EFTA01342703

MOBILITY (with cell location) III111111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm ..,„„,• ••-•s" . AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: 0""n.. voice Usage For: Ite Conn. Conn. Seizure ET Originating Terminating Eat CT Feature Cell Location Date Time Time Number Slumber (UTC) 1 06/02/20 14:44:00 0:10 17:35 KT (NIOP:VCORR] 2 06/02/20 14:44:00 0:11 10:35 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0, 023310608:91057:- 71.9598779:43.2972525:150:-1.0] 3 06/02/2014:54:35 0:00 0:19 NO (VCORR] (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 4 06/02/2014:54:54 0:00 6:41 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 5 06/02/2017:04:25 0:03 10:19 NT (NIOP:VCORR] 6 06/02/2017:04:25 0:04 10:19 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.01 7 06/02/20 17:33:58 0:10 0:54 NT (Ni-Fi:NIOP] [000000008:0:0.0:0.0:-1:-1.0] 8 06/03/2000:07:18 0:16 6:39 NT (NIOP:VCORR] 9 06/03/2000:07:18 0:16 6:39 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.01 10 06/03/2019:09:20 0:23 0:00 NT (NIOP:CWW] 11 06/03/2019:09:26 0:29 0:02 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.01 12 06/03/2019:09:26 0:29 0:02 NT (NIOP:CFNA:CNV :VN] 13 06/03/2020:31:08 0:07 17:32 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0, 023310608:91057:- 71.9598779:43.2972525:150:-1.01 14 06/03/2020:31:08 0:07 60:39 NT (NIOP:VCORR] 15 06/03/2020:48:40 0:00 21:03 NO (] (023310608:91057:- 71.9598779:43.2972525:150:-1.01 16 06/03/2021:09:43 0:00 22:05 NO (Ni-Fi] [000000008:0:0.0:0.0:-1:-1.0] 17 06/04/20 14:30:08 0:11 1:42 NT (Ni-Fi:NIOP] (000000008:0:0.0:0.0:-1:-1.0] 18 06/05/2019:34:05 0:26 0:00 NT (Ni-Fi:NIOP] (000000008:0:0.0:0.0:-1:-1.0] Page 1 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00170641 EFTA01342703 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm tr-ji`a l. AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Voice Usage For: Sim Ite Conn. Conn. Seizure ET Originating Terminating =CI CT Feature Cell Location Date Time Time Number Number (MTC) 19 06/05/20 19:34:06 0:27 0:02 40 [VCORR] 20 06/05/20 19:34:06 0:27 0:02 er (14i- (000000008:0:0.0:0.0:-1:-1.0] Fi:NIOP:CFNA:V M] 21 06/05/2019:34:36 0:25 0:00 Ifi [Ni-Fi:NIOP] [000000008:0:0.0:0.0:-1:-1.0] 22 06/05/20 19:34:38 0:27 0:02 40 [VCORR] 23 06/05/20 19:34:38 0:27 0:02 [Ni- [000000008:0:0.0:0.0:-1:-1.0] Fi:NIOP:CFNA:V M] 24 06/05/20 20:45:34 0:24 0:00 (NIOP] 25 06/05/20 20:45:41 0:31 0:02 YI [NIOP:CFNA:VM] 26 06/05/2020:45:41 0:31 0:02 +0 (Ni-Fi] [000000008:0:0.0:0.0:-1:-1.0] 27 06/05/20 20:46:31 0:24 0:00 YI [NIOP] 28 06/05/20 20:46:37 0:30 0:02 YI [NIOP:CFNA:VM] 29 06/05/2020:46:37 0:30 0:02 +0 (Ni-Fi] [000000008:0:0.0:0.0:-1:-1.0] 30 06/06/20 22:41:11 0:23 0:00 YI [NIOP] 31 06/06/20 22:41:16 0:28 1:04 YI [NIOP:CFNA:VM] 32 06/06/2022:41:16 0:28 0:06 40 [Ni-Fi] [000000008:0:0.0:0.0:-1:-1.0, 023310608:91057:- 71.9598779:43.2972525:150:-1.0] 33 06/06/2022:41:22 0:00 0:58 40 [VCORE] [023310608:91057:- 71.9598779:43.2972525:150:-1.0, 023310601:91057:- 71.9598779:43.2972525:150:-1.0] 34 06/06/20 22:43:40 0:04 3:36 40 [VCORR] 35 06/06/20 22:43:40 0:04 1:01 Ifi [NIOP:VCORR] [023310601:91057:- 71.9598779:43.2972525:150:-1.0, 023310608:91057:- 71.9598779:43.2972525:150:-1.0] 36 06/06/2022:44:41 0:00 2:35 Ifi [Ni-Fi:NIOP] [000000008:0:0.0:0.0:-1:-1.0] AT&T Proprietary Page 2 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00170642 EFTA01342704 MOBILITY 41110 (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: 06/29/2020 Voice Usage For: Ite Conn. Conn. Seizure ST Originating Terminating flat INSI CT Feature Cell Location m Date Time Time Number Number (OTC) 37 06/09/20 20:00:48 0:01 2:22 NO (Ni-Fi] [000000008:0:0.0:0.0:-1:-1.0] 38 06/09/2020:59:57 0:10 40:05 NT (NIOP:VCORR] 39 06/09/2020:59:57 0:11 40:05 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 40 06/09/2021:46:06 0:39 0:03 NO -Fi] [000000008:0:0.0:0.0:-1:-1.0] 41 06/09/20 21:46:34 0:11 0:00 NT On-Fi:NIOP] 42 06/09/20 21:46:34 0:11 0:00 NT (NIOP] 43 06/09/20 21:46:39 0:16 0:01 NT (NIOP:CF8:VN] 44 06/09/2021:46:39 0:17 0:01 NO -Fi] [000000008:0:0.0:0.0:-1:-1.0] 45 06/09/2023:19:32 0:10 0:03 NO -Fi] [000000008:0:0.0:0.0:-1:-1.0] 46 06/09/20 23:19:41 0:03 0:00 NT [Ni-Fi:NIOP] 47 06/09/20 23:19:41 0:03 0:00 NT [Ni-Fi:NIOP] 48 06/09/20 23:19:46 0:08 0:02 NT Fi:NIOP:CF8:VN 49 06/09/2023:19:46 0:09 0:02 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 50 06/09/20 23:58:57 0:02 0:00 NT [Ni-Fi:NIOP] 51 06/09/20 23:58:57 0:02 0:00 NT [Ni-Fi:NIOP] 52 06/09/20 23:59:00 0:05 0:02 NT Fi:NIOP:CF8:VN 53 06/09/2023:59:00 0:06 0:02 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 54 06/10/20 14:55:12 0:23 0:00 NT (NIOP] 55 06/10/20 14:55:12 0:23 0:00 NT (Ni-Fi:NIOP] 56 06/10/20 14:55:16 0:27 0:02 NT Fi:NIOP:CFNA:V N] AT&T Proprietary Page 3 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00170643 EFTA01342705 MOBILITY 411110 (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: 0""n0.0 Voice Osage For: Ite Conn. Conn. Seizure ST Originating Terminating DILI 1NSI CT Feature Cell Location m Date Time Time Number Number (OTC) 57 06/10/2014:55:16 0:27 0:02 NO [Ili-Fi] [000000008:0:0.0:0.0:-1:-1.0] 58 06/10/2014:55:36 0:10 0:05 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 59 06/10/20 18:51:20 0:23 0:00 MT (NIOP] 60 06/10/20 18:51:27 0:30 0:02 MT (NIOP:CFNA:VN] 61 06/10/20 18:51:27 0:31 0:02 NO (Ni-Fi] [000000008:0:0.0:0.0:-1:-1.0] 62 06/10/20 19:11:49 0:21 0:00 NT (NIOP] 63 06/10/20 19:11:53 0:25 0:02 NO (Ni-Fi] [000000008:0:0.0:0.0:-1:-1.0] 64 06/10/2019:11:53 0:25 0:02 NT (NIOP:CFNA:VN] 65 06/10/2022:21:12 0:23 0:00 NT (NIOP] 66 06/10/2022:21:17 0:28 0:02 NO (000000008:0:0.0:0.0:-1:-1.0] 67 06/10/2022:21:17 0:28 0:02 MT (NIOP:CFNA:VN] 68 06/11/2000:50:40 0:22 0:00 NT (NIOP] 69 06/11/2000:50:40 0:22 0:00 NT [Ni-Fi:NIOP] 70 06/11/2000:50:45 0:27 0:01 NT (Ni- Fi:NIOP:CFNA:V 14] 71 06/11/2000:50:45 0:27 0:01 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 72 06/11/2001:00:17 0:06 44:39 NT (NIOP:VCORR] 73 06/11/2001:00:17 0:07 44:39 NO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 74 06/11/20 14:12:28 0:38 0:03 NO (Ni-Fi] [000000008:0:0.0:0.0:-1:-1.0] 75 06/11/20 23:57:41 0:00 0:00 MT (NIOP:CNN] 76 06/11/20 23:57:47 0:06 0:04 MT (NIOP:CFD:CNN: VN] AT&T Proprietary Page 4 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00170644 EFTA01342706 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm .........° AT&T •••-es."" AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: Run Time: 0""n.. voice Usage For: Ite Conn. Conn. Seizure ST Originating Terminating liar INS! CT Feature Cell Location m Date Time Time Number Member (OTC) 77 06/11/20 23:57:47 0:07 0:04 MO [Wi-Fi] [000000008:0:0.0:0.0:-1:-1.0] 78 06/12/2000:35:53 0:39 0:04 MO [Ni-Fi] [000000008:0:0.0:0.0:-1:-1.0] 79 06/12/20 00:36:33 0:24 0:00 HT [NIOP] 80 06/12/20 00:36:39 0:30 0:02 HT [NIOP:CFNA:VM] 81 06/12/2000:36:39 0:31 0:02 MO [Ni-Fi] [000000008:0:0.0:0.0:-1:-1.0] 82 06/12/20 13:40:56 0:17 0:38 HT [Ni-Fi:NIOP] [000000008:0:0.0:0.0:-1:-1.0] 83 06/12/20 13:41:49 0:02 0:00 MO [Ni-Fi] [000000008:0:0.0:0.0:-1:-1.0] 84 06/12/20 16:43:56 0:25 0:00 HT [Ni-Fi:NIOP] (000000008:0:0.0:0.0:-1:-1.0] 85 06/12/20 16:43:57 0:26 0:05 HT [Ni- [000000008:0:0.0:0.0:-1:-1.0] Fi:NIOP:CFNA:V M] 86 06/12/20 16:44:48 0:06 0:00 HT (Wi-fi:MIOP] (000000008:0:0.0:0.0:-1:-1.0] 87 06/12/20 16:47:03 0:36 0:03 MO pia-Pi] (000000008:0:0.0:0.0:-1:-1.0] 88 06/12/20 16:47:08 0:00 0:00 MO pia-Pi] (000000008:0:0.0:0.0:-1:-1.0] 89 06/12/20 16:47:56 0:35 0:05 MO pia-Pi] (000000008:0:0.0:0.0:-1:-1.0] 90 06/12/20 16:48:26 0:18 0:00 MO pia-Pi] (000000008:0:0.0:0.0:-1:-1.0] 91 06/12/20 16:49:51 0:13 0:43 MO pia-Pi] (000000008:0:0.0:0.0:-1:-1.0] 92 06/16/20 23:26:00 0:24 0:00 NT (Wi-Fi:NIOP] AT&T Proprietary Page 5 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00170645 EFTA01342707 MOBILITY (with cell location) 41.0 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm ters "-a. as AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: voice Usage For: Ite Conn. Conn. Seizure ST Originating Terminating =CI ENSI CT Feature Cell Location Date Time Time Number Member (UTC) 93 06/16/2023:28:06 0:30 0:06 HT [14i- Fi:NIOP:CFNA:V 14] 94 06/16/2023:28:06 0:30 0:06 HO (Ni-Pi] [000000008:0:0.0:0.0:-1:-1.0] 95 06/16/2023:37:55 0:24 0:00 HT [14i-Pi:NIOP] 96 06/16/2023:38:03 0:32 0:00 HT (Wi- Fi:NIOP:CFNA:V 14] 97 06/16/2023:38:03 0:32 0:00 HO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 98 06/17/20 17:48:24 0:07 0:00 HT (Ni-Fi:NIOP] (000000008:0:0.0:0.0:-1:-1.0] 99 06/18/20 00:39:03 0:05 0:00 HT [MICR] 100 06/18/20 00:39:03 0:06 0:00 HO (Ni-Pi] [000000008:0:0.0:0.0:-1:-1.0] 101 06/18/20 13:07:09 0:02 0:00 HO (Ni-Pi] [000000008:0:0.0:0.0:-1:-1.0] 102 06/18/20 13:07:53 0:13 43:34 HO (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0, 023310608:91057:- 71.9598779:43.2972525:150:-1.01 103 06/18/20 13:51:27 0:00 0:56 HO (NIOR:VCORR] (023310608:91057:- 71.9598779:43.2972525:150:-1.01 104 06/18/20 13:52:25 0:00 14:36 HO (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 105 06/19/20 17:59:03 0:07 0:00 HT (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 106 06/19/2020:15:59 0:10 0:02 HO (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 107 06/21/2016:45:33 0:06 0:00 HT [MICR] 108 06/22/20 20:05:36 0:03 0:00 HT [MICR] AT&T Proprietary Page 6 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GNL00170646 EFTA01342708 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in Inc. Run Date: 06/29/2020 Run Time: Voice Usage For: Ite Conn. Conn. Seizure ST Originating Terminating =MI IXSI CT Feature Cell Location Date Time Sum Number Mambos (OTC) 109 06/22/20 20:05:38 0:03 0:00 MO (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 110 06/22/20 20:06:21 0:24 0:00 MT (NIOP] 111 06/22/2020:06:30 0:33 0:09 MT (NIOP:CFNA:VM] 112 06/22/2020:06:30 0:33 0:09 MO (Ni-Pi] [000000008:0:0.0:0.0:-1:-1.0] 113 06/22/20 23:32:01 0:28 0:00 MT (Ni-Pi:NIOP] (000000008:0:0.0:0.0:-1:-1.0] 114 06/22/2023:32:03 0:30 0:03 MO (VCORR] 115 06/22/2023:32:03 0:30 0:03 MT (Ni- (000000008:0:0.0:0.0:-1:-1.0] Fi:NIOP:CFNA:V M] 116 06/25/20 14:02:08 0:01 0:00 MT (NIOP] 117 06/25/20 14:02:12 0:00 0:00 MT (NIOP] 118 06/25/20 15:01:02 0:18 0:15 MO (Vi-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 119 06/25/2015:06:11 0:05 54:26 MO (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 120 06/25/2016:30:49 0:03 0:57 MO (Ni-Pi:NIOR] (000000008:0:0.0:0.0:-1:-1.0] 121 06/25/20 17:56:18 0:23 0:00 MT (Vi-Pi:NIOP] (000000008:0:0.0:0.0:-1:-1.0] 122 06/25/2017:56:19 0:24 0:35 MT (Ni- (000000008:0:0.0:0.0:-1:-1.0] Fi:NIOP:CFNA:V M] 123 06/25/20 18:25:23 0:02 1:15 MO (Ni- (000000008:0:0.0:0.0:-1:-1.0] Pi:NIOR:VM] 124 06/25/2018:45:57 0:24 0:00 MT (Mi-Pi:NIOP] AT&T Proprietary Page 7 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00170647 EFTA01342709 MOBILITY (with cell location) • 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Data: Run Tina: 0""n02. voice Usage For: Ito Conn. Conn. Seizure ET Originating Terminating Din IMSI CT Feature Coll Location Data Time Time Humber Number (UTC) 125 06/25/2018:46:03 0:30 0:05 MT [Hi- Fi:HIOP:CFNA:V M] 126 06/25/2018:46:03 0:31 0:05 MO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 127 06/25/2019:38:06 0:08 8:45 MT (HIOP:VCORR] 128 06/25/2019:38:06 0:09 8:45 MO (Ni-Fi] (000000008:0:0.0:0.0:-1:-1.0] 129 06/25/2019:51:53 0:08 0:53 MT (Vi-Fi:HIOP] [000000008:0:0.0:0.0:-1:-1.0] 130 06/25/2019:53:32 0:14 0:00 MT (1 131 06/25/2019:53:32 0:25 0:00 ST (NIOP] 132 06/25/2019:53:33 0:26 0:03 MO (14i-Fi] 133 06/25/2019:53:33 0:26 0:03 ST (NIOP:CFNA:VM] 134 06/25/2019:55:08 0:06 0:38 MT (Ni-Fi:NIOP] 135 06/25/2019:55:08 0:07 27:11 MO (14i-Fi] (000000008:0:0.0:0.0:-1:-1.0] 136 06/25/2019:55:46 0:00 26:33 MT (NIOP:VCORR] 137 06/25/2020:44:24 0:21 0:00 MT (NIOP] (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 138 06/25/2020:47:13 0:14 0:00 HT CHIOS] (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 139 06/25/2022:27:31 0:09 1:09 MO (VCORR] 140 06/25/2022:27:31 0:09 1:09 MT (Ni-Fi:NIOP] (000000008:0:0.0:0.0:-1:-1.0] 141 06/26/20 22:20:31 0:24 0:00 MT (Hi-Fi:H108] (000000008:0:0.0:0.0:-1:-1.0] AT&T Proprietary Page 8 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GNL00170648 EFTA01342710 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm . AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: MS= Item Conn. Conn. Originating ET Bytes Bytes Apn DEBI 1MSI MAKE MODEL Cell Location Data Tama Number Up Dn (OTC) 1 06/01/20 04:02:50 2:13 288 48nxtgenp APPLE !PHONES (366491269:1431606::::0) U.S.Cellular, hone _USA 2 06/01/20 04:02:51 2:13 48 Onxtgenp APPLE !PHONES (311580084491269:1217109705044::::0) hone 3 06/01/20 04:05:04 60:00 7584 6400 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 4 06/01/20 04:49:04 60:00 6940 2896 ins APPLE !PHONES 5 06/01/20 05:05:04 60:00 1213 1207 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 6 06/01/20 05:49:04 60:00 10272 4128 ins APPLE !PHONES 7 06/01/20 06:05:04 60:00 692 420 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 8 06/01/20 06:49:04 60:00 8388 2928 ins APPLE !PHONES 9 06/01/20 07:05:04 60:00 924 840 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 10 06/01/20 07:49:04 60:00 12028 4628 ins APPLE !PHONES 11 06/01/20 08:05:04 60:00 976 945 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 12 06/01/20 08:49:04 60:00 8388 2928 ins APPLE !PHONES 13 06/01/20 09:05:04 60:00 1033 840 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 14 06/01/20 09:49:04 60:00 10844 4268 ins APPLE !PHONES 15 06/01/20 10:05:04 60:00 808 630 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 16 06/01/20 10:49:04 60:00 8264 2928 ins APPLE !PHONES 17 06/01/20 11:05:04 60:00 1176 676nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 18 06/01/20 11:49:04 60:00 10036 3176 ins APPLE !PHONES 19 06/01/20 12:05:04 60:00 6242 8975nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 20 06/01/20 12:49:04 60:00 11796 4736 ins APPLE !PHONES 21 06/01/20 13:05:04 60:00 1292 938 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 22 06/01/20 13:49:04 60:00 12028 4268 ins APPLE !PHONES 23 06/01/20 14:05:04 52:50 97659 63430nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 24 06/01/20 14:49:04 1:01 6304 2224 ins APPLE !PHONES 25 06/01/20 14:50:09 18:13 9393 8466 ins APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 1 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170649 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342711 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:13:13pm u AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DOM 1MSI MAKE MODEL Cell Location Data Tim Number Up Dn (MC) 26 06/01/20 14:57: 19:38 53238 283837nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 27 06/01/20 15:08: 9:10 3052 1432 Leis APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.01 28 06/01/20 15:08: 9:10 2920 1432 Leis APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.01 29 06/01/20 15:17: 2:04 54413 18936nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 30 06/01/20 15:17: 2:03 6228 6689 Leis APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, _USA 31 06/01/20 15:17: 2:04 16936 54125nxtgenp APPLE !PHONES (311580084491266:1217109705044::::01 hone 32 06/01/20 15:17: 2:02 6669 5964 Leis APPLE !PHONES (311580084491266:1217109705044::::01 33 06/01/20 15:19: 60:00 235957 176510nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 34 06/01/20 15:19: 31:40 9383 7358 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 35 06/01/20 15:51: 16:00 3672 1556 ims APPLE !PHONES 36 06/01/20 16:07: 0:15 6676 1820 Leis APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 37 06/01/20 16:07: 43:40 6632 2648 Leis APPLE !PHONES 38 06/01/20 16:19: 60:00 81016 209053nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 39 06/01/20 16:51: 0:51 2644 1324 Leis APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.01 40 06/01/20 16:52: 12:52 3532 1432 Leis APPLE !PHONES 41 06/01/20 17:04: 1:09 2644 1324 Leis APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.01 42 06/01/20 17:06: 60:00 11996 4328 Leis APPLE !PHONES 43 06/01/20 17:19: 60:00 1138 1936nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 44 06/01/20 18:06: 60:00 8480 3020 Leis APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 2 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170650 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342712 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm •--is"" a AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided UTC. Run Date: 06/29/2020 Run Time: Data Usage Per: IS= Item Conn. Conn. Originating ET Bytes Bytes Apn IMEI IMSI MAKE MODEL Cell Location Date Tame (OTC) Number up On 45 06/01/20 18:19:36 60:00 36198 25369nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 46 06/01/20 19:06:05 21:04 5072 1572 ims APPLE !PHONES 47 06/01/20 19:19:36 60:00 80090 154219nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310785:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 48 06/01/20 19:27:09 14:38 2644 1324 iota APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 49 06/01/20 19:41:47 60:00 12136 4684 ims APPLE !PHONES 50 06/01/20 20:19:36 60:00 9626 23893 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 51 06/01/20 20:41:47 60:00 11060 4952 ims APPLE !PHONES 52 06/01/20 21:19:36 35:09 12444 6123 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 1.0] 53 06/01/20 21:41:47 54:22 8480 2896 ims APPLE !PHONES 54 06/01/20 21:54:44 2:03 266 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 55 06/01/20 21:54:45 2:03 48 Onxtgenp APPLE !PHONES (311580084491266:1217109705044::::01 hone 56 06/01/20 21:56:48 1:48 48 Onxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 57 06/01/20 21:58:36 3:37 48 Onxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 58 06/01/20 22:02:12 1:45 266 48 nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 59 06/01/20 22:02:13 1:45 48 Onxtgenp APPLE !PHONES (311580084491266:1217109705044::::01 hone 60 06/01/20 22:03:58 60:00 74045 