EFTA Document EFTA01342703

III111111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ..,„„,• ••-•s". AT&T Run Date: Run Time: voice Usage For: 0""n.. Ite Conn. Conn. Seizure ET Originating Terminating Eat CT Feature Cell Location Date Time Time Number Slumber (UTC) 1 06/02/20 14:44:00 0:10 17:35 KT (NIOP:VCORR] 2 06/02/20 14:44:00 0:11 10:35 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0, 023310608:91057:- 71.9598779:43.2972525:150:-1.0] 3 06/02/2014:54:35 0:00 0:19 NO (VCORR] (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 4 06/02/2014:54:54 0:00 6:41 NO (Ni-Fi] (000000008:0:0.0:0.0: -1: -1.0] 5 06/02/2017:04:25 0:03 10:19 NT (NIOP:VCORR] 6 06/02/2017:04:25 0:04 10:19 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.01 7 06/02/20 17:33:58 0:10 0:54 NT (Ni-Fi:NIOP] [000000008:0:0.0:0.0: -1: -1.0] 8 06/03/2000:07:18 0:16 6:39 NT (NIOP:VCORR] 9 06/03/2000:07:18 0:16 6:39 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.01 10 06/03/2019:09:20 0:23 0:00 NT (NIOP:CWW] 11 06/03/2019:09:26 0:29 0:02 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.01 12 06/03/2019:09:26 0:29 0:02 NT (NIOP:CFNA:CNV :VN] 13 06/03/2020:31:08 0:07 17:32 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0, 023310608:91057:- 71.9598779:43.2972525:150:-1.01 14 06/03/2020:31:08 0:07 60:39 NT (NIOP:VCORR] 15 06/03/2020:48:40 0:00 21:03 NO (] (023310608:91057:- 71.9598779:43.2972525:150:-1.01 16 06/03/2021:09:43 0:00 22:05 NO (Ni-Fi] [000000008:0:0.0:0.0: -1: -1.0] 17 06/04/20 14:30:08 0:11 1:42 NT (Ni-Fi:NIOP] (000000008:0:0.0:0.0:-1: -1.0] 18 06/05/2019:34:05 0:26 0:00 NT (Ni-Fi:NIOP] (000000008:0:0.0:0.0: -1: -1.0] The information contained here for is for use by authorized persons only and is not general distribution. Page 1 SDNY_GM_00170641 EFTA01342703 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. tr-ji`a l. AT&T Run Date: Run Time: Voice Usage For: 06/29/2020 Sim Ite Conn. Conn. Seizure ET Originating Terminating =CI CT Feature Cell Location Date Time Time Number Number (MTC) 19 06/05/20 19:34:06 0:27 0:02 40 [VCORR] 20 06/05/20 19:34:06 0:27 0:02 er (14i- (000000008:0:0.0:0.0:-1:-1.0] Fi:NIOP:CFNA:V M] 21 06/05/2019:34:36 0:25 0:00 Ifi [Ni-Fi:NIOP] [000000008:0:0.0:0.0:-1:-1.0] 22 06/05/20 19:34:38 0:27 0:02 40 [VCORR] 23 06/05/20 19:34:38 0:27 0:02 [Ni- [000000008:0:0.0:0.0: -1: -1.0] Fi:NIOP:CFNA:V M] 24 06/05/20 20:45:34 0:24 0:00 (NIOP] 25 06/05/20 20:45:41 0:31 0:02 YI [NIOP:CFNA:VM] 26 06/05/2020:45:41 0:31 0:02 +0 (Ni-Fi] [000000008:0:0.0:0.0:-1:-1.0] 27 06/05/20 20:46:31 0:24 0:00 YI [NIOP] 28 06/05/20 20:46:37 0:30 0:02 YI [NIOP:CFNA:VM] 29 06/05/2020:46:37 0:30 0:02 +0 (Ni-Fi] [000000008:0:0.0:0.0:-1:-1.0] 30 06/06/20 22:41:11 0:23 0:00 YI [NIOP] 31 06/06/20 22:41:16 0:28 1:04 YI [NIOP:CFNA:VM] 32 06/06/2022:41:16 0:28 0:06 40 [Ni-Fi] [000000008:0:0.0:0.0:-1:-1.0, 023310608:91057:- 71.9598779:43.2972525:150:-1.0] 33 06/06/2022:41:22 0:00 0:58 40 [VCORE] [023310608:91057:- 71.9598779:43.2972525:150:-1.0, 023310601:91057:- 71.9598779:43.2972525:150:-1.0] 34 06/06/20 22:43:40 0:04 3:36 40 [VCORR] 35 06/06/20 22:43:40 0:04 1:01 Ifi [NIOP:VCORR] [023310601:91057:- 71.9598779:43.2972525:150:-1.0, 023310608:91057:- 71.9598779:43.2972525:150:-1.0] 36 06/06/2022:44:41 0:00 2:35 Ifi [Ni-Fi:NIOP] [000000008:0:0.0:0.0:-1:-1.0] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 2 SDNY_GM_00170642 EFTA01342704 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 41110 AT&T Run Date: Run Time: Voice Usage For: 06/29/2020 Ite Conn. Conn. Seizure ST Originating Terminating flat INSI CT Feature Cell Location m Date Time Time Number Number (OTC) 37 06/09/20 20:00:48 0:01 2:22 NO (Ni-Fi] [000000008:0:0.0:0.0: -1: -1.0] 38 06/09/2020:59:57 0:10 40:05 NT (NIOP:VCORR] 39 06/09/2020:59:57 0:11 40:05 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 40 06/09/2021:46:06 0:39 0:03 NO -Fi] [000000008:0:0.0:0.0: -1: -1.0] 41 06/09/20 21:46:34 0:11 0:00 NT On -Fi:NIOP] 42 06/09/20 21:46:34 0:11 0:00 NT (NIOP] 43 06/09/20 21:46:39 0:16 0:01 NT (NIOP:CF8:VN] 44 06/09/2021:46:39 0:17 0:01 NO -Fi] [000000008:0:0.0:0.0: -1: -1.0] 45 06/09/2023:19:32 0:10 0:03 NO -Fi] [000000008:0:0.0:0.0: -1: -1.0] 46 06/09/20 23:19:41 0:03 0:00 NT [Ni-Fi:NIOP] 47 06/09/20 23:19:41 0:03 0:00 NT [Ni-Fi:NIOP] 48 06/09/20 23:19:46 0:08 0:02 NT Fi:NIOP:CF8:VN 49 06/09/2023:19:46 0:09 0:02 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 50 06/09/20 23:58:57 0:02 0:00 NT [Ni-Fi:NIOP] 51 06/09/20 23:58:57 0:02 0:00 NT [Ni-Fi:NIOP] 52 06/09/20 23:59:00 0:05 0:02 NT Fi:NIOP:CF8:VN 53 06/09/2023:59:00 0:06 0:02 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 54 06/10/20 14:55:12 0:23 0:00 NT (NIOP] 55 06/10/20 14:55:12 0:23 0:00 NT (Ni-Fi:NIOP] 56 06/10/20 14:55:16 0:27 0:02 NT Fi:NIOP:CFNA:V N] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 3 SDNY_GM_00170643 EFTA01342705 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 411110 AT&T Run Date: Run Time: Voice Osage For: 0""n0.0 Ite Conn. Conn. Seizure ST Originating Terminating DILI 1NSI CT Feature Cell Location m Date Time Time Number Number (OTC) 57 06/10/2014:55:16 0:27 0:02 NO [Ili -Fi] [000000008:0:0.0:0.0: -1: -1.0] 58 06/10/2014:55:36 0:10 0:05 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 59 06/10/20 18:51:20 0:23 0:00 MT (NIOP] 60 06/10/20 18:51:27 0:30 0:02 MT (NIOP:CFNA:VN] 61 06/10/20 18:51:27 0:31 0:02 NO (Ni-Fi] [000000008:0:0.0:0.0: -1: -1.0] 62 06/10/20 19:11:49 0:21 0:00 NT (NIOP] 63 06/10/20 19:11:53 0:25 0:02 NO (Ni-Fi] [000000008:0:0.0:0.0: -1: -1.0] 64 06/10/2019:11:53 0:25 0:02 NT (NIOP:CFNA:VN] 65 06/10/2022:21:12 0:23 0:00 NT (NIOP] 66 06/10/2022:21:17 0:28 0:02 NO (000000008:0:0.0:0.0: -1: -1.0] 67 06/10/2022:21:17 0:28 0:02 MT (NIOP:CFNA:VN] 68 06/11/2000:50:40 0:22 0:00 NT (NIOP] 69 06/11/2000:50:40 0:22 0:00 NT [Ni-Fi:NIOP] 70 06/11/2000:50:45 0:27 0:01 NT (Ni- Fi:NIOP:CFNA:V 14] 71 06/11/2000:50:45 0:27 0:01 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 72 06/11/2001:00:17 0:06 44:39 NT (NIOP:VCORR] 73 06/11/2001:00:17 0:07 44:39 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 74 06/11/20 14:12:28 0:38 0:03 NO (Ni-Fi] [000000008:0:0.0:0.0: -1: -1.0] 75 06/11/20 23:57:41 0:00 0:00 MT (NIOP:CNN] 76 06/11/20 23:57:47 0:06 0:04 MT (NIOP:CFD:CNN: VN] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 4 SDNY_GM_00170644 EFTA01342706 MOBILITY 020 (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ......... •••-es.""° AT&T OTC. Run Date: Run Time: voice Usage For: 0""n.. Ite Conn. Conn. Seizure ST Originating Terminating liar INS! CT Feature Cell Location m Date Time Time Number Member (OTC) 77 06/11/20 23:57:47 0:07 0:04 MO [Wi -Fi] [000000008:0:0.0:0.0: -1: -1.0] 78 06/12/2000:35:53 0:39 0:04 MO [Ni-Fi] [000000008:0:0.0:0.0: -1: -1.0] 79 06/12/20 00:36:33 0:24 0:00 HT [NIOP] 80 06/12/20 00:36:39 0:30 0:02 HT [NIOP:CFNA:VM] 81 06/12/2000:36:39 0:31 0:02 MO [Ni-Fi] [000000008:0:0.0:0.0: -1: -1.0] 82 06/12/20 13:40:56 0:17 0:38 HT [Ni-Fi:NIOP] [000000008:0:0.0:0.0: -1: -1.0] 83 06/12/20 13:41:49 0:02 0:00 MO [Ni-Fi] [000000008:0:0.0:0.0: -1: -1.0] 84 06/12/20 16:43:56 0:25 0:00 HT [Ni-Fi:NIOP] (000000008:0:0.0:0.0: -1: -1.0] 85 06/12/20 16:43:57 0:26 0:05 HT [Ni- [000000008:0:0.0:0.0:-1:-1.0] Fi:NIOP:CFNA:V M] 86 06/12/20 16:44:48 0:06 0:00 HT (Wi-fi:MIOP] (000000008:0:0.0:0.0:-1:-1.0] 87 06/12/20 16:47:03 0:36 0:03 MO pia -Pi] (000000008:0:0.0:0.0: -1: -1.0] 88 06/12/20 16:47:08 0:00 0:00 MO pia -Pi] (000000008:0:0.0:0.0: -1: -1.0] 89 06/12/20 16:47:56 0:35 0:05 MO pia -Pi] (000000008:0:0.0:0.0: -1: -1.0] 90 06/12/20 16:48:26 0:18 0:00 MO pia -Pi] (000000008:0:0.0:0.0: -1: -1.0] 91 06/12/20 16:49:51 0:13 0:43 MO pia -Pi] (000000008:0:0.0:0.0: -1: -1.0] 92 06/16/20 23:26:00 0:24 0:00 NT (Wi-Fi:NIOP] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 5 SDNY_GM_00170645 EFTA01342707 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 41.0 ters as "-a. AT&T Run Date: Run Time: voice Usage For: 06/29/2020 Ite Conn. Conn. Seizure ST Originating Terminating =CI ENSI CT Feature Cell Location Date Time Time Number Member (UTC) 93 06/16/2023:28:06 0:30 0:06 HT [14i- Fi:NIOP:CFNA:V 14] 94 06/16/2023:28:06 0:30 0:06 HO (Ni -Pi] [000000008:0:0.0:0.0: -1: -1.0] 95 06/16/2023:37:55 0:24 0:00 HT [14i-Pi:NIOP] 96 06/16/2023:38:03 0:32 0:00 HT (Wi- Fi:NIOP:CFNA:V 14] 97 06/16/2023:38:03 0:32 0:00 HO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 98 06/17/20 17:48:24 0:07 0:00 HT (Ni-Fi:NIOP] (000000008:0:0.0:0.0: -1: -1.0] 99 06/18/20 00:39:03 0:05 0:00 HT [MICR] 100 06/18/20 00:39:03 0:06 0:00 HO (Ni -Pi] [000000008:0:0.0:0.0: -1: -1.0] 101 06/18/20 13:07:09 0:02 0:00 HO (Ni -Pi] [000000008:0:0.0:0.0: -1: -1.0] 102 06/18/20 13:07:53 0:13 43:34 HO (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0, 023310608:91057:- 71.9598779:43.2972525:150:-1.01 103 06/18/20 13:51:27 0:00 0:56 HO (NIOR:VCORR] (023310608:91057:- 71.9598779:43.2972525:150:-1.01 104 06/18/20 13:52:25 0:00 14:36 HO (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 105 06/19/20 17:59:03 0:07 0:00 HT (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 106 06/19/2020:15:59 0:10 0:02 HO (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 107 06/21/2016:45:33 0:06 0:00 HT [MICR] 108 06/22/20 20:05:36 0:03 0:00 HT [MICR] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 6 SDNY_GNL00170646 EFTA01342708 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in Inc. AT&T Run Date: Run Time: Voice Usage For: Ite Conn. Conn. Date Time (OTC) 06/29/2020 Seizure Sum ST Originating Terminating =MI IXSI Number Mambos CT Feature Cell Location 109 06/22/20 20:05:38 0:03 0:00 MO (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 110 06/22/20 20:06:21 0:24 0:00 MT (NIOP] 111 06/22/2020:06:30 0:33 0:09 MT (NIOP:CFNA:VM] 112 06/22/2020:06:30 0:33 0:09 MO (Ni-Pi] [000000008:0:0.0:0.0: -1: -1.0] 113 06/22/20 23:32:01 0:28 0:00 MT (Ni-Pi:NIOP] (000000008:0:0.0:0.0:-1:-1.0] 114 06/22/2023:32:03 0:30 0:03 MO (VCORR] 115 06/22/2023:32:03 0:30 0:03 MT (Ni- (000000008:0:0.0:0.0:-1:-1.0] Fi:NIOP:CFNA:V M] 116 06/25/20 14:02:08 0:01 0:00 MT (NIOP] 117 06/25/20 14:02:12 0:00 0:00 MT (NIOP] 118 06/25/20 15:01:02 0:18 0:15 MO (Vi-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 119 06/25/2015:06:11 0:05 54:26 MO (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 120 06/25/2016:30:49 0:03 0:57 MO (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 121 06/25/20 17:56:18 0:23 0:00 MT (Vi-Pi:NIOP] (000000008:0:0.0:0.0:-1:-1.0] 122 06/25/2017:56:19 0:24 0:35 MT (Ni- (000000008:0:0.0:0.0:-1:-1.0] Fi:NIOP:CFNA:V M] 123 06/25/20 18:25:23 0:02 1:15 MO (Ni- (000000008:0:0.0:0.0:-1:-1.0] Pi:NIOR:VM] 124 06/25/2018:45:57 0:24 0:00 MT (Mi-Pi:NIOP] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 7 SDNY_GM_00170647 EFTA01342709 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. • AT&T Run Data: Run Tina: voice Usage For: Ito Conn. Conn. Data Time (UTC) 0""n02. Seizure Time ET Originating Terminating Din IMSI CT Humber Number Feature Coll Location 125 06/25/2018:46:03 0:30 0:05 MT [Hi- Fi:HIOP:CFNA:V M] 126 06/25/2018:46:03 0:31 0:05 MO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 127 06/25/2019:38:06 0:08 8:45 MT (HIOP:VCORR] 128 06/25/2019:38:06 0:09 8:45 MO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 129 06/25/2019:51:53 0:08 0:53 MT (Vi-Fi:HIOP] [000000008:0:0.0:0.0: -1: -1.0] 130 06/25/2019:53:32 0:14 0:00 MT (1 131 06/25/2019:53:32 0:25 0:00 ST (NIOP] 132 06/25/2019:53:33 0:26 0:03 MO (14i-Fi] 133 06/25/2019:53:33 0:26 0:03 ST (NIOP:CFNA:VM] 134 06/25/2019:55:08 0:06 0:38 MT (Ni-Fi:NIOP] 135 06/25/2019:55:08 0:07 27:11 MO (14i-Fi] (000000008:0:0.0:0.0:-1:-1.0] 136 06/25/2019:55:46 0:00 26:33 MT (NIOP:VCORR] 137 06/25/2020:44:24 0:21 0:00 MT (NIOP] (023310608:91057: - 71.9598779:43.2972525:150: -1.0] 138 06/25/2020:47:13 0:14 0:00 HT CHIOS] (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 139 06/25/2022:27:31 0:09 1:09 MO (VCORR] 140 06/25/2022:27:31 0:09 1:09 MT (Ni-Fi:NIOP] (000000008:0:0.0:0.0:-1:-1.0] 141 06/26/20 