III1111 11020 MOBILITY

III1111 11020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ..,„„,•••-•s". AT&T Run Date: Run Time: voice Usage For: 0""n.. Ite Conn. Conn. Seizure ET Originating Terminating Eat CT Feature Cell Location Date Time Time Number Slumber (UTC) 1 06/02/20 14:44:00 0:10 17:35 KT (NIOP:VCORR] 2 06/02/20 14:44:00 0:11 10:35 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0, 023310608:91057:- 71.9598779:43.2972525:150:-1.0] 3 06/02/2014:54:35 0:00 0:19 NO (VCORR] (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 4 06/02/2014:54:54 0:00 6:41 NO (Ni-Fi] (000000008:0:0.0:0.0: -1: -1.0] 5 06/02/2017:04:25 0:03 10:19 NT (NIOP:VCORR] 6 06/02/2017:04:25 0:04 10:19 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.01 7 06/02/20 17:33:58 0:10 0:54 NT (Ni-Fi:NIOP] [000000008:0:0.0:0.0: -1: -1.0] 8 06/03/2000:07:18 0:16 6:39 NT (NIOP:VCORR] 9 06/03/2000:07:18 0:16 6:39 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.01 10 06/03/2019:09:20 0:23 0:00 NT (NIOP:CWW] 11 06/03/2019:09:26 0:29 0:02 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.01 12 06/03/2019:09:26 0:29 0:02 NT (NIOP:CFNA:CNV :VN] 13 06/03/2020:31:08 0:07 17:32 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0, 023310608:91057:- 71.9598779:43.2972525:150:-1.01 14 06/03/2020:31:08 0:07 60:39 NT (NIOP:VCORR] 15 06/03/2020:48:40 0:00 21:03 NO (] (023310608:91057:- 71.9598779:43.2972525:150:-1.01 16 06/03/2021:09:43 0:00 22:05 NO (Ni-Fi] [000000008:0:0.0:0.0: -1: -1.0] 17 06/04/20 14:30:08 0:11 1:42 NT (Ni-Fi:NIOP] (000000008:0:0.0:0.0:-1: -1.0] 18 06/05/2019:34:05 0:26 0:00 NT (Ni-Fi:NIOP] (000000008:0:0.0:0.0: -1: -1.0] The information contained here for is for use by authorized persons only and is not general distribution. Page 1 SDNY_GM_00170641 EFTA01342703 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. tr-ji`al. AT&T Run Date: Run Time: Voice Usage For: 06/29/2020 Sim Ite Conn. Conn. Seizure ET Originating Terminating =CI CT Feature Cell Location Date Time Time Number Number (MTC) 19 06/05/20 19:34:06 0:27 0:02 40 [VCORR] 20 06/05/20 19:34:06 0:27 0:02 er (14i- (000000008:0:0.0:0.0:-1:-1.0] Fi:NIOP:CFNA:V M] 21 06/05/2019:34:36 0:25 0:00 Ifi [Ni-Fi:NIOP] [000000008:0:0.0:0.0:-1:-1.0] 22 06/05/20 19:34:38 0:27 0:02 40 [VCORR] 23 06/05/20 19:34:38 0:27 0:02 [Ni- [000000008:0:0.0:0.0: -1: -1.0] Fi:NIOP:CFNA:V M] 24 06/05/20 20:45:34 0:24 0:00 (NIOP] 25 06/05/20 20:45:41 0:31 0:02 YI [NIOP:CFNA:VM] 26 06/05/2020:45:41 0:31 0:02 +0 (Ni-Fi] [000000008:0:0.0:0.0:-1:-1.0] 27 06/05/20 20:46:31 0:24 0:00 YI [NIOP] 28 06/05/20 20:46:37 0:30 0:02 YI [NIOP:CFNA:VM] 29 06/05/2020:46:37 0:30 0:02 +0 (Ni-Fi] [000000008:0:0.0:0.0:-1:-1.0] 30 06/06/20 22:41:11 0:23 0:00 YI [NIOP] 31 06/06/20 22:41:16 0:28 1:04 YI [NIOP:CFNA:VM] 32 06/06/2022:41:16 0:28 0:06 40 [Ni-Fi] [000000008:0:0.0:0.0:-1:-1.0, 023310608:91057:- 71.9598779:43.2972525:150:-1.0] 33 06/06/2022:41:22 0:00 0:58 40 [VCORE] [023310608:91057:- 71.9598779:43.2972525:150:-1.0, 023310601:91057:- 71.9598779:43.2972525:150:-1.0] 34 06/06/20 22:43:40 0:04 3:36 40 [VCORR] 35 06/06/20 22:43:40 0:04 1:01 Ifi [NIOP:VCORR] [023310601:91057:- 71.9598779:43.2972525:150:-1.0, 023310608:91057:- 71.9598779:43.2972525:150:-1.0] 36 06/06/2022:44:41 0:00 2:35 Ifi [Ni-Fi:NIOP] [000000008:0:0.0:0.0:-1:-1.0] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 2 SDNY_GM_00170642 EFTA01342704 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 41110 AT&T Run Date: Run Time: Voice Usage For: 06/29/2020 Ite Conn. Conn. Seizure ST Originating Terminating flat INSI CT Feature Cell Location m Date Time Time Number Number (OTC) 37 06/09/20 20:00:48 0:01 2:22 NO (Ni-Fi] [000000008:0:0.0:0.0: -1: -1.0] 38 06/09/2020:59:57 0:10 40:05 NT (NIOP:VCORR] 39 06/09/2020:59:57 0:11 40:05 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 40 06/09/2021:46:06 0:39 0:03 NO -Fi] [000000008:0:0.0:0.0: -1: -1.0] 41 06/09/20 21:46:34 0:11 0:00 NT On -Fi:NIOP] 42 06/09/20 21:46:34 0:11 0:00 NT (NIOP] 43 06/09/20 21:46:39 0:16 0:01 NT (NIOP:CF8:VN] 44 06/09/2021:46:39 0:17 0:01 NO -Fi] [000000008:0:0.0:0.0: -1: -1.0] 45 06/09/2023:19:32 0:10 0:03 NO -Fi] [000000008:0:0.0:0.0: -1: -1.0] 46 06/09/20 23:19:41 0:03 0:00 NT [Ni-Fi:NIOP] 47 06/09/20 23:19:41 0:03 0:00 NT [Ni-Fi:NIOP] 48 06/09/20 23:19:46 0:08 0:02 NT Fi:NIOP:CF8:VN 49 06/09/2023:19:46 0:09 0:02 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 50 06/09/20 23:58:57 0:02 0:00 NT [Ni-Fi:NIOP] 51 06/09/20 23:58:57 0:02 0:00 NT [Ni-Fi:NIOP] 52 06/09/20 23:59:00 0:05 0:02 NT Fi:NIOP:CF8:VN 53 06/09/2023:59:00 0:06 0:02 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 54 06/10/20 14:55:12 0:23 0:00 NT (NIOP] 