78426 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 61 06/01/20 22:36:09 21:23 26404 1412 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 62 06/01/20 22:36:09 21:23 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 63 06/01/20 22:57:32 11:56 8260 2820 ims APPLE !PHONES 64 06/01/20 23:03:58 60:00 4095 4941 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 3 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170651 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342713 MOBILITY 41! (with cell location) ill1111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm teS 4a"11. AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn Mei 1MSI MAKE MODEL Col/ Location Date Timo Number Up On (OTC) 65 06/01/20 23:09:2 0:02 0 0 Las APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 66 06/01/20 23:09:2 0:02 0 0 Lau APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 67 06/01/20 23:09:41 60:00 35795 18581 Lau 68 06/02/20 00:03:5 60:00 5974 7569nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 69 06/02/20 00:09:41 60:00 6726 3252 Lau 70 06/02/20 01:03:5 60:00 3725 892nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 71 06/02/20 01:09:41 60:00 10160 3284 Lau 72 06/02/20 02:03:5 30:02 490 1155nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 73 06/02/20 02:09:41 60:00 8496 3036 Lau 74 06/02/20 02:33:5 0:35 5168 6230nxtgenp APPLE !PHONES (366491269:1431606::::01 U.S.Cellular, hone _USA 75 06/02/20 02:34:0C 0:35 6230 4880nxtgenp APPLE !PHONES (311580084491269:1217109705044::::01 hone 76 06/02/20 02:34:3 51:01 19228 7931nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 77 06/02/20 03:09:41 60:00 15344 5768 Lau 78 06/02/20 03:25:3 0:54 268 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 79 06/02/20 03:25:3 0:53 48 Onxtgenp APPLE !PHONES (311580084491266:1217109705044::::01 hone 80 06/02/20 03:26:3C 60:00 7623 6111nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 81 06/02/20 04:09:41 60:00 6956 2664 Lau 82 06/02/20 04:26:3C 60:00 1559 1365nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 83 06/02/20 05:09:41 60:00 6956 2788 Lau 84 06/02/20 05:26:3C 60:00 1443 1155nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 85 06/02/20 06:09:41 60:00 6848 2680 Lau 86 06/02/20 06:26:3C 60:00 1722 2051nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 87 06/02/20 07:09:41 60:00 7064 2804 Lau 88 06/02/20 07:26:3C 60:00 9292 13711nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 89 06/02/20 08:09:41 60:00 15452 5768 Lau AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 4 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SONY_GM_00170652 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342714 MOBILITY 4III, (with cell location) ill1111020 AT&T AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in UTC. Run Date: 06/29/2020 Run Tine: Data Usage For: Item Conn. Conn. Originating ET Bytos Bytes Apn =MI IMSI MARE MODEL Cell Location Date Tame Number Up On (OTC) 90 06/02/20 08:26:30 60:00 1097 945 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 91 06/02/20 09:09:41 60:00 6646 2572 Las 92 06/02/20 09:26:30 60:00 606 630 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 93 06/02/20 10:09:41 60:00 6956 2804 Lau 94 06/02/20 10:26:30 60:00 3604 996 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 95 06/02/20 11:09:41 60:00 12060 6052 Lau 96 06/02/20 11:26:30 60:00 740 420 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 97 06/02/20 12:09:41 60:00 6956 2772 Lau 98 06/02/20 12:26:30 60:00 576 630 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 99 06/02/20 13:09:41 60:00 10466 4288 Lau 100 06/02/20 13:26:30 60:00 467 210 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 101 06/02/20 14:09:41 44:54 20066 10876 isle APPLE !PHONES 102 06/02/20 14:26:30 60:00 49577 154114 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 103 06/02/20 14:43:50 10:45 1146262 2105550 Les APPLE IPHONE6 104 06/02/20 14:54:35 0:15 5526 2840 Les APPLE IPHONE6 (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 105 06/02/20 14:54:35 0:15 5192 2840 Les APPLE IPHONE6 [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 106 06/02/20 14:54:35 0:15 52007 29291 Les APPLE IPHONE6 [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 107 06/02/20 14:54:35 0:15 52074 29291 Les APPLE IPHONE6 (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 108 06/02/20 14:54:50 6:46 1277744 902121 isle APPLE !PHONES 109 06/02/20 14:54:50 10:37 10112 4792 isle APPLE !PHONES 110 06/02/20 15:05:27 2:59 2660 1340 isle APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 111 06/02/20 15:05:27 2:59 2596 1340 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 5 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170653 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342715 MOBILITY (with cell location) • 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: 06/29/2020 Run Time: Data Usage For: SWIM Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ 1MSI MAKE MODEL Cell Location Date Tim Number DP On (OTC) 112 06/02/20 15:08:30 0:16 6689 5999 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0] 113 06/02/20 15:08:46 4:21 3532 1340 Las APPLE !PHONES 114 06/02/20 15:13:07 10:32 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 115 06/02/20 15:23:39 60:00 12028 4484 ins APPLE !PHONES 116 06/02/20 15:26:30 60:00 99974 67663nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 117 06/02/20 16:23:39 60:00 14832 9324 ins APPLE !PHONES 118 06/02/20 16:26:30 60:00 43565 32662 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 119 06/02/20 17:04:21 10:23 1523437 1820730 ins APPLE !PHONES 120 06/02/20 17:23:39 60:00 25120 13800 ins APPLE !PHONES 121 06/02/20 17:26:30 25:51 6237 7511nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 122 06/02/20 17:33:52 1:01 126707 153540 ins APPLE !PHONES 123 06/02/20 17:52:21 60:00 15314 18255 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 124 06/02/20 18:23:39 60:00 6956 2680 ins APPLE !PHONES 125 06/02/20 18:52:21 60:00 751 735nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 126 06/02/20 19:23:39 60:00 12136 4592 ins APPLE !PHONES 127 06/02/20 19:52:21 60:00 34062 35324 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 128 06/02/20 20:23:39 60:00 12368 4444 ins APPLE !PHONES 129 06/02/20 20:52:21 60:00 16138 17233nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 130 06/02/20 21:23:39 28:19 124 496 ims APPLE IPE0NE8 131 06/02/20 21:43:17 8:41 10410 6526 ims 132 06/02/20 21:51:58 60:00 0 0 ims 133 06/02/20 21:52:21 60:00 83690 71751nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 134 06/02/20 21:53:02 19785258484 9:02 9853 6222 ims 3587080982063727 310410214827503 APPLE IPE0NE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 6 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170654 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342716 MOBILITY (with cell location) a 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm ...... ``a°• AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn flat IMSI MAKE MODEL Cell Location Date Tame Up On (DSC) 135 06/02/20 22:02:04 7:42 2620 1340 /ma APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 136 06/02/20 22:02:04 7:42 2666 1340 Las APPLE 'PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 137 06/02/20 22:09:46 0:20 3408 1324 Lau APPLE 'PHONES 138 06/02/20 22:10:06 2:06 2660 1324 Lau APPLE 'PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 139 06/02/20 22:10:06 2:06 2596 1324 Lau APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 140 06/02/20 22:12:12 60:00 11996 4392 Lau APPLE !PHONES 141 06/02/20 22:51:58 60:00 0 0 Lau 142 06/02/20 22:52:21 60:00 53259 29558 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 143 06/02/20 23:12:12 60:00 16884 9908 Lau APPLE IPHONE8 144 06/02/20 23:51:58 60:00 0 0 Lau 145 06/02/20 23:52:21 60:00 113776 20487nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.01 146 06/03/20 00:07:02 6:55 1488519 757807 Lau APPLE !PHONES 147 06/03/20 00:12:12 60:00 9280 3612 Lau APPLE IPHONE8 148 06/03/20 00:51:58 60:00 0 0 Lau 149 06/03/20 00:52:21 59:45 616690 47854nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.01 150 06/03/20 01:12:12 36:32 3408 1340 Lms APPLE !PHONES 151 06/03/20 01:48:43 1:43 61788 1340 Lms APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 152 06/03/20 01:48:44 1:42 2596 1340 Lms APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 153 06/03/20 01:50:26 0:20 3408 1340 Lau APPLE !PHONES 154 06/03/20 01:50:46 1:17 2660 1340 Lau APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 155 06/03/20 01:50:46 1:17 2596 1340 Lau APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 7 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170655 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342717 MOBILITY 41110 (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm ..., /14 `—‘ -rs e,• AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: SS= Item Conn. Conn. OrIganatIng BY Bytes Bytes Apn DEBI HISS MAKE MODEL Coll Location Data Time Number Up On (OTC) 156 06/03/20 01:51:5 0:01 0 0 Las 157 06/03/20 01:52:0 60:00 24624 7240 Les APPLE !PHONES 158 06/03/20 01:52:0 1:07 268 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 159 06/03/20 01:52:0 1:07 48 0nxtgenp APPLE !PHONES [311580084491266:1217109705044::::01 hone 160 06/03/20 01:53:1 60:00 107627 64507nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 161 06/03/20 02:52:0 60:00 6616 2680 Les APPLE !PHONES 162 06/03/20 02:53:1 60:00 514 525nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 163 06/03/20 03:52:0 8:25 0 0 Les APPLE !PHONES 164 06/03/20 03:53:1 60:00 514 525nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 165 06/03/20 04:00:2 4:35 48740 1340 Les APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 166 06/03/20 04:00:2 4:33 2596 1340 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 167 06/03/20 04:05:01 60:00 12120 4732 Les APPLE !PHONES 168 06/03/20 04:53:1 60:00 578 630nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 169 06/03/20 05:05:01 60:00 8496 3036 Les APPLE !PHONES 170 06/03/20 05:53:1 60:00 462 420nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 171 06/03/20 06:05:01 60:00 6616 2664 Les APPLE !PHONES 172 06/03/20 06:53:1 60:00 603 840nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 173 06/03/20 07:05:01 33:19 4980 1588 Les APPLE !PHONES 174 06/03/20 07:38:20 0:02 0 0 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 175 06/03/20 07:38:20 0:02 0 0 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 176 06/03/20 07:45:1 60:00 11869 8788 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 177 06/03/20 07:53:13 60:00 3620 996nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 178 06/03/20 08:45:1 35:25 2596 1340 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 179 06/03/20 08:53:13 60:00 514 525nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 8 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170656 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342718 MOBILITY 4111. (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DELI HIBI MAKE MODEL Cell Location Date Tama Number Up On (UTe) 180 06/03/20 09:20:4 0:01 0 0 ins APPLE !PHONES 181 06/03/20 09:20:5 60:00 18242 9408 ins 182 06/03/20 09:53:1 60:00 578 630nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 183 06/03/20 10:20:5 60:00 6956 2772 ins 184 06/03/20 10:53:1 60:00 3488 786nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 185 06/03/20 11:20:5 60:00 13460 4624 ins 186 06/03/20 11:53:1 43:06 346 210nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 187 06/03/20 12:20:5 60:00 8496 2928 ins 188 06/03/20 12:36:1 60:00 17171 19006nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 189 06/03/20 13:20:5 60:00 6848 2680 ins 190 06/03/20 13:36:1 60:00 1076 5194nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 191 06/03/20 14:20:5 60:00 17440 7140 ins 192 06/03/20 14:36:1 60:00 33285 20450nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 193 06/03/20 15:20:5 60:00 8366 2928 ins 194 06/03/20 15:36:1 60:00 68804 52255nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 1.0) 195 06/03/20 16:20:59 19785258484 25:43 3532 1340 iota 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 9 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SONY_GM_00170657 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342719 MOBILITY (with cell location) • ill1111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Ties: Data usage For: Item Conn. Conn. Originating BB Bytes Bytom Apn INEI ItlSI maim NOBEL Cell Location Data Tim Number on (UTC) 196 06/03/20 16:36:1 60:00 73150 319642 nxtgonp 3 APPLE !PHONES 1024577552:96006:- hone 71.9906006:43.3717995:210:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 197 06/03/20 16:46:42 35:56 16696 2804 ims 3 APPLE !PHONES 1023310601:91057:- 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.01 198 06/03/20 16:46:42 35:56 6500 2804 ims 3 APPLE !PHONES 1023310601:91057:- 71.9598779:43.2972525:150:-1.01 199 06/03/20 17:22:38 60:00 12152 5500 ins 3 APPLE !PHONES 200 06/03/20 17:36:19 60:00 6217 8569nxtgenp 3 APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 201 06/03/20 18:22:38 50:15 20272 14536 ims 3. APPLE !PHONES 202 06/03/20 18:36:19 60:00 65601 74295nxtgenp 3 APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 203 06/03/20 19:08:57 0:32 3390 17716 ims 3 APPLE !PHONES 204 06/03/20 19:12:53 1:08 29664 1588 ims 3 APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 205 06/03/20 19:12:53 1:08 4244 1588 ims 3! APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 206 06/03/20 19:14:011 60:00 15452 6108 ins 3 APPLE !PHONES 207 06/03/20 19:36:19 49:02 154491 104472nxtgenp 3 APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 208 06/03/20 20:14:01 12:54 0 0 ins 3 APPLE !PHONES 209 06/03/20 20:25:20 1:52 118093 19163nxtgenp 3 APPLE !PHONES 1366491269:1431606::::01 U.S.Cellular, hone _USA AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 10 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170668 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342720 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm tz-, 4*-1 :• AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in Inc. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DEBI IBS' BARB MODEL Cell Location Data Tam Number Up On (UTC) 210 06/03/20 20:25:2 1:51 6244 6715 ims APPLE !PHONES (366491269:1431606::::0) U.S.Cellular, _USA 211 06/03/20 20:25:2 1:52 19163 117805nxtgonp APPLE !PHONES (311580084491269:1217109705044 ■ hone 311580084513798:1217109705132.. . . 311580084491269:1217109705044 311580084491266:1217109705044:: ::0) 212 06/03/20 20:25:22 1:51 6647 5980 Las APPLE !PHONES (311580084491269:1217109705044:: ::0) 213 06/03/20 20:26:55 21:44 15066 11650 Las APPLE !PHONES 214 06/03/20 20:27:13 60:00 29699 22731nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 215 06/03/20 20:31:0 17:38 2582971 3580061 Las APPLE !PHONES 216 06/03/20 20:48:3 20:58 3222937 4174165 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 217 06/03/20 20:48:3 20:58 9450 5464 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 218 06/03/20 20:48:39, 20:58 3222937 4174165 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 1.0] 219 06/03/20 20:48:39, 20:58 9200 5464 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 220 06/03/20 21:09:37 22:11 3048535 4722292 Las APPLE !PHONES 221 06/03/20 21:09:37 60:00 25284 10868 Las APPLE !PHONES 222 06/03/20 21:27:13 56:17 30089 21364nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 223 06/03/20 22:09:3 60:00 8604 3144 Las APPLE !PHONES 224 06/03/20 22:23:2 0:34 288 48nxtgenp APPLE !PHONES (366491266:1431606:: ::0) U.S.Cellular, hone _USA 225 06/03/20 22:23:30 0:34 48 Onxtgonp APPLE !PHONES (311580084491266:1217109705044:: ::0) hone AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 11 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170659 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342721 MOBILITY (with cell location) ill1111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: 06/29/2020 Run Tiro: Data Usage For: Ma= Item Conn. Conn. Originating ET Bytes: Bytes Apn DEBI IM0I MAKE MODEL Coll Location Date Time Number Up Dn (OTC) 226 06/03/20 22:24:03 60:00 167526 117996nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 227 06/03/20 23:09:37 60:00 6636 3160 ins APPLE !PHONES 228 06/03/20 23:24:03 60:00 44474 24371nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 229 06/04/20 00:09:37 60:00 10144 3176 ims APPLE !PHONES 230 06/04/20 00:24:03 60:00 1976 5865 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 231 06/04/20 01:09:37 60:00 6956 2680 ins APPLE !PHONES 232 06/04/20 01:24:03 23:49 35215 21990nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 233 06/04/20 01:47:52 60:00 56507 36707nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 234 06/04/20 02:09:37 60:00 16640 6280 ims APPLE !PHONES 235 06/04/20 02:47:52 60:00 7541 1994 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 236 06/04/20 03:09:37 60:00 6646 2896 ins APPLE !PHONES 237 06/04/20 03:47:52 60:00 2264 3777 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 238 06/04/20 04:09:37 60:00 6604 2928 ims APPLE !PHONES 239 06/04/20 04:47:52 60:00 1670 1785nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 240 06/04/20 05:09:37 60:00 6366 2928 ins APPLE !PHONES 241 06/04/20 05:47:52 60:00 1651 1575nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 242 06/04/20 06:09:37 60:00 11920 4144 ins APPLE !PHONES 243 06/04/20 06:47:52 60:00 1092 1155 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 244 06/04/20 07:09:37 60:00 11920 4412 ins APPLE !PHONES 245 06/04/20 07:47:52 60:00 450 420 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 246 06/04/20 08:09:37 60:00 6646 2680 ins APPLE !PHONES 247 06/04/20 08:47:52 60:00 514 525 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 248 06/04/20 09:09:37 60:00 11920 4592 ins APPLE !PHONES 249 06/04/20 09:47:52 60:00 3251 576nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 12 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170660 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342722 MOBILITY a (with cell location) ill1111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm tre,J 4*--f• AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn flat INS! MAKE MODEL Cell Location Date 1.10.0 Number Up On (UTC) 250 06/04/20 10:09:3 60:00 6848 2680 ims APPLE !PHONES 251 06/04/20 10:47:5 60:00 42253 3025 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023413008:91457:-72.166667:43.205:100:-1.01 252 06/04/20 11:09:3' 38:20 3424 1340 ims APPLE !PHONES 253 06/04/20 11:47:5 24:27 10549 17309nxtgenp APPLE IPHONt8 (023413008:91457:-72.166667:43.205:100:-1.0. hone 023310785:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150: 1.01 254 06/04/20 11:47:5' 7:10 195712 2208 ims APPLE !PHONES (023310785:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150: 1.01 255 06/04/20 11:47:5' 7:10 7524 2208 ims APPLE !PHONES (023310785:91057:- 71.9598779:43.2972525:150:-1.01 256 06/04/20 11:55:0' 18:31 3532 1340 ims APPLE !PHONES 257 06/04/20 12:12:1 2:04 286 48 nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 258 06/04/20 12:12:1 2:04 48 O nxtgenp APPLE !PHONES (311580084491266:1217109705044::::01 hone 259 06/04/20 12:13:3 0:46 6471 7525 ims APPLE !PHONES (366491269:1431606::::0) U.S.Cellular, _USA 260 06/04/20 12:13:3 0:46 7525 6207 ims APPLE !PHONES (311580084491269:1217109705044::::0) 261 06/04/20 12:14:2 52:50 19803 32618 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 262 06/04/20 12:14:2 2:22 6663 5919 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 263 06/04/20 12:16:4 51:41 11920 4344 ims APPLE !PHONES 264 06/04/20 13:07:1 0:45 266 48 nxtgenp APPLE !PHONES (366513795:1431694::::0) U.S.Cellular, hone _USA 265 06/04/20 13:07:1 0:44 48 O nxtgenp APPLE !PHONES (311580084513795:1217109705132::::01 hone AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 13 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170661 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342723 MOBILITY (with cell location) • 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. Run Date: 06/29/2020 Run Time: Data Usage For: NM= Item Conn. Conn. Originating ET Bytes Bytes Apn flat INSI MAKE MODEL Coll Location Data Tam Number up Dn (OTC) 266 06/04/20 13:07:59 60:00 90315 877381nxtgenp APPLE !PHONES (023310601:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 023310785:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 267 06/04/20 13:08:27 4:47 2736 1536 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 268 06/04/20 13:08:27 4:47 2736 1448 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 269 06/04/20 13:13:14 0:29 3206 1216 ims APPLE !PHONES 270 06/04/20 13:13:43 2:34 2752 1412 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 271 06/04/20 13:13:43 2:34 2752 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 272 06/04/20 13:16:17 1:51 3532 1340 ims APPLE !PHONES 273 06/04/20 13:18:08 20:43 2644 1412 ims APPLE !PHONES (023310785:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 274 06/04/20 13:18:08 20:43 2644 1324 ims APPLE !PHONES (023310785:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 275 06/04/20 13:38:51 1:46 3424 1324 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 14 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170662 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342724 MOBILITY (with cell location) a 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Sid= Item Conn. Conn. originating ET Bytes Bytes Apn flat RUBS mum MODEL Cell Location Date Time Number Up on (OTC) 276 06/04/20 13:40:3 4:42 3500 2412 ime APPLE !PEONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 277 06/04/20 13:40:3 4:42 3500 2324 ime APPLE !PEONES (023310601:91057:- 71.9598779:43.2972525:150:-1.01 278 06/04/20 13:45:15 2:47 3424 1324 ime APPLE IPEONES 279 06/04/20 13:48:0C 2:08 3952 1536 ime APPLE IPEONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 280 06/04/20 13:48:0i 2:08 3952 1448 ime APPLE !PEONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 281 06/04/20 13:50:1 60:00 29360 13004 ims APPLE IPEONES 282 06/04/20 14:07:5 46:54 11593 1675nxtgenp APPLE IPEONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 283 06/04/20 14:30:0 1:48 273405 246324 ime APPLE IPEONES 284 06/04/20 14:50:1 60:00 8496 3004 ime APPLE IPEONES 285 06/04/20 14:54:5 1:41 266 48nxtgenp APPLE IPEONES (366491266:1431606::::01 U.S.Cellular, hone _USA 286 06/04/20 14:54:5 1:41 48 Onxtgonp APPLE IPEONES (311580084491266:1217109705044::::01 hone 287 06/04/20 14:56:3 60:00 162660 104092nxtgenp APPLE !PEONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 288 06/04/20 15:50:1 60:00 8496 2896 ims APPLE !PEONES 289 06/04/20 15:56:3 60:00 53947 4385nxtgenp APPLE IPEONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 290 06/04/20 16:50:1 60:00 16776 6092 ims APPLE IPEONES 291 06/04/20 16:56:3 60:00 1944 6715nxtgenp APPLE IPEONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 292 06/04/20 17:50:14 51:35 5396 1680 ims APPLE IPEONES 293 06/04/20 17:56:35 60:00 35568 39441 nxtgenp APPLE IPEONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 15 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170663 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342725 MOBILITY (with cell location) i 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm ....../ `"-. 4 1" AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: NM= Item Conn. Conn. Originating ET Bytes Bytes Apn flat HIBI RARE MODEL Cell Location Date Tama unehm Up On CUTC) 294 06/04/20 18:41:49 1:00 60184 2412 /ma APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 295 06/04/20 18:41:49 1:00 3484 2324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 296 06/04/20 18:42:49 60:00 15680 5072 ims APPLE !PHONES 297 06/04/20 18:56:35 60:00 10263 5883 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 298 06/04/20 19:42:49 60:00 8496 3020 ims APPLE !PHONES 299 06/04/20 19:56:35 60:00 8052 6043 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 300 06/04/20 20:42:49 39:08 5072 1572 ims APPLE !PHONES 301 06/04/20 20:56:35 60:00 4093 1356 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 302 06/04/20 21:21:57 0:26 2644 1412 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 303 06/04/20 21:21:57 0:26 2644 1324 /ma APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 304 06/04/20 21:22:23 60:00 15000 4716 Loa APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 16 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170664 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342726 MOBILITY (with cell location) ill1111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. Run Date: 06/29/2020 Run Time: Data Osage For: Item Conn. Conn. Originating ET Bytos Bytes Apn flat IMSI MARE MODEL Cell Location Date Tam Unvehm,. PP on (OTC) 305 06/04/20 21:56:3! 39:14 5719913 14280470nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 306 06/04/20 22:22:2 12:02 0 0 ices APPLE !PHONES 307 06/04/20 22:34:2! 2:40 90252 2696 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 308 06/04/20 22:34:2! 2:40 5240 2608 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 309 06/04/20 22:35:4 1:46 1831454 6936581nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 310 06/04/20 22:37:0! 0:31 17188 5524 ice APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 17 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170665 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342727 MOBILITY a (with cell location) 1111111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn LNEI 1MSI MARE MODEL Cell Location Data Time Number Up Dn (uTc) 311 06/04/20 22:47:30 19785258484 60:00 123438 507848nxtgenp 3587080982063727 310410214827503 APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 312 06/04/20 22:47:3 1:23 6667 5982 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 313 06/04/20 22:48:5 60:00 11920 4328 ims APPLE !PHONES 314 06/04/20 23:47:3 60:00 872 735nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 315 06/04/20 23:48:5 60:00 8604 2896 ims APPLE !PHONES 316 06/05/20 00:47:3 0:31 0 Onxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 317 06/05/20 00:48:0 60:00 155415 89338 nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 318 06/05/20 00:48:5 60:00 8388 2896 ims APPLE !PHONES 319 06/05/20 01:48:0 60:00 12724 8711nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 320 06/05/20 01:48:5 60:00 11920 4112 ims APPLE !PHONES 321 06/05/20 02:48:0 60:00 969 735nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 322 06/05/20 02:48:5 60:00 6956 2540 ims APPLE !PHONES 323 06/05/20 03:48:0 15:20 173 105 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 324 06/05/20 03:48:5 60:00 13352 4860 ims APPLE !PHONES 325 06/05/20 04:03:2 0:46 288 48nxtgenp APPLE !PHONES (366513795:1431694::::0) U.S.Cellular, hone _USA 326 06/05/20 04:03:2 0:46 48 Onxtgenp APPLE !PHONES (311580084513795:1217109705132::::0) hone 327 06/05/20 04:04:0 60:00 7363 6195 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 328 06/05/20 04:48:5 60:00 13568 4576 ism APPLE 'PHONES 329 06/05/20 05:04:0 60:00 635 525 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 330 06/05/20 05:48:5 60:00 11256 3268 ims APPLE !PHONES 331 06/05/20 06:04:0 60:00 667 630 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 332 06/05/20 06:48:5 60:00 6956 2664 ims APPLE !PHONES 333 06/05/20 07:04:0 60:00 635 525 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 334 06/05/20 07:48:5 60:00 8496 3004 ins APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 18 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170666 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342728 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm ....../ `" 4 --es AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Tine: Data Usage For: Item Conn. Conn. Originating ET Bytos Bytes Apn Dar 1MSI MAKE MODEL Cell Location Date Time Number Up Dn (UTc) 335 06/05/20 08:04:08 60:00 635 525nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 336 06/05/20 08:48:56 60:00 13696 5364 ins APPLE !PHONES 337 06/05/20 09:04:08 60:00 751 735nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 338 06/05/20 09:48:56 60:00 8712 3220 ins APPLE !PHONES 339 06/05/20 10:04:08 60:00 578 630nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 340 06/05/20 10:48:56 60:00 6848 2648 ins APPLE !PHONES 341 06/05/20 11:04:08 60:00 398 315nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 342 06/05/20 11:48:56 60:00 8604 3252 ins APPLE !PHONES 343 06/05/20 12:04:08 60:00 6730 5064nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 344 06/05/20 12:48:56 60:00 6832 2648 ins APPLE !PHONES 345 06/05/20 13:04:08 60:00 450 420nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 346 06/05/20 13:48:56 60:00 15684 6940 ism APPLE !PHONES 347 06/05/20 14:04:08 60:00 450 420nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 348 06/05/20 14:48:56 60:00 6848 2648 ins APPLE !PHONES 349 06/05/20 15:04:08 60:00 659 4452nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 350 06/05/20 15:48:56 60:00 8496 2896 ins APPLE !PHONES 351 06/05/20 16:04:08 60:00 3372 472nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 352 06/05/20 16:48:56 60:00 8496 2896 ins APPLE IPHONE8 353 06/05/20 17:04:08 15:22 0 Onxtgenp APPLE IPHONE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 354 06/05/20 17:19:30 60:00 35972 24529nxtgenp APPLE IPHONE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 355 06/05/20 17:48:56 60:00 8604 3128 ins APPLE IPHONE8 356 06/05/20 18:19:30 60:00 3536 682nxtgenp APPLE IPHONE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 357 06/05/20 18:48:56 60:00 41944 22316 ins APPLE IPHONE8 358 06/05/20 19:19:30 60:00 6492 17785nxtgenp APPLE IPHONE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 359 06/05/20 19:33:43 0:22 0 320 ims APPLE IPHONE8 360 06/05/20 19:34:13 0:24 0 320 ims APPLE !PHONES 361 06/05/20 19:48:56 60:00 40528 31092 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 19 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170667 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342729 MOBILITY 4111111. (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Sid= Item Conn. Conn. Originating ET Bytes Bytes Apn flat IMBI MAKE MODEL Cell Location Date Time Number Up Dn Curc) 362 06/05/20 20:19:30 60:00 3424 577 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 363 06/05/20 20:45:10 0:33 3038 17869 ims APPLE IPHONE8 364 06/05/20 20:46:07 0:33 3750 20453 ims APPLE IPHONE8 365 06/05/20 20:48:56 60:00 7172 2988 ims APPLE IPHONE8 366 06/05/20 21:19:30 60:00 1012 4808 nxtgenp APPLE IPHONE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 367 06/05/20 21:48:56 58:49 13568 4592 ims APPLE !PHONES 368 06/05/20 22:19:30 60:00 1220 687 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 369 06/05/20 22:47:45 2:43 118304 1412 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 370 06/05/20 22:47:45 2:43 2752 1324 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 371 06/05/20 22:50:28 60:00 11044 4344 ims APPLE !PHONES 372 06/05/20 23:19:30 60:00 462 420 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 373 06/05/20 23:50:28 60:00 15232 5108 ims APPLE !PHONES 374 06/06/20 00:19:30 60:00 711 4833 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 375 06/06/20 00:50:28 60:00 15324 4840 ims APPLE !PHONES 376 06/06/20 01:19:30 60:00 32521 22185 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 377 06/06/20 01:50:28 60:00 6848 2540 ims APPLE !PHONES 378 06/06/20 02:19:30 60:00 6756 5215 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 379 06/06/20 02:50:28 1:24 0 0 ims APPLE !PHONES 380 06/06/20 02:51:52 6:21 13120 1536 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 381 06/06/20 02:51:52 6:21 3376 1448 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 382 06/06/20 02:58:13 60:00 14876 4716 ims APPLE !PHONES 383 06/06/20 03:19:30 60:00 3718 682 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 384 06/06/20 03:58:13 60:00 8388 2896 ims APPLE !PHONES 385 06/06/20 04:19:30 60:00 872 735nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 386 06/06/20 04:58:13 60:00 9928 3144 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 20 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00170668 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342730 MOBILITY (with cell location) • 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Ma= Item Conn. Conn. Originating ET Bytes Bytes Apn MIMI IMSI MAKE MODEL Cell Location Data Tam Number Up on (OTC) 387 06/06/20 05:19:30 60:00 867 945 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 1.01 388 06/06/20 05:58:13 60:00 15344 6044 ins APPLE !PHONES 389 06/06/20 06:19:30 60:00 908 1120 nxtgenp APPLE !PHONES 1023310601:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.01 390 06/06/20 06:58:13 60:00 8496 2896 ins APPLE !PHONES 391 06/06/20 07:19:30 60:00 635 525 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 392 06/06/20 07:58:13 60:00 8604 3004 ins APPLE !PHONES 393 06/06/20 08:19:30 60:00 346 210 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 394 06/06/20 08:58:13 60:00 10380 4204 Lois APPLE !PHONES 395 06/06/20 09:19:30 60:00 519 315 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 396 06/06/20 09:58:13 60:00 8496 2896 ins APPLE !PHONES 397 06/06/20 10:19:30 60:00 578 630 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 398 06/06/20 10:58:13 60:00 12152 4520 ins APPLE !PHONES 399 06/06/20 11:19:30 47:23 16469 13411nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 400 06/06/20 11:58:13 60:00 7080 2988 ins APPLE !PHONES 401 06/06/20 12:06:53 60:00 6834 5371nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 402 06/06/20 12:58:13 60:00 8496 2896 ins APPLE !PHONES 403 06/06/20 13:06:53 60:00 35211 18104 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 404 06/06/20 13:58:13 60:00 12028 4328 Lois APPLE !PHONES 405 06/06/20 14:06:53 60:00 1126 5579nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 406 06/06/20 14:58:13 60:00 8388 2896 ins APPLE !PHONES 407 06/06/20 15:06:53 60:00 3922 4868 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 408 06/06/20 15:58:13 60:00 13676 4892 ism APPLE IPE0NE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 21 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170669 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342731 MOBILITY (with cell location) r ill1111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:13:13pm . AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Tine: Data Usage For: Sid= Item Conn. Conn. Originating ET Bytom Bytes Apn DMZ Mai RARE MODEL Cell Location Data Tina Number Up On (OTC) 409 06/06/20 16:06:53 60:00 462 420 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 410 06/06/20 16:58:13 60:00 8496 3004 ims APPLE !PHONES 411 06/06/20 17:06:53 60:00 1012 5048 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 412 06/06/20 17:58:13 13:19 4964 1572 ims APPLE !PHONES 413 06/06/20 18:06:53 60:00 14636 14580 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 414 06/06/20 18:11:32 3:46 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 415 06/06/20 18:11:32 3:47 13456 1412 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 416 06/06/20 18:15:18 60:00 12028 4328 ims APPLE !PHONES 417 06/06/20 19:06:53 60:00 13602 14022 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 418 06/06/20 19:15:18 60:00 8604 3020 ims APPLE !PHONES 419 06/06/20 20:06:53 60:00 867 945 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 420 06/06/20 20:15:18 60:00 8388 3004 ims APPLE !PHONES 421 06/06/20 21:06:53 60:00 4045 10186 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 422 06/06/20 21:15:18 60:00 17224 6108 ims APPLE !PHONES 423 06/06/20 22:06:53 40:49 173 105nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 424 06/06/20 22:15:18 19:10 0 0 ims APPLE !PHONES 425 06/06/20 22:34:28 0:02 0 0 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 426 06/06/20 22:34:28 0:02 0 0 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 427 06/06/20 22:34:36 6:42 20846 19472 ims APPLE !PHONES 428 06/06/20 22:40:48 0:30 979 3143 ims APPLE !PHONES 429 06/06/20 22:41:18 3:19 19216 12680 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 430 06/06/20 22:41:18 3:19 17772 12680 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 22 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170670 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342732 MOBILITY (with cell location) • 111111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm ......„.AT&T `•-eo "- AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytos Bytes Apn flat INS! MAKE MODEL Cell Location Date Tame Number Up Dn (OTC) 431 06/06/20 22:41:18 1:03 209603 84563 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 432 06/06/20 22:41:18 1:03 209603 84563 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 433 06/06/20 22:43:39 0:58 174366 84571 Las APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 434 06/06/20 22:43:39 0:58 174366 84571 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 435 06/06/20 22:44:37 2:40 407479 313778 ims APPLE !PHONES 436 06/06/20 22:44:37 2:45 23520 12096 ims APPLE !PHONES 437 06/06/20 22:47:33 60:00 20211 9806 ims 438 06/06/20 22:47:41 8:26 5065 6246nxtgenp APPLE IPHONE8 (366491269:1431606::::0) U.S.Cellular, hone _USA 439 06/06/20 22:47:43 8:25 6246 4777nxtgenp APPLE IPHONE8 (311580084491269:1217109705044— hone 311580084491266:1217109705044::::0) 440 06/06/20 22:56:08 60:00 8145 11569nxtgenp APPLE IPHONE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 441 06/06/20 23:47:33 60:00 6924 2648 ims 442 06/06/20 23:56:08 60:00 1347 1262 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 443 06/07/20 00:47:33 60:00 10084 3036 ims 444 06/07/20 00:56:08 60:00 808 630 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 445 06/07/20 01:47:33 60:00 12244 4452 ims 446 06/07/20 01:56:08 60:00 692 420 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 447 06/07/20 02:47:33 60:00 13584 4644 ims 448 06/07/20 02:56:08 60:00 692 420 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 449 06/07/20 03:47:33 60:00 8728 2804 ims 450 06/07/20 03:56:08 60:00 865 525 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 451 06/07/20 04:47:33 60:00 9960 3036 ims 452 06/07/20 04:56:08 60:00 699 630 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 453 06/07/20 05:47:33 60:00 13368 4468 ims 454 06/07/20 05:56:08 60:00 865 525 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 23 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00170671 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342733 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm •,....„ 41' / 14"4 .0# AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Data: 06/29/2020 Run Ties: Data usage For: Item Conn. Conn. Originating ET Bytos Bytom Apn DEBI DOI RAKE MODEL Coll Location Date Time Up on (OTC) 455 06/07/20 06:47:33 60:00 7264 2772 ins 456 06/07/20 06:56:08 60:00 751 735nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 457 06/07/20 07:47:33 60:00 13476 4644 ins 458 06/07/20 07:56:08 60:00 635 525nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 459 06/07/20 08:47:33 60:00 10068 3144 ins 460 06/07/20 08:56:08 60:00 519 315nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 461 06/07/20 09:47:33 60:00 11904 4436 ism 462 06/07/20 09:56:08 60:00 519 315nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 463 06/07/20 10:47:33 60:00 9960 3036 ins 464 06/07/20 10:56:08 60:00 5502 7165nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 465 06/07/20 11:47:33 60:00 6924 2988 ins 466 06/07/20 11:56:08 25:31 3199 471nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 467 06/07/20 12:21:39 60:00 10267 5332nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 468 06/07/20 12:47:33 60:00 14816 4876 ins 469 06/07/20 13:21:39 60:00 763 735nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 470 06/07/20 13:47:33 60:00 13368 4360 ins 471 06/07/20 14:21:39 60:00 42891 28310nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 472 06/07/20 14:47:33 60:00 8496 2896 ins 473 06/07/20 15:21:39 60:00 3488 682nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 474 06/07/20 15:47:33 60:00 8604 2896 ins 475 06/07/20 16:21:39 16:38 75874 50048nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023413008:91457:-72.166667:43.205:100:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 476 06/07/20 16:38:16 1:49 288 48nxtgenp APPLE !PHONES (366491266:1431606::::0) U.S.Cellular, hone _USA 477 06/07/20 16:38:17 1:49 48 Onxtgenp APPLE !PHONES (311580084491266:1217109705044::::0) hone AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 24 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170672 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342734 MOBILITY 41! (with cell location) ill1111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Ties: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytom Apn DELI 1MSI MAKE MODEL Coll Location Data Tama Number Up Dn (OTC) 478 06/07/20 16:40:06 2:35 48 Onxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 479 06/07/20 16:42:40 0:41 5065 6246nxtgenp APPLE !PHONES (366491269:1431606::::0) U.S.Cellular, hone _USA 480 06/07/20 16:42:41 0:41 6246 4777nxtgenp APPLE !PHONES (311580084491269:1217109705044::::0) hone 481 06/07/20 16:43:22 60:00 28254 16020 nxtgenp APPLE !PHONES (023413008:91457:-72.166667:43.205:100:-1.0. hone 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 482 06/07/20 16:47:33 60:00 10176 3252 ims 483 06/07/20 17:43:22 60:00 364517 42816 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 484 06/07/20 17:47:33 60:00 18688 6356 ims 485 06/07/20 18:43:22 60:00 981 735nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 486 06/07/20 18:47:33 60:00 8712 3112 ims 487 06/07/20 19:43:22 60:00 924 840 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 488 06/07/20 19:47:33 60:00 7048 2772 ims 489 06/07/20 20:43:22 60:00 6110 8869nxtgenp APPLE !PHONES (023310601:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 490 06/07/20 20:47:33 60:00 10068 4020 ims 491 06/07/20 21:43:22 60:00 79051 47955nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 492 06/07/20 21:47:33 60:00 8496 2896 ims 493 06/07/20 22:43:22 13:06 34981 20953 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 25 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170673 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342735 MOBILITY (with cell location) • 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm tes.`"" a s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: MS= Item Conn. Conn. Originating Et Bytes Bytes Apn 1MSI MAKE MODEL Cell Location Date Time Number DP Dn (OTC) 494 06/07/20 22:47:33 60:00 13584 4644 ins 495 06/07/20 22:56:29 48:56 35766 37486nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 496 06/07/20 23:45:24 0:43 288 48nxtgenp APPLE IPE0NE8 (366491266:1431606::::0) U.S.Cellular, hone USA 497 06/07/20 23:45:25 0:43 48 Onxtgenp APPLE !PHONES (311580084491266:1217109705044::::0) hone 498 06/07/20 23:46:08 60:00 52762 20554nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310785:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 499 06/07/20 23:47:33 60:00 10008 4080 ins 500 06/08/20 00:46:08 60:00 867 945nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 501 06/08/20 00:47:33 60:00 10284 3252 ins 502 06/08/20 01:46:08 60:00 746 1106nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 503 06/08/20 01:47:33 60:00 8496 3020 ins 504 06/08/20 02:46:08 60:00 6760 7607nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 505 06/08/20 02:47:33 60:00 10176 3144 ins 506 06/08/20 03:46:08 60:00 25665 16313nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 507 06/08/20 03:47:33 60:00 10332 4056 ins 508 06/08/20 04:46:08 60:00 9060 7108nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 509 06/08/20 04:47:33 60:00 12012 4560 ins 510 06/08/20 05:46:08 60:00 16026 13171nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 511 06/08/20 05:47:33 60:00 6924 2648 ins 512 06/08/20 06:46:08 60:00 7047 6226nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 513 06/08/20 06:47:33 60:00 8496 3004 ins 514 06/08/20 07:46:08 60:00 7616 8164nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 26 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00170614 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342736 MOBILITY a (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Data: 08/29/2020 Run Ties: Data usage For: MS= Item Corm. Conn. Originating ET Bytos Bytom Apn DEBI 1MSI MAKE MODEL Coll Location Date Tim Number Up Dn (UTC) 515 06/08/20 07:47:33 60:00 10332 3972 ins 516 06/08/20 08:46:08 60:00 9845 7517nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 517 06/08/20 08:47:33 60:00 12012 4504 ins 518 06/08/20 09:46:08 60:00 6976 8696 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 519 06/08/20 09:47:33 60:00 6366 2788 ins 520 06/08/20 10:46:08 60:00 995 840 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 521 06/08/20 10:47:33 60:00 6940 3524 ism 522 06/08/20 11:46:08 60:00 793663 55327 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 523 06/08/20 11:47:33 60:00 11796 4328 ins 524 06/08/20 12:46:08 60:00 50438 31769nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 525 06/08/20 12:47:33 3:06 0 0 ins 526 06/08/20 12:54:20 6:06 7193 6158 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 527 06/08/20 13:00:26 60:00 13552 4684 ins APPLE !PHONES 528 06/08/20 13:46:08 60:00 17843 6938 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 529 06/08/20 14:00:26 60:00 8712 3128 ins APPLE !PHONES 530 06/08/20 14:46:08 60:00 27331 86706nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 531 06/08/20 15:00:26 32:51 3424 1324 ins APPLE !PHONES 532 06/08/20 15:33:17 4:42 4076 2324 ins APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 533 06/08/20 15:37:59 60:00 14076 7740 ins APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 27 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170675 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342737 MOBILITY (with cell location) • 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm . AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Ciao: Data usage For: MS= Item Corm. Conn. Originating ET Bytes: Bytom Apn DEBI INBI NARK NODEL Coll Location Date TiOle Number UP on (OTC) 534 06/08/20 15:46:08 60:00 19067 9600 nxtgenp APPLE IPHONE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 535 06/08/20 16:37:59 60:00 13676 4768 ins APPLE !PHONES 536 06/08/20 16:46:08 60:00 647969 594639nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0) 537 06/08/20 17:37:59 3:23 0 0 ims APPLE !PHONES 538 06/08/20 17:41:22 2:08 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 539 06/08/20 17:43:30 0:22 3640 1448 ims APPLE !PHONES 540 06/08/20 17:43:52 2:18 2644 1324 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 541 06/08/20 17:46:08 60:00 4306491 5451466 nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 542 06/08/20 17:46:10 0:29 3424 1216 ims APPLE !PHONES 543 06/08/20 17:46:39 0:26 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 544 06/08/20 17:47:05 0:16 5072 1680 ims APPLE !PHONES 545 06/08/20 17:47:21 0:32 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 546 06/08/20 17:47:53 1:35 3424 1324 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 28 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170676 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342738 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Tim: Data Osage For: IS= Item Conn. Conn. Originating ET Bytes Bytes Apn ?MI IMSI BABE BOOM Cell Location Data Time Number Up On (OTC) 547 06/08/20 17:49:28 2:36 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 548 06/08/20 17:52:04 24:12 10036 3036 ims APPLE !PHONES 549 06/08/20 18:16:16 11:54 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 550 06/08/20 18:28:10 0:44 3532 1540 ims APPLE !PHONES 551 06/08/20 18:28:54 16:28 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 552 06/08/20 18:45:22 0:13 3316 1648 ims APPLE !PHONES 553 06/08/20 18:45:35 3:36 2876 1432 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 554 06/08/20 18:46:08 60:00 60107 19783nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 555 06/08/20 18:49:11 60:00 11796 4328 ims APPLE !PHONES 556 06/08/20 19:46:08 60:00 12076 7056nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 557 06/08/20 19:49:11 60:00 7080 2664 ims APPLE !PHONES 558 06/08/20 20:46:08 60:00 1975 2926 nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 559 06/08/20 20:49:11 60:00 6956 2756 ims APPLE !PHONES 560 06/08/20 21:46:08 60:00 1379 1102 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 561 06/08/20 21:49:11 59:12 15684 6572 ims APPLE !PHONES 562 06/08/20 22:46:08 2:15 277 209 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 563 06/08/20 22:48:55 60:00 279778 966831 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 564 06/08/20 22:48:58 1:31 6673 5940 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 565 06/08/20 22:50:29 0:27 3532 1340 ims APPLE !PHONES 566 06/08/20 22:50:56 0:15 2644 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 567 06/08/20 22:51:11 60:00 12028 4608 ims APPLE !PHONES 568 06/08/20 23:48:55 60:00 860 735nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 569 06/08/20 23:51:11 60:00 8388 3128 ims APPLE !PHONES 570 06/09/20 00:48:55 60:00 20227 23698 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 29 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYWC00170677 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342739 MOBILITY (with cell location) • 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm t1/4--ri a AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: MS= Item Conn. Conn. Originating ET Bytos Bytes Apn DEBI 1MSI MAKE MODEL Coll Location Data Tama Number Up On (UTC) 571 06/09/20 00:51:11 60:00 10268 3408 ims APPLE !PHONES 572 06/09/20 01:48:55 60:00 751 735nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 573 06/09/20 01:51:11 60:00 8604 3036 ims APPLE !PHONES 574 06/09/20 02:48:55 60:00 578 630 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 575 06/09/20 02:51:11 60:00 15668 6108 ims APPLE !PHONES 576 06/09/20 03:48:55 60:00 578 630 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 577 06/09/20 03:51:11 60:00 7544 3820 ims APPLE !PHONES 578 06/09/20 04:48:55 60:00 828 867nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 579 06/09/20 04:51:11 60:00 6848 2680 ims APPLE !PHONES 580 06/09/20 05:48:55 60:00 225 210 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 581 06/09/20 05:51:11 60:00 7064 2804 ims APPLE !PHONES 582 06/09/20 06:48:55 60:00 289 315 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 583 06/09/20 06:51:11 60:00 11920 4500 ims APPLE !PHONES 584 06/09/20 07:48:55 60:00 398 315 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 585 06/09/20 07:51:11 60:00 7172 3020 ims APPLE !PHONES 586 06/09/20 08:48:55 60:00 225 210 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 587 06/09/20 08:51:11 60:00 10488 4536 ims APPLE !PHONES 588 06/09/20 09:48:55 60:00 277 262 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 589 06/09/20 09:51:11 3:50 0 0 ims APPLE !PHONES 590 06/09/20 09:58:39 0:38 6675 5980 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 591 06/09/20 09:59:17 60:00 10720 4420 ims APPLE !PHONES 592 06/09/20 10:48:55 60:00 341 367nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 593 06/09/20 10:59:17 60:00 8496 3128 ims APPLE !PHONES 594 06/09/20 11:48:55 60:00 3074 262 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 595 06/09/20 11:59:17 60:00 7172 3220 ims APPLE !PHONES 596 06/09/20 12:48:55 23:58 341 367nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 597 06/09/20 12:59:17 60:00 8388 3004 ins APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 30 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170678 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342740 MOBILITY (with cell location) • AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:12:12pm t --•..ad' AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Data: 06/29/2020 Run Time: Data Usage Tor: Sim Item Conn. Conn. Originating ET Bytes Bytes Apn DEBI IMSI WARE MODEL Coll Location Data Tim Number Up On (Unt) 598 06/09/20 13:12:53 11:46 98124 66778nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 599 06/09/20 13:24:39 60:00 7508 15117nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 600 06/09/20 13:59:17 52:10 15468 8244 ims APPLE !PHONES 601 06/09/20 14:24:39 22:50 0 0nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 602 06/09/20 14:47:28 2:05 5064 6314nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 603 06/09/20 14:47:29 2:05 6314 4776nxtgenp APPLE !PHONES (311580084491266:1217109705044::::01 hone 604 06/09/20 14:49:34 3:11 280 581nxtgenp APPLE !PHONES (023432209:91532:-71.947299:43.256953:280:- hone 1.0] 605 06/09/20 14:51:33 10:30 8368 6156 ims 606 06/09/20 14:52:44 0:37 5453 6094nxtgenp APPLE !PHONES (366513795:1431694::::01 U.S.Cellular, hone _USA 607 06/09/20 14:52:46 0:35 6315 8165 ims APPLE !PHONES (366513795:1431694::::01 U.S.Cellular, _USA 608 06/09/20 14:52:46 0:36 6094 5165nxtgenp APPLE !PHONES (311580084513795:1217109705132::::01 hone 609 06/09/20 14:52:47 0:35 8097 6051 ims APPLE !PHONES [311580084513795:1217109705132.... 