22:20:31 0:24 0:00 MT (Hi -Fi:H108] (000000008:0:0.0:0.0: -1: -1.0] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 8 SDNY_GNL00170648 EFTA01342710 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. . AT&T Run Date: 06/29/2020 Run Time: Data Usage For: MS= Item Conn. Conn. Data Tama (OTC) Originating Number ET Bytes Up Bytes Apn Dn DEBI 1MSI MAKE MODEL Cell Location 1 06/01/20 04:02:50 2:13 288 48nxtgenp APPLE !PHONES (366491269:1431606::::0) U.S. Cellular, hone _USA 2 06/01/20 04:02:51 2:13 48 Onxtgenp hone APPLE !PHONES (311580084491269:1217109705044::::0) 3 06/01/20 04:05:04 60:00 7584 6400 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 4 06/01/20 04:49:04 60:00 6940 2896 ins APPLE !PHONES 5 06/01/20 05:05:04 60:00 1213 1207 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 6 06/01/20 05:49:04 60:00 10272 4128 ins APPLE !PHONES 7 06/01/20 06:05:04 60:00 692 420 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 8 06/01/20 06:49:04 60:00 8388 2928 ins APPLE !PHONES 9 06/01/20 07:05:04 60:00 924 840 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 10 06/01/20 07:49:04 60:00 12028 4628 ins APPLE !PHONES 11 06/01/20 08:05:04 60:00 976 945 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 12 06/01/20 08:49:04 60:00 8388 2928 ins APPLE !PHONES 13 06/01/20 09:05:04 60:00 1033 840 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 14 06/01/20 09:49:04 60:00 10844 4268 ins APPLE !PHONES 15 06/01/20 10:05:04 60:00 808 630 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 16 06/01/20 10:49:04 60:00 8264 2928 ins APPLE !PHONES 17 06/01/20 11:05:04 60:00 1176 676nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 18 06/01/20 11:49:04 60:00 10036 3176 ins APPLE !PHONES 19 06/01/20 12:05:04 60:00 6242 8975nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 20 06/01/20 12:49:04 60:00 11796 4736 ins APPLE !PHONES 21 06/01/20 13:05:04 60:00 1292 938 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 22 06/01/20 13:49:04 60:00 12028 4268 ins APPLE !PHONES 23 06/01/20 14:05:04 52:50 97659 63430nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 24 06/01/20 14:49:04 1:01 6304 2224 ins APPLE !PHONES 25 06/01/20 14:50:09 18:13 9393 8466 ins APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170649 The information contained here is for use by authorized persons only and is not for general distribution. Page 1 EFTA01342711 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:13:13pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. u AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DOM 1MSI MAKE MODEL Cell Location Data Tim Number Up Dn (MC) 26 06/01/20 14:57: 19:38 53238 283837nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 27 06/01/20 15:08: 9:10 3052 1432 Leis APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.01 28 06/01/20 15:08: 9:10 2920 1432 Leis APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.01 29 06/01/20 15:17: 2:04 54413 18936nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 30 06/01/20 15:17: 2:03 6228 6689 Leis APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, _USA 31 06/01/20 15:17: 2:04 16936 54125nxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::01 32 06/01/20 15:17: 2:02 6669 5964 Leis APPLE !PHONES (311580084491266:1217109705044::::01 33 06/01/20 15:19: 60:00 235957 176510nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 34 06/01/20 15:19: 31:40 9383 7358 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 35 06/01/20 15:51: 16:00 3672 1556 ims APPLE !PHONES 36 06/01/20 16:07: 0:15 6676 1820 Leis APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 37 06/01/20 16:07: 43:40 6632 2648 Leis APPLE !PHONES 38 06/01/20 16:19: 60:00 81016 209053nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 39 06/01/20 16:51: 0:51 2644 1324 Leis APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.01 40 06/01/20 16:52: 12:52 3532 1432 Leis APPLE !PHONES 41 06/01/20 17:04: 1:09 2644 1324 Leis APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.01 42 06/01/20 17:06: 60:00 11996 4328 Leis APPLE !PHONES 43 06/01/20 17:19: 60:00 1138 1936nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 44 06/01/20 18:06: 60:00 8480 3020 Leis APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170650 The information contained here is for use by authorized persons only and is not for general distribution. Page 2 EFTA01342712 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided UTC. •--is"" a AT&T Run Date: 06/29/2020 Run Time: Data Usage Per: Item Conn. Conn. Date Tame (OTC) IS= Originating Number ET Bytes up Bytes Apn On IMEI IMSI MAKE MODEL Cell Location 45 06/01/20 18:19:36 60:00 36198 25369nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 46 06/01/20 19:06:05 21:04 5072 1572 ims APPLE !PHONES 47 06/01/20 19:19:36 60:00 80090 154219nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310785:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 48 06/01/20 19:27:09 14:38 2644 1324 iota APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 49 06/01/20 19:41:47 60:00 12136 4684 ims APPLE !PHONES 50 06/01/20 20:19:36 60:00 9626 23893 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 51 06/01/20 20:41:47 60:00 11060 4952 ims APPLE !PHONES 52 06/01/20 21:19:36 35:09 12444 6123 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 1.0] 53 06/01/20 21:41:47 54:22 8480 2896 ims APPLE !PHONES 54 06/01/20 21:54:44 2:03 266 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 55 06/01/20 21:54:45 2:03 48 Onxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::01 56 06/01/20 21:56:48 1:48 48 Onxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 57 06/01/20 21:58:36 3:37 48 Onxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 58 06/01/20 22:02:12 1:45 266 48 nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 59 06/01/20 22:02:13 1:45 48 Onxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::01 60 06/01/20 22:03:58 60:00 74045 78426 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 61 06/01/20 22:36:09 21:23 26404 1412 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 62 06/01/20 22:36:09 21:23 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 63 06/01/20 22:57:32 11:56 8260 2820 ims APPLE !PHONES 64 06/01/20 23:03:58 60:00 4095 4941 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170651 The information contained here is for use by authorized persons only and is not for general distribution. Page 3 EFTA01342713 ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 41! teS 4a"11. AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Date Timo (OTC) Originating Number ET Bytes Up Bytes Apn On Mei 1MSI MAKE MODEL Col/ Location 65 06/01/20 23:09:2 0:02 0 0 Las APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 66 06/01/20 23:09:2 0:02 0 0 Lau APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 67 06/01/20 23:09:41 60:00 35795 18581 Lau 68 06/02/20 00:03:5 60:00 5974 7569nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 69 06/02/20 00:09:41 60:00 6726 3252 Lau 70 06/02/20 01:03:5 60:00 3725 892nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 71 06/02/20 01:09:41 60:00 10160 3284 Lau 72 06/02/20 02:03:5 30:02 490 1155nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 73 06/02/20 02:09:41 60:00 8496 3036 Lau 74 06/02/20 02:33:5 0:35 5168 6230nxtgenp APPLE !PHONES (366491269:1431606::::01 U.S. Cellular, hone _USA 75 06/02/20 02:34:0C 0:35 6230 4880nxtgenp hone APPLE !PHONES (311580084491269:1217109705044::::01 76 06/02/20 02:34:3 51:01 19228 7931nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 77 06/02/20 03:09:41 60:00 15344 5768 Lau 78 06/02/20 03:25:3 0:54 268 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 79 06/02/20 03:25:3 0:53 48 Onxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::01 80 06/02/20 03:26:3C 60:00 7623 6111nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 81 06/02/20 04:09:41 60:00 6956 2664 Lau 82 06/02/20 04:26:3C 60:00 1559 1365nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 83 06/02/20 05:09:41 60:00 6956 2788 Lau 84 06/02/20 05:26:3C 60:00 1443 1155nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 85 06/02/20 06:09:41 60:00 6848 2680 Lau 86 06/02/20 06:26:3C 60:00 1722 2051nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 87 06/02/20 07:09:41 60:00 7064 2804 Lau 88 06/02/20 07:26:3C 60:00 9292 13711nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 89 06/02/20 08:09:41 60:00 15452 5768 Lau AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SONY_GM_00170652 The information contained here is for use by authorized persons only and is not for general distribution. Page 4 EFTA01342714 ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in UTC. 4III, AT&T Run Date: 06/29/2020 Run Tine: Data Usage For: Item Conn. Conn. Date Tame (OTC) Originating Number ET Bytos Up Bytes Apn On =MI IMSI MARE MODEL Cell Location 90 06/02/20 08:26:30 60:00 1097 945 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 91 06/02/20 09:09:41 60:00 6646 2572 Las 92 06/02/20 09:26:30 60:00 606 630 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 93 06/02/20 10:09:41 60:00 6956 2804 Lau 94 06/02/20 10:26:30 60:00 3604 996 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 95 06/02/20 11:09:41 60:00 12060 6052 Lau 96 06/02/20 11:26:30 60:00 740 420 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 97 06/02/20 12:09:41 60:00 6956 2772 Lau 98 06/02/20 12:26:30 60:00 576 630 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 99 06/02/20 13:09:41 60:00 10466 4288 Lau 100 06/02/20 13:26:30 60:00 467 210 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 101 06/02/20 14:09:41 44:54 20066 10876 isle APPLE !PHONES 102 06/02/20 14:26:30 60:00 49577 154114 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 103 06/02/20 14:43:50 10:45 1146262 2105550 Les APPLE IPHONE6 104 06/02/20 14:54:35 0:15 5526 2840 Les APPLE IPHONE6 (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 105 06/02/20 14:54:35 0:15 5192 2840 Les APPLE IPHONE6 [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 106 06/02/20 14:54:35 0:15 52007 29291 Les APPLE IPHONE6 [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 107 06/02/20 14:54:35 0:15 52074 29291 Les APPLE IPHONE6 (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 108 06/02/20 14:54:50 6:46 1277744 902121 isle APPLE !PHONES 109 06/02/20 14:54:50 10:37 10112 4792 isle APPLE !PHONES 110 06/02/20 15:05:27 2:59 2660 1340 isle APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 111 06/02/20 15:05:27 2:59 2596 1340 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170653 The information contained here is for use by authorized persons only and is not for general distribution. Page 5 EFTA01342715 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. • AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Date Tim (OTC) SWIM Originating Number ET Bytes DP Bytes Apn On DMZ 1MSI MAKE MODEL Cell Location 112 06/02/20 15:08:30 0:16 6689 5999 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0] 113 06/02/20 15:08:46 4:21 3532 1340 Las APPLE !PHONES 114 06/02/20 15:13:07 10:32 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 115 06/02/20 15:23:39 60:00 12028 4484 ins APPLE !PHONES 116 06/02/20 15:26:30 60:00 99974 67663nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 117 06/02/20 16:23:39 60:00 14832 9324 ins APPLE !PHONES 118 06/02/20 16:26:30 60:00 43565 32662 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 119 06/02/20 17:04:21 10:23 1523437 1820730 ins APPLE !PHONES 120 06/02/20 17:23:39 60:00 25120 13800 ins APPLE !PHONES 121 06/02/20 17:26:30 25:51 6237 7511nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 122 06/02/20 17:33:52 1:01 126707 153540 ins APPLE !PHONES 123 06/02/20 17:52:21 60:00 15314 18255 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 124 06/02/20 18:23:39 60:00 6956 2680 ins APPLE !PHONES 125 06/02/20 18:52:21 60:00 751 735nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 126 06/02/20 19:23:39 60:00 12136 4592 ins APPLE !PHONES 127 06/02/20 19:52:21 60:00 34062 35324 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 128 06/02/20 20:23:39 60:00 12368 4444 ins APPLE !PHONES 129 06/02/20 20:52:21 60:00 16138 17233nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 130 06/02/20 21:23:39 28:19 124 496 ims APPLE IPE0NE8 131 06/02/20 21:43:17 8:41 10410 6526 ims 132 06/02/20 21:51:58 60:00 0 0 ims 133 06/02/20 21:52:21 60:00 83690 71751nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 134 06/02/20 21:53:02 19785258484 9:02 9853 6222 ims 3587080982063727 310410214827503 APPLE IPE0NE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170654 The information contained here is for use by authorized persons only and is not for general distribution. Page 6 EFTA01342716 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. a ......