Time: MI= Data Usage For: Item Conn. Conn. Originating ET Data Time Number (uzc) Bytes Up Bytes Apn Dn flat 1MSI MAKE MODEL Cell Location 757 06/10/20 23:13:51 0:33 4856 1464 ims APPLE !PHONES 758 06/10/20 23:14:24 1:30 2752 1324 Las APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.01 759 06/10/20 23:15:54 60:00 14016 4948 ims APPLE !PHONES 760 06/10/20 23:42:35 18:08 52130 43565nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 761 06/11/20 00:00:42 2:03 288 48nxtgenp APPLE !PHONES (366491269:1431606::::01 U.S. Cellular, hone _USA 762 06/11/20 00:00:43 2:03 48 Onxtgenp hone APPLE !PHONES (311580084491269:1217109705044::::01 763 06/11/20 00:02:46 60:00 35541 16641nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 764 06/11/20 00:15:54 60:00 26560 17852 ims APPLE !PHONES 765 06/11/20 00:50:18 0:29 1749 13796 ims APPLE !PHONES 766 06/11/20 01:00:11 44:46 7656873 9341811 ims APPLE 1PHONE8 767 06/11/20 01:02:46 60:00 19543 7341nxtgenp APPLE IPHONE8 [023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 768 06/11/20 01:15:54 60:00 11496 4784 ims APPLE !PHONES 769 06/11/20 02:02:46 60:00 2218 2198nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 770 06/11/20 02:15:54 60:00 10828 4220 ims APPLE !PHONES 771 06/11/20 03:02:46 5:40 225 210nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 772 06/11/20 03:08:26 60:00 42848 32453nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 773 06/11/20 03:15:54 60:00 8728 3772 ims APPLE !PHONES 774 06/11/20 04:08:26 60:00 5798 8080nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 775 06/11/20 04:15:54 60:00 13568 4876 ims APPLE !PHONES 776 06/11/20 05:08:26 60:00 1005 979nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 777 06/11/20 05:15:54 60:00 8388 2788 ims APPLE !PHONES 778 06/11/20 06:08:26 60:00 450 420nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 779 06/11/20 06:15:54 31:28 5072 1572 ims APPLE !PHONES 780 06/11/20 06:47:22 0:57 148724 1536 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 781 06/11/20 06:47:22 0:57 2968 1448 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 782 06/11/20 06:48:19 60:00 10256 4344 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170687 The information contained here is for use by authorized persons only and is not for general distribution. Page 39 EFTA01342749 ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: 06/29/2020 Run Tine: Data Usage For: NM= Item Conn. Conn. Date Taos (OTC) Originating Number ET Bytes Up Bytes Apn On DEBI 1MSI MAKE MODEL Cell Location 783 06/11/20 07:08:26 60:00 225 210nxtgenp APPLE !PHONES [023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 784 06/11/20 07:48:19 60:00 8496 3004 ins APPLE !PHONES 785 06/11/20 08:08:26 60:00 225 210nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 786 06/11/20 08:48:19 60:00 11904 4396 ins APPLE !PHONES 787 06/11/20 09:08:26 60:00 398 315nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 788 06/11/20 09:48:19 60:00 7080 2772 ins APPLE !PHONES 789 06/11/20 10:08:26 60:00 277 315nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] 790 06/11/20 10:48:19 60:00 10596 4096 ins APPLE !PHONES 791 06/11/20 11:08:26 37:36 329 367nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0] 792 06/11/20 11:46:01 0:34 5390 7804nxtgenp APPLE !PHONES (366491266:1431606::::0] U.S. Cellular, hone _USA 793 06/11/20 11:46:02 0:34 7804 5102nxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::0] 794 06/11/20 11:46:36 60:00 14045 47524nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 795 06/11/20 11:48:19 15:20 0 0 ims APPLE !PHONES 796 06/11/20 12:08:15 37:27 8454 6286 ims APPLE !PHONES 797 06/11/20 12:45:42 0:17 2766 1324 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0] 798 06/11/20 12:45:42 0:17 2704 1324 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0] 799 06/11/20 12:45:59 10:11 4964 1696 ins APPLE !PHONES 800 06/11/20 12:46:36 60:00 2177046 2642670nxtgenp APPLE !PHONES (023310601:91057:hone 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 801 06/11/20 12:56:20 3:14 11347 6482 ims APPLE !PHONES 802 06/11/20 12:59:34 0:45 2768 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 