55 06/10/20 14:55:12 0:23 0:00 NT (Ni-Fi:NIOP] 56 06/10/20 14:55:16 0:27 0:02 NT Fi:NIOP:CFNA:V N] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 3 SDNY_GM_00170643 EFTA01342705 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 411110 AT&T Run Date: Run Time: Voice Osage For: 0""n0.0 Ite Conn. Conn. Seizure ST Originating Terminating DILI 1NSI CT Feature Cell Location m Date Time Time Number Number (OTC) 57 06/10/2014:55:16 0:27 0:02 NO [Ili -Fi] [000000008:0:0.0:0.0: -1: -1.0] 58 06/10/2014:55:36 0:10 0:05 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 59 06/10/20 18:51:20 0:23 0:00 MT (NIOP] 60 06/10/20 18:51:27 0:30 0:02 MT (NIOP:CFNA:VN] 61 06/10/20 18:51:27 0:31 0:02 NO (Ni-Fi] [000000008:0:0.0:0.0: -1: -1.0] 62 06/10/20 19:11:49 0:21 0:00 NT (NIOP] 63 06/10/20 19:11:53 0:25 0:02 NO (Ni-Fi] [000000008:0:0.0:0.0: -1: -1.0] 64 06/10/2019:11:53 0:25 0:02 NT (NIOP:CFNA:VN] 65 06/10/2022:21:12 0:23 0:00 NT (NIOP] 66 06/10/2022:21:17 0:28 0:02 NO (000000008:0:0.0:0.0: -1: -1.0] 67 06/10/2022:21:17 0:28 0:02 MT (NIOP:CFNA:VN] 68 06/11/2000:50:40 0:22 0:00 NT (NIOP] 69 06/11/2000:50:40 0:22 0:00 NT [Ni-Fi:NIOP] 70 06/11/2000:50:45 0:27 0:01 NT (Ni- Fi:NIOP:CFNA:V 14] 71 06/11/2000:50:45 0:27 0:01 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 72 06/11/2001:00:17 0:06 44:39 NT (NIOP:VCORR] 73 06/11/2001:00:17 0:07 44:39 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 74 06/11/20 14:12:28 0:38 0:03 NO (Ni-Fi] [000000008:0:0.0:0.0: -1: -1.0] 75 06/11/20 23:57:41 0:00 0:00 MT (NIOP:CNN] 76 06/11/20 23:57:47 0:06 0:04 MT (NIOP:CFD:CNN: VN] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 4 SDNY_GM_00170644 EFTA01342706 MOBILITY 020 (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .........•••-es.""° AT&T OTC. Run Date: Run Time: voice Usage For: 0""n.. Ite Conn. Conn. Seizure ST Originating Terminating liar INS! CT Feature Cell Location m Date Time Time Number Member (OTC) 77 06/11/20 23:57:47 0:07 0:04 MO [Wi -Fi] [000000008:0:0.0:0.0: -1: -1.0] 78 06/12/2000:35:53 0:39 0:04 MO [Ni-Fi] [000000008:0:0.0:0.0: -1: -1.0] 79 06/12/20 00:36:33 0:24 0:00 HT [NIOP] 80 06/12/20 00:36:39 0:30 0:02 HT [NIOP:CFNA:VM] 81 06/12/2000:36:39 0:31 0:02 MO [Ni-Fi] [000000008:0:0.0:0.0: -1: -1.0] 82 06/12/20 13:40:56 0:17 0:38 HT [Ni-Fi:NIOP] [000000008:0:0.0:0.0: -1: -1.0] 83 06/12/20 13:41:49 0:02 0:00 MO [Ni-Fi] [000000008:0:0.0:0.0: -1: -1.0] 84 06/12/20 16:43:56 0:25 0:00 HT [Ni-Fi:NIOP] (000000008:0:0.0:0.0: -1: -1.0] 85 06/12/20 16:43:57 0:26 0:05 HT [Ni- [000000008:0:0.0:0.0:-1:-1.0] Fi:NIOP:CFNA:V M] 86 06/12/20 16:44:48 0:06 0:00 HT (Wi-fi:MIOP] (000000008:0:0.0:0.0:-1:-1.0] 87 06/12/20 16:47:03 0:36 0:03 MO pia -Pi] (000000008:0:0.0:0.0: -1: -1.0] 88 06/12/20 16:47:08 0:00 0:00 MO pia -Pi] (000000008:0:0.0:0.0: -1: -1.0] 89 06/12/20 16:47:56 0:35 0:05 MO pia -Pi] (000000008:0:0.0:0.0: -1: -1.0] 90 06/12/20 16:48:26 0:18 0:00 MO pia -Pi] (000000008:0:0.0:0.0: -1: -1.0] 91 06/12/20 16:49:51 0:13 0:43 MO pia -Pi] (000000008:0:0.0:0.0: -1: -1.0] 92 06/16/20 23:26:00 0:24 0:00 NT (Wi-Fi:NIOP] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 5 SDNY_GM_00170645 EFTA01342707 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 41.0 tersas"-a. AT&T Run Date: Run Time: voice Usage For: 06/29/2020 Ite Conn. Conn. Seizure ST Originating Terminating =CI ENSI CT Feature Cell Location Date Time Time Number Member (UTC) 93 06/16/2023:28:06 0:30 0:06 HT [14i- Fi:NIOP:CFNA:V 14] 94 06/16/2023:28:06 0:30 0:06 HO (Ni -Pi] [000000008:0:0.0:0.0: -1: -1.0] 95 06/16/2023:37:55 0:24 0:00 HT [14i-Pi:NIOP] 96 06/16/2023:38:03 0:32 0:00 HT (Wi- Fi:NIOP:CFNA:V 14] 97 06/16/2023:38:03 0:32 0:00 HO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 98 06/17/20 17:48:24 0:07 0:00 HT (Ni-Fi:NIOP] (000000008:0:0.0:0.0: -1: -1.0] 99 06/18/20 00:39:03 0:05 0:00 HT [MICR] 100 06/18/20 00:39:03 0:06 0:00 HO (Ni -Pi] [000000008:0:0.0:0.0: -1: -1.0] 101 06/18/20 13:07:09 0:02 0:00 HO (Ni -Pi] [000000008:0:0.0:0.0: -1: -1.0] 102 06/18/20 13:07:53 0:13 43:34 HO (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0, 023310608:91057:- 71.9598779:43.2972525:150:-1.01 103 06/18/20 13:51:27 0:00 0:56 HO (NIOR:VCORR] (023310608:91057:- 71.9598779:43.2972525:150:-1.01 104 06/18/20 13:52:25 0:00 14:36 HO (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 105 06/19/20 17:59:03 0:07 0:00 HT (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 106 06/19/2020:15:59 0:10 0:02 HO (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 107 06/21/2016:45:33 0:06 0:00 HT [MICR] 108 06/22/20 20:05:36 0:03 0:00 HT [MICR] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 6 SDNY_GNL00170646 EFTA01342708 