EFTA Document EFTA01338294

AT&T AT&T Records Key AT&T searches all available databases to ensure all responsive records are provided. Multiple reports may be provided in response to your request. Note: Blank fields or "-I" do not indicate an issue with the record. It simply means the information was not passed from the MAIN ork to the CDR System. AT&T Ntobility Voice Descriptions Column/Field Name Description Item Row Number. This denotes a leg of a call or transaction. A leg of a call represents each time the call is processed through a network switch. Calls may go through several switches in AT&Ts network in order to reach the intended party. Conn.Date Connection Date. The date of the call. Conn.Time(UTC) Connection Time. The time the call was connected. Time is in UTC. Times is expressed in military time as HH:MM:SS. Conn Date Time Connection date and time- Date and Time the call was connected. Displayed as one column on the Landline Call Detail Records. SeizureTime The number of seconds it took to travel through our systems before the call connected. ET (Elapsed Time) Duration of the transaction. Duration is in MM:SS AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 1 of 16 SONY_GM_02771985 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00258793 EFTA01338294 AT&T Originating The phone number the call/text originated from. For data records, this does not necessarily mean the number originated the data Number transaction. The network constantly communicates with intemet enabled devices and the data records do not indicate if a customer initiated a data transaction. Some abbreviations arc found after a number using 0. They arc defined as follows: Dialed (D)- The number that the originating party dialed. Appears in subsequent line of the same row in the Originating Number column. (Note: only appears if the Terminating number differs from the Dialed number) Special Dialing Characters- A = *. B = # Appears as part of Dialed Number (D) Digits. FORWARDED (F)- The number the terminated number forwarded the call to. Appears in subsequent line of the same row in the Originating Number column. ORIGINAL ORIGINATING (OO). Denotes the number that originated the call before call forwarding was invoked. Appears in subsequent line of the same row in the Originating Number column. TRANSLATED (1)- Indicates if a number was translated to a different number. For example. if the number called is 911. then that gets translated to a ten-digit number for routing to a 911 dispatch center. The (T) indicates the number the translation was from, not the number translated to. Terminating Number The number the transaction terminated to. AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 2 of 16 SDNY_GM_02771986 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00258794 EFTA01338295 AT&T IMEI International Mobile Equipment Identifier Can be 15 or 16 digits. A 15-digit number that uniquely identifies an individual wireless device. The first 14 digits arc unique. The 15* digit is a chock digit that validates the prior 14 digits. A 16 digit IMEI is an "IMEISV." SV Stands for software version number. The last two digits identify the software version. Only the IMEI of the number requested is displayed. IMSI International Mobile Subscriber Identity This is a unique 15-digit identifier given to each mobile subscriber and is stored on the Subscriber Identity Module (SIM). The IMSI consists of a MCC (Mobile Country Code), a MNC (Mobile Network Code) and a MSIN (Mobile Station Identification Number): • 3-digit MCC ties the SIM to a specific country • 3-digit MNC ties the SIM to a specific network within that country • 9-digit MSIN tics the SIM to a specific customer CT (Call Type) Denotes if the leg of a call is an originating leg or terminating leg. Mobile Originating (MO) Mobile Terminating (MT) Service Originating (SO) Service Terminating (ST) A service record is generated when the network generates a leg of a call to reach a service on the network. For example, a leg connecting to the voicemail platform denotes a service invoked on the network and may show up as a service record. See "Item" at beginning of the table for definition of a leg of a call. Feature This column represents the type of call that occurred as recorded by our network and used for purposes of processing a call on AT&T's network. These are not necessarily indicative of features on a customer's account or the types of services subscribed to. Make Device Manufacturer Model Device Model AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 3 of 16 SDNY_GM_02771987 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00258795 EFTA01338296 AT&T Cell Location Identifiers: 3G Network cell Site= LAC/CID 4G Network Cell Site= ECGI Examples: 3G Network Cell Sitc127077/I1621:40.05629:26.74779:350:90.0:891 LAOCID LONG:LAT Sector:Beamwidth:Time on Tower 4G Network Cell Site 1133151247:520122: -96.912452:33.013937:358:-1.0:281 ECGI:ENB-ID LONG:LAT Sector:Beamwidth:Time on Tower Definitions: LAC - Location Area Code. This number identifies the specific region a cell tower is located in. The number is used internally in AT&T for network purposes. CID - Cell Identity. This number identifies the location of the tower within a specified region. The number is used internally in AT&T for network purposes. ECGI - Enhanced cell global identity. A nine digit number that indicates the location of a cell tower when 4G technology is being used. The number is used internally in AT&T for network purposes. ENB-ID - Evolved Node B (eNodeB) Hardware connected to the AT&T mobility network that communicates directly with