803 06/11/20 12:59:34 0:45 2704 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 804 06/11/20 13:00:19 48:00 7064 2880 ins APPLE !PHONES 805 06/11/20 13:46:36 3:00 3006 1187 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0] AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 40 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_00_00170688 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342750 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided UTC. in ANIMP AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Date rims (OTC) Originating !lumbar Er Bytes up Bytes Apn on DELI INSI NM MODEL Cell Location 806 06/11/20 13:48:19 1:17 7684 6376 /ma APPLE IPE0NE8 (023310608:91057:- 71.9598779:43.2972525:150:-1.01 807 06/11/20 13:48:19 1:17 7620 6376 /ma APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 808 06/11/20 13:51:27 3:56 356279 1131640nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.01 809 06/11/20 13:51:30 3:53 6905 7072 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 810 06/11/20 13:55:22 2:03 266 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 811 06/11/20 13:55:23 2:04 48 Onxtgonp hone APPLE !PHONES (311580084491266:1217109705044::::01 812 06/11/20 13:56:00 1:25 6476 7421 ims APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, _USA 813 06/11/20 13:56:01 1:26 7421 6124 ims APPLE !PHONES (311580084491266:1217109705044::::01 814 06/11/20 13:57:27 33:22 6993 10526 nxtgenp APPLE !PHONES (023413008:91457:-72.166667:43.205:100:-1.0, hone 023310608:91057:-71.9598779:43.2972525:150:- 1.01 815 06/11/20 13:58:27 7:45 6669 6000 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 816 06/11/20 14:06:12 60:00 24096 13980 ims APPLE !PHONES 817 06/11/20 14:11:50 0:42 7760 14713 ims APPLE !PHONES 818 06/11/20 14:30:49 60:00 87380 60369nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 819 06/11/20 15:06:12 60:00 7296 3020 ims APPLE !PHONES 820 06/11/20 15:30:49 60:00 27622 17667nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 821 06/11/20 16:06:12 0:03 0 0 ims APPLE !PHONES 822 06/11/20 16:06:14 2:19 14560 1320 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.01 823 06/11/20 16:06:15 2:18 2428 1232 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.01 824 06/11/20 16:08:33 60:00 14032 4856 ims APPLE IPHONE8 825 06/11/20 16:30:49 60:00 196129 15494 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. Page 41 SDNY_GNL00170689 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342751 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. .._.s 4`"-•" :sil i s. AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Data Tame (UTC) MS= Originating Number ET Bytes UP Bytes Apn Dn INEI INS! MARE MODEL Cell Location 826 06/11/20 17:08:33 29:08 3424 1340 ims APPLE !PHONES 827 06/11/20 17:30:49 60:00 240325 293154 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0. 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 828 06/11/20 17:37:41 60:00 5240 2680 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 829 06/11/20 17:37:41 60:00 29252 2768 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 830 06/11/20 18:30:49 42:56 89878 1231264 nxtgenp APPLE !PHONES (023310608:91057:hone 71.9598779:43.2972525:150:-1.0. 023441679:91569:-71.873669:42.998207:30:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 831 06/11/20 18:37:41 36:04 8051 6072 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023441679:91569:-71.873669:42.998207:30:- 1.0] 832 06/11/20 18:37:41 36:04 8051 6072 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023441679:91569:-71.873669:42.998207:30:- 023429137:91520:-71.8684166:43.0803055:320:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 833 06/11/20 19:13:45 0:26 108 0 ims APPLE !PHONES (23999/15704:-71.90615:42.97402:30:-1.01 834 06/11/20 19:13:45 0:26 108 0 ims APPLE !PHONES (23999/15704:-71.90615:42.97402:30:-1.01 835 06/11/20 19:13:45 0:26 5235 4253 nxtgenp hone APPLE !PHONES (23999/15704:-71.90615:42.97402:30:-1.01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. Page 42 SDNY_GM_00170690 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342752