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in Inc. AT&T Run Date: Run Time: Voice Usage For: Ite Conn. Conn. Date Time (OTC) 06/29/2020 Seizure Sum ST Originating Terminating =MI IXSI Number Mambos CT Feature Cell Location 109 06/22/20 20:05:38 0:03 0:00 MO (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 110 06/22/20 20:06:21 0:24 0:00 MT (NIOP] 111 06/22/2020:06:30 0:33 0:09 MT (NIOP:CFNA:VM] 112 06/22/2020:06:30 0:33 0:09 MO (Ni-Pi] [000000008:0:0.0:0.0: -1: -1.0] 113 06/22/20 23:32:01 0:28 0:00 MT (Ni-Pi:NIOP] (000000008:0:0.0:0.0:-1:-1.0] 114 06/22/2023:32:03 0:30 0:03 MO (VCORR] 115 06/22/2023:32:03 0:30 0:03 MT (Ni- (000000008:0:0.0:0.0:-1:-1.0] Fi:NIOP:CFNA:V M] 116 06/25/20 14:02:08 0:01 0:00 MT (NIOP] 117 06/25/20 14:02:12 0:00 0:00 MT (NIOP] 118 06/25/20 15:01:02 0:18 0:15 MO (Vi-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 119 06/25/2015:06:11 0:05 54:26 MO (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 120 06/25/2016:30:49 0:03 0:57 MO (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 121 06/25/20 17:56:18 0:23 0:00 MT (Vi-Pi:NIOP] (000000008:0:0.0:0.0:-1:-1.0] 122 06/25/2017:56:19 0:24 0:35 MT (Ni- (000000008:0:0.0:0.0:-1:-1.0] Fi:NIOP:CFNA:V M] 123 06/25/20 18:25:23 0:02 1:15 MO (Ni- (000000008:0:0.0:0.0:-1:-1.0] Pi:NIOR:VM] 124 06/25/2018:45:57 0:24 0:00 MT (Mi-Pi:NIOP] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 7 SDNY_GM_00170647 EFTA01342709 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. • AT&T Run Data: Run Tina: voice Usage For: Ito Conn. Conn. Data Time (UTC) 0""n02. Seizure Time ET Originating Terminating Din IMSI CT Humber Number Feature Coll Location 125 06/25/2018:46:03 0:30 0:05 MT [Hi- Fi:HIOP:CFNA:V M] 126 06/25/2018:46:03 0:31 0:05 MO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 127 06/25/2019:38:06 0:08 8:45 MT (HIOP:VCORR] 128 06/25/2019:38:06 0:09 8:45 MO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 129 06/25/2019:51:53 0:08 0:53 MT (Vi-Fi:HIOP] [000000008:0:0.0:0.0: -1: -1.0] 130 06/25/2019:53:32 0:14 0:00 MT (1 131 06/25/2019:53:32 0:25 0:00 ST (NIOP] 132 06/25/2019:53:33 0:26 0:03 MO (14i-Fi] 133 06/25/2019:53:33 0:26 0:03 ST (NIOP:CFNA:VM] 134 06/25/2019:55:08 0:06 0:38 MT (Ni-Fi:NIOP] 135 06/25/2019:55:08 0:07 27:11 MO (14i-Fi] (000000008:0:0.0:0.0:-1:-1.0] 136 06/25/2019:55:46 0:00 26:33 MT (NIOP:VCORR] 137 06/25/2020:44:24 0:21 0:00 MT (NIOP] (023310608:91057: - 71.9598779:43.2972525:150: -1.0] 138 06/25/2020:47:13 0:14 0:00 HT CHIOS] (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 139 06/25/2022:27:31 0:09 1:09 MO (VCORR] 140 06/25/2022:27:31 0:09 1:09 MT (Ni-Fi:NIOP] (000000008:0:0.0:0.0:-1:-1.0] 141 06/26/20 22:20:31 0:24 0:00 MT (Hi -Fi:H108] (000000008:0:0.0:0.0: -1: -1.0] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 8 SDNY_GNL00170648 EFTA01342710 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. . AT&T Run Date: 06/29/2020 Run Time: Data Usage For: MS= Item Conn. Conn. Data Tama (OTC) Originating Number ET Bytes Up Bytes Apn Dn DEBI 1MSI MAKE MODEL Cell Location 1 06/01/20 04:02:50 2:13 288 48nxtgenp APPLE !PHONES (366491269:1431606: :::0) U.S. Cellular, hone _USA 2 06/01/20 04:02:51 2:13 48 Onxtgenp hone APPLE !PHONES (311580084491269:1217109705044: :::0) 3 06/01/20 04:05:04 60:00 7584 6400 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 4 06/01/20 04:49:04 60:00 6940 2896 ins APPLE !PHONES 5 06/01/20 05:05:04 60:00 1213 1207 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 6 06/01/20 05:49:04 60:00 10272 4128 ins APPLE !PHONES 7 06/01/20 06:05:04 60:00 692 420 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 8 06/01/20 06:49:04 60:00 8388 2928 ins APPLE !PHONES 9 06/01/20 07:05:04 60:00 924 840 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 10 06/01/20 07:49:04 60:00 12028 4628 ins APPLE !PHONES 11 06/01/20 08:05:04 60:00 976 945 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 12 06/01/20 08:49:04 60:00 8388 2928 ins APPLE !PHONES 13 06/01/20 09:05:04 60:00 1033 840 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 14 06/01/20 09:49:04 60:00 10844 4268 ins APPLE !PHONES 15 06/01/20 10:05:04 60:00 808 630 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 16 06/01/20 10:49:04 60:00 8264 2928 ins APPLE !PHONES 17 06/01/20 11:05:04 60:00 1176 676nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 18 06/01/20 11:49:04 60:00 10036 3176 ins APPLE !PHONES 19 06/01/20 12:05:04 60:00 6242 8975nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 20 06/01/20 12:49:04 60:00 11796 4736 ins APPLE !PHONES 21 06/01/20 13:05:04 60:00 1292 938 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 22 06/01/20 13:49:04 60:00 