• ``a° AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Date Tame (DSC) Originating ET Bytes Up Bytes Apn On flat IMSI MAKE MODEL Cell Location 135 06/02/20 22:02:04 7:42 2620 1340 /ma APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 136 06/02/20 22:02:04 7:42 2666 1340 Las APPLE 'PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 137 06/02/20 22:09:46 0:20 3408 1324 Lau APPLE 'PHONES 138 06/02/20 22:10:06 2:06 2660 1324 Lau APPLE 'PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 139 06/02/20 22:10:06 2:06 2596 1324 Lau APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 140 06/02/20 22:12:12 60:00 11996 4392 Lau APPLE !PHONES 141 06/02/20 22:51:58 60:00 0 0 Lau 142 06/02/20 22:52:21 60:00 53259 29558 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 143 06/02/20 23:12:12 60:00 16884 9908 Lau APPLE IPHONE8 144 06/02/20 23:51:58 60:00 0 0 Lau 145 06/02/20 23:52:21 60:00 113776 20487nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.01 146 06/03/20 00:07:02 6:55 1488519 757807 Lau APPLE !PHONES 147 06/03/20 00:12:12 60:00 9280 3612 Lau APPLE IPHONE8 148 06/03/20 00:51:58 60:00 0 0 Lau 149 06/03/20 00:52:21 59:45 616690 47854nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.01 150 06/03/20 01:12:12 36:32 3408 1340 Lms APPLE !PHONES 151 06/03/20 01:48:43 1:43 61788 1340 Lms APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 152 06/03/20 01:48:44 1:42 2596 1340 Lms APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 153 06/03/20 01:50:26 0:20 3408 1340 Lau APPLE !PHONES 154 06/03/20 01:50:46 1:17 2660 1340 Lau APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 155 06/03/20 01:50:46 1:17 2596 1340 Lau APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170655 The information contained here is for use by authorized persons only and is not for general distribution. Page 7 EFTA01342717 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 41110 ...,1/4-rs e,• `—‘ AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Data Time (OTC) SS= OrIganatIng Number BY Bytes Up Bytes Apn On DEBI HISS MAKE MODEL Coll Location 156 06/03/20 01:51:5 0:01 0 0 Las 157 06/03/20 01:52:0 60:00 24624 7240 Les APPLE !PHONES 158 06/03/20 01:52:0 1:07 268 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 159 06/03/20 01:52:0 1:07 48 0nxtgenp hone APPLE !PHONES [311580084491266:1217109705044::::01 160 06/03/20 01:53:1 60:00 107627 64507nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 161 06/03/20 02:52:0 60:00 6616 2680 Les APPLE !PHONES 162 06/03/20 02:53:1 60:00 514 525nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 163 06/03/20 03:52:0 8:25 0 0 Les APPLE !PHONES 164 06/03/20 03:53:1 60:00 514 525nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 165 06/03/20 04:00:2 4:35 48740 1340 Les APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 166 06/03/20 04:00:2 4:33 2596 1340 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 167 06/03/20 04:05:01 60:00 12120 4732 Les APPLE !PHONES 168 06/03/20 04:53:1 60:00 578 630nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 169 06/03/20 05:05:01 60:00 8496 3036 Les APPLE !PHONES 170 06/03/20 05:53:1 60:00 462 420nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 171 06/03/20 06:05:01 60:00 6616 2664 Les APPLE !PHONES 172 06/03/20 06:53:1 60:00 603 840nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 173 06/03/20 07:05:01 33:19 4980 1588 Les APPLE !PHONES 174 06/03/20 07:38:20 0:02 0 0 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 175 06/03/20 07:38:20 0:02 0 0 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 176 06/03/20 07:45:1 60:00 11869 8788 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 177 06/03/20 07:53:13 60:00 3620 996nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 178 06/03/20 08:45:1 35:25 2596 1340 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 179 06/03/20 08:53:13 60:00 514 525nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170656 The information contained here is for use by authorized persons only and is not for general distribution. Page 8 EFTA01342718 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 4111. AT&T Run Date: Run Time: Data Usage For: Item Conn. Conn. Date Tama (UTe) 06/29/2020 Originating Number ET Bytes Up Bytes Apn On DELI HIBI MAKE MODEL Cell Location 180 06/03/20 09:20:4 0:01 0 0 ins APPLE !PHONES 181 06/03/20 09:20:5 60:00 18242 9408 ins 182 06/03/20 09:53:1 60:00 578 630nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 183 06/03/20 10:20:5 60:00 6956 2772 ins 184 06/03/20 10:53:1 60:00 3488 786nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 185 06/03/20 11:20:5 60:00 13460 4624 ins 186 06/03/20 11:53:1 43:06 346 210nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 187 06/03/20 12:20:5 60:00 8496 2928 ins 188 06/03/20 12:36:1 60:00 17171 19006nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 189 06/03/20 13:20:5 60:00 6848 2680 ins 190 06/03/20 13:36:1 60:00 1076 5194nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 191 06/03/20 14:20:5 60:00 17440 7140 ins 192 06/03/20 14:36:1 60:00 33285 20450nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 193 06/03/20 15:20:5 60:00 8366 2928 ins 194 06/03/20 15:36:1 60:00 68804 52255nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 1.0) 195 06/03/20 16:20:59 19785258484 25:43 3532 1340 iota 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SONY_GM_00170657 The information contained here is for use by authorized persons only and is not for general distribution. Page 9 EFTA01342719 ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided UTC. in • AT&T Run Date: Run Ties: Data usage For: Item Conn. Conn. Data Tim 06/29/2020 Originating BB Bytes Number Bytom Apn on INEI ItlSI maim NOBEL Cell Location 196 06/03/20 (UTC) 16:36:1 60:00 73150 319642 nxtgonp hone 3 APPLE !PHONES 1024577552:96006:- 71.9906006:43.3717995:210:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 197 06/03/20 16:46:42 35:56 16696 2804 ims 3 APPLE !PHONES 1023310601:91057:- 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.01 198 06/03/20 16:46:42 35:56 6500 2804 ims 3 APPLE !PHONES 1023310601:91057:- 71.9598779:43.2972525:150:-1.01 199 06/03/20 17:22:38 60:00 12152 5500 ins 3 APPLE !PHONES 200 06/03/20 17:36:19 60:00 6217 8569nxtgenp 3 APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 201 06/03/20 18:22:38 50:15 20272 14536 ims 3. APPLE !PHONES 202 06/03/20 18:36:19 60:00 65601 74295nxtgenp 3 APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 203 06/03/20 19:08:57 0:32 3390 17716 ims 3 APPLE !PHONES 204 06/03/20 19:12:53 1:08 29664 1588 ims 3 APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 205 06/03/20 19:12:53 1:08 4244 1588 ims 3! APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 206 06/03/20 19:14:011 60:00 15452 6108 ins 3 APPLE !PHONES 207 06/03/20 19:36:19 49:02 154491 104472nxtgenp 3 APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 208 06/03/20 20:14:01 12:54 0 0 ins 3 APPLE !PHONES 209 06/03/20 20:25:20 1:52 118093 19163nxtgenp 3 APPLE !PHONES 1366491269:1431606::::01 U.S. Cellular, hone _USA AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. Page 10 SDNY_GM_00170668 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342720 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in Inc. tz-, 4*-1:• AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DEBI IBS' BARB MODEL Cell Location Data Tam Number Up On (UTC) 210 06/03/20 20:25:2 1:51 6244 6715 ims APPLE !PHONES (366491269:1431606::::0) U.S. Cellular, ■ 211 06/03/20 20:25:2 1:52 19163 117805nxtgonp APPLE _USA !PHONES (311580084491269:1217109705044 hone 311580084513798:1217109705132.... 311580084491269:1217109705044 311580084491266:1217109705044::::0) 212 06/03/20 20:25:22 1:51 6647 5980 Las APPLE !PHONES (311580084491269:1217109705044::::0) 213 06/03/20 20:26:55 21:44 15066 11650 Las APPLE !PHONES 214 06/03/20 20:27:13 60:00 29699 22731nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 215 06/03/20 20:31:0 17:38 2582971 3580061 Las APPLE !PHONES 216 06/03/20 20:48:3 20:58 3222937 4174165 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 217 06/03/20 20:48:3 20:58 9450 5464 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 218 06/03/20 20:48:39, 20:58 3222937 4174165 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 1.0] 219 06/03/20 20:48:39, 20:58 9200 5464 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 220 06/03/20 21:09:37 22:11 3048535 4722292 Las APPLE !PHONES 221 06/03/20 21:09:37 60:00 25284 10868 Las APPLE !PHONES 222 06/03/20 21:27:13 56:17 30089 21364nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 223 06/03/20 22:09:3 60:00 8604 3144 Las APPLE !PHONES 224 06/03/20 22:23:2 0:34 288 48nxtgenp APPLE !PHONES (366491266:1431606::::0) U.S. Cellular, hone _USA 225 06/03/20 22:23:30 0:34 48 Onxtgonp hone APPLE !PHONES (311580084491266:1217109705044::::0) AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 11 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170659 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342721 ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/29/2020 Run Tiro: Data Usage For: Item Conn. Conn. Date Time (OTC) Ma= Originating Number ET Bytes: Up Bytes Apn DEBI IM0I MAKE Dn MODEL Coll Location 226 06/03/20 22:24:03 60:00 167526 117996nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 227 06/03/20 23:09:37 60:00 6636 3160 ins APPLE !PHONES 228 06/03/20 23:24:03 60:00 44474 24371nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 229 06/04/20 00:09:37 60:00 10144 3176 ims APPLE !PHONES 230 06/04/20 00:24:03 60:00 1976 5865 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 231 06/04/20 01:09:37 60:00 6956 2680 ins APPLE !PHONES 232 06/04/20 01:24:03 23:49 35215 21990nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 233 06/04/20 01:47:52 60:00 56507 36707nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 234 06/04/20 02:09:37 60:00 16640 6280 ims APPLE !PHONES 235 06/04/20 02:47:52 60:00 7541 1994 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 236 06/04/20 03:09:37 60:00 6646 2896 ins APPLE !PHONES 237 06/04/20 03:47:52 60:00 2264 3777 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 238 06/04/20 04:09:37 60:00 6604 2928 ims APPLE !PHONES 239 06/04/20 04:47:52 60:00 1670 1785nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 240 06/04/20 05:09:37 60:00 6366 2928 ins APPLE !PHONES 241 06/04/20 05:47:52 60:00 1651 1575nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 242 06/04/20 06:09:37 60:00 11920 4144 ins APPLE !PHONES 243 06/04/20 06:47:52 60:00 1092 1155 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 244 06/04/20 07:09:37 60:00 11920 4412 ins APPLE !PHONES 245 06/04/20 07:47:52 60:00 450 420 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 246 06/04/20 08:09:37 60:00 6646 2680 ins APPLE !PHONES 247 06/04/20 08:47:52 60:00 514 525 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 248 06/04/20 09:09:37 60:00 11920 4592 ins APPLE !PHONES 249 06/04/20 09:47:52 60:00 3251 576nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. Page 12 SDNY_GM_00170660 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342722 ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. a tre,J 4*--f• AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Date 1.10.0 (UTC) Originating Number ET Bytes Up Bytes Apn On flat INS! MAKE MODEL Cell Location 250 06/04/20 10:09:3 60:00 6848 2680 ims APPLE !PHONES 251 06/04/20 10:47:5 60:00 42253 3025 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023413008:91457:-72.166667:43.205:100:-1.01 252 06/04/20 11:09:3' 38:20 3424 1340 ims APPLE !PHONES 253 06/04/20 11:47:5 24:27 10549 17309nxtgenp APPLE IPHONt8 (023413008:91457:-72.166667:43.205:100:-1.0. hone 023310785:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150: 1.01 254 06/04/20 11:47:5' 7:10 195712 2208 ims APPLE !PHONES (023310785:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150: 1.01 255 06/04/20 11:47:5' 7:10 7524 2208 ims APPLE !PHONES (023310785:91057:- 71.9598779:43.2972525:150:-1.01 256 06/04/20 11:55:0' 18:31 3532 1340 ims APPLE !PHONES 257 06/04/20 12:12:1 2:04 286 48 nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 258 06/04/20 12:12:1 2:04 48 O nxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::01 259 06/04/20 12:13:3 0:46 6471 7525 ims APPLE !PHONES (366491269:1431606::::0) U.S. Cellular, _USA 260 06/04/20 12:13:3 0:46 7525 6207 ims APPLE !PHONES (311580084491269:1217109705044::::0) 261 06/04/20 12:14:2 52:50 19803 32618 nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.01 262 06/04/20 12:14:2 2:22 6663 5919 ims APPLE !PHONES (023310608:91057: - 71.9598779:43.2972525:150: -1.01 263 06/04/20 12:16:4 51:41 11920 4344 ims APPLE !PHONES 264 06/04/20 13:07:1 0:45 266 48 nxtgenp APPLE !PHONES (366513795:1431694::::0) U.S. Cellular, hone _USA 265 06/04/20 13:07:1 0:44 48 O nxtgenp hone APPLE !PHONES (311580084513795:1217109705132::::01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170661 The information contained here is for use by authorized persons only and is not for general distribution. Page 13 EFTA01342723 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. • AT&T Run Date: Run Time: Data Usage For: 06/29/2020 NM= Item Conn. Conn. Data Tam (OTC) 266 06/04/20 13:07:59 Originating ET Bytes Number up Bytes Apn Dn 60:00 90315 877381nxtgenp hone 267 06/04/20 13:08:27 4:47 2736 1536 ims 268 06/04/20 13:08:27 4:47 2736 1448 ims 269 06/04/20 13:13:14 0:29 3206 1216 ims 270 06/04/20 13:13:43 2:34 2752 1412 ims 271 06/04/20 13:13:43 2:34 2752 1324 ims 272 06/04/20 13:16:17 1:51 3532 1340 ims 273 06/04/20 13:18:08 20:43 2644 1412 ims 274 06/04/20 13:18:08 20:43 2644 1324 ims 275 06/04/20 13:38:51 1:46 3424 1324 ims flat INSI MAKE MODEL Coll Location APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 023310785:91057:-71.9598779:43. 023310601:91057:-71.9598779:43. 023310608:91057:-71.9598779:43. 023310601:91057:-71.9598779:43. 023310608:91057:-71.9598779:43. 023310601:91057:-71.9598779:43. 2972525:150:- 2972525:150:- 2972525:150:- 2972525:150:- 2972525:150:- 2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) APPLE !PHONES APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) APPLE APPLE !PHONES !PHONES (023310785:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] APPLE !PHONES (023310785:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 1.0] APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170662 The information contained here is for use by authorized persons only and is not for general distribution. Page 14 EFTA01342724 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. a AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Sid= Item Conn. Conn. originating ET Date Time Number (OTC) Bytes Up Bytes Apn on flat RUBS mum MODEL Cell Location 276 06/04/20 13:40:3 4:42 3500 2412 ime APPLE !PEONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 277 06/04/20 13:40:3 4:42 3500 2324 ime APPLE !PEONES (023310601:91057:- 71.9598779:43.2972525:150:-1.01 278 06/04/20 13:45:15 2:47 3424 1324 ime APPLE IPEONES 279 06/04/20 13:48:0C 2:08 3952 1536 ime APPLE IPEONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 280 06/04/20 13:48:0i 2:08 3952 1448 ime APPLE !PEONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 281 06/04/20 13:50:1 60:00 29360 13004 ims APPLE IPEONES 282 06/04/20 14:07:5 46:54 11593 1675nxtgenp APPLE IPEONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 283 06/04/20 14:30:0 1:48 273405 246324 ime APPLE IPEONES 284 06/04/20 14:50:1 60:00 8496 3004 ime APPLE IPEONES 285 06/04/20 14:54:5 1:41 266 48nxtgenp APPLE IPEONES (366491266:1431606::::01 U.S. Cellular, hone _USA 286 06/04/20 14:54:5 1:41 48 Onxtgonp hone APPLE IPEONES (311580084491266:1217109705044::::01 287 06/04/20 14:56:3 60:00 162660 104092nxtgenp APPLE !PEONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 288 06/04/20 15:50:1 60:00 8496 2896 ims APPLE !PEONES 289 06/04/20 15:56:3 60:00 53947 4385nxtgenp APPLE IPEONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 290 06/04/20 16:50:1 60:00 16776 6092 ims APPLE IPEONES 291 06/04/20 16:56:3 60:00 1944 6715nxtgenp APPLE IPEONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 292 06/04/20 17:50:14 51:35 5396 1680 ims APPLE IPEONES 293 06/04/20 17:56:35 60:00 35568 39441 nxtgenp APPLE IPEONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 15 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170663 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342725 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. i ....../ 4`"-.1" AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Date Tama CUTC) NM= Originating unehm ET Bytes Up Bytes Apn On flat HIBI RARE MODEL Cell Location 294 06/04/20 18:41:49 1:00 60184 2412 /ma APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 295 06/04/20 18:41:49 1:00 3484 2324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 296 06/04/20 18:42:49 60:00 15680 5072 ims APPLE !PHONES 297 06/04/20 18:56:35 60:00 10263 5883 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 298 06/04/20 19:42:49 60:00 8496 3020 ims APPLE !PHONES 299 06/04/20 19:56:35 60:00 8052 6043 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 300 06/04/20 20:42:49 39:08 5072 1572 ims APPLE !PHONES 301 06/04/20 20:56:35 60:00 4093 1356 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 302 06/04/20 21:21:57 0:26 2644 1412 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 303 06/04/20 21:21:57 0:26 2644 1324 /ma APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 304 06/04/20 21:22:23 60:00 15000 4716 Loa APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170664 The information contained here is for use by authorized persons only and is not for general distribution. Page 16 EFTA01342726 ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Date: Run Time: Data Osage For: 06/29/2020 Item Conn. Conn. Date Tam (OTC) 305 06/04/20 21:56:3! 306 06/04/20 307 06/04/20 308 06/04/20 309 06/04/20 310 06/04/20 22:22:2 22:34:2! 22:34:2! 22:35:4 22:37:0! Originating ET Bytos Bytes Apn Unvehm,. PP on 39:14 5719913 14280470nxtgenp hone flat IMSI MARE MODEL Cell Location APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43. 2972525:150:- 024577552:96006:-71.9906006:43. 3717995:210:- 023310608:91057:-71.9598779:43. 2972525:150:- 024577552:96006:-71.9906006:43. 3717995:210:- 023310608:91057:-71.9598779:43. 2972525:150:- 024577552:96006:-71.9906006:43. 3717995:210:- 023310608:91057:-71.9598779:43. 2972525:150:- 024577552:96006:-71.9906006:43. 3717995:210:- 023310608:91057:-71.9598779:43. 2972525:150:- 024577552:96006:-71.9906006:43. 3717995:210:- 023310608:91057:-71.9598779:43. 2972525:150:- 024577552:96006:-71.9906006:43. 3717995:210:- 023310608:91057:-71.9598779:43. 2972525:150:- 024577552:96006:-71.9906006:43. 3717995:210:- 023310608:91057:-71.9598779:43. 2972525:150:- 024577552:96006:-71.9906006:43. 3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 12:02 0 0 ices APPLE !PHONES 2:40 90252 2696 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 2:40 5240 2608 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1:46 1831454 6936581nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 0:31 17188 5524 ice APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. Page 17 SDNY_GNL00170665 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342727 1111111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. a AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Data Time Number (uTc) Bytes Up Bytes Apn LNEI Dn 1MSI MARE MODEL Cell Location 311 06/04/20 22:47:30 19785258484 60:00 123438 507848nxtgenp 3587080982063727 310410214827503 APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 312 06/04/20 22:47:3 1:23 6667 5982 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150: -1.0] 313 06/04/20 22:48:5 60:00 11920 4328 ims APPLE !PHONES 314 06/04/20 23:47:3 60:00 872 735nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0] 315 06/04/20 23:48:5 60:00 8604 2896 ims APPLE !PHONES 316 06/05/20 00:47:3 0:31 0 Onxtgenp APPLE !PHONES [023310608:91057: - hone 71.9598779:43.2972525:150: -1.0] 317 06/05/20 00:48:0 60:00 155415 89338 nxtgenp APPLE !PHONES [023310608:91057: - hone 71.9598779:43.2972525:150: -1.0] 318 06/05/20 00:48:5 60:00 8388 2896 ims APPLE !PHONES 319 06/05/20 01:48:0 60:00 12724 8711nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0] 320 06/05/20 01:48:5 60:00 11920 4112 ims APPLE !PHONES 321 06/05/20 02:48:0 60:00 969 735nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0] 322 06/05/20 02:48:5 60:00 6956 2540 ims APPLE !PHONES 323 06/05/20 03:48:0 15:20 173 105 nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0] 324 06/05/20 03:48:5 60:00 13352 4860 ims APPLE !PHONES 325 06/05/20 04:03:2 0:46 288 48nxtgenp APPLE !PHONES (366513795:1431694::::0) U.S. Cellular, hone _USA 326 06/05/20 04:03:2 0:46 48 Onxtgenp hone APPLE !PHONES (311580084513795:1217109705132::::0) 327 06/05/20 04:04:0 60:00 7363 6195 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 328 06/05/20 04:48:5 60:00 13568 4576 ism APPLE 'PHONES 329 06/05/20 05:04:0 60:00 635 525 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 330 06/05/20 05:48:5 60:00 11256 3268 ims APPLE !PHONES 331 06/05/20 06:04:0 60:00 667 630 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 332 06/05/20 06:48:5 60:00 6956 2664 ims APPLE !PHONES 333 06/05/20 07:04:0 60:00 635 525 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 334 06/05/20 07:48:5 60:00 8496 3004 ins APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 18 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170666 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342728 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ....../ 4`" --es AT&T Run Date: 06/29/2020 Run Tine: Data Usage For: Item Conn. Conn. Date Time (UTc) Originating Number ET Bytos Up Bytes Apn Dn Dar 1MSI MAKE MODEL Cell Location 335 06/05/20 08:04:08 60:00 635 525nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 336 06/05/20 08:48:56 60:00 13696 5364 ins APPLE !PHONES 337 06/05/20 09:04:08 60:00 751 735nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 338 06/05/20 09:48:56 60:00 8712 3220 ins APPLE !PHONES 339 06/05/20 10:04:08 60:00 578 630nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 340 06/05/20 10:48:56 60:00 6848 2648 ins APPLE !PHONES 341 06/05/20 11:04:08 60:00 398 315nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 342 06/05/20 11:48:56 60:00 8604 3252 ins APPLE !PHONES 343 06/05/20 12:04:08 60:00 6730 5064nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 344 06/05/20 12:48:56 60:00 6832 2648 ins APPLE !PHONES 345 06/05/20 13:04:08 60:00 450 420nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 346 06/05/20 13:48:56 60:00 15684 6940 ism APPLE !PHONES 347 06/05/20 14:04:08 60:00 450 420nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 348 06/05/20 14:48:56 60:00 6848 2648 ins APPLE !PHONES 349 06/05/20 15:04:08 60:00 659 4452nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 350 06/05/20 15:48:56 60:00 8496 2896 ins APPLE !PHONES 351 06/05/20 16:04:08 60:00 3372 472nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 352 06/05/20 16:48:56 