Technical Artifacts (289)

View in Artifacts Browser

Email addresses, URLs, phone numbers, and other technical indicators extracted from this document.

Phone1 3048535
Phone1.8684166
Phone1213 1207
Phone1256 3268
Phone1347 1262
Phone1347 6482
Phone1379 1102
Phone14827503
Phone1496 4784
Phone17109705044
Phone17109705132
Phone1788 1340
Phone1796 4328
Phone1796 4736
Phone1869 8788
Phone19785258484
Phone211 9806
Phone2177046
Phone224 6108
Phone228 6689
Phone232 5108
Phone235 4253
Phone236 5936
Phone240 2608
Phone240 2680
Phone240 2824
Phone242 9408
Phone244 1588
Phone244 4452
Phone244 6715
Phone252 2696
Phone252 2768
Phone252 3376
Phone253 3025
Phone256 3496
Phone256 4344
Phone2582971
Phone260 2820
Phone262 2105550
Phone263 5883
Phone264 2772
Phone264 2928
Phone264 3777
Phone268 3408
Phone272 4128
Phone280 3612
Phone284 3252
Phone296 3020
Phone2972525
Phone304 1412
Phone304 2224
Phone315 8165
Phone316 1648
Phone3222937
Phone324 4840
Phone330 4933
Phone3310601
Phone3310608
Phone3310785
Phone332 3972
Phone332 4056
Phone3413008
Phone3429137
Phone3432209
Phone344 5768
Phone344 6044
Phone3441679
Phone352 4752
Phone352 4860
Phone3580061
Phone363 6195
Phone366 2788
Phone366 2928
Phone368 4360
Phone368 4444
Phone368 4468
Phone368 6156
Phone3717995
Phone376 1448
Phone380 4204
Phone383 7358
Phone388 2788
Phone388 2896
Phone388 2928
Phone388 3004
Phone388 3128
Phone388 8752
Phone393 8466
Phone396 1680
Phone404 1412
Phone407 6090
Phone408 1324
Phone408 1340
Phone410 6526
Phone4111111
Phone4174165
Phone421 6124
Phone424 1216
Phone424 1324
Phone424 1340
Phone424 1432
Phone424 2912
Phone428 1232
Phone4306491
Phone440 7140
Phone444 6123
Phone4491266
Phone4491269
Phone450 5464
Phone4513795
Phone4513798
Phone452 5768
Phone452 6108
Phone454 6286
Phone456 1412
Phone4577552
Phone460 4624
Phone466 4288
Phone468 8244
Phone471 7525
Phone4722292
Phone476 4644
Phone476 7421
Phone480 2896
Phone480 3020
Phone484 2324
Phone488 4536
Phone496 2896
Phone496 2928
Phone496 3004
Phone496 3020
Phone496 3036
Phone496 3112
Phone496 3128
Phone500 2324
Phone500 2412
Phone500 2804
Phone524 2208
Phone525 6207
Phone526 2840
Phone532 1324
Phone532 1340
Phone532 1432
Phone532 1540
Phone541 1994
Phone544 3820
Phone5451466
Phone552 4684
Phone560 1320
Phone568 4576
Phone568 4592
Phone568 4684
Phone568 4876
Phone5719913
Phone580 2820
Phone580 2908
Phone584 4644
Phone584 6400
Phone596 1324
Phone596 1340
Phone596 4096
Phone6008484
Phone604 2896
Phone604 2928
Phone604 3004
Phone604 3020
Phone604 3036
Phone604 3128
Phone604 3144
Phone604 3252
Phone616 2664
Phone616 2680
Phone620 1340
Phone620 3052
Phone620 6376
Phone624 2804
Phone624 7240
Phone632 2648
Phone632 4236
Phone636 3160
Phone640 1448
Phone640 6280
Phone644 1324
Phone644 1340
Phone644 1412
Phone646 2572
Phone646 2680
Phone646 2896
Phone647 5980
Phone6491266
Phone6491269
Phone6513795
Phone660 1324
Phone660 1340
Phone663 5919
Phone664 1588
Phone666 1340
Phone667 5982
Phone668 6108
Phone669 5964
Phone669 6000
Phone671 5904
Phone671 5979
Phone672 1556
Phone673 5940
Phone675 5980
Phone676 1820
Phone676 4684
Phone676 4768
Phone676 4892
Phone680 5072
Phone684 6376
Phone684 6572
Phone684 6940
Phone688 6356
Phone689 5999
Phone696 2804
Phone696 5364
Phone704 1324
Phone711 4833
Phone712 2208
Phone712 3112
Phone712 3128
Phone712 3220
Phone720 4420
Phone724 1536
Phone726 3252
Phone728 2804
Phone728 3772
Phone736 1448
Phone736 1536
Phone740 1340
Phone744 1712
Phone745 6428
Phone748 1556
Phone752 1324
Phone752 1412
Phone756 5215
Phone7656873
Phone766 1324
Phone768 1324
Phone776 6092
Phone816 4876
Phone828 4220
Phone832 2648
Phone832 9324
Phone840 1588
Phone843 6938
Phone844 4268
Phone848 2540
Phone848 2648
Phone848 2680
Phone848 2864
Phone853 6222
Phone856 1464
Phone876 1432
Phone876 4716
Phone884 9908
Phone8878545
Phone892 4824
Phone905 7072
Phone908 1120
Phone920 1432
Phone922 4868
Phone924 2648
Phone924 2988
Phone928 2804
Phone928 3144
Phone9341811
Phone940 2896
Phone940 3524
Phone948 1680
Phone952 1448
Phone952 1536
Phone956 2540
Phone956 2648
Phone956 2664
Phone956 2680
Phone956 2756
Phone956 2772
Phone956 2788
Phone956 2804
Phone960 3036
Phone964 1572
Phone964 1696
Phone968 1448
Phone976 8696
Phone979 3143
Phone980 1588