12028 4268 ins APPLE !PHONES 23 06/01/20 14:05:04 52:50 97659 63430nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 24 06/01/20 14:49:04 1:01 6304 2224 ins APPLE !PHONES 25 06/01/20 14:50:09 18:13 9393 8466 ins APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170649 The information contained here is for use by authorized persons only and is not for general distribution. Page 1 EFTA01342711 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:13:13pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. u AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DOM 1MSI MAKE MODEL Cell Location Data Tim Number Up Dn (MC) 26 06/01/20 14:57: 19:38 53238 283837nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057: -71.9598779:43.2972525:150:- 023310608:91057: -71.9598779:43.2972525:150:- 1.01 27 06/01/20 15:08: 9:10 3052 1432 Leis APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.01 28 06/01/20 15:08: 9:10 2920 1432 Leis APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.01 29 06/01/20 15:17: 2:04 54413 18936nxtgenp APPLE !PHONES (366491266:1431606: :::01 U.S. Cellular, hone _USA 30 06/01/20 15:17: 2:03 6228 6689 Leis APPLE !PHONES (366491266:1431606: :::01 U.S. Cellular, _USA 31 06/01/20 15:17: 2:04 16936 54125nxtgenp hone APPLE !PHONES (311580084491266:1217109705044: :::01 32 06/01/20 15:17: 2:02 6669 5964 Leis APPLE !PHONES (311580084491266:1217109705044: :::01 33 06/01/20 15:19: 60:00 235957 176510nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150:-1.01 34 06/01/20 15:19: 31:40 9383 7358 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 35 06/01/20 15:51: 16:00 3672 1556 ims APPLE !PHONES 36 06/01/20 16:07: 0:15 6676 1820 Leis APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 37 06/01/20 16:07: 43:40 6632 2648 Leis APPLE !PHONES 38 06/01/20 16:19: 60:00 81016 209053nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150:-1.0, 023310601:91057: -71.9598779:43.2972525:150:- 023310608:91057: -71.9598779:43.2972525:150:- 1.01 39 06/01/20 16:51: 0:51 2644 1324 Leis APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.01 40 06/01/20 16:52: 12:52 3532 1432 Leis APPLE !PHONES 41 06/01/20 17:04: 1:09 2644 1324 Leis APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.01 42 06/01/20 17:06: 60:00 11996 4328 Leis APPLE !PHONES 43 06/01/20 17:19: 60:00 1138 1936nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150:-1.01 44 06/01/20 18:06: 60:00 8480 3020 Leis APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170650 The information contained here is for use by authorized persons only and is not for general distribution. Page 2 EFTA01342712 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided UTC. •--is""a AT&T Run Date: 06/29/2020 Run Time: Data Usage Per: Item Conn. Conn. Date Tame (OTC) IS= Originating Number ET Bytes up Bytes Apn On IMEI IMSI MAKE MODEL Cell Location 45 06/01/20 18:19:36 60:00 36198 25369nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 46 06/01/20 19:06:05 21:04 5072 1572 ims APPLE !PHONES 47 06/01/20 19:19:36 60:00 80090 154219nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310785:91057: -71.9598779:43.2972525:150:- 023310608:91057: -71.9598779:43.2972525:150:- 1.0] 48 06/01/20 19:27:09 14:38 2644 1324 iota APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 49 06/01/20 19:41:47 60:00 12136 4684 ims APPLE !PHONES 50 06/01/20 20:19:36 60:00 9626 23893 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 51 06/01/20 20:41:47 60:00 11060 4952 ims APPLE !PHONES 52 06/01/20 21:19:36 35:09 12444 6123 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 1.0] 53 06/01/20 21:41:47 54:22 8480 2896 ims APPLE !PHONES 54 06/01/20 21:54:44 2:03 266 48nxtgenp APPLE !PHONES (366491266:1431606: :::01 U.S. Cellular, hone _USA 55 06/01/20 21:54:45 2:03 48 Onxtgenp hone APPLE !PHONES (311580084491266:1217109705044: :::01 56 06/01/20 21:56:48 1:48 48 Onxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 57 06/01/20 21:58:36 3:37 48 Onxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 58 06/01/20 22:02:12 1:45 266 48 nxtgenp APPLE !PHONES (366491266:1431606: :::01 U.S. Cellular, hone _USA 59 06/01/20 22:02:13 1:45 48 Onxtgenp hone APPLE !PHONES (311580084491266:1217109705044: :::01 60 06/01/20 22:03:58 60:00 74045 78426 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 61 06/01/20 22:36:09 21:23 26404 1412 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 62 06/01/20 22:36:09 21:23 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 63 06/01/20 22:57:32 11:56 8260 2820 ims APPLE !PHONES 64 06/01/20 23:03:58 60:00 4095 4941 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170651 The information contained