311580084491266:1217109705044::::0] 610 06/09/20 14:53:22 44:46 2021706 2314792nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 611 06/09/20 14:53:24 2:22 0 0 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 612 06/09/20 14:55:55 0:00 0 0 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 613 06/09/20 14:56:10 0:37 10745 6428 ims APPLE !PHONES 614 06/09/20 14:56:47 33:26 17928 2804 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 615 06/09/20 14:56:47 33:26 5624 2804 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 616 06/09/20 15:30:13 60:00 10632 4236 ims APPLE !PHONES 617 06/09/20 15:38:07 0:32 5220 6314nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 618 06/09/20 15:38:09 0:31 6314 4932nxtgenp APPLE !PHONES (311580084491266:1217109705044::::01 hone AT&T Proprietary The AT&T network constantly communicates with Internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 31 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170679 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342741 MOBILITY (with cell location) ap. 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm 4*-1;• AT&T tr. AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. Run Date: 06/29/2020 Run Tine: Data Usage For: IS= Item Conn. Conn. Originating ET Bytos Bytom Apn DMZ 1MSI MAKE MODEL Cell Location Date Tam Humber Up Dn (OTC) 619 06/09/20 15:38:40 60:00 45938 25244nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 620 06/09/20 16:30:13 60:00 6848 2680 ims APPLE !PHONES 621 06/09/20 16:38:40 60:00 142769 4687229nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 622 06/09/20 17:30:13 60:00 8496 2928 ims APPLE !PHONES 623 06/09/20 17:38:40 60:00 2367 875nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 624 06/09/20 18:30:13 60:00 6620 3052 ims APPLE !PHONES 625 06/09/20 18:38:40 60:00 160792 103730nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 626 06/09/20 19:30:13 60:00 26512 13248 ims APPLE !PHONES 627 06/09/20 19:38:40 60:00 2079 3220 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 628 06/09/20 20:00:47 2:23 372588 270899 ims APPLE !PHONES 629 06/09/20 20:30:13 60:00 15388 8752 ims APPLE IPHONt8 630 06/09/20 20:38:40 60:00 51601 38466 nxtgenp APPLE !PHONES (023310601:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 631 06/09/20 20:59:47 40:16 6008484 8878545 ims APPLE IPHON18 632 06/09/20 21:30:13 29:49 32156 20948 ims APPLE IPHONt8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 32 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00170680 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342742 MOBILITY (with cell location) • 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm .._,„• cas 4 ° AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: IS= Item Conn. Conn. Originating ET Bytos Bytes Apn neat i"Sr BARE MODEL Cell Location Data Tim Number Up On (OTC) 633 06/09/20 21:38:40 60:00 337102 301510 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 634 06/09/20 21:45:27 0:43 6452 17206 ims APPLE !PHONES 635 06/09/20 21:46:22 0:19 1381 10147 ims APPLE !PHONES 636 06/09/20 22:00:02 0:44 179116 1712 ims APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 637 06/09/20 22:00:02 0:44 4744 1712 ims APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 638 06/09/20 22:00:4 1:09 3424 1340 ims APPLE !PHONES 639 06/09/20 22:01:55 0:43 2660 1340 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 640 06/09/20 22:01:55 0:43 2596 1340 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 641 06/09/20 22:02:38 32:47 6366 2928 ims APPLE !PHONES 642 06/09/20 22:35:25 0:53 2660 1340 ims APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 643 06/09/20 22:35:25 0:53 2596 1340 ims APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 644 06/09/20 22:36:18 0:52 4840 1588 ims APPLE !PHONES 645 06/09/20 22:37:1 13:39 2596 1340 ims APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 646 06/09/20 22:37:10 13:40 2660 1340 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 647 06/09/20 22:38:40 40:24 125226 85387nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 648 06/09/20 22:50:49, 60:00 35576 21760 ims APPLE !PHONES 649 06/09/20 23:19:03 0:37 5285 6451nxtgenp APPLE !PHONES 1366491266:1431606::::01 U.S.Cellular, hone _USA 650 06/09/20 23:19:05 0:36 6451 4997nxtgenp APPLE !PHONES 1311580084491266:1217109705044::::01 hone 651 06/09/20 23:19:22 0:14 3297 14724 ims APPLE IPHONE8 652 06/09/20 23:19:38 0:10 1431 12839 ims APPLE IPHONEB 653 06/09/20 23:19:41 60:00 106959 73126nxtgenp APPLE IPHONE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 33 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170681 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342743 MOBILITY 4111I, (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Sim Item Conn. Conn. Originating LT Bytes Bytes Apn DEBI 1MSI MAKE MODEL Cell Location Data Time Member Up On (OTC) 654 06/09/20 23:50:4 0:00 19884 11412 ims APPLE !PHONES 655 06/09/20 23:58:5 0:08 2460 11189 ism APPLE !PHONES 656 06/10/20 00:19:4 1:32 39417 20149nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 657 06/10/20 00:21:1 2:03 288 48nxtgenp APPLE !PHONES (366491269:1431606::::01 U.S.Cellular, hone _USA 658 06/10/20 00:21:1 2:03 48 Onxtgenp APPLE !PHONES (311580084491269:1217109705044::::01 hone 659 06/10/20 00:23:1 3:45 7211 8328nxtgenp APPLE !PHONES (366491269:1431606::::01 U.S.Cellular, hone _USA 660 06/10/20 00:23:1 3:45 8328 6923nxtgenp APPLE !PHONES (311580084491269:1217109705044::::01 hone 661 06/10/20 00:27:0 2:48 78953 60993nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 662 06/10/20 00:29:4 4:08 7773 7645nxtgenp APPLE !PHONES (366491269:1431606::::01 U.S.Cellular, hone _USA 663 06/10/20 00:29:4 4:08 7645 7485nxtgenp APPLE !PHONES (311580084491269:1217109705044::::0] hone 664 06/10/20 00:50:4 4:49 3424 1340 Les APPLE !PHONES 665 06/10/20 00:53:5 3:57 48 Onxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 666 06/10/20 00:57:5 1:12 288 48nxtgenp APPLE !PHONES (366491269:1431606::::01 U.S.Cellular, hone _USA 667 06/10/20 00:57:5 1:11 48 Onxtgenp APPLE !PHONES (311580084491269:1217109705044::::0] hone 668 06/10/20 00:59:0 8:09 91843 405897nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 669 06/10/20 01:05:3 4:36 149256 3496 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 670 06/10/20 01:05:3 4:36 6160 3496 Les APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 671 06/10/20 01:10:1 7:03 10176 8292 ism APPLE !PHONES 672 06/10/20 01:30:4 8:06 296180 975215nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 673 06/10/20 01:30:5 6:57 6671 5904 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 674 06/10/20 01:37:4 0:00 13568 4684 Les APPLE !PHONES 675 06/10/20 01:38:5 Z:43 288 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 676 06/10/20 01:38:5 Z:43 48 Onxtgenp APPLE !PHONES (311580084491266:1217109705044::::01 hone AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 34 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170682 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342744 MOBILITY (with cell location) 4.• ill1111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm tr./ 4' 1i AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Ties: Data Usage For: MS= Item Conn. Conn. Originating ST Bytes Bytes Apn DEBI INS' WM MODEL Coll Location Date Tim NUMber Up on (UTc) 677 06/10/20 01:53:391 5:39 8614 8797nxtgonp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 678 06/10/20 01:59:18 60:00 15777 16256 nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 679 06/10/20 02:37:48 60:00 8496 3112 ism APPLE !PHONES 680 06/10/20 02:59:18 60:00 687 630 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 681 06/10/20 03:37:48 60:00 7172 2756 ism APPLE !PHONES 682 06/10/20 03:59:18 60:00 578 630 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 683 06/10/20 04:37:48 60:00 14892 4824 ism APPLE !PHONES 684 06/10/20 04:59:18 60:00 289 315 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 685 06/10/20 05:37:48 60:00 13352 4752 ism APPLE !PHONES 686 06/10/20 05:59:18 60:00 462 420 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 687 06/10/20 06:37:48 60:00 6956 2648 ism APPLE !PHONES 688 06/10/20 06:59:18 60:00 173 105 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 689 06/10/20 07:37:48 60:00 8388 3004 ism APPLE !PHONES 690 06/10/20 07:59:18 60:00 346 210 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 691 06/10/20 08:37:48 60:00 6848 2864 ism APPLE !PHONES 692 06/10/20 08:59:18 60:00 346 210 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 693 06/10/20 09:37:48 60:00 8496 3112 ism APPLE !PHONES 694 06/10/20 09:59:18 60:00 792 910 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 695 06/10/20 10:37:48 60:00 14020 5596 ism APPLE !PHONES 696 06/10/20 10:59:18 53:48 73033 46330nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 697 06/10/20 11:37:48 59:15 10036 3252 ism APPLE !PHONES 698 06/10/20 11:53:05 2:03 5221 6330nxtgenp APPLE !PHONES (366491269:1431606::::01 U.S.Cellular, hone _USA 699 06/10/20 11:53:0 2:03 6330 4933 nxtgenp APPLE !PHONES (311580084491269:1217109705044.... hone 311580084491266:1217109705044::::01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 35 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170683 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342745 MOBILITY (with cell location) 1111111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm te-s `'s a,•° AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Tana: Data Usage For: Sim Iton Conn. Conn. Originating er Bytes Bytes Apn Then 1MSI MAKE MODEL Cell Location Data Timm up Dn (OTC) 700 06/10/20 11:55:09 60:00 6915 5746nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 701 06/10/20 12:37:03 2:44 3376 1448 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 702 06/10/20 12:39:47 60:00 15000 4716 ins APPLE !PHONES 703 06/10/20 12:55:09 56:15 1071 5832nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 704 06/10/20 13:39:47 60:00 8496 2896 ins APPLE IPE0NE8 705 06/10/20 13:51:23 2:04 5062 6328nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 706 06/10/20 13:51:24 2:04 6326 4774nxtgenp APPLE !PHONES (311580084491266:1217109705044::::01 hone 707 06/10/20 13:53:28 56:30 70376 54700nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 708 06/10/20 14:39:47 60:00 31844 22980 ins APPLE !PHONES 709 06/10/20 14:49:57 0:22 288 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 710 06/10/20 14:49:59 0:21 48 Onxtgenp APPLE IPHONt8 (311580084491266:1217109705044::::0) hone 711 06/10/20 14:50:20 8:44 48 Onxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 712 06/10/20 14:54:49 0:29 1590 14344 ins APPLE !PHONES 713 06/10/20 14:55:26 0:16 9756 24842 ins APPLE IPHONt8 714 06/10/20 14:59:03 3:32 286 48nxtgenp APPLE IPHONt8 (366491266:1431606::::01 U.S.Cellular, hone _USA 715 06/10/20 14:59:05 3:31 48 Onxtgenp APPLE IPHONt8 (311580084491266:1217109705044::::0) hone 716 06/10/20 15:02:36 60:00 92707 50816 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 717 06/10/20 15:39:47 60:00 15236 5936 ins APPLE !PHONES 718 06/10/20 16:02:36 60:00 2961 11328 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 719 06/10/20 16:39:47 60:00 10252 3376 ins APPLE !PHONES 720 06/10/20 17:02:36 24:14 4741 797nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 721 06/10/20 17:26:50 60:00 96839 37310nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 722 06/10/20 17:39:47 60:00 8388 2896 ins APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 36 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170684 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342746 MOBILITY (with cell location) ill1111120 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm \.....S tmaS AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Ties: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DELI IMSI MAR MODEL Cell Location Data Tam Number Up on (UTC) 723 06/10/20 18:26:5 60:00 169501 105986 nxtgenp APPLE IPHONt8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023432209:91532:-71.947299:43.256953:280:- 1.0] 724 06/10/20 18:39:4 60:00 34924 26900 ims APPLE !PHONES 725 06/10/20 18:50:5 0:33 2804 18349 ims APPLE !PHONES 726 06/10/20 19:11:2 0:27 2059 12714 ims APPLE 'PHONES 727 06/10/20 19:26:5 37:20 40083 29088 nxtgenp APPLE IPHONt8 (023432209:91532:-71.947299:43.256953:280:- hone 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 728 06/10/20 19:39:4 60:00 13676 4684 ins APPLE !PHONES 729 06/10/20 20:04:1 2:03 5566 8034nxtgenp APPLE !PHONES (366513795:1431694::::01 U.S.Cellular, hone _USA 730 06/10/20 20:04:1 2:03 8034 5278nxtgenp APPLE !PHONES (311580084513795:1217109705132::::01 hone 731 06/10/20 20:06:1 60:00 13685 12191 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 732 06/10/20 20:39:4 43:51 3408 1324 ins APPLE !PHONES 733 06/10/20 21:06:1 37:19 59742 42049 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150: 1.0] 734 06/10/20 21:23:3 0:35 163424 2912 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150: 1.0] 735 06/10/20 21:23:38 0:35 5240 2824 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 736 06/10/20 21:24:1 4:48 3424 1432 ims APPLE !PHONES 737 06/10/20 21:29:0 14:32 7580 2908 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 738 06/10/20 21:29:0 14:32 7580 2820 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 739 06/10/20 21:43:3 1:15 23581 106165 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 740 06/10/20 21:43:3 1:12 8191 6178 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 37 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170685 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342747 MOBILITY (with cell location) ill111 1 120 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm ....,„.d AT&T 4a`" AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Ties: Data Osage For: MS= Item corm. Conn. Originating LT Bytom Bytom Apn Mai Dar NARK MODEL Cell Location Date Tine Number Up On (OTC) 741 06/10/20 21:44:48 55:44 93041 251870zuctgenp APPLE !PHONES 1023310608:91057:- bone 71.9598779:43.2972525:150:-1.0. 023310785:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 1.01 742 06/10/20 21:44:50 0:29 7407 6090 ims APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 743 06/10/20 21:45:19 3:27 3748 1556 ims APPLE !PHONES 744 06/10/20 21:48:46 1:03 2644 1324 ims APPLE !PHONES 1023310785:91057:- 71.9598779:43.2972525:150:-1.01 745 06/10/20 21:49:49 45:13 21796 15580 ims APPLE !PHONES 746 06/10/20 22:20:49 0:30 4259 15173 ims APPLE !PHONES 747 06/10/20 22:35:02 5:27 2752 1324 ims APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 748 06/10/20 22:40:2 2:19 4948 1680 ims APPLE !PHONES 749 06/10/20 22:40:31 2:03 5065 6314nxtgenp APPLE !PHONES [366491266:1431606::::01 U.S.Cellular, hone _USA 750 06/10/20 22:40:32 2:03 6314 4777nxtgonp APPLE !PHONES 1311580084491266:1217109705044— hone 311580084513795:1217109705132::::01 751 06/10/20 22:42:35 60:00 33070 35962nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 752 06/10/20 22:42:48 0:28 2644 1412 ims APPLE 'PHONES 1023310601:91057:- 71.9598779:43.2972525:150:-1.01 753 06/10/20 22:42:48 0:28 2644 1324 ims APPLE !PHONES 1023310601:91057:- 71.9598779:43.2972525:150:-1.01 754 06/10/20 22:43:16 17:45 3532 1324 ims APPLE !PHONES 755 06/10/20 23:05:46 5:35 6671 5979 ims APPLE !PHONES 1023310601:91057:- 71.9598779:43.2972525:150:-1.01 756 06/10/20 23:11:25 2:26 6667 5982 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 38 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNI_ 00170686 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342748 MOBILITY e (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn flat 1MSI MAKE MODEL Cell Location Data Time Number Up Dn (uzc) 757 06/10/20 23:13:51 0:33 4856 1464 ims APPLE !PHONES 758 06/10/20 23:14:24 1:30 2752 1324 Las APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.01 759 06/10/20 23:15:54 60:00 14016 4948 ims APPLE !PHONES 760 06/10/20 23:42:35 18:08 52130 43565nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 761 06/11/20 00:00:42 2:03 288 48nxtgenp APPLE !PHONES (366491269:1431606::::01 U.S.Cellular, hone _USA 762 06/11/20 00:00:43 2:03 48 Onxtgenp APPLE !PHONES (311580084491269:1217109705044::::01 hone 763 06/11/20 00:02:46 60:00 35541 16641nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 764 06/11/20 00:15:54 60:00 26560 17852 ims APPLE !PHONES 765 06/11/20 00:50:18 0:29 1749 13796 ims APPLE !PHONES 766 06/11/20 01:00:11 44:46 7656873 9341811 ims APPLE 1PHONE8 767 06/11/20 01:02:46 60:00 19543 7341nxtgenp APPLE IPHONE8 [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 768 06/11/20 01:15:54 60:00 11496 4784 ims APPLE !PHONES 769 06/11/20 02:02:46 60:00 2218 2198nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 770 06/11/20 02:15:54 60:00 10828 4220 ims APPLE !PHONES 771 06/11/20 03:02:46 5:40 225 210nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 772 06/11/20 03:08:26 60:00 42848 32453nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 773 06/11/20 03:15:54 60:00 8728 3772 ims APPLE !PHONES 774 06/11/20 04:08:26 60:00 5798 8080nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 775 06/11/20 04:15:54 60:00 13568 4876 ims APPLE !PHONES 776 06/11/20 05:08:26 60:00 1005 979nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 777 06/11/20 05:15:54 60:00 8388 2788 ims APPLE !PHONES 778 06/11/20 06:08:26 60:00 450 420nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 779 06/11/20 06:15:54 31:28 5072 1572 ims APPLE !PHONES 780 06/11/20 06:47:22 0:57 148724 1536 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 781 06/11/20 06:47:22 0:57 2968 1448 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 782 06/11/20 06:48:19 60:00 10256 4344 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 39 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170687 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342749 MOBILITY (with cell location) ill1111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Tine: Data Usage For: NM= Item Conn. Conn. Originating ET Bytes Bytes Apn DEBI 1MSI MAKE MODEL Cell Location Date Taos Number Up On (OTC) 783 06/11/20 07:08:26 60:00 225 210nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 784 06/11/20 07:48:19 60:00 8496 3004 ins APPLE !PHONES 785 06/11/20 08:08:26 60:00 225 210nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 786 06/11/20 08:48:19 60:00 11904 4396 ins APPLE !PHONES 787 06/11/20 09:08:26 60:00 398 315nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 788 