60:00 8496 2896 ins APPLE IPHONE8 353 06/05/20 17:04:08 15:22 0 Onxtgenp APPLE IPHONE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 354 06/05/20 17:19:30 60:00 35972 24529nxtgenp APPLE IPHONE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 355 06/05/20 17:48:56 60:00 8604 3128 ins APPLE IPHONE8 356 06/05/20 18:19:30 60:00 3536 682nxtgenp APPLE IPHONE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 357 06/05/20 18:48:56 60:00 41944 22316 ins APPLE IPHONE8 358 06/05/20 19:19:30 60:00 6492 17785nxtgenp APPLE IPHONE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 359 06/05/20 19:33:43 0:22 0 320 ims APPLE IPHONE8 360 06/05/20 19:34:13 0:24 0 320 ims APPLE !PHONES 361 06/05/20 19:48:56 60:00 40528 31092 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170667 The information contained here is for use by authorized persons only and is not for general distribution. Page 19 EFTA01342729 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 4111111. AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Sid= Item Conn. Conn. Originating ET Date Time Number Curc) Bytes Up Bytes Apn Dn flat IMBI MAKE MODEL Cell Location 362 06/05/20 20:19:30 60:00 3424 577 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 363 06/05/20 20:45:10 0:33 3038 17869 ims APPLE IPHONE8 364 06/05/20 20:46:07 0:33 3750 20453 ims APPLE IPHONE8 365 06/05/20 20:48:56 60:00 7172 2988 ims APPLE IPHONE8 366 06/05/20 21:19:30 60:00 1012 4808 nxtgenp APPLE IPHONE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 367 06/05/20 21:48:56 58:49 13568 4592 ims APPLE !PHONES 368 06/05/20 22:19:30 60:00 1220 687 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 369 06/05/20 22:47:45 2:43 118304 1412 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 370 06/05/20 22:47:45 2:43 2752 1324 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 371 06/05/20 22:50:28 60:00 11044 4344 ims APPLE !PHONES 372 06/05/20 23:19:30 60:00 462 420 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 373 06/05/20 23:50:28 60:00 15232 5108 ims APPLE !PHONES 374 06/06/20 00:19:30 60:00 711 4833 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 375 06/06/20 00:50:28 60:00 15324 4840 ims APPLE !PHONES 376 06/06/20 01:19:30 60:00 32521 22185 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 377 06/06/20 01:50:28 60:00 6848 2540 ims APPLE !PHONES 378 06/06/20 02:19:30 60:00 6756 5215 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 379 06/06/20 02:50:28 1:24 0 0 ims APPLE !PHONES 380 06/06/20 02:51:52 6:21 13120 1536 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 381 06/06/20 02:51:52 6:21 3376 1448 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 382 06/06/20 02:58:13 60:00 14876 4716 ims APPLE !PHONES 383 06/06/20 03:19:30 60:00 3718 682 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 384 06/06/20 03:58:13 60:00 8388 2896 ims APPLE !PHONES 385 06/06/20 04:19:30 60:00 872 735nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 386 06/06/20 04:58:13 60:00 9928 3144 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 20 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00170668 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342730 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. • AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Data Tam (OTC) Ma= Originating Number ET Bytes Up Bytes Apn on MIMI IMSI MAKE MODEL Cell Location 387 06/06/20 05:19:30 60:00 867 945 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 1.01 388 06/06/20 05:58:13 60:00 15344 6044 ins APPLE !PHONES 389 06/06/20 06:19:30 60:00 908 1120 nxtgenp APPLE !PHONES 1023310601:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.01 390 06/06/20 06:58:13 60:00 8496 2896 ins APPLE !PHONES 391 06/06/20 07:19:30 60:00 635 525 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 392 06/06/20 07:58:13 60:00 8604 3004 ins APPLE !PHONES 393 06/06/20 08:19:30 60:00 346 210 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 394 06/06/20 08:58:13 60:00 10380 4204 Lois APPLE !PHONES 395 06/06/20 09:19:30 60:00 519 315 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 396 06/06/20 09:58:13 60:00 8496 2896 ins APPLE !PHONES 397 06/06/20 10:19:30 60:00 578 630 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 398 06/06/20 10:58:13 60:00 12152 4520 ins APPLE !PHONES 399 06/06/20 11:19:30 47:23 16469 13411nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 400 06/06/20 11:58:13 60:00 7080 2988 ins APPLE !PHONES 401 06/06/20 12:06:53 60:00 6834 5371nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 402 06/06/20 12:58:13 60:00 8496 2896 ins APPLE !PHONES 403 06/06/20 13:06:53 60:00 35211 18104 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 404 06/06/20 13:58:13 60:00 12028 4328 Lois APPLE !PHONES 405 06/06/20 14:06:53 60:00 1126 5579nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 406 06/06/20 14:58:13 60:00 8388 2896 ins APPLE !PHONES 407 06/06/20 15:06:53 60:00 3922 4868 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 408 06/06/20 15:58:13 60:00 13676 4892 ism APPLE IPE0NE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 21 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170669 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342731 ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:13:13pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. r . AT&T Run Date: 06/29/2020 Run Tine: Data Usage For: Item Conn. Conn. Data Tina (OTC) Sid= Originating Number ET Bytom Up Bytes Apn On DMZ Mai RARE MODEL Cell Location 409 06/06/20 16:06:53 60:00 462 420 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 410 06/06/20 16:58:13 60:00 8496 3004 ims APPLE !PHONES 411 06/06/20 17:06:53 60:00 1012 5048 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 412 06/06/20 17:58:13 13:19 4964 1572 ims APPLE !PHONES 413 06/06/20 18:06:53 60:00 14636 14580 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 414 06/06/20 18:11:32 3:46 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 415 06/06/20 18:11:32 3:47 13456 1412 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 416 06/06/20 18:15:18 60:00 12028 4328 ims APPLE !PHONES 417 06/06/20 19:06:53 60:00 13602 14022 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 418 06/06/20 19:15:18 60:00 8604 3020 ims APPLE !PHONES 419 06/06/20 20:06:53 60:00 867 945 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 420 06/06/20 20:15:18 60:00 8388 3004 ims APPLE !PHONES 421 06/06/20 21:06:53 60:00 4045 10186 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 422 06/06/20 21:15:18 60:00 17224 6108 ims APPLE !PHONES 423 06/06/20 22:06:53 40:49 173 105nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 424 06/06/20 22:15:18 19:10 0 0 ims APPLE !PHONES 425 06/06/20 22:34:28 0:02 0 0 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 426 06/06/20 22:34:28 0:02 0 0 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 427 06/06/20 22:34:36 6:42 20846 19472 ims APPLE !PHONES 428 06/06/20 22:40:48 0:30 979 3143 ims APPLE !PHONES 429 06/06/20 22:41:18 3:19 19216 12680 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 430 06/06/20 22:41:18 3:19 17772 12680 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 22 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170670 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342732 111111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. • ......„. "- `•-eo AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Date Tame (OTC) Originating Number ET Bytos Up Bytes Apn Dn flat INS! MAKE MODEL Cell Location 431 06/06/20 22:41:18 1:03 209603 84563 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 432 06/06/20 22:41:18 1:03 209603 84563 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 433 06/06/20 22:43:39 0:58 174366 84571 Las APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 434 06/06/20 22:43:39 0:58 174366 84571 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 435 06/06/20 22:44:37 2:40 407479 313778 ims APPLE !PHONES 436 06/06/20 22:44:37 2:45 23520 12096 ims APPLE !PHONES 437 06/06/20 22:47:33 60:00 20211 9806 ims 438 06/06/20 22:47:41 8:26 5065 6246nxtgenp APPLE IPHONE8 (366491269:1431606::::0) U.S. Cellular, hone _USA 439 06/06/20 22:47:43 8:25 6246 4777nxtgenp APPLE IPHONE8 (311580084491269:1217109705044— hone 311580084491266:1217109705044::::0) 440 06/06/20 22:56:08 60:00 8145 11569nxtgenp APPLE IPHONE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 441 06/06/20 23:47:33 60:00 6924 2648 ims 442 06/06/20 23:56:08 60:00 1347 1262 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 443 06/07/20 00:47:33 60:00 10084 3036 ims 444 06/07/20 00:56:08 60:00 808 630 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 445 06/07/20 01:47:33 60:00 12244 4452 ims 446 06/07/20 01:56:08 60:00 692 420 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 447 06/07/20 02:47:33 60:00 13584 4644 ims 448 06/07/20 02:56:08 60:00 692 420 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 449 06/07/20 03:47:33 60:00 8728 2804 ims 450 06/07/20 03:56:08 60:00 865 525 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 451 06/07/20 04:47:33 60:00 9960 3036 ims 452 06/07/20 04:56:08 60:00 699 630 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 453 06/07/20 05:47:33 60:00 13368 4468 ims 454 06/07/20 05:56:08 60:00 865 525 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00170671 The information contained here is for use by authorized persons only and is not for general distribution. Page 23 EFTA01342733 MOBILITY (with cell location) 020 •,....„0# 1/41' . 4"4 AT&T AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Data: 06/29/2020 Run Ties: Data usage For: Item Conn. Conn. Date Time (OTC) Originating ET Bytos Up Bytom Apn on DEBI DOI RAKE MODEL Coll Location 455 06/07/20 06:47:33 60:00 7264 2772 ins 456 06/07/20 06:56:08 60:00 751 735nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 457 06/07/20 07:47:33 60:00 13476 4644 ins 458 06/07/20 07:56:08 60:00 635 525nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 459 06/07/20 08:47:33 60:00 10068 3144 ins 460 06/07/20 08:56:08 60:00 519 315nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 461 06/07/20 09:47:33 60:00 11904 4436 ism 462 06/07/20 09:56:08 60:00 519 315nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 463 06/07/20 10:47:33 60:00 9960 3036 ins 464 06/07/20 10:56:08 60:00 5502 7165nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 465 06/07/20 11:47:33 60:00 6924 2988 ins 466 06/07/20 11:56:08 25:31 3199 471nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 467 06/07/20 12:21:39 60:00 10267 5332nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 468 06/07/20 12:47:33 60:00 14816 4876 ins 469 06/07/20 13:21:39 60:00 763 735nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 470 06/07/20 13:47:33 60:00 13368 4360 ins 471 06/07/20 14:21:39 60:00 42891 28310nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 472 06/07/20 14:47:33 60:00 8496 2896 ins 473 06/07/20 15:21:39 60:00 3488 682nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 474 06/07/20 15:47:33 60:00 8604 2896 ins 475 06/07/20 16:21:39 16:38 75874 50048nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023413008:91457:-72.166667:43.205:100:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 476 06/07/20 16:38:16 1:49 288 48nxtgenp APPLE !PHONES (366491266:1431606::::0) U.S. Cellular, hone _USA 477 06/07/20 16:38:17 1:49 48 Onxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::0) AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170672 The information contained here is for use by authorized persons only and is not for general distribution. Page 24 EFTA01342734 ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 41! AT&T Run Date: 06/29/2020 Run Ties: Data Usage For: Item Conn. Conn. Data Tama (OTC) Originating Number ET Bytes Up Bytom Apn Dn DELI 1MSI MAKE MODEL Coll Location 478 06/07/20 16:40:06 2:35 48 Onxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 479 06/07/20 16:42:40 0:41 5065 6246nxtgenp APPLE !PHONES (366491269:1431606::::0) U.S. Cellular, hone _USA 480 06/07/20 16:42:41 0:41 6246 4777nxtgenp hone APPLE !PHONES (311580084491269:1217109705044::::0) 481 06/07/20 16:43:22 60:00 28254 16020 nxtgenp APPLE !PHONES (023413008:91457:-72.166667:43.205:100:-1.0. hone 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 482 06/07/20 16:47:33 60:00 10176 3252 ims 483 06/07/20 17:43:22 60:00 364517 42816 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 484 06/07/20 17:47:33 60:00 18688 6356 ims 485 06/07/20 18:43:22 60:00 981 735nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 486 06/07/20 18:47:33 60:00 8712 3112 ims 487 06/07/20 19:43:22 60:00 924 840 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 488 06/07/20 19:47:33 60:00 7048 2772 ims 489 06/07/20 20:43:22 60:00 6110 8869nxtgenp APPLE !PHONES (023310601:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 490 06/07/20 20:47:33 60:00 10068 4020 ims 491 06/07/20 21:43:22 60:00 79051 47955nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 492 06/07/20 21:47:33 60:00 8496 2896 ims 493 06/07/20 22:43:22 13:06 34981 20953 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 25 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170673 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342735 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. • tes.