here is for use by authorized persons only and is not for general distribution. Page 3 EFTA01342713 ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 41! teS4a"11. AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Date Timo (OTC) Originating Number ET Bytes Up Bytes Apn On Mei 1MSI MAKE MODEL Col/ Location 65 06/01/20 23:09:2 0:02 0 0 Las APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 66 06/01/20 23:09:2 0:02 0 0 Lau APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 67 06/01/20 23:09:41 60:00 35795 18581 Lau 68 06/02/20 00:03:5 60:00 5974 7569nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 69 06/02/20 00:09:41 60:00 6726 3252 Lau 70 06/02/20 01:03:5 60:00 3725 892nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 71 06/02/20 01:09:41 60:00 10160 3284 Lau 72 06/02/20 02:03:5 30:02 490 1155nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 73 06/02/20 02:09:41 60:00 8496 3036 Lau 74 06/02/20 02:33:5 0:35 5168 6230nxtgenp APPLE !PHONES (366491269:1431606: :::01 U.S. Cellular, hone _USA 75 06/02/20 02:34:0C 0:35 6230 4880nxtgenp hone APPLE !PHONES (311580084491269:1217109705044: :::01 76 06/02/20 02:34:3 51:01 19228 7931nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 77 06/02/20 03:09:41 60:00 15344 5768 Lau 78 06/02/20 03:25:3 0:54 268 48nxtgenp APPLE !PHONES (366491266:1431606: :::01 U.S. Cellular, hone _USA 79 06/02/20 03:25:3 0:53 48 Onxtgenp hone APPLE !PHONES (311580084491266:1217109705044: :::01 80 06/02/20 03:26:3C 60:00 7623 6111nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 81 06/02/20 04:09:41 60:00 6956 2664 Lau 82 06/02/20 04:26:3C 60:00 1559 1365nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 83 06/02/20 05:09:41 60:00 6956 2788 Lau 84 06/02/20 05:26:3C 60:00 1443 1155nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 85 06/02/20 06:09:41 60:00 6848 2680 Lau 86 06/02/20 06:26:3C 60:00 1722 2051nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 87 06/02/20 07:09:41 60:00 7064 2804 Lau 88 06/02/20 07:26:3C 60:00 9292 13711nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 89 06/02/20 08:09:41 60:00 15452 5768 Lau AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SONY_GM_00170652 The information contained here is for use by authorized persons only and is not for general distribution. Page 4 EFTA01342714 ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in UTC. 4III, AT&T Run Date: 06/29/2020 Run Tine: Data Usage For: Item Conn. Conn. Date Tame (OTC) Originating Number ET Bytos Up Bytes Apn On =MI IMSI MARE MODEL Cell Location 90 06/02/20 08:26:30 60:00 1097 945 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 91 06/02/20 09:09:41 60:00 6646 2572 Las 92 06/02/20 09:26:30 60:00 606 630 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 93 06/02/20 10:09:41 60:00 6956 2804 Lau 94 06/02/20 10:26:30 60:00 3604 996 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 95 06/02/20 11:09:41 60:00 12060 6052 Lau 96 06/02/20 11:26:30 60:00 740 420 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 97 06/02/20 12:09:41 60:00 6956 2772 Lau 98 06/02/20 12:26:30 60:00 576 630 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 99 06/02/20 13:09:41 60:00 10466 4288 Lau 100 06/02/20 13:26:30 60:00 467 210 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 101 06/02/20 14:09:41 44:54 20066 10876 isle APPLE !PHONES 102 06/02/20 14:26:30 60:00 49577 154114 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 103 06/02/20 14:43:50 10:45 1146262 2105550 Les APPLE IPHONE6 104 06/02/20 14:54:35 0:15 5526 2840 Les APPLE IPHONE6 (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 105 06/02/20 14:54:35 0:15 5192 2840 Les APPLE IPHONE6 [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 106 06/02/20 14:54:35 0:15 52007 29291 Les APPLE IPHONE6 [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 107 06/02/20 14:54:35 0:15 52074 29291 Les APPLE IPHONE6 (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 108 06/02/20 14:54:50 6:46 1277744 902121 isle APPLE !PHONES 109 06/02/20 14:54:50 10:37 10112 4792 isle APPLE !PHONES 110 06/02/20 15:05:27 2:59 2660 1340 isle APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 111 06/02/20 15:05:27 2:59 2596 1340 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170653 The information contained here is for use by authorized persons only and is not for general distribution. Page 5 EFTA01342715 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. • AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Date Tim (OTC) SWIM Originating Number ET Bytes DP Bytes Apn On DMZ 1MSI MAKE MODEL Cell Location 112 06/02/20 15:08:30 0:16 6689 5999 