a mobile device. This number is used internally to AT&T to identify a specific antenna on a tower when 4G technology is used. Longitude - A geographic coordinate that specifies an East-West Position of a point on the earth's surface. The Latitude represented is of the cell tower. Latitude - A geographic coordinate that specifies a North-South Position of a point on the earth's surface. The Longitude represented is of the cell tower. Sector - A number out of 360 degrees that indicates the side of the cell site antenna used in processing the call. Beamwidth - A number out of the 360 degrees that specifies the angle of coverage of the RF signal coming from a particular cell site sector. Time on Tower - If applicable, shows the amount of time (in seconds) the device spent on each cell tower involved in the transaction. AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 4 of 16 SDNY_GM_02 771988 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00258796 EFTA01338297 AT&T AT&T Mobility Common Scenarios Scenario Many or all Zero Duration Calls rescription Voice usage reports showing all calls with zero durations in the Elapsed Time "ET" column indicate calls that were not connected. Numbers such as this are commonly used for routing purposes if there is no associated subscriber. Report Differences Because calls can traverse many networks, AT&T provides records of all calls that traverse its wireline. wireless and international gateways. ReportAU- Calls that traverse the mobility network. ReportLandline- Calls that traverse the wireline and Voip network. ReportICDR-Calls that traverse AT&T's international gateway. ReportSTIR — Calls that have gone through attestation process to authenticate Caller ID. A call may show up on one or more report however AT&T has no ability to definitively state or correlate calls as being the same transaction. You may infer any conclusions based on your own analysis of the records. ET 60:00- Data Usage Data records have a maximum limit of 60 minutes in the CDR record system. Another record is created when a continuous data session exceeds the 60 minute limit. AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 5 of 16 SDNY_GM_02771989 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00258797 EFTA01338298 St AT&T Feature Definitions for Mobility Voice Report Features represents the type of call that occurred as recorded by our network and used for purposes of processing a call on AT&Ts network. These are not necessarily indicative of features on a customer's account or the types of services subscribed to. Feature Acronym Feature Definition ADD Unstructured Supplementary Service Data CBI Barring of All Incoming Calls CBIOP Incoming Operator Determined Barring CHIP Barring of All Incoming Calls Roaming Outside Public Land Mobile Network CBIUK Barring of Incoming Calls CRO Barring of All Outgoing Calls CBOI Barring of All Outgoing Intl Calls CBOIP Barring of All Outgoing Intl Calls Except to Public Land Mobile Network CBOOP Outgoing Operator Determined Barring CROCK Barring of Outgoing Calls CBUK All Barring CFR Call Forwarding Subscriber Busy CFC Call Forwarding All Conditional CFNA Call Forwarding No Reply CFNR Call Forwarding Not Reachable CFO Call Forwarding in Gateway (Unknown) CFU Call Forwarding Unconditional CFUK All Forwarding CGC Advice of Charge Charging CGI Advice of Charge Infmnation CIAC Account Code Service CICUG Closed user Groups Service CIPCI Proprietary Customer Information CMH Call Hold AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 6 of 16 SDNY_GM_02771990 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00258798 EFTA01338299 AT&T CMPRL Proprietary Release Link Trunk Service CMPVM Proprietary Voice Mail Call Dropback CMR Call Re-origination CM RC Call Re-Origination By Cause CMW Call Waiting ECT Explicit Call Transfer GREM Enhanced Multi INIOR Invoke Calling Number Identity Restriction MPS Multiparty Services NIND Proprietary Calling Name Delivery NIOP Calling Number Identity Presentation NIOR Calling Number Identity Restriction NITP Connected Line Identity Presentation NITR Connected Line Identity Restriction NSDA Directory Assistance Service Call OACR Anonymous Call Rejection OEXT Extension Service ()MCI Malicious Call Trace OMSC MSC OOR Optimal Routing (of Late Call Forwarding) SUBCMH Call hold Call hold, Invoke. Invoked by Subscriber V2G Volte to 3G. It indicates the call was handed off from one Vac (a VOIP call) to the 3G network (circuit switched call) VM Voicemail involved in transaction VCORR 4G Cell site was correlated with additional database FOTO "Flexible Caller ID" This indicates a secondary device, such as a watch or tablet, originated the call. The number indicated as the Original Originating (OO) is the native number belonging to the secondary device that originated the call. AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 7 of 16 SDNY_GM_02771991 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00258799 EFTA01338300 AT&T AT&T \loin SMS Descriptions Column Name Description Originating Number Number that originated the SMS I I Terminating Number Number that received the SMS Description If known. dcscribes the direction of the SMS SMSO (SMS originating) SMST (SMS terminating) IMEI International Mobile Equipment Identifier Can be 15 or 16 digits. A 15-digit number that uniquely identifies an individual wireless device. The first 14 digits are unique. The 15th digit is a check digit that validates the prior 14 digits. A I6 digit IMEI is an "IMEISV." SV Stands for software version number. The last two digits identify the software version. Only the IMEI of