06/11/20 09:48:19 60:00 7080 2772 ins APPLE !PHONES 789 06/11/20 10:08:26 60:00 277 315nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 790 06/11/20 10:48:19 60:00 10596 4096 ins APPLE !PHONES 791 06/11/20 11:08:26 37:36 329 367nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 792 06/11/20 11:46:01 0:34 5390 7804nxtgenp APPLE !PHONES (366491266:1431606::::0] U.S.Cellular, hone _USA 793 06/11/20 11:46:02 0:34 7804 5102nxtgenp APPLE !PHONES (311580084491266:1217109705044::::0] hone 794 06/11/20 11:46:36 60:00 14045 47524nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 795 06/11/20 11:48:19 15:20 0 0 ims APPLE !PHONES 796 06/11/20 12:08:15 37:27 8454 6286 ims APPLE !PHONES 797 06/11/20 12:45:42 0:17 2766 1324 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0] 798 06/11/20 12:45:42 0:17 2704 1324 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0] 799 06/11/20 12:45:59 10:11 4964 1696 ins APPLE !PHONES 800 06/11/20 12:46:36 60:00 2177046 2642670nxtgenp APPLE !PHONES (023310601:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 801 06/11/20 12:56:20 3:14 11347 6482 ims APPLE !PHONES 802 06/11/20 12:59:34 0:45 2768 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 803 06/11/20 12:59:34 0:45 2704 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 804 06/11/20 13:00:19 48:00 7064 2880 ins APPLE !PHONES 805 06/11/20 13:46:36 3:00 3006 1187 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 40 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_00_00170688 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342750 MOBILITY ANIMP (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating Er Bytes Bytes Apn DELI INSI NM MODEL Cell Location Date rims !lumbar up on (OTC) 806 06/11/20 13:48:19 1:17 7684 6376 /ma APPLE IPE0NE8 (023310608:91057:- 71.9598779:43.2972525:150:-1.01 807 06/11/20 13:48:19 1:17 7620 6376 /ma APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 808 06/11/20 13:51:27 3:56 356279 1131640nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.01 809 06/11/20 13:51:30 3:53 6905 7072 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 810 06/11/20 13:55:22 2:03 266 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 811 06/11/20 13:55:23 2:04 48 Onxtgonp APPLE !PHONES (311580084491266:1217109705044::::01 hone 812 06/11/20 13:56:00 1:25 6476 7421 ims APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, _USA 813 06/11/20 13:56:01 1:26 7421 6124 ims APPLE !PHONES (311580084491266:1217109705044::::01 814 06/11/20 13:57:27 33:22 6993 10526 nxtgenp APPLE !PHONES (023413008:91457:-72.166667:43.205:100:-1.0, hone 023310608:91057:-71.9598779:43.2972525:150:- 1.01 815 06/11/20 13:58:27 7:45 6669 6000 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 816 06/11/20 14:06:12 60:00 24096 13980 ims APPLE !PHONES 817 06/11/20 14:11:50 0:42 7760 14713 ims APPLE !PHONES 818 06/11/20 14:30:49 60:00 87380 60369nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 819 06/11/20 15:06:12 60:00 7296 3020 ims APPLE !PHONES 820 06/11/20 15:30:49 60:00 27622 17667nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 821 06/11/20 16:06:12 0:03 0 0 ims APPLE !PHONES 822 06/11/20 16:06:14 2:19 14560 1320 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.01 823 06/11/20 16:06:15 2:18 2428 1232 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.01 824 06/11/20 16:08:33 60:00 14032 4856 ims APPLE IPHONE8 825 06/11/20 16:30:49 60:00 196129 15494 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 41 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170689 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342751 MOBILITY (with cell location) • 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm .._. `"- 4 :sil •" s. AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: MS= Item Conn. Conn. Originating ET Bytes Bytes Apn INEI INS! MARE MODEL Cell Location Data Tame Number UP Dn (UTC) 826 06/11/20 17:08:33 29:08 3424 1340 ims APPLE !PHONES 827 06/11/20 17:30:49 60:00 240325 293154 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 828 06/11/20 17:37:41 60:00 5240 2680 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 829 06/11/20 17:37:41 60:00 29252 2768 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 830 06/11/20 18:30:49 42:56 89878 1231264 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023441679:91569:-71.873669:42.998207:30:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 831 06/11/20 18:37:41 36:04 8051 6072 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023441679:91569:-71.873669:42.998207:30:- 1.0] 832 06/11/20 18:37:41 36:04 8051 6072 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023441679:91569:-71.873669:42.998207:30:- 023429137:91520:-71.8684166:43.0803055:320:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 833 06/11/20 19:13:45 0:26 108 0 ims APPLE !PHONES (23999/15704:-71.90615:42.97402:30:-1.01 834 06/11/20 19:13:45 0:26 108 0 ims APPLE !PHONES (23999/15704:-71.90615:42.97402:30:-1.01 835 06/11/20 19:13:45 0:26 5235 4253 nxtgenp APPLE !PHONES (23999/15704:-71.90615:42.97402:30:-1.01 hone AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 42 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170690 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342752 MOBILITY 41111. (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in Inc. Run Date: 06/29/2020 Run Time: Data Usage For: MS= Item Conn. Conn. Originating Cr Bytes Bytes Apn EMIT 1MSI MARE MODEL Celt Location Date Time Number Up Dn (UPC) 836 06/11/20 19:14:11 18:47 0 0 ims APPLE !PHONES (128684166:4308:- 71.8684166:43.0803055:320:-1.01 837 06/11/20 19:14:11 18:47 0 0 ital. APPLE !PHONES (023429137:91520:- 71.8684166:43.0803055:320:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 838 06/11/20 19:14:11 18:47 3483 7942nxtgenp APPLE !PHONES (023429137:91520:- hone 71.8684166:43.0803055:320:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 839 06/11/20 19:32:58 7:25 14721 23899nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 840 06/11/20 19:33:01 6:18 8813 6157 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 841 06/11/20 19:39:19 0:30 3424 1324 ims APPLE !PHONES 842 06/11/20 19:39:49 0:34 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 843 06/11/20 19:40:22 0:59 7221 7262nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 844 06/11/20 19:40:23 0:58 6472 7381 ims APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, _USA 845 06/11/20 19:40:23 0:59 7262 6933nxtgenp APPLE !PHONES (311580084491266:1217109705044::::01 hone 846 06/11/20 19:40:24 0:58 7381 6120 ims APPLE !PHONES (311580084491266:1217109705044::::01 847 06/11/20 19:41:22 60:00 10384 23896 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 1.0] 848 06/11/20 19:41:24 1:07 6673 5982 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 849 06/11/20 19:42:31 60:00 12120 4484 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 43 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170691 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342753 MOBILITY (with cell location) • 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm u AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Tiro: Data Usage For: NS= Item Conn. Conn. Originating ET Bytes Bytes Apn flat IMSI MAKE MODEL Cell Location Data Tim Number Up Dn (DSC) 850 06/11/20 20:41:22 60:00 1676 6285 nxtgenp APPLE !PHONES (024577552:96006:- hone 71.9906006:43.3717995:210:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 851 06/11/20 20:42:31 60:00 8604 3052 ins APPLE !PHONES 852 06/11/20 21:41:22 11:14 0 Onxtgonp APPLE IPHONt8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 853 06/11/20 21:42:31 60:00 10252 3284 ins APPLE !PHONES 854 06/11/20 21:52:35 8:42 5161 6314nxtgenp APPLE !PHONES (366491269:1431606::::01 U.S.Cellular, hone _USA 855 06/11/20 21:52:36 8:42 6314 4777nxtgenp APPLE !PHONES (311580084491269:1217109705044::::01 hone 856 06/11/20 22:01:18 4:07 280 581nxtgonp APPLE !PHONES (024577552:96006:- hone 71.9906006:43.3717995:210:-1.01 857 06/11/20 22:05:24 7:07 5065 6314nxtgenp APPLE !PHONES (366491269:1431606::::01 U.S.Cellular, hone _USA 858 06/11/20 22:05:25 7:07 6314 4777nxtgenp APPLE !PHONES (311580084491269:1217109705044::::0] hone 859 06/11/20 22:12:32 60:00 16116 15319nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 860 06/11/20 22:42:31 42:11 15099 8175 ins APPLE !PHONES 861 06/11/20 23:12:32 20:12 0 Onxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 862 06/11/20 23:28:10 10:00 8530 6336 ins APPLE !PHONES 863 06/11/20 23:38:09 60:00 86182 67593nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 864 06/11/20 23:38:10 0:02 0 0 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 865 06/11/20 23:38:10 0:02 0 0 ices APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 866 06/11/20 23:38:18 60:00 70734 44647 ims 867 06/11/20 23:57:41 0:10 1431 23774 ims 868 06/12/20 00:35:14 0:43 5016 17038 ims 869 06/12/20 00:36:09 0:33 6174 18269 ims 870 06/12/20 00:38:09 60:00 4533 1101 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 871 06/12/20 00:38:18 60:00 10252 3624 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 44 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170692 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342754 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm tr 4.".". ss al# fi AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. originating ET Bytos Bytes Apn flat 1MSI MAKE MODEL Col/ Location Data Time Up On (UTC) 872 06/12/20 01:38:09 : 60:00 99995 29061nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 873 06/12/20 01:38:18 : 60:00 8836 3284 Las 874 06/12/20 02:38:09 : 47:00 5160 1217nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 875 06/12/20 02:38:18 : 60:00 10272 4036 Lau 876 06/12/20 03:25:09 : 60:00 7539 6634nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 877 06/12/20 03:38:18 : 60:00 10252 3284 Lau 878 06/12/20 04:25:09 : 60:00 578 630nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 879 06/12/20 04:38:18 : 60:00 15106 4924 Lau 880 06/12/20 05:25:09 : 60:00 225 210nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 881 06/12/20 05:38:18 : 60:00 6604 3052 Lau 882 06/12/20 06:25:09 : 60:00 514 525nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 883 06/12/20 06:38:18 : 60:00 13476 4424 ins 884 06/12/20 07:25:09 : 60:00 692 997nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 885 06/12/20 07:38:18 : 60:00 7064 2788 Lau 886 06/12/20 08:25:09 : 60:00 289 315nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 887 06/12/20 08:38:18 : 60:00 10036 3176 Lau 888 06/12/20 09:25:09 : 60:00 225 210nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 889 06/12/20 09:38:18 : 60:00 11612 4536 Lau 890 06/12/20 10:25:09 : 60:00 341 419nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 891 06/12/20 10:38:18 : 60:00 14692 4656 Lau 892 06/12/20 11:25:09 : 60:00 3042 262nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 893 06/12/20 11:38:18 : 60:00 7172 2788 Lau 894 06/12/20 12:25:09 : 60:00 1340 2849nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 895 06/12/20 12:38:18 : 60:00 8496 2928 ins AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 45 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170693 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342755 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn flax 1MSI MAKE MODEL Col/ Location Date Tana Up Dn (OTC) 896 06/12/20 13:25:09 60:00 12800 15836nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310785:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 897 06/12/20 13:38:18 60:00 22736 11832 ism 898 06/12/20 13:40:43 0:52 84685 100813 ism 899 06/12/20 13:41:48 0:02 0 0 ism 900 06/12/20 14:25:09 60:00 115408 81206nxtgenp APPLE 'PHONES (023310601:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 901 06/12/20 14:38:1 4:52 4964 1696 Las APPLE !PHONES 902 06/12/20 14:43:1 1:54 16932 1340 Lau APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 903 06/12/20 14:43:1 1:54 2704 1340 Lau APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 904 06/12/20 14:45:0 4:28 3424 1340 Lau APPLE !PHONES 905 06/12/20 14:49:3 1:32 4092 2356 Lau APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 906 06/12/20 14:49:3 1:32 4028 2356 Lau APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 907 06/12/20 14:51:0 60:00 22640 7008 Lau APPLE !PHONES 908 06/12/20 15:25:0 8:48 304 232nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 909 06/12/20 15:33:5 60:00 6756 5122 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 910 06/12/20 15:51:0 60:00 81148 44160 Lau APPLE !PHONES 911 06/12/20 16:33:5 60:00 109675 86611 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 912 06/12/20 16:43:3 0:22 0 44448 Lau APPLE !PHONES 913 06/12/20 16:44:4 0:05 0 2786 Lau APPLE !PHONES 914 06/12/20 16:46:2 0:39 9591 15521 Lau APPLE !PHONES 915 06/12/20 16:47:0 0:01 0 0 ins APPLE !PHONES 916 06/12/20 16:47:2 0:40 7107 21103 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 46 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170694 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342756 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Data: 08/29/2020 Run Tins: Data usage For: MS= Item Conn. Conn. Originating Et Bytos Bytom Apn DEBI IMaI MAKE MODEL Col/ Location Date Tams Number Up on (OTC) 917 06/12/20 16:48:08 0:19 0 312 ims APPLE IPHONE8 918 06/12/20 16:49:38 0:57 83844 70722 ims APPLE IPHONE8 919 06/12/20 16:51:04 21:41 3532 1340 ims APPLE IPHONE8 920 06/12/20 17:12:45 0:50 69840 1588 ims APPLE IPHONE8 (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 921 06/12/20 17:12:45 0:50 4244 1588 ims APPLE IPHONE8 (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 922 06/12/20 17:13:35 60:00 10380 4128 ims APPLE !PHONES 923 06/12/20 17:33:57 60:00 763 735nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 924 06/12/20 18:13:35 60:00 7280 2928 ims APPLE !PHONES 925 06/12/20 18:33:57 60:00 346 210 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 926 06/12/20 19:13:35 60:00 11364 3424 ims APPLE !PHONES 927 06/12/20 19:33:57 60:00 462 420 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 928 06/12/20 20:13:35 33:36 10596 4536 ims APPLE !PHONES 929 06/12/20 20:33:57 60:00 5265859 5141147 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 930 06/12/20 20:47:11 0:58 7673 6480 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 931 06/12/20 20:47:11 0:58 6753 6480 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 932 06/12/20 20:48:09 0:20 3424 1340 ims APPLE !PHONES 933 06/12/20 20:48:29 14:58 69600 1448 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 1.0] AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 47 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170695 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342757 MOBILITY e (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in Inc. Run Date: 06/29/2020 Run Time: Data Usage For: MS= Item Conn. Conn. Originating Br Bytes Bytes Apn DELI IMSI WM MODEL Cell Location Data Tam Number Up On (1/TC) 934 06/12/20 20:48:29 14:58 3904 1448 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 935 06/12/20 21:03:27 1:32 3424 1448 ims APPLE !PHONES 936 06/12/20 21:04:58 16:51 90124 1464 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 937 06/12/20 21:04:59 16:50 3328 1464 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 938 06/12/20 21:21:49 60:00 12028 4392 ism APPLE !PHONES 939 06/12/20 21:33:57 60:00 3797 4371nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 940 06/12/20 22:21:49 60:00 8728 3052 ism APPLE !PHONES 941 06/12/20 22:33:57 60:00 41210 25146 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 942 06/12/20 23:21:49 60:00 12044 4392 ism APPLE !PHONES 943 06/12/20 23:33:57 60:00 571 420 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 944 06/13/20 00:21:49 60:00 10036 3176 ism APPLE !PHONES 945 06/13/20 00:33:57 60:00 4302 4942 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 946 06/13/20 01:21:49 60:00 10952 4876 ism APPLE !PHONES 947 06/13/20 01:33:57 60:00 3240 5960 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 948 06/13/20 02:21:49 60:00 8496 3160 ism APPLE !PHONES 949 06/13/20 02:33:57 60:00 623 525 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 950 06/13/20 03:21:49 60:00 14424 4532 ism APPLE !PHONES 951 06/13/20 03:33:57 60:00 346 210 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 952 06/13/20 04:21:49 60:00 8604 3036 ism APPLE !PHONES 953 06/13/20 04:33:57 48:11 346 210nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 954 06/13/20 05:21:49 60:00 7188 2912 ism APPLE !PHONES 955 06/13/20 05:22:07 1:36 5064 6298nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 48 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170696 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342758 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am CO 06/29/2020 10:17:17pm %.