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0] 113 06/02/20 15:08:46 4:21 3532 1340 Las APPLE !PHONES 114 06/02/20 15:13:07 10:32 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 115 06/02/20 15:23:39 60:00 12028 4484 ins APPLE !PHONES 116 06/02/20 15:26:30 60:00 99974 67663nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 117 06/02/20 16:23:39 60:00 14832 9324 ins APPLE !PHONES 118 06/02/20 16:26:30 60:00 43565 32662 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 119 06/02/20 17:04:21 10:23 1523437 1820730 ins APPLE !PHONES 120 06/02/20 17:23:39 60:00 25120 13800 ins APPLE !PHONES 121 06/02/20 17:26:30 25:51 6237 7511nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 122 06/02/20 17:33:52 1:01 126707 153540 ins APPLE !PHONES 123 06/02/20 17:52:21 60:00 15314 18255 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 124 06/02/20 18:23:39 60:00 6956 2680 ins APPLE !PHONES 125 06/02/20 18:52:21 60:00 751 735nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 126 06/02/20 19:23:39 60:00 12136 4592 ins APPLE !PHONES 127 06/02/20 19:52:21 60:00 34062 35324 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 128 06/02/20 20:23:39 60:00 12368 4444 ins APPLE !PHONES 129 06/02/20 20:52:21 60:00 16138 17233nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 130 06/02/20 21:23:39 28:19 124 496 ims APPLE IPE0NE8 131 06/02/20 21:43:17 8:41 10410 6526 ims 132 06/02/20 21:51:58 60:00 0 0 ims 133 06/02/20 21:52:21 60:00 83690 71751nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 134 06/02/20 21:53:02 19785258484 9:02 9853 6222 ims 3587080982063727 310410214827503 APPLE IPE0NE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170654 The information contained here is for use by authorized persons only and is not for general distribution. Page 6 EFTA01342716 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. a ......•``a° AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Date Tame (DSC) Originating ET Bytes Up Bytes Apn On flat IMSI MAKE MODEL Cell Location 135 06/02/20 22:02:04 7:42 2620 1340 /ma APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 136 06/02/20 22:02:04 7:42 2666 1340 Las APPLE 'PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 137 06/02/20 22:09:46 0:20 3408 1324 Lau APPLE 'PHONES 138 06/02/20 22:10:06 2:06 2660 1324 Lau APPLE 'PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 139 06/02/20 22:10:06 2:06 2596 1324 Lau APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 140 06/02/20 22:12:12 60:00 11996 4392 Lau APPLE !PHONES 141 06/02/20 22:51:58 60:00 0 0 Lau 142 06/02/20 22:52:21 60:00 53259 29558 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 143 06/02/20 23:12:12 60:00 16884 9908 Lau APPLE IPHONE8 144 06/02/20 23:51:58 60:00 0 0 Lau 145 06/02/20 23:52:21 60:00 113776 20487nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.01 146 06/03/20 00:07:02 6:55 1488519 757807 Lau APPLE !PHONES 147 06/03/20 00:12:12 60:00 9280 3612 Lau APPLE IPHONE8 148 06/03/20 00:51:58 60:00 0 0 Lau 149 06/03/20 00:52:21 59:45 616690 47854nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057: -71.9598779:43.2972525:150:- 023413008:91457: -72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.01 150 06/03/20 01:12:12 36:32 3408 1340 Lms APPLE !PHONES 151 06/03/20 01:48:43 1:43 61788 1340 Lms APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 152 06/03/20 01:48:44 1:42 2596 1340 Lms APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 153 06/03/20 01:50:26 0:20 3408 1340 Lau APPLE !PHONES 154 06/03/20 01:50:46 1:17 2660 1340 Lau APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 155 06/03/20 01:50:46 1:17 2596 1340 Lau APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170655 The information contained here is for use by authorized persons only and is not for general distribution. Page 7 EFTA01342717 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 41110 ...,1/4-rse,•`—‘ AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Data Time (OTC) SS= OrIganatIng Number BY Bytes Up Bytes Apn On DEBI HISS MAKE MODEL Coll Location 156 06/03/20 01:51:5 0:01 0 0 Las 157 06/03/20 01:52:0 60:00 24624 7240 Les APPLE !PHONES 158 06/03/20 01:52:0 1:07 268 48nxtgenp APPLE !PHONES (366491266:1431606: :::01 U.S. Cellular, hone _USA 159 06/03/20 01:52:0 1:07 48 0nxtgenp hone APPLE !PHONES [311580084491266:1217109705044: :::01 160 06/03/20 01:53:1 60:00 107627 64507nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 161 06/03/20 02:52:0 60:00 6616 2680 Les APPLE !PHONES 162 06/03/20 02:53:1 60:00 514 525nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 163 06/03/20 03:52:0 8:25 0 0 Les APPLE !PHONES 164 06/03/20 03:53:1 60:00 514 525nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 165 06/03/20 04:00:2 4:35 48740 1340 Les APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 166 06/03/20 04:00:2 4:33 2596 1340 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 167 06/03/20 04:05:01 60:00 12120 4732 Les APPLE !PHONES 168 06/03/20 04:53:1 60:00 578 630nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 169 06/03/20 05:05:01 60:00 8496 3036 Les APPLE !PHONES 170 06/03/20 05:53:1 60:00 462 420nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 171 06/03/20 06:05:01 60:00 6616 2664 Les APPLE !PHONES 172 06/03/20 06:53:1 60:00 603 840nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 173 06/03/20 07:05:01 33:19 4980 1588 Les APPLE !PHONES 174 06/03/20 07:38:20 0:02 0 0 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 175 06/03/20 07:38:20 0:02 0 0 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 176 06/03/20 07:45:1 60:00 11869 8788 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 177 06/03/20 07:53:13 60:00 3620 996nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 178 06/03/20 08:45:1 35:25 2596 1340 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 179 06/03/20 08:53:13 60:00 514 525nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170656 The information contained here is for use by authorized persons only and is not for general distribution. Page 8 EFTA01342718 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 4111. AT&T Run Date: Run Time: Data Usage For: Item Conn. Conn. Date Tama (UTe) 06/29/2020 Originating Number ET Bytes Up Bytes Apn On DELI HIBI MAKE MODEL Cell Location 180 06/03/20 09:20:4 0:01 0 0 ins APPLE !PHONES 181 06/03/20 09:20:5 60:00 18242 9408 ins 182 06/03/20 09:53:1 60:00 578 630nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 183 06/03/20 10:20:5 60:00 6956 2772 ins 184 06/03/20 10:53:1 60:00 3488 786nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 185 06/03/20 11:20:5 60:00 13460 4624 ins 186 06/03/20 11:53:1 43:06 346 210nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 187 06/03/20 12:20:5 60:00 8496 2928 ins 188 06/03/20 12:36:1 60:00 17171 19006nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 189 06/03/20 13:20:5 60:00 6848 2680 ins 190 06/03/20 13:36:1 60:00 1076 5194nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 191 06/03/20 14:20:5 60:00 17440 7140 ins 192 06/03/20 14:36:1 60:00 33285 20450nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 193 06/03/20 15:20:5 60:00 8366 2928 ins 194 06/03/20 15:36:1 60:00 68804 52255nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 1.0) 195 06/03/20 16:20:59 19785258484 25:43 3532 1340 iota 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SONY_GM_00170657 The information contained here is for use by authorized persons only and is not for general distribution. Page 9 EFTA01342719 ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided UTC. in • AT&T Run Date: Run Ties: Data usage For: Item Conn. Conn. Data Tim 06/29/2020 Originating BB Bytes Number Bytom Apn on INEI ItlSI maim NOBEL Cell Location 196 06/03/20 (UTC) 16:36:1 60:00 73150 319642 nxtgonp hone 3 APPLE !PHONES 1024577552:96006:- 71.9906006:43.3717995:210:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 197 06/03/20 16:46:42 35:56 16696 2804 ims 3 APPLE !PHONES 1023310601:91057:- 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.01 198 06/03/20 16:46:42 35:56 6500 2804 ims 3 APPLE !PHONES 1023310601:91057:- 71.9598779:43.2972525:150:-1.01 199 06/03/20 17:22:38 60:00 12152 5500 ins 3 APPLE !PHONES 200 06/03/20 17:36:19 60:00 6217 8569nxtgenp 3 APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057: -71.9598779:43.2972525:150:- 023310608:91057: -71.9598779:43.2972525:150:- 1.01 201 06/03/20 18:22:38 50:15 20272 14536 ims 3. APPLE !PHONES 202 06/03/20 18:36:19 60:00 65601 74295nxtgenp 3 APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 203 06/03/20 19:08:57 0:32 3390 17716 ims 3 APPLE !PHONES 204 06/03/20 19:12:53 1:08 29664 1588 ims 3 APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 205 06/03/20 19:12:53 1:08 4244 1588 ims 3! APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 206 06/03/20 19:14:011 60:00 15452 6108 ins 3 APPLE !PHONES 207 06/03/20 19:36:19 49:02 154491 104472nxtgenp 3 APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 208 06/03/20 20:14:01 12:54 0 0 ins 3 APPLE !PHONES 209 06/03/20 20:25:20 1:52 118093 19163nxtgenp 3 APPLE !PHONES 1366491269:1431606: :::01 U.S. Cellular, hone _USA AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. Page 10 SDNY_GM_00170668 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342720 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in Inc. tz-,4*-1:• AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DEBI IBS' BARB MODEL Cell Location Data Tam Number Up On (UTC) 210 06/03/20 20:25:2 1:51 6244 6715 ims APPLE !PHONES (366491269:1431606: :::0) U.S. Cellular, ■ 211 06/03/20 20:25:2 1:52 19163 117805nxtgonp APPLE _USA !PHONES (311580084491269:1217109705044 hone 311580084513798:1217109705132. ... 