`"" as AT&T Run Date: 06/29/2020 Run Time: Data Usage For: MS= Item Conn. Conn. Originating Et Date Time Number (OTC) Bytes DP Bytes Apn 1MSI MAKE Dn MODEL Cell Location 494 06/07/20 22:47:33 60:00 13584 4644 ins 495 06/07/20 22:56:29 48:56 35766 37486nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 496 06/07/20 23:45:24 0:43 288 48nxtgenp APPLE IPE0NE8 (366491266:1431606::::0) U.S. Cellular, hone USA 497 06/07/20 23:45:25 0:43 48 Onxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::0) 498 06/07/20 23:46:08 60:00 52762 20554nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310785:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 499 06/07/20 23:47:33 60:00 10008 4080 ins 500 06/08/20 00:46:08 60:00 867 945nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 501 06/08/20 00:47:33 60:00 10284 3252 ins 502 06/08/20 01:46:08 60:00 746 1106nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 503 06/08/20 01:47:33 60:00 8496 3020 ins 504 06/08/20 02:46:08 60:00 6760 7607nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 505 06/08/20 02:47:33 60:00 10176 3144 ins 506 06/08/20 03:46:08 60:00 25665 16313nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 507 06/08/20 03:47:33 60:00 10332 4056 ins 508 06/08/20 04:46:08 60:00 9060 7108nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 509 06/08/20 04:47:33 60:00 12012 4560 ins 510 06/08/20 05:46:08 60:00 16026 13171nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 511 06/08/20 05:47:33 60:00 6924 2648 ins 512 06/08/20 06:46:08 60:00 7047 6226nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 513 06/08/20 06:47:33 60:00 8496 3004 ins 514 06/08/20 07:46:08 60:00 7616 8164nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 26 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00170614 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342736 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. a AT&T Run Data: 08/29/2020 Run Ties: Data usage For: Item Corm. Conn. Date Tim (UTC) MS= Originating Number ET Bytos Up Bytom Apn Dn DEBI 1MSI MAKE MODEL Coll Location 515 06/08/20 07:47:33 60:00 10332 3972 ins 516 06/08/20 08:46:08 60:00 9845 7517nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 517 06/08/20 08:47:33 60:00 12012 4504 ins 518 06/08/20 09:46:08 60:00 6976 8696 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 519 06/08/20 09:47:33 60:00 6366 2788 ins 520 06/08/20 10:46:08 60:00 995 840 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 521 06/08/20 10:47:33 60:00 6940 3524 ism 522 06/08/20 11:46:08 60:00 793663 55327 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 523 06/08/20 11:47:33 60:00 11796 4328 ins 524 06/08/20 12:46:08 60:00 50438 31769nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 525 06/08/20 12:47:33 3:06 0 0 ins 526 06/08/20 12:54:20 6:06 7193 6158 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 527 06/08/20 13:00:26 60:00 13552 4684 ins APPLE !PHONES 528 06/08/20 13:46:08 60:00 17843 6938 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 529 06/08/20 14:00:26 60:00 8712 3128 ins APPLE !PHONES 530 06/08/20 14:46:08 60:00 27331 86706nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 531 06/08/20 15:00:26 32:51 3424 1324 ins APPLE !PHONES 532 06/08/20 15:33:17 4:42 4076 2324 ins APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 533 06/08/20 15:37:59 60:00 14076 7740 ins APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 27 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170675 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342737 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided UTC. in • . AT&T Run Date: Run Ciao: Data usage For: 06/29/2020 MS= Item Corm. Conn. Date TiOle (OTC) 534 06/08/20 15:46:08 535 06/08/20 16:37:59 536 06/08/20 16:46:08 537 06/08/20 17:37:59 538 06/08/20 17:41:22 539 06/08/20 17:43:30 540 06/08/20 17:43:52 541 06/08/20 17:46:08 542 06/08/20 17:46:10 543 06/08/20 17:46:39 544 06/08/20 17:47:05 545 06/08/20 17:47:21 546 06/08/20 17:47:53 Originating ET Bytes: Number UP Bytom Apn on 60:00 19067 9600 nxtgenp hone 60:00 13676 4768 ins 60:00 647969 594639nxtgenp hone 3:23 0 0 ims 2:08 2644 1324 ims 0:22 3640 1448 ims 2:18 2644 1324 ims 60:00 4306491 5451466 nxtgenp hone 0:29 3424 1216 ims 0:26 2644 1324 ims 0:16 5072 1680 ims 0:32 2644 1324 ims 1:35 3424 1324 ims DEBI INBI NARK NODEL Coll Location APPLE IPHONE8 (023310608:91057: - 71.9598779:43.2972525:150: -1.0) APPLE APPLE !PHONES !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- APPLE !PHONES APPLE 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0) !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) APPLE !PHONES APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- APPLE !PHONES APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) APPLE !PHONES APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) APPLE !PHONES 023310608:91057:-71.9598779:43. 024577552:96006:-71.9906006:43. 023310608:91057:-71.9598779:43. 024577552:96006:-71.9906006:43. 023310608:91057:-71.9598779:43. 023310601:91057:-71.9598779:43. 2972525:150:- 3717995:210:- 2972525:150:- 3717995:210:- 2972525:150:- 2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. Page 28 SDNY_GNL00170676 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342738 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: 06/29/2020 Run Tim: Data Osage For: Item Conn. Conn. Data Time (OTC) IS= Originating Number ET Bytes Up Bytes Apn On ?MI IMSI BABE BOOM Cell Location 547 06/08/20 17:49:28 2:36 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 548 06/08/20 17:52:04 24:12 10036 3036 ims APPLE !PHONES 549 06/08/20 18:16:16 11:54 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 550 06/08/20 18:28:10 0:44 3532 1540 ims APPLE !PHONES 551 06/08/20 18:28:54 16:28 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 552 06/08/20 18:45:22 0:13 3316 1648 ims APPLE !PHONES 553 06/08/20 18:45:35 3:36 2876 1432 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 554 06/08/20 18:46:08 60:00 60107 19783nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 555 06/08/20 18:49:11 60:00 11796 4328 ims APPLE !PHONES 556 06/08/20 19:46:08 60:00 12076 7056nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 557 06/08/20 19:49:11 60:00 7080 2664 ims APPLE !PHONES 558 06/08/20 20:46:08 60:00 1975 2926 nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 559 06/08/20 20:49:11 60:00 6956 2756 ims APPLE !PHONES 560 06/08/20 21:46:08 60:00 1379 1102 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 561 06/08/20 21:49:11 59:12 15684 6572 ims APPLE !PHONES 562 06/08/20 22:46:08 2:15 277 209 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 563 06/08/20 22:48:55 60:00 279778 966831 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 564 06/08/20 22:48:58 1:31 6673 5940 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 565 06/08/20 22:50:29 0:27 3532 1340 ims APPLE !PHONES 566 06/08/20 22:50:56 0:15 2644 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 567 06/08/20 22:51:11 60:00 12028 4608 ims APPLE !PHONES 568 06/08/20 23:48:55 60:00 860 735nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 569 06/08/20 23:51:11 60:00 8388 3128 ims APPLE !PHONES 570 06/09/20 00:48:55 60:00 20227 23698 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 29 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYWC00170677 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342739 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. • 1/4t- a -ri AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Data Tama (UTC) MS= Originating Number ET Bytos Up Bytes Apn On DEBI 1MSI MAKE MODEL Coll Location 571 06/09/20 00:51:11 60:00 10268 3408 ims APPLE !PHONES 572 06/09/20 01:48:55 60:00 751 735nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 573 06/09/20 01:51:11 60:00 8604 3036 ims APPLE !PHONES 574 06/09/20 02:48:55 60:00 578 630 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 575 06/09/20 02:51:11 60:00 15668 6108 ims APPLE !PHONES 576 06/09/20 03:48:55 60:00 578 630 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 577 06/09/20 03:51:11 60:00 7544 3820 ims APPLE !PHONES 578 06/09/20 04:48:55 60:00 828 867nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 579 06/09/20 04:51:11 60:00 6848 2680 ims APPLE !PHONES 580 06/09/20 05:48:55 60:00 225 210 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 581 06/09/20 05:51:11 60:00 7064 2804 ims APPLE !PHONES 582 06/09/20 06:48:55 60:00 289 315 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 583 06/09/20 06:51:11 60:00 11920 4500 ims APPLE !PHONES 584 06/09/20 07:48:55 60:00 398 315 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 585 06/09/20 07:51:11 60:00 7172 3020 ims APPLE !PHONES 586 06/09/20 08:48:55 60:00 225 210 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 587 06/09/20 08:51:11 60:00 10488 4536 ims APPLE !PHONES 588 06/09/20 09:48:55 60:00 277 262 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 589 06/09/20 09:51:11 3:50 0 0 ims APPLE !PHONES 590 06/09/20 09:58:39 0:38 6675 5980 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 591 06/09/20 09:59:17 60:00 10720 4420 ims APPLE !PHONES 592 06/09/20 10:48:55 60:00 341 367nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 593 06/09/20 10:59:17 60:00 8496 3128 ims APPLE !PHONES 594 06/09/20 11:48:55 60:00 3074 262 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 595 06/09/20 11:59:17 60:00 7172 3220 ims APPLE !PHONES 596 06/09/20 12:48:55 23:58 341 367nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 597 06/09/20 12:59:17 60:00 8388 3004 ins APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 30 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170678 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342740 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:12:12pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. • t --•..da' AT&T Run Data: 06/29/2020 Run Time: Data Usage Tor: Item Conn. Conn. Data Tim (Unt) Sim Originating Number ET Bytes Up Bytes Apn On DEBI IMSI WARE MODEL Coll Location 598 06/09/20 13:12:53 11:46 98124 66778nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 599 06/09/20 13:24:39 60:00 7508 15117nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 600 06/09/20 13:59:17 52:10 15468 8244 ims APPLE !PHONES 601 06/09/20 14:24:39 22:50 0 0nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 602 06/09/20 14:47:28 2:05 5064 6314nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 603 06/09/20 14:47:29 2:05 6314 4776nxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::01 604 06/09/20 14:49:34 3:11 280 581nxtgenp APPLE !PHONES (023432209:91532:-71.947299:43.256953:280:- hone 1.0] 605 06/09/20 14:51:33 10:30 8368 6156 ims 606 06/09/20 14:52:44 0:37 5453 6094nxtgenp APPLE !PHONES (366513795:1431694::::01 U.S. Cellular, hone _USA 607 06/09/20 14:52:46 0:35 6315 8165 ims APPLE !PHONES (366513795:1431694::::01 U.S. Cellular, _USA 608 06/09/20 14:52:46 0:36 6094 5165nxtgenp hone APPLE !PHONES (311580084513795:1217109705132::::01 609 06/09/20 14:52:47 0:35 8097 6051 ims APPLE !PHONES [311580084513795:1217109705132.... 