the number requested is displayed. IMSI International Mobile Subscriber Identity This is a unique 15-digit identifier given to each mobile subscriber and is stored on the Subscriber Identity Module (SIM). The IMSI consists of a MCC (Mobile Country Code), a MNC (Mobile Network Code) and a MSIN (Mobile Station Identification Number): • 3-digit MCC ties the SIM to a specific country • 3-digit MNC ties the SIM to a specific network within that country • 9-digit MSIN ties the SIM to a specific customer MMS Type Mobile Multimedia Service (MMS) Message Type indicates the types of media embedded in the MMS Message. Values include: Text, Image, Audio or Video. There can be more than one value in the same message. If this field is blank, it is an SMS. AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 8 of 16 SDNY_GM_02771992 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA 002588({) EFTA01338301 as AT&T AT&T Mobility SMS-Email Descriptions Column Name Description Email Email address associated Entail Status SEND/RCVD Description MO (Mobile originating) MT (Mobile terminating) AO (Application originating) AT (Application terminating) Feature Definitions for Mobility Voice and Mobility SMS Report Features represents the type of CalUSMS that occurred as recorded by our network and used for purposes of processing a Call/SMS on AT&Ts network. These are not necessarily indicative of features on a customer's account or the types of services subscribed to. Feature Acronym Feature Definition Wi-Fi This denotes when a Call/SMS was carried over Wi-Fi. No cell sites or any type of location information is available on these transactions because AT&T does not store this information. AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 9 of 16 SDNY_GM_02771993 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_0025880I EFTA01338302 AT&T AT&T Mobility Data Descriptions Column Name Description Bytes Up Number of bytes sent from the wireless handset to the cell site. Bytes Bn Number of bytes sent from the cell site to the wireless handset. Originating Number Number of the device making the data connection. For data records, the Originating Number does not necessarily mean the number originated the data transaction. The network constantly communicates with internet enabled devices and the data records do not indicate if a customer initiated a data transaction. Apn Network Defines the type of connection the customer is making to our network. Values can include: nxtgenphone (next generation device, Lit capable) ims (automatically added APN to VoLTE-capable devices to support IP Messaging over IMS) lirstnet-phone (AT&T FirstNet Device — similar to nxtgenphone) IMEI International Mobile Equipment Identifier Can be 15 or 16 digits. A 15-digit number that uniquely identifies an individual wireless device. The first 14 digits are unique. The 15th digit is a check digit that validates the prior 14 digits. A 16 digit IMEI is an "IMEISV." SV Stands for software version number. The last two digits identify the software version. Only the IMEI of the number requested is displayed. IMSI International Mobile Subscriber Identity This is a unique 15•digit identifier given to each mobile subscriber and is stored on the Subscriber Identity Module (SIM). The IMSI consists of a MCC (Mobile Country Code), a MNC (Mobile Network Code) and a MSIN (Mobile Station Identification Number): • 3•digit MCC ties the SIM to a specific country • 3.cligit MNC ties the SIM to a specific network within that country • 9.cligit MSIN ties the SIM to a specific customer AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 10 of 16 SDNY_GM_02771994 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00258802 EFTA01338303 AT&T AT&T Wi-Fi Data Descriptions This report signifies data transactions where the customer is connected to Wi-Fi using AT&T VPN service. Column Name Description Bytes Up Number of bytes sent from the wireless handset to the cell site. Bytes Dn Number of bytes sent from the cell site to the wireless handset. Originating Number Number of the device making the data connection. For data records. the Originating Number does not necessarily mean the number originated the data transaction. The network constantly communicates with intcmct enabled devices and the data records do not indicate if a customer initiated a data transaction. AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 11 of 16 SDNY_GM_02771995 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00258803 EFTA01338304 AT&T AT&T Report STIR/Shaken Descriptions Column Name Description Seq Status Unique record created by this database. Values include: No Validation Pass Fail Attest Type A - Full Attestation • Is responsible for the origination of the call onto the IP-based service provider voice network. • Has a direct authenticated relationship with the customer and can identify the customer. • Has established a verified association with the telephone number used for the call. B - Partial Attestation • Is responsible for the origination of the call onto the IP-based service provider voice network. • Has a direct authenticated relationship with the customer and can identify the customer. • Has NOT established a verified association with the telephone number being used for the call. C - Gateway Attestation • Has no relationship with the initiator of the call (e.g., international gateways). Ver_Orig Originating TN that was used to validate Caller ID. Ver_Term Terminating TN that was used to validate Caller ID. AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 12 of 16 SDNY_GM_02771996 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00258804 