311580084491269:1217109705044 311580084491266:1217109705044: :::0) 212 06/03/20 20:25:22 1:51 6647 5980 Las APPLE !PHONES (311580084491269:1217109705044: :::0) 213 06/03/20 20:26:55 21:44 15066 11650 Las APPLE !PHONES 214 06/03/20 20:27:13 60:00 29699 22731nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 024577552:96006: -71.9906006:43.3717995:210:- 023310608:91057: -71.9598779:43.2972525:150:- 1.0] 215 06/03/20 20:31:0 17:38 2582971 3580061 Las APPLE !PHONES 216 06/03/20 20:48:3 20:58 3222937 4174165 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0, 024577552:96006: -71.9906006:43.3717995:210:- 023310608:91057: -71.9598779:43.2972525:150:- 1.0] 217 06/03/20 20:48:3 20:58 9450 5464 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0, 024577552:96006: -71.9906006:43.3717995:210:- 023310608:91057: -71.9598779:43.2972525:150:- 1.0] 218 06/03/20 20:48:39, 20:58 3222937 4174165 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 1.0] 219 06/03/20 20:48:39, 20:58 9200 5464 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 220 06/03/20 21:09:37 22:11 3048535 4722292 Las APPLE !PHONES 221 06/03/20 21:09:37 60:00 25284 10868 Las APPLE !PHONES 222 06/03/20 21:27:13 56:17 30089 21364nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 223 06/03/20 22:09:3 60:00 8604 3144 Las APPLE !PHONES 224 06/03/20 22:23:2 0:34 288 48nxtgenp APPLE !PHONES (366491266:1431606: :::0) U.S. Cellular, hone _USA 225 06/03/20 22:23:30 0:34 48 Onxtgonp hone APPLE !PHONES (311580084491266:1217109705044: :::0) AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 11 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170659 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342721 ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/29/2020 Run Tiro: Data Usage For: Item Conn. Conn. Date Time (OTC) Ma= Originating Number ET Bytes: UpBytes Apn DEBI IM0I MAKE Dn MODEL Coll Location 226 06/03/20 22:24:03 60:00 167526 117996nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 227 06/03/20 23:09:37 60:00 6636 3160 ins APPLE !PHONES 228 06/03/20 23:24:03 60:00 44474 24371nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 024577552:96006: -71.9906006:43.3717995:210:- 023310608:91057: -71.9598779:43.2972525:150:- 1.0] 229 06/04/20 00:09:37 60:00 10144 3176 ims APPLE !PHONES 230 06/04/20 00:24:03 60:00 1976 5865 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 231 06/04/20 01:09:37 60:00 6956 2680 ins APPLE !PHONES 232 06/04/20 01:24:03 23:49 35215 21990nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 233 06/04/20 01:47:52 60:00 56507 36707nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 234 06/04/20 02:09:37 60:00 16640 6280 ims APPLE !PHONES 235 06/04/20 02:47:52 60:00 7541 1994 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 236 06/04/20 03:09:37 60:00 6646 2896 ins APPLE !PHONES 237 06/04/20 03:47:52 60:00 2264 3777 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 238 06/04/20 04:09:37 60:00 6604 2928 ims APPLE !PHONES 239 06/04/20 04:47:52 60:00 1670 1785nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 240 06/04/20 05:09:37 60:00 6366 2928 ins APPLE !PHONES 241 06/04/20 05:47:52 60:00 1651 1575nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 242 06/04/20 06:09:37 60:00 11920 4144 ins APPLE !PHONES 243 06/04/20 06:47:52 60:00 1092 1155 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 244 06/04/20 07:09:37 60:00 11920 4412 ins APPLE !PHONES 245 06/04/20 07:47:52 60:00 450 420 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 246 06/04/20 08:09:37 60:00 6646 2680 ins APPLE !PHONES 247 06/04/20 08:47:52 60:00 514 525 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 248 06/04/20 09:09:37 60:00 11920 4592 ins APPLE !PHONES 249 06/04/20 09:47:52 60:00 3251 576nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. Page 12 SDNY_GM_00170660 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342722 ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. a tre,J4*--f• AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Date 1.10.0 (UTC) Originating Number ET Bytes Up Bytes Apn On flat INS! MAKE MODEL Cell Location 250 06/04/20 10:09:3 60:00 6848 2680 ims APPLE !PHONES 251 06/04/20 10:47:5 60:00 42253 3025 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598