311580084491266:1217109705044::::0] 610 06/09/20 14:53:22 44:46 2021706 2314792nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 611 06/09/20 14:53:24 2:22 0 0 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 612 06/09/20 14:55:55 0:00 0 0 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 613 06/09/20 14:56:10 0:37 10745 6428 ims APPLE !PHONES 614 06/09/20 14:56:47 33:26 17928 2804 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 615 06/09/20 14:56:47 33:26 5624 2804 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 616 06/09/20 15:30:13 60:00 10632 4236 ims APPLE !PHONES 617 06/09/20 15:38:07 0:32 5220 6314nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 618 06/09/20 15:38:09 0:31 6314 4932nxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::01 AT&T Proprietary The AT&T network constantly communicates with Internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 31 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170679 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342741 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. ap. tr. • 4*-1; AT&T Run Date: 06/29/2020 Run Tine: Data Usage For: IS= Item Conn. Conn. Date Tam (OTC) Originating Humber ET Bytos Up Bytom Apn Dn DMZ 1MSI MAKE MODEL Cell Location 619 06/09/20 15:38:40 60:00 45938 25244nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 620 06/09/20 16:30:13 60:00 6848 2680 ims APPLE !PHONES 621 06/09/20 16:38:40 60:00 142769 4687229nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 622 06/09/20 17:30:13 60:00 8496 2928 ims APPLE !PHONES 623 06/09/20 17:38:40 60:00 2367 875nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 624 06/09/20 18:30:13 60:00 6620 3052 ims APPLE !PHONES 625 06/09/20 18:38:40 60:00 160792 103730nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 626 06/09/20 19:30:13 60:00 26512 13248 ims APPLE !PHONES 627 06/09/20 19:38:40 60:00 2079 3220 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 628 06/09/20 20:00:47 2:23 372588 270899 ims APPLE !PHONES 629 06/09/20 20:30:13 60:00 15388 8752 ims APPLE IPHONt8 630 06/09/20 20:38:40 60:00 51601 38466 nxtgenp APPLE !PHONES (023310601:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 631 06/09/20 20:59:47 40:16 6008484 8878545 ims APPLE IPHON18 632 06/09/20 21:30:13 29:49 32156 20948 ims APPLE IPHONt8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 32 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00170680 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342742 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. • .._,„• 4cas° AT&T Run Date: 06/29/2020 Run Time: Data Usage For: IS= Item Conn. Conn. Originating ET Bytos Bytes Apn neat i"Sr BARE MODEL Cell Location Data Tim Number Up On (OTC) 633 06/09/20 21:38:40 60:00 337102 301510 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 634 06/09/20 21:45:27 0:43 6452 17206 ims APPLE !PHONES 635 06/09/20 21:46:22 0:19 1381 10147 ims APPLE !PHONES 636 06/09/20 22:00:02 0:44 179116 1712 ims APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 637 06/09/20 22:00:02 0:44 4744 1712 ims APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 638 06/09/20 22:00:4 1:09 3424 1340 ims APPLE !PHONES 639 06/09/20 22:01:55 0:43 2660 1340 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 640 06/09/20 22:01:55 0:43 2596 1340 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 641 06/09/20 22:02:38 32:47 6366 2928 ims APPLE !PHONES 642 06/09/20 22:35:25 0:53 2660 1340 ims APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 643 06/09/20 22:35:25 0:53 2596 1340 ims APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 644 06/09/20 22:36:18 0:52 4840 1588 ims APPLE !PHONES 645 06/09/20 22:37:1 13:39 2596 1340 ims APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 646 06/09/20 22:37:10 13:40 2660 1340 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 647 06/09/20 22:38:40 40:24 125226 85387nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 648 06/09/20 22:50:49, 60:00 35576 21760 ims APPLE !PHONES 649 06/09/20 23:19:03 0:37 5285 6451nxtgenp APPLE !PHONES 1366491266:1431606::::01 U.S. Cellular, hone _USA 650 06/09/20 23:19:05 0:36 6451 4997nxtgenp hone APPLE !PHONES 1311580084491266:1217109705044::::01 651 06/09/20 23:19:22 0:14 3297 14724 ims APPLE IPHONE8 652 06/09/20 23:19:38 0:10 1431 12839 ims APPLE IPHONEB 653 06/09/20 23:19:41 60:00 106959 73126nxtgenp APPLE IPHONE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170681 The information contained here is for use by authorized persons only and is not for general distribution. Page 33 EFTA01342743 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided UTC. 4111I, AT&T Run Date: Run Time: Data Usage For: Item Conn. Conn. Data Time (OTC) 06/29/2020 Sim Originating Member LT Bytes Up Bytes Apn On DEBI 1MSI MAKE MODEL Cell Location 654 06/09/20 23:50:4 0:00 19884 11412 ims APPLE !PHONES 655 06/09/20 23:58:5 0:08 2460 11189 ism APPLE !PHONES 656 06/10/20 00:19:4 1:32 39417 20149nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 657 06/10/20 00:21:1 2:03 288 48nxtgenp APPLE !PHONES (366491269:1431606::::01 U.S. Cellular, hone _USA 658 06/10/20 00:21:1 2:03 48 Onxtgenp hone APPLE !PHONES (311580084491269:1217109705044::::01 659 06/10/20 00:23:1 3:45 7211 8328nxtgenp APPLE !PHONES (366491269:1431606::::01 U.S. Cellular, hone _USA 660 06/10/20 00:23:1 3:45 8328 6923nxtgenp hone APPLE !PHONES (311580084491269:1217109705044::::01 661 06/10/20 00:27:0 2:48 78953 60993nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 662 06/10/20 00:29:4 4:08 7773 7645nxtgenp APPLE !PHONES (366491269:1431606::::01 U.S. Cellular, hone _USA 663 06/10/20 00:29:4 4:08 7645 7485nxtgenp hone APPLE !PHONES (311580084491269:1217109705044::::0] 664 06/10/20 00:50:4 4:49 3424 1340 Les APPLE !PHONES 665 06/10/20 00:53:5 3:57 48 Onxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0] 666 06/10/20 00:57:5 1:12 288 48nxtgenp APPLE !PHONES (366491269:1431606::::01 U.S. Cellular, hone _USA 667 06/10/20 00:57:5 1:11 48 Onxtgenp hone APPLE !PHONES (311580084491269:1217109705044::::0] 668 06/10/20 00:59:0 8:09 91843 405897nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 669 06/10/20 01:05:3 4:36 149256 3496 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 670 06/10/20 01:05:3 4:36 6160 3496 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 671 06/10/20 01:10:1 7:03 10176 8292 ism APPLE !PHONES 672 06/10/20 01:30:4 8:06 296180 975215nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 673 06/10/20 01:30:5 6:57 6671 5904 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 674 06/10/20 01:37:4 0:00 13568 4684 Les APPLE !PHONES 675 06/10/20 01:38:5 Z:43 288 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 676 06/10/20 01:38:5 Z:43 48 Onxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170682 The information contained here is for use by authorized persons only and is not for general distribution. Page 34 EFTA01342744 ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 4.• tr./ 4' 1i AT&T Run Date: 06/29/2020 Run Ties: Data Usage For: MS= Item Conn. Conn. Originating ST Bytes Bytes Apn DEBI INS' WM MODEL Coll Location Date Tim NUMber Up on (UTc) 677 06/10/20 01:53:391 5:39 8614 8797nxtgonp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 678 06/10/20 01:59:18 60:00 15777 16256 nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057: -71.9598779:43.2972525:150: - 1.0] 679 06/10/20 02:37:48 60:00 8496 3112 ism APPLE !PHONES 680 06/10/20 02:59:18 60:00 687 630 nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0) 681 06/10/20 03:37:48 60:00 7172 2756 ism APPLE !PHONES 682 06/10/20 03:59:18 60:00 578 630 nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0) 683 06/10/20 04:37:48 60:00 14892 4824 ism APPLE !PHONES 684 06/10/20 04:59:18 60:00 289 315 nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0] 685 06/10/20 05:37:48 60:00 13352 4752 ism APPLE !PHONES 686 06/10/20 05:59:18 60:00 462 420 nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0] 687 06/10/20 06:37:48 60:00 6956 2648 ism APPLE !PHONES 688 06/10/20 06:59:18 60:00 173 105 nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0) 689 06/10/20 07:37:48 60:00 8388 3004 ism APPLE !PHONES 690 06/10/20 07:59:18 60:00 346 210 nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0) 691 06/10/20 08:37:48 60:00 6848 2864 ism APPLE !PHONES 692 06/10/20 08:59:18 60:00 346 210 nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0) 693 06/10/20 09:37:48 60:00 8496 3112 ism APPLE !PHONES 694 06/10/20 09:59:18 60:00 792 910 nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0) 695 06/10/20 10:37:48 60:00 14020 5596 ism APPLE !PHONES 696 06/10/20 10:59:18 53:48 73033 46330nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0) 697 06/10/20 11:37:48 59:15 10036 3252 ism APPLE !PHONES 698 06/10/20 11:53:05 2:03 5221 6330nxtgenp APPLE !PHONES (366491269:1431606::::01 U.S. Cellular, hone _USA 699 06/10/20 11:53:0 2:03 6330 4933 nxtgenp APPLE !PHONES (311580084491269:1217109705044.... hone 311580084491266:1217109705044::::01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 35 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170683 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342745 1111111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. te-sa,•° `'s AT&T Run Date: 06/29/2020 Run Tana: Data Usage For: Iton Conn. Conn. Data Timm (OTC) Sim Originating er Bytes up Bytes Apn Dn Then 1MSI MAKE MODEL Cell Location 700 06/10/20 11:55:09 60:00 6915 5746nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0] 701 06/10/20 12:37:03 2:44 3376 1448 ins APPLE !PHONES (023310608:91057: - 71.9598779:43.2972525:150: -1.0] 702 06/10/20 12:39:47 60:00 15000 4716 ins APPLE !PHONES 703 06/10/20 12:55:09 56:15 1071 5832nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0] 704 06/10/20 13:39:47 60:00 8496 2896 ins APPLE IPE0NE8 705 06/10/20 13:51:23 2:04 5062 6328nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 706 06/10/20 13:51:24 2:04 6326 4774nxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::01 707 06/10/20 13:53:28 56:30 70376 54700nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0] 708 06/10/20 14:39:47 60:00 31844 22980 ins APPLE !PHONES 709 06/10/20 14:49:57 0:22 288 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 710 06/10/20 14:49:59 0:21 48 Onxtgenp hone APPLE IPHONt8 (311580084491266:1217109705044::::0) 711 06/10/20 14:50:20 8:44 48 Onxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 712 06/10/20 14:54:49 0:29 1590 14344 ins APPLE !PHONES 713 06/10/20 14:55:26 0:16 9756 24842 ins APPLE IPHONt8 714 06/10/20 14:59:03 3:32 286 48nxtgenp APPLE IPHONt8 (366491266:1431606::::01 U.S. Cellular, hone _USA 715 06/10/20 14:59:05 3:31 48 Onxtgenp hone APPLE IPHONt8 (311580084491266:1217109705044::::0) 716 06/10/20 15:02:36 60:00 92707 50816 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 717 06/10/20 15:39:47 60:00 15236 5936 ins APPLE !PHONES 718 06/10/20 16:02:36 60:00 2961 11328 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 719 06/10/20 16:39:47 60:00 10252 3376 ins APPLE !PHONES 720 06/10/20 17:02:36 24:14 4741 797nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 721 06/10/20 17:26:50 60:00 96839 37310nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 722 06/10/20 17:39:47 60:00 8388 2896 ins APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170684 The information contained here is for use by authorized persons only and is not for general distribution. Page 36 EFTA01342746 ill1111120 