EFTA01338305 AT&T AT&T Wireline Descriptions Column Name Description Sec. Orig Secondary Originating Number. A secondary number associated with the call transaction. This number can either be a wircline or mobility number. As an example. if it is a non-mobility number, this could be a number that sits behind a customer's internal phone network such as a PBX. There arc other numerous situations when secondary originating numbers are part of a call transaction. CIC Carrier Identification Code. The number in this column translates to identifying the interexchange carrier of the call. A public listing of CIC codes can be found at the following url: hup://www.nanpa.comircports/reports_cic.html Call Code Represents the type of call that was processed on the wircline network. ()rig. Acc. Originating Access ID. When a call is received from another carrier and traverses AT&Ts VoIP network. This number translates to what carrier sent AT&T the call. AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 13 of 16 SDNY_GM_02771997 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00258805 EFTA01338306 AT&T AT&T Wireline Common Call Code Descriptions Call Code Number Call Code Name Description 47 343 Default AIN Call Type Code Terminating Access Verification Default call code indicating that some Advanced Intelligent Network (AIN) feature was requested or utilized. This call code is used to either bill or validate a billing transaction where a call traversed more than one carrier's network. 808 VoIP Default Originating customer paid AT&T VoIP call. 342 Originating Access Verification This call code is used to either bill or validate a billing transaction where a call traversed more than one carrier's network. 325 MEGACOM 800 A direct connect service for customers high volumes of who receive calls of long duration. Usually associated with a business. 60 AT&T Station Paid Long Distance call where the originating number is also the billing responsible party. 119 Terminating Access This call type code provides details for a call that enters the terminating exchange from an Interexchange Carrier (IC). 720 Connecting Network Access Call received over connecting network access incoming trunk. 306 C1141C Toll Switch Application Cellular Mobile Carrier (CMC) Toll switch 100 Direct Services Dialing Capability (DSDC) This call code indicates that the serving office (Switch) utilized call processing capabilities of another office for some or all of the call. Also known as Service Assist. 129 Basic SDN Call Generally, this indicates some type of AIN (Advanced Intelligent Network) feature was used or requested, including call features or routing. 141 IEC Number Service Call This call type code provides details for toll-free calls that are transported by an Intel-exchange Carrier (IC). 360 OSO Recording/HICAP Originating Screening Office (O3O) national 800 number database (NCP) dip records. AT&T Proprietary The Information contained here is for use by authorized persons only and is not for general distribution. Page 14 of 16 SDNY_GM_02771998 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00258806 EFTA01338307 0- AT&T III) Inter-LATA Station Paid This call type code is generated for direct-dialed, station-paid intemetwork calls routed by means of an interexchange carrier. 337 ISDN CPN/BN to Terminating End Integrated Services Digital Network (ISDN) customer voice or data session. 98 Collector tracer This Call Type Code is used in all audit (tracer) records generated by an Automatic Message Accounting Teleprocessing System (AMATPS) collector. 309 MEGACOM An interstate service that permits outward calling from designated AT&T serving offices to stations throughout the US. 364 Read, line An inbound Toll Free call service terminating on an existing local POTS line. 134 Feature Group B Originating LATA This call type code provides details for Feature Group B originating calls (AIN, InterLATA and fg B - Originating). 806 VoiceTone This service provides interactive IVR, toll free and contact center services. AIN - Advanced Intelligent Network: SS7 Signaling based enhanced features, including, but not limited to: Local Number Portability (LNP), Toll Free calling, Prepaid calling services, Reverse Charging, VPN, Call Screening, Private number plans, location based. AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 15 of 16 SDNY_GM_02771999 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00258807 EFTA01338308 AT&T AT&T International Descriptions ColumnName bescription OrigCotmtry Dial Country The country the call originated from based on the NPA-NXX of the party that placed the call. The country of the number dialed based on the NPA-NXX of the dialed number. InCountry Inbound Country. The country AT&T terminated the call to. This does not necessarily mean the called party is in the listed country. This represents the country that AT&T directed the call to in order to properly route the call to its final destination. Other carriers may pick up the call after the call has left the AT&T network. It OutCountry Outbound Country. The country AT&T routed the call from. This does not necessarily mean the call originated from the listed country. This represents the country AT&Ts network was used in to properly route the call to its final destination. Ans Ind Indicates if the call was answered. From CPN From Calling Party Number. Indicates if the call originated from the Originating Number. AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 16 of 16 SDNY_GM _02772000 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00258808 EFTA01338309