Link to Specific Page

Share a direct link to a specific page in this document:

https://epsteinexposed.com/documents/sd-10-EFTA01342703?page=[page_number]

Related Documents (6)

OtherUnknown

Deutsche Bank

DOJ EFTA Data Set 10 document EFTA01343907

1p
Dept. of JusticeOtherUnknown

EFTA Document EFTA01447597

Forwarded by Nav Gupta/db/dbcom on 10/07/2014 17:08 From: vinit To: jeevacation@gmail.com, Cc: Paul Morris/c Nav Gupta Date: 09/07/2014 14:41 Subject: Re: Jeffrey - can we have a quick chat this am ? [C] classification: confidential Hi Jeffrey - looping in Nay and Paul. To recap: we will find a few funds, which we think have best performance characteristic and best fees for u. Loan Funds better than single loans as u don't need to bother booking single loans and servicing them. If

1p
Dept. of JusticeOtherUnknown

EFTA Document EFTA01279955

OMB Approval No. 2502-0265 Good Faith Estimate (GFE) Name of Originator Fifth Third Joann Brown Mortgage Company Borrower Originator 5001 Kingsley DR Address HD: 1MOCHQ Cincinnati, OH 45227 Propcny Address Ori nator Phone Number Originator Email Date of GFE October 03, 2014 Purpose Shopping for your loan This GFE gives you an estimate of your settlement charges and loan terms if you are approved for this loan. For more information, see HUD's Special Information Booklet on seu

3p
Dept. of JusticeOtherUnknown

EFTA Document EFTA01365905

KYC Print Page 10 of 13 DB PWM GLOBAL KYC/NCA: US/LatAm/Int'I PART B elabonship Name SOUTHERN FINANCIAL RELATIONSHIP oking Center F NY F NY/Offshore F Offshore IF.skNIGIerate F High Risk Yoonsun Chung (Compliance signature) F DB Employee F DB Managed PIC F DB is Trustee/Co-Trustee F Bearer Shares 4. Attachments A. Type of Photo ID Provided F Drivers License F Passport F National/State ID F Other Checklist of names (individuals and/or entities) that were submitted for database B.

1p
Dept. of JusticeOtherUnknown

EFTA Document EFTA01299130

KYC Print Page 1 of' 19 DB PWM GLOBAL KYC/NCA: PART A Int KYC Case # : 01141308 One sheet must be established per relationship - list all accounts included in the relationship 1. Relationship Details Relationship Name: EPSTEIN, JEFFREY RELATIONSHIP:00000483290 Booking Center: New York Relationship Manager: Paul Moms Relationship to PWM: 17 New PWM Relationship F Existing PWM Relationship If existing, please indicate since when the relationship exists, provide reason for new profi

19p
Dept. of JusticeAug 22, 2017

15 July 7 2016 - July 17 2016 working progress_Redacted.pdf

Kristen M. Simkins From: Sent: To: Cc: Subject: Irons, Janet < Tuesday, July 12, 2016 10:47 AM Richard C. Smith     Hello Warden Smith,     mother is anxious to hear the results of your inquiry into her daughter's health.   I'd be grateful if you could  email or call me at your earliest convenience.  I'm free today after 2 p.m.  Alternatively, we could meet after the Prison  Board of Inspectors Meeting this coming Thursday.    Best wishes,    Janet Irons    1 Kristen M. Simkins From: Sent:

1196p

Forum Discussions

This document was digitized, indexed, and cross-referenced with 1,400+ persons in the Epstein files. 100% free, ad-free, and independent.

Annotations powered by Hypothesis. Select any text on this page to annotate or highlight it.