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided UTC. in \.....S tmaS AT&T Run Date: 06/29/2020 Run Ties: Data Usage For: Item Conn. Conn. Originating ET Data Tam Number (UTC) Bytes Up Bytes Apn on DELI IMSI MAR MODEL Cell Location 723 06/10/20 18:26:5 60:00 169501 105986 nxtgenp APPLE IPHONt8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023432209:91532:-71.947299:43.256953:280:- 1.0] 724 06/10/20 18:39:4 60:00 34924 26900 ims APPLE !PHONES 725 06/10/20 18:50:5 0:33 2804 18349 ims APPLE !PHONES 726 06/10/20 19:11:2 0:27 2059 12714 ims APPLE 'PHONES 727 06/10/20 19:26:5 37:20 40083 29088 nxtgenp APPLE IPHONt8 (023432209:91532:-71.947299:43.256953:280:- hone 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 728 06/10/20 19:39:4 60:00 13676 4684 ins APPLE !PHONES 729 06/10/20 20:04:1 2:03 5566 8034nxtgenp APPLE !PHONES (366513795:1431694::::01 U.S. Cellular, hone _USA 730 06/10/20 20:04:1 2:03 8034 5278nxtgenp hone APPLE !PHONES (311580084513795:1217109705132::::01 731 06/10/20 20:06:1 60:00 13685 12191 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 732 06/10/20 20:39:4 43:51 3408 1324 ins APPLE !PHONES 733 06/10/20 21:06:1 37:19 59742 42049 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150: 1.0] 734 06/10/20 21:23:3 0:35 163424 2912 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150: 1.0] 735 06/10/20 21:23:38 0:35 5240 2824 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 736 06/10/20 21:24:1 4:48 3424 1432 ims APPLE !PHONES 737 06/10/20 21:29:0 14:32 7580 2908 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 738 06/10/20 21:29:0 14:32 7580 2820 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 739 06/10/20 21:43:3 1:15 23581 106165 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 740 06/10/20 21:43:3 1:12 8191 6178 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. Page 37 SDNY_GNL00170685 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342747 ill1111120 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ....,„. 4a`" d AT&T Run Date: 06/29/2020 Run Ties: Data Osage For: MS= Item corm. Conn. Originating LT Bytom Bytom Apn Mai Dar NARK MODEL Cell Location Date Tine Number Up On (OTC) 741 06/10/20 21:44:48 55:44 93041 251870zuctgenp APPLE !PHONES 1023310608:91057:- bone 71.9598779:43.2972525:150:-1.0. 023310785:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 1.01 742 06/10/20 21:44:50 0:29 7407 6090 ims APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 743 06/10/20 21:45:19 3:27 3748 1556 ims APPLE !PHONES 744 06/10/20 21:48:46 1:03 2644 1324 ims APPLE !PHONES 1023310785:91057:- 71.9598779:43.2972525:150:-1.01 745 06/10/20 21:49:49 45:13 21796 15580 ims APPLE !PHONES 746 06/10/20 22:20:49 0:30 4259 15173 ims APPLE !PHONES 747 06/10/20 22:35:02 5:27 2752 1324 ims APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 748 06/10/20 22:40:2 2:19 4948 1680 ims APPLE !PHONES 749 06/10/20 22:40:31 2:03 5065 6314nxtgenp APPLE !PHONES [366491266:1431606::::01 U.S. Cellular, hone _USA 750 06/10/20 22:40:32 2:03 6314 4777nxtgonp APPLE !PHONES 1311580084491266:1217109705044— hone 311580084513795:1217109705132::::01 751 06/10/20 22:42:35 60:00 33070 35962nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 752 06/10/20 22:42:48 0:28 2644 1412 ims APPLE 'PHONES 1023310601:91057:- 71.9598779:43.2972525:150:-1.01 753 06/10/20 22:42:48 0:28 2644 1324 ims APPLE !PHONES 1023310601:91057:- 71.9598779:43.2972525:150:-1.01 754 06/10/20 22:43:16 17:45 3532 1324 ims APPLE !PHONES 755 06/10/20 23:05:46 5:35 6671 5979 ims APPLE !PHONES 1023310601:91057:- 71.9598779:43.2972525:150:-1.01 756 06/10/20 23:11:25 2:26 6667 5982 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 38 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNI_ 00170686 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342748 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e AT&T Run Date: 06/29/2020 Run Time: MI= Data Usage For: Item Conn. Conn. Originating ET Data Time Number (uzc) Bytes Up Bytes Apn Dn flat 1MSI MAKE MODEL Cell Location 757 06/10/20 23:13:51 0:33 4856 1464 ims APPLE !PHONES 758 06/10/20 23:14:24 1:30 2752 1324 Las APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.01 759 06/10/20 23:15:54 60:00 14016 4948 ims APPLE !PHONES 760 06/10/20 23:42:35 18:08 52130 43565nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 761 06/11/20 00:00:42 2:03 288 48nxtgenp APPLE !PHONES (366491269:1431606::::01 U.S. Cellular, hone _USA 762 06/11/20 00:00:43 2:03 48 Onxtgenp hone APPLE !PHONES (311580084491269:1217109705044::::01 763 06/11/20 00:02:46 60:00 35541 16641nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 764 06/11/20 00:15:54 60:00 26560 17852 ims APPLE !PHONES 765 06/11/20 00:50:18 0:29 1749 13796 ims APPLE !PHONES 766 06/11/20 01:00:11 44:46 7656873 9341811 ims APPLE 1PHONE8 767 06/11/20 01:02:46 60:00 19543 7341nxtgenp APPLE IPHONE8 [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 768 06/11/20 01:15:54 60:00 11496 4784 ims APPLE !PHONES 769 06/11/20 02:02:46 60:00 2218 2198nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 770 06/11/20 02:15:54 60:00 10828 4220 ims APPLE !PHONES 771 06/11/20 03:02:46 5:40 225 210nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 772 06/11/20 03:08:26 60:00 42848 32453nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 773 06/11/20 03:15:54 60:00 8728 3772 ims APPLE !PHONES 774 06/11/20 04:08:26 60:00 5798 8080nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 775 06/11/20 04:15:54 60:00 13568 4876 ims APPLE !PHONES 776 06/11/20 05:08:26 60:00 1005 979nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 777 06/11/20 05:15:54 60:00 8388 2788 ims APPLE !PHONES 778 06/11/20 06:08:26 60:00 450 420nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 779 06/11/20 06:15:54 31:28 5072 1572 ims APPLE !PHONES 780 06/11/20 06:47:22 0:57 148724 1536 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 781 06/11/20 06:47:22 0:57 2968 1448 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 782 06/11/20 06:48:19 60:00 10256 4344 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170687 The information contained here is for use by authorized persons only and is not for general distribution. Page 39 EFTA01342749 ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: 06/29/2020 Run Tine: Data Usage For: NM= Item Conn. Conn. Date Taos (OTC) Originating Number ET Bytes Up Bytes Apn On DEBI 1MSI MAKE MODEL Cell Location 783 06/11/20 07:08:26 60:00 225 210nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 784 06/11/20 07:48:19 60:00 8496 3004 ins APPLE !PHONES 785 06/11/20 08:08:26 60:00 225 210nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 786 06/11/20 08:48:19 60:00 11904 4396 ins APPLE !PHONES 787 06/11/20 09:08:26 60:00 398 315nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 788 06/11/20 09:48:19 60:00 7080 2772 ins APPLE !PHONES 789 06/11/20 10:08:26 60:00 277 315nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 790 06/11/20 10:48:19 60:00 10596 4096 ins APPLE !PHONES 791 06/11/20 11:08:26 37:36 329 367nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0] 792 06/11/20 11:46:01 0:34 5390 7804nxtgenp APPLE !PHONES (366491266:1431606::::0] U.S. Cellular, hone _USA 793 06/11/20 11:46:02 0:34 7804 5102nxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::0] 794 06/11/20 11:46:36 60:00 14045 47524nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 795 06/11/20 11:48:19 15:20 0 0 ims APPLE !PHONES 796 06/11/20 12:08:15 37:27 8454 6286 ims APPLE !PHONES 797 06/11/20 12:45:42 0:17 2766 1324 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0] 798 06/11/20 12:45:42 0:17 2704 1324 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0] 799 06/11/20 12:45:59 10:11 4964 1696 ins APPLE !PHONES 800 06/11/20 12:46:36 60:00 2177046 2642670nxtgenp APPLE !PHONES (023310601:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 801 06/11/20 12:56:20 3:14 11347 6482 ims APPLE !PHONES 802 06/11/20 12:59:34 0:45 2768 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 803 06/11/20 12:59:34 0:45 2704 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 804 06/11/20 13:00:19 48:00 7064 2880 ins APPLE !PHONES 805 06/11/20 13:46:36 3:00 3006 1187 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 40 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_00_00170688 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342750 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided UTC. in ANIMP AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Date rims (OTC) Originating !lumbar Er Bytes up Bytes Apn on DELI INSI NM MODEL Cell Location 806 06/11/20 13:48:19 1:17 7684 6376 /ma APPLE IPE0NE8 (023310608:91057:- 71.9598779:43.2972525:150:-1.01 807 06/11/20 13:48:19 1:17 7620 6376 /ma APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 808 06/11/20 13:51:27 3:56 356279 1131640nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.01 809 06/11/20 13:51:30 3:53 6905 7072 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 810 06/11/20 13:55:22 2:03 266 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 811 06/11/20 13:55:23 2:04 48 Onxtgonp hone APPLE !PHONES (311580084491266:1217109705044::::01 812 06/11/20 13:56:00 1:25 6476 7421 ims APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, _USA 813 06/11/20 13:56:01 1:26 7421 6124 ims APPLE !PHONES (311580084491266:1217109705044::::01 814 06/11/20 13:57:27 33:22 6993 10526 nxtgenp APPLE !PHONES (023413008:91457:-72.166667:43.205:100:-1.0, hone 023310608:91057:-71.9598779:43.2972525:150:- 1.01 815 06/11/20 13:58:27 7:45 6669 6000 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 816 06/11/20 14:06:12 60:00 24096 13980 ims APPLE !PHONES 817 06/11/20 14:11:50 0:42 7760 14713 ims APPLE !PHONES 818 06/11/20 14:30:49 60:00 87380 60369nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 819 06/11/20 15:06:12 60:00 7296 3020 ims APPLE !PHONES 820 06/11/20 15:30:49 60:00 27622 17667nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 821 06/11/20 16:06:12 0:03 0 0 ims APPLE !PHONES 822 06/11/20 16:06:14 2:19 14560 1320 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.01 823 06/11/20 16:06:15 2:18 2428 1232 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.01 824 06/11/20 16:08:33 60:00 14032 4856 ims APPLE IPHONE8 825 06/11/20 16:30:49 60:00 196129 15494 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. Page 41 SDNY_GNL00170689 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342751 020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. • .._.s 4`"-•" :sil i s. AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Data Tame (UTC) MS= Originating Number ET Bytes UP Bytes Apn Dn INEI INS! MARE MODEL Cell Location 826 06/11/20 17:08:33 29:08 3424 1340 ims APPLE !PHONES 827 06/11/20 17:30:49 60:00 240325 293154 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 828 06/11/20 17:37:41 60:00 5240 2680 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 829 06/11/20 17:37:41 60:00 29252 2768 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 830 06/11/20 18:30:49 42:56 89878 1231264 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023441679:91569:-71.873669:42.998207:30:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 831 06/11/20 18:37:41 36:04 8051 6072 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023441679:91569:-71.873669:42.998207:30:- 1.0] 832 06/11/20 18:37:41 36:04 8051 6072 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023441679:91569:-71.873669:42.998207:30:- 023429137:91520:-71.8684166:43.0803055:320:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 833 06/11/20 19:13:45 0:26 108 0 ims APPLE !PHONES (23999/15704:-71.90615:42.97402:30:-1.01 834 06/11/20 19:13:45 0:26 108 0 ims APPLE !PHONES (23999/15704:-71.90615:42.97402:30:-1.01 835 06/11/20 19:13:45 0:26 5235 4253 nxtgenp hone APPLE !PHONES (23999/15704:-71.90615:42.97402:30:-1.01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. Page 42 SDNY_GM_00170690 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342752