„. /14/14 °.."a "iii. st 11. it AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating Er Bytes Bytes Apn MAKE MODEL Cell Location Data Tame Member Up On (OTC) 956 06/13/20 05:22:08 1:36 6298 4776nxtgenp APPLE !PHONES (311580084491266:1217109705044::::0] hone 957 06/13/20 05:23:44 60:00 18806 19522 nxtgenp APPLE IPE0NE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 958 06/13/20 06:21:49 60:00 7064 2804 ins APPLE IPE0NE8 959 06/13/20 06:23:44 60:00 3733 944 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 960 06/13/20 07:21:49 60:00 14160 5768 ins APPLE !PHONES 961 06/13/20 07:23:44 60:00 398 315 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 962 06/13/20 08:21:49 60:00 6366 2928 ins APPLE !PHONES 963 06/13/20 08:23:44 60:00 277 315 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 964 06/13/20 09:21:49 60:00 6366 2928 ins APPLE !PHONES 965 06/13/20 09:23:44 60:00 734 1106 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 966 06/13/20 10:21:49 60:00 14892 4780 ins APPLE !PHONES 967 06/13/20 10:23:44 60:00 277 315 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 968 06/13/20 11:21:49 60:00 8944 3036 ins APPLE !PHONES 969 06/13/20 11:23:44 60:00 225 210 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 970 06/13/20 12:21:49 60:00 12028 4660 ins APPLE !PHONES 971 06/13/20 12:23:44 60:00 277 262 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 972 06/13/20 13:21:49 3:46 0 0 ins APPLE !PHONES 973 06/13/20 13:23:44 60:00 10720 21297 nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 974 06/13/20 13:26:11 0:58 6667 5962 ins APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 975 06/13/20 13:27:09 60:00 12368 4560 ins APPLE !PHONES 976 06/13/20 14:23:44 60:00 7873 3970nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 977 06/13/20 14:27:09 60:00 6848 2756 ins APPLE !PHONES 978 06/13/20 15:23:44 60:00 538 4628 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 979 06/13/20 15:27:09 60:00 8604 3004 ins APPLE !PHONES 980 06/13/20 16:23:44 60:00 3526 4497 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 981 06/13/20 16:27:09 60:00 8496 2896 ins APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 49 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170697 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342759 MOBILITY as. (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm .... /41 `'s -7-aft ed AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: MS= Item Conn. Conn. Originating ET Bytes Bytom Apn DEBI IMSI MARE MODEL Cell Location Date Time Number Up On (OTC) 982 06/13/20 17:23:44 60:00 329 367 nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 983 06/13/20 17:27:09 60:00 7048 2648 ins APPLE !PHONES 984 06/13/20 18:23:44 60:00 173 105 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 985 06/13/20 18:27:09 60:00 17100 6292 ins APPLE !PHONES 986 06/13/20 19:23:44 60:00 5114 7043nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 987 06/13/20 19:27:09 60:00 8480 2896 ins APPLE !PHONES 988 06/13/20 20:23:44 60:00 173 105 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 989 06/13/20 20:27:09 60:00 8496 2896 ins APPLE !PHONES 990 06/13/20 21:23:44 60:00 4941 4307nxtgonp APPLE !PHONES [023310601:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 991 06/13/20 21:27:09 60:00 13568 4792 ins APPLE !PHONES 992 06/13/20 22:23:44 60:00 1316 4573nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 993 06/13/20 22:27:09 60:00 7188 2880 ins APPLE !PHONES 994 06/13/20 23:23:44 60:00 217948 136037nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 995 06/13/20 23:27:09 60:00 10456 4256 ins APPLE !PHONES 996 06/14/20 00:23:44 60:00 173 105 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 997 06/14/20 00:27:09 60:00 6848 2648 ins APPLE !PHONES 998 06/14/20 01:23:44 60:00 173 105 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 999 06/14/20 01:27:09 60:00 14876 4608 ins APPLE !PHONES 1000 06/14/20 02:23:44 60:00 536 297nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1001 06/14/20 02:27:09 60:00 9788 3128 ins APPLE !PHONES 1002 06/14/20 03:23:44 60:00 173 157nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 1.0] 1003 06/14/20 03:27:09 60:00 10036 3144 ins APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 50 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170698 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342760 MOBILITY (with cell location) 111111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm ..„,, s---0 "-a1 AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn HOZ MAKE MODEL Col/ Location Data Tame Number Up Dn (OTC) 1004 06/14/20 04:23:44 60:00 346 210 nxtgenp APPLE !PHONES 1024577552:96006:- hone 71.9906006:43.3717995:210:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1005 06/14/20 04:27:09 60:00 13676 4768 ims APPLE !PHONES 1006 06/14/20 05:23:44 60:00 173 105 nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1007 06/14/20 05:27:09 60:00 13444 4576 ims APPLE !PHONES 1008 06/14/20 06:23:44 60:00 173 105 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1009 06/14/20 06:27:09 60:00 8372 2896 ims APPLE !PHONES 1010 06/14/20 07:23:44 60:00 173 105 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1011 06/14/20 07:27:09 60:00 8512 3772 ims APPLE !PHONES 1012 06/14/20 08:23:44 60:00 4732 3765nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1013 06/14/20 08:27:09 60:00 10020 3252 ims APPLE !PHONES 1014 06/14/20 09:23:44 60:00 173 105 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1015 06/14/20 09:27:09 60:00 13536 4860 ims APPLE !PHONES 1016 06/14/20 10:23:44 60:00 173 105 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1017 06/14/20 10:27:09 60:00 12012 4220 ims APPLE !PHONES 1018 06/14/20 11:23:44 60:00 9404 1691 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1019 06/14/20 11:27:09 60:00 8480 2896 ims APPLE !PHONES 1020 06/14/20 12:23:44 60:00 538 4260 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1021 06/14/20 12:27:09 60:00 8372 2896 ims APPLE !PHONES 1022 06/14/20 13:23:44 60:00 173 105 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1023 06/14/20 13:27:09 60:00 8388 2896 ims APPLE !PHONES 1024 06/14/20 14:23:44 60:00 173 105 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1025 06/14/20 14:27:09 60:00 18516 6324 ims APPLE !PHONES 1026 06/14/20 15:23:44 60:00 1145 5273nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1027 06/14/20 15:27:09 60:00 10128 3268 ims APPLE !PHONES 1028 06/14/20 16:23:44 60:00 434 1516 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 51 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170699 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342761 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Ties: Data usage For: MS= Item Conn. Conn. Originating ER Bytes Bytom Apn INEZ IMBI RARE MODEL Cell Location Data Time Up On (OTC) 1029 06/14/20 16:27:0 60:00 9928 3144 ims APPLE !PHONES 1030 06/14/20 17:23:44 60:00 830 530 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1031 06/14/20 17:27:09 15:49 3548 2200 ims APPLE !PHONES 1032 06/14/20 17:42:58 1:08 7480 4448 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1033 06/14/20 17:44:06 60:00 13692 4592 ims APPLE !PHONES 1034 06/14/20 18:23:44 60:00 173 157 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1035 06/14/20 18:44:06 60:00 10144 3160 ims APPLE !PHONES 1036 06/14/20 19:23:44 60:00 173 105 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1037 06/14/20 19:44:06 60:00 8372 2896 ims APPLE !PHONES 1038 06/14/20 20:23:44 60:00 173 105 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1039 06/14/20 20:44:06 60:00 13768 5108 ims APPLE !PHONES 1040 06/14/20 21:23:44 49:24 10693 835 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1041 06/14/20 21:44:06 60:00 13552 4468 ims APPLE !PHONES 1042 06/14/20 22:13:08 60:00 17878 16048 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1043 06/14/20 22:44:06 60:00 9926 3144 ims APPLE !PHONES 1044 06/14/20 23:13:08 60:00 446 700nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1045 06/14/20 23:44:06 60:00 10036 3144 ims APPLE !PHONES 1046 06/15/20 00:13:08 60:00 173 105 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1047 06/15/20 00:44:06 60:00 8604 3112 ims APPLE !PHONES 1048 06/15/20 01:13:08 60:00 14998 10416 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023413008:91457:-72.166667:43.205:100:-1.01 1049 06/15/20 01:44:0 60:00 11904 4504 ims APPLE !PHONES 1050 06/15/20 02:13:0 60:00 1334 1155 nxtgenp APPLE !PHONES (023413008:91457:-72.166667:43.205:100:-1.0. hone 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1051 06/15/20 02:44:0 60:00 13568 4468 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 52 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00170700 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342762 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm c40 AT&T 4.....,,o AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: SS= Item Conn. Conn. Originating ET Bytes Bytes Apn LEI IMBI MAKE MODEL Cell Location Data Tana Number Up On (OTC) 1052 06/15/20 03:13:08 60:00 924 840 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1053 06/15/20 03:44:06 60:00 7172 2772 ins APPLE !PHONES 1054 06/15/20 04:13:08 60:00 865 525 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1055 06/15/20 04:44:06 60:00 10036 3144 ins APPLE !PHONES 1056 06/15/20 05:13:08 60:00 635 525 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1057 06/15/20 05:44:06 60:00 6956 2648 ins APPLE !PHONES 1058 06/15/20 06:13:08 60:00 1292 886 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1059 06/15/20 06:44:06 60:00 15360 6076 ins APPLE !PHONES 1060 06/15/20 07:13:08 60:00 981 787nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1061 06/15/20 07:44:06 60:00 7388 2756 ins APPLE !PHONES 1062 06/15/20 08:13:08 60:00 808 630 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1063 06/15/20 08:44:06 60:00 10036 3252 ins APPLE !PHONES 1064 06/15/20 09:13:08 60:00 583 484 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1065 06/15/20 09:44:06 50:37 6848 2648 ins APPLE !PHONES 1066 06/15/20 10:13:08 60:00 635 577 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1067 06/15/20 10:34:43 0:02 0 0 ins APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 1068 06/15/20 10:34:43 0:02 0 0 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 1069 06/15/20 10:34:51 56:51 16081 7902 ins APPLE !PHONES 1070 06/15/20 11:13:08 44:54 23897 84578nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1071 06/15/20 11:31:42 4:48 7052 2556 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1072 06/15/20 11:31:42 4:48 6988 2556 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0] 1073 06/15/20 11:36:30 60:00 13568 4732 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 53 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170701 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342763 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: MS= Item Conn. Conn. Originating ET Bytes Bytes Apn DEBI IMSI MAKE MODEL Cell Location Data Tame Number Up on (OTC) 1074 06/15/20 11:58:01 2:03 288 48nxtgenp APPLE !PHONES (366491266:1431606::::0) U.S.Cellular, hone _USA 1075 06/15/20 11:58:02 2:03 48 Onxtgenp APPLE !PHONES (311580084491266:1217109705044::::0) hone 1076 06/15/20 12:00:05 20:25 6294 4744nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1077 06/15/20 12:20:30 60:00 10495 5873nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023413008:91457:-72.166667:43.205:100:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1078 06/15/20 12:36:30 60:00 8620 3052 Las APPLE !PHONES 1079 06/15/20 13:20:30 60:00 5167 12292 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1080 06/15/20 13:36:30 53:44 10036 3284 ims APPLE !PHONES 1081 06/15/20 14:20:30 8:02 486 4491nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1082 06/15/20 14:28:31 2:07 23299 6302nxtgenp APPLE !PHONES (366491266:1431606::::0) U.S.Cellular, hone _USA 1083 06/15/20 14:28:32 2:08 6302 23011nxtgenp APPLE !PHONES (311580084491266:1217109705044::::0) hone 1084 06/15/20 14:29:56 0:21 6316 6669 ims APPLE !PHONES (366491266:1431606::::0) U.S.Cellular, _USA 1085 06/15/20 14:29:57 0:21 6669 5964 ims APPLE !PHONES (311580084491266:1217109705044::::0) 1086 06/15/20 14:30:14 0:04 2566 1212 ims 1087 06/15/20 14:30:17 0:21 6360 6677 ims APPLE !PHONES (366491269:1431606::::0) U.S.Cellular, _USA 1088 06/15/20 14:30:18 0:22 6677 6096 ims APPLE !PHONES (311580084491269:1217109705044::::0) AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 54 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170702 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342764 MOBILITY a (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:13:13pm ..,„s cass 4 ° AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn flat =SI MARE MODEL Cell Location Date Taws (UPC) Number up Dn 1089 06/15/20 14:30:40 30:01 82656 65503 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 1090 06/15/20 14:30:41 10:16 6673 5924 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1091 06/15/20 14:40:57 2:07 3532 1340 ins APPLE !PHONES 1092 06/15/20 14:43:04 0:34 3376 1464 ins APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 1093 06/15/20 14:43:38 31:25 10036 3176 ins APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page SS AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170703 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342765 MOBILITY (with cell location) ill1111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Tins: Data Usage For: Item Conn. Conn. Originating Er Bytos Bytos Apn DMZ IMSI RARE MODEL Coll Location Dato Time UP on (UTC) 1094 06/15/20 15:00:41 40:12 253101 604319nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1095 06/15/20 15:15:04 25:49 6673 5964 ims APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 1096 06/15/20 15:40:52 7:05 139044 35440nxtgenp APPLE !PHONES 1366491266:1431606::::01 U.S.Cellular, hone _USA 1097 06/15/20 15:40:53 7:05 35440 143679nxtgenp APPLE !PHONES 1311580084491266:1217109705044::::01 hone 1098 06/15/20 15:40:5 7:03 6227 6781 ims APPLE !PHONES 1366491266:1431606::::01 U.S.Cellular, _USA 1099 06/15/20 15:40:55 7:03 6673 5963 ims APPLE !PHONES 1311580084491266:1217109705044::::01 1100 06/15/20 15:47:58 21:01 52525 117594nxtgonp APPLE !PHONES 1024581905:96023:-71.88656:42.84158:329:- hone 024581898:96023:-71.88656:42.84158:329:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 023429137:91520:-71.8684166:43.0803055:320:- 1.01 1101 06/15/20 15:48:0 20:58 6675 5980 ims APPLE !PHONES 1024581905:96023:-71.88656:42.84158:329:- 1.01 1102 06/15/20 16:08:5 22:22 137050 148078nxtgenp APPLE !PHONES 1024577552:96006:- hone 71.9906006:43.3717995:210:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1103 06/15/20 16:09:0 0:00 0 0 ims APPLE !PHONES 1024577552:96006:- 71.9906006:43.3717995:210:-1.01 1104 06/15/20 16:09:1 12:38 7085 5956 ims APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 1105 06/15/20 16:21:5 0:52 5536 1696 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 56 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170704 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342766 MOBILITY (with cell location) 40. 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage Tor: Ma= Item Conn. Conn. Originating ET Bytes Bytes Apn flat INSI NM MODEL Cell Location Data Tama Number Up On (OTC) 1106 06/15/20 16:22:43 2:41 3376 1464 ims APPLE !PEONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 1107 06/15/20 16:25:24 60:00 20268 9392 Las APPLE !PHONES 1108 06/15/20 16:31:20 1:51 5169 6230nxtgenp APPLE !PHONES (366491266:1431606::::0) U.S.Cellular, hone _USA 1109 06/15/20 16:31:21 1:51 6230 4881nxtgenp APPLE !PHONES (311580084491266:1217109705044::::0) hone 1110 06/15/20 16:33:12 60:00 7950 6460 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1111 06/15/20 17:25:24 60:00 8496 2928 ims APPLE !PHONES 1112 06/15/20 17:33:12 60:00 11387 1675nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1113 06/15/20 18:25:24 39:31 3424 1340 ims APPLE !PHONES 1114 06/15/20 18:33:12 60:00 76302 177440nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1115 06/15/20 19:04:54 45:11 11099 8572 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1116 06/15/20 19:04:55 45:10 11099 8484 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 1117 06/15/20 19:33:12 60:00 63045 307869nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1118 06/15/20 19:50:05 3:08 3640 1432 ims APPLE !PHONES 1119 06/15/20 19:53:13 2:51 2644 1428 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1120 06/15/20 19:53:13 2:51 2644 1340 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 1121 06/15/20 19:56:04 60:00 10272 4004 ims APPLE !PHONES 1122 06/15/20 20:33:12 28:26 31735 20682nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1123 06/15/20 20:56:04 60:00 10036 3300 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 57 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170705 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342767 MOBILITY a (with cell location) ill1111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:13:13pm trim;to. AT&T 4"- AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Tien: Data Usage For: Ma= Item Conn. Conn. Originating ET Bytes Bytes Apn DEBI IMSI MARE MODEL Cell Location Date Tim Number uP On (UTC) 1124 06/15/20 21:01:38 2:03 5060 6228 nxtgenp APPLE !PHONES (366491269:1431606::::0) U.S.Cellular, hone _USA 1125 06/15/20 21:01:39 2:03 6228 4772 nxtgenp APPLE !PHONES (311580084491269:1217109705044::::0) hone 1126 06/15/20 21:03:42 60:00 16966 13506 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1127 06/15/20 21:56:04 60:00 8620 3160 ins APPLE !PHONES 1128 06/15/20 22:03:42 60:00 50958 11825 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1129 06/15/20 22:56:04 60:00 6956 2896 ins APPLE !PHONES 1130 06/15/20 23:03:42 8:50 0 Onxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1131 06/15/20 23:12:31 2:38 5065 6282 nxtgenp APPLE !PHONES (366491269:1431606::::0) U.S.Cellular, hone _USA 1132 06/15/20 23:12:32 2:39 6282 4777 nxtgenp APPLE !PHONES (311580084491269:1217109705044::::0) hone 1133 06/15/20 23:15:10 1:02 280 581 nxtgenp APPLE !PHONES (023310601:91057:- hone 71.9598779:43.2972525:150:-1.0) 1134 06/15/20 23:16:11 2:04 288 48 nxtgenp APPLE !PHONES (366491266:1431606::::0) U.S.Cellular, hone _USA 1135 06/15/20 23:16:13 2:03 48 Onxtgonp APPLE !PHONES (311580084491266:1217109705044::::0) hone 1136 06/15/20 23:18:16 60:00 16495 14181 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 1.0] 1137 06/15/20 23:56:04 60:00 17100 6124 ims APPLE !PHONES 1138 06/16/20 00:18:16 25:51 42120 24512 nxtgenp APPLE !PHONES (024577552:96006:- hone 71.9906006:43.3717995:210:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1139 06/16/20 00:44:07 60:00 28133 14670 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1140 06/16/20 00:56:04 60:00 7064 2680 ims APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 58 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170706 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342768 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm u AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Ma= Item Conn. Conn. Originating ET Bytes Bytes Apn EMI EMI MAR MODEL Cali Location Data Tina Number Up On (OTC) 1141 06/16/20 01:44:0 60:00 10042 7545nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 1.01 1142 06/16/20 01:56:04 60:00 10036 3068 /ma APPLE !PHONES 1143 06/16/20 02:44:0 60:00 3561 6127nxtgenp APPLE !PHONES (023310601:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1144 06/16/20 02:56:0 47:12 8604 3052 ims APPLE !PHONES 1145 06/16/20 03:44:0 60:00 924 840nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1146 06/16/20 03:48:3 60:00 11908 7693 ims 1147 06/16/20 04:44:0 60:00 751 735nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1148 06/16/20 04:48:3 60:00 11812 4220 /ma 1149 06/16/20 05:44:0 60:00 5698 4814nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1150 06/16/20 05:48:3 60:00 8496 3128 ims 1151 06/16/20 06:44:0 60:00 5076 4027nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1152 06/16/20 06:48:3 60:00 6366 2896 ims 1153 06/16/20 07:44:0 60:00 635 525nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1154 06/16/20 07:48:3 60:00 9804 3020 ims 1155 06/16/20 08:44:0 60:00 578 630nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1156 06/16/20 08:48:3 60:00 12244 4860 ims 1157 06/16/20 09:44:0 60:00 462 420nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1158 06/16/20 09:48:3 60:00 13676 4468 ims 1159 06/16/20 10:44:0 47:06 0 7057nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1160 06/16/20 10:48:3 45:48 3424 1324 ims 1161 06/16/20 11:33:1 0:34 6246 4744nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1162 06/16/20 11:33:50 1:06 5625 6428nxtgenp APPLE !PHONES (366513795:1431694::::0) U.S.Cellular, hone _USA 1163 06/16/20 11:33:51 1:06 6428 5337nxtgenp APPLE !PHONES (311580084513795:1217109705132::::0) hone AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 59 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170707 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342769 MOBILITY (with cell location) a ill1111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm . AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Ma= Item Conn. Conn. Originating ET Bytes Bytes Apn flat 1MSI MAKE MODEL Con Location Date Tina Number Up Dn (UTC) 1164 06/16/20 11:34:22 0:34 6262 6753 ims APPLE !PHONES (366513795:1431694::::0] U.S.Cellular, _USA 1165 06/16/20 11:34:23 0:34 6665 5998 Las APPLE !PHONES (311580084513795:1217109705132 311580084491266:1217109705044::::0] 1166 06/16/20 11:34:57 60:00 33472 27824nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1167 06/16/20 11:34:58 1:32 6675 5920 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1168 06/16/20 11:36:30 48:43 19272 9220 ims APPLE !PHONES 1169 06/16/20 12:25:13 0:46 7287 6046 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1170 06/16/20 12:25:59 60:00 12288 4452 ims APPLE !PHONES 1171 06/16/20 12:34:57 27:54 1064 4853nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1172 06/16/20 13:02:51 60:00 6993 5584 nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 1173 06/16/20 13:25:59 60:00 8496 3004 ims APPLE !PHONES 1174 06/16/20 14:02:51 60:00 2036 8692 nxtgenp APPLE !PHONES (023310601:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1175 06/16/20 14:25:59 60:00 9696 3160 ims APPLE !PHONES 1176 06/16/20 15:02:51 60:00 54496 113988 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310785:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 1177 06/16/20 15:25:59 9:52 3532 1448 ims APPLE !PHONES 1178 06/16/20 15:35:51 13:16 2644 1324 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0] AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 60 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY0000170708 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342770 MOBILITY (with cell location) • 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in UTC. Run Date: 06/29/2020 Run Tine: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn flat IMBI MARE MODEL Cell Location Date T10.0 Number Up On (UTC) 1179 06/16/20 15:49:07 23:33 3532 1324 ins APPLE !PHONES 1180 06/16/20 16:02:51 60:00 76601 58346 nxtgenp APPLE !PHONES (023310601:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1181 06/16/20 16:12:40 3:59 4076 2324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1182 06/16/20 16:16:39 60:00 11920 4436 ins APPLE !PHONES 1183 06/16/20 17:02:51 11:24 337 315nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1184 06/16/20 17:14:15 60:00 11265 5754nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1185 06/16/20 17:16:39 60:00 11996 4628 ins APPLE !PHONES 1186 06/16/20 18:14:15 18:54 35518 241258nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1187 06/16/20 18:16:39 10:44 0 0 ims APPLE !PHONES 1188 06/16/20 18:27:23 1:35 35368 1660 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1189 06/16/20 18:27:23 1:35 4060 1572 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1190 06/16/20 18:28:58 0:46 3424 1324 ims APPLE !PHONES 1191 06/16/20 18:29:44 3:25 2644 1412 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1192 06/16/20 18:29:44 3:25 2644 1324 ins APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 1193 06/16/20 18:33:08 2:04 22347 9556nxtgenp APPLE !PHONES (366491266:1431606::::0) U.S.Cellular, hone _USA 1194 06/16/20 18:33:10 2:02 6602 7105 ins APPLE !PHONES (366491266:1431606::::0) U.S.Cellular, _USA 1195 06/16/20 18:33:10 2:03 9172 22059nxtgenp APPLE !PHONES (311580084491266:1217109705044::::0) hone 1196 06/16/20 18:33:11 2:02 7105 6338 ins APPLE !PHONES (311580084491266:1217109705044::::0) AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 61 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170709 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342771 MOBILITY (with cell location) • 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm .._,„. AT&T 4c410. AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Ma= Item Conn. Conn. Originating ET Bytes Bytes Apn flat IMS1 MARE MODEL Cell Location Data Tame Number Up On (OTC) 1197 06/16/20 18:35:13 60:00 204773 3284434nxtgenp APPLE !PHONES (023310601:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 024581905:96023:-71.88656:42.84158:329:-1.0] 1198 06/16/20 18:35:15 60:00 7061 6282 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1199 06/16/20 19:35:13 60:00 95787 1817188nxtgenp APPLE !PHONES (024581905:96023:-71.88656:42.84158:329:- hone 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1200 06/16/20 19:35:15 60:00 9237 7302 ims APPLE !PHONES (024581905:96023:-71.88656:42.84158:329:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1201 06/16/20 20:35:13 60:00 58017 79855nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1202 06/16/20 20:35:15 2:29 0 0 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 1203 06/16/20 20:37:44 60:00 15216 4840 ims APPLE !PHONES 1204 06/16/20 21:35:13 60:00 59045 44307 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1205 06/16/20 21:37:44 60:00 8728 3020 ims APPLE !PHONES 1206 06/16/20 22:35:13 60:00 34200 20212 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1207 06/16/20 22:37:44 60:00 32284 26176 ims APPLE !PHONES 1208 06/16/20 23:27:36 0:36 3471 31652 ims APPLE !PHONES 1209 06/16/20 23:35:13 60:00 872 735nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1210 06/16/20 23:37:31 0:33 6985 11160 ims APPLE !PHONES 1211 06/16/20 23:37:44 60:00 25184 14480 ims APPLE !PHONES 1212 06/17/20 00:35:13 60:00 10997 18528 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1213 06/17/20 00:37:44 60:00 7496 2880 ims APPLE !PHONES 1214 06/17/20 01:35:13 60:00 3777 997nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 62 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170710 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342772 MOBILITY (with cell location) ill1111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm / 1 t 4::sro AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn EMBI IMSI MARE MODEL Cell Location Data Time Number Up Dn (UTC) 1215 06/17/20 01:37:4 60:00 6712 3112 ims APPLE !PEONES 1216 06/17/20 02:35:1 60:00 578 630nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1217 06/17/20 02:37:4 60:00 9804 3128 ims APPLE !PHONES 1218 06/17/20 03:35:1 60:00 514 525nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1219 06/17/20 03:37:4 60:00 9912 3252 ims APPLE !PHONES 1220 06/17/20 04:35:1 60:00 514 525nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1221 06/17/20 04:37:4 60:00 17192 6308 ims APPLE !PHONES 1222 06/17/20 05:35:1 60:00 225 210nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1223 06/17/20 05:37:4 60:00 10376 3376 ims APPLE !PHONES 1224 06/17/20 06:35:1 60:00 273 210nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1225 06/17/20 06:37:4 42:19 9926 3252 ims APPLE !PHONES 1226 06/17/20 07:20:0 60:00 18244 9664 ims 1227 06/17/20 07:35:1 60:00 4201 902nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1228 06/17/20 08:20:0 60:00 9928 3252 ims 1229 06/17/20 08:35:1 60:00 225 210nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1230 06/17/20 09:20:0 60:00 9926 3144 ims 1231 06/17/20 09:35:1 60:00 277 262nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1232 06/17/20 10:20:0 60:00 8604 3144 ims 1233 06/17/20 10:35:1 60:00 341 367nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1234 06/17/20 11:20:0 60:00 13460 4468 ims 1235 06/17/20 11:35:1 60:00 5926 651nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310785:91057:-71.9598779:43.2972525:150:- 1.0] 1236 06/17/20 12:20:0 60:00 13460 4752 ins 1237 06/17/20 12:35:1 60:00 659 4516 nxtgenp APPLE IPE0NE8 (023310785:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1238 06/17/20 13:20:0 3:58 0 0 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 63 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170711 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342773 MOBILITY (with cell location) • 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm ..,..., ``.4"01.0 s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Ma= Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ INS' BARE MODEL Cell Location Data Tame Number On (OTC) 1239 06/17/20 13:24:04 1:04 2728 1412 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 1240 06/17/20 13:24:04 1:04 2596 1324 ims APPLE IPHONE8 [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 1241 06/17/20 13:25:08 60:00 15000 4716 ims APPLE IPHONE8 1242 06/17/20 13:35:13 60:00 173 105 nxtgenp APPLE IPHONE8 [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1243 06/17/20 14:25:08 60:00 10036 3144 ims APPLE !PHONES 1244 06/17/20 14:35:13 60:00 346 210 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1245 06/17/20 15:25:08 60:00 8496 2788 ims APPLE !PHONES 1246 06/17/20 15:35:13 30:05 83767 46623 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1247 06/17/20 16:05:17 2:03 268 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 1248 06/17/20 16:05:18 2:03 48 Onxtgenp APPLE !PHONES (311580084491266:1217109705044::::0] hone 1249 06/17/20 16:07:21 60:00 46193 24155 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 1.0] 1250 06/17/20 16:25:08 60:00 15108 4716 ims APPLE !PHONES 1251 06/17/20 17:07:21 45:44 44075 39917nxtgenp APPLE !PHONES (024577552:96006:- hone 71.9906006:43.3717995:210:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1252 06/17/20 17:25:08 60:00 29012 14552 ims APPLE !PHONES 1253 06/17/20 17:48:21 0:04 0 4751 ims APPLE !PHONES 1254 06/17/20 17:53:04 2:26 32137 54447nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 1255 06/17/20 17:53:05 2:26 54447 31753nxtgenp APPLE !PHONES (311580084491266:1217109705044::::0] hone 1256 06/17/20 17:55:31 12:27 6598 5325nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1257 06/17/20 18:07:57 8:21 901 280nxtgenp APPLE !PHONES [366491266:1431606::::01 U.S.Cellular, hone _USA 1258 06/17/20 18:07:58 8:21 280 613nxtgenp APPLE !PHONES (311580084491266:1217109705044::::0] hone 1259 06/17/20 18:16:19 60:00 74734 47151nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1260 06/17/20 18:25:08 60:00 8388 2896 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 64 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170712 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342774 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Tine: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn 72122 INSI MARE MODEL Cell Location Date Tana Number Up On (OTC) 1261 06/17/20 19:16:19 60:00 2536 13967nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1262 06/17/20 19:25:08 60:00 9928 3144 ins APPLE !PHONES 1263 06/17/20 20:16:19 60:00 46516 32493nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1264 06/17/20 20:25:08 60:00 6956 2756 ins APPLE !PHONES 1265 06/17/20 21:16:19 60:00 7148 1985nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 1.0] 1266 06/17/20 21:25:08 60:00 13784 4824 ies APPLE !PHONES 1267 06/17/20 22:16:19 60:00 744 525nxtgenp APPLE !PHONES (024577552:96006:- hone 71.9906006:43.3717995:210:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1268 06/17/20 22:25:08 60:00 14032 5816 ins APPLE !PHONES 1269 06/17/20 23:16:19 11:31 0 0nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1270 06/17/20 23:25:08 60:00 8366 2896 ins APPLE !PHONES 1271 06/17/20 23:27:49 2:28 5217 6328nxtgenp APPLE !PHONES (366513795:1431694::::0) U.S.Cellular, hone _USA 1272 06/17/20 23:27:50 2:28 6326 4929nxtgenp APPLE !PHONES (311580084513795:1217109705132::::0) hone 1273 06/17/20 23:30:18 2:23 276 577nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1274 06/17/20 23:32:40 2:04 266 48nxtgenp APPLE !PHONES (366513795:1431694::::0) U.S.Cellular, hone _USA 1275 06/17/20 23:32:41 2:04 48 Onxtgenp APPLE !PHONES (311580084513795:1217109705132::::0) hone AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 65 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170713 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342775 MOBILITY (with cell location) 4... 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm u AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Tine: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn flat IMBI MARE MODEL Cell Location Date Tama Up On (OTC) 1276 06/17/20 23:34:45 : 47:55 81323 57806nxtgenp APPLE IPR0NE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310785:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310785:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1277 06/18/20 00:22:40 : 0:00 980 1976nxtgenp APPLE IPR0NE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 66 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170714 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342776 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm .1/4..-_-":"" a• AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: NM= Item Conn. Conn. Originating Et Bytes Bytes Apn INEI IMSI MARE MODEL Cell Location Data Tim Number DP Dn (OTC) 1278 06/18/20 00:22:40 60:00 227268 117145 nxtgenp APPLE !PHONES (023432209:91532:-71.947299:43.256953:280:- hone 023310608:91057:-71.9598779:43.2972525:150:- 023432209:91532:-71.947299:43.256953:280:- 023310608:91057:-71.9598779:43.2972525:150:- 023432209:91532:-71.947299:43.256953:280:- 023310608:91057:-71.9598779:43.2972525:150:- 023432209:91532:-71.947299:43.256953:280:- 023310608:91057:-71.9598779:43.2972525:150:- 023432209:91532:-71.947299:43.256953:280:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1279 06/18/20 00:25:08 60:00 21980 12520 ims APPLE !PHONES 1280 06/18/20 00:38:57 0:06 0 0 ims APPLE !PHONES 1281 06/18/20 01:22:40 60:00 272847 211308 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1282 06/18/20 01:25:08 60:00 6366 2896 ims APPLE !PHONES 1283 06/18/20 02:22:40 60:00 40 105 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1284 06/18/20 02:25:08 60:00 7064 2756 ims APPLE !PHONES 1285 06/18/20 03:22:40 12:43 0 0nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1286 06/18/20 03:25:08 10:15 4748 2084 ims APPLE !PHONES 1287 06/18/20 04:22:35 0:05 970 2466 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1288 06/18/20 04:22:45 60:00 54131 249832 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1289 06/18/20 04:24:30 58:26 11667 8676 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1290 06/18/20 05:22:45 0:11 0 Onxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1291 06/18/20 05:22:57 41:52 7549 8272nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1292 06/18/20 05:22:58 41:51 9265 7324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 67 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170715 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342777 MOBILITY (with cell location) e 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm t_-`""f• _--:. AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Tina: Data Usage For: Ito. Conn. Conn. OrIganatIng Er Bytes Bytes Apn flat IMsI MAKE MODEL Cell Location Data Tama Number UP On (DTC) 1293 06/18/20 06:04:49 2:26 6858 6202 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1294 06/18/20 06:04:50 2:25 6669 5962 Lens APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 1295 06/18/20 06:07:15 30:14 236 549 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1296 06/18/20 06:07:17 30:12 6671 5966 lens APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 1297 06/18/20 06:37:29 60:00 8673 8919 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1298 06/18/20 06:37:31 60:00 11649 8663 lens APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 1299 06/18/20 07:37:29 60:00 9631 19707 nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1300 06/18/20 07:37:31 60:00 5424 2772 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1301 06/18/20 08:37:29 4:53 0 O nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1302 06/18/20 08:37:31 4:51 0 0 Lens APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1303 06/18/20 08:42:21 33:48 6503 7064 nxtgenp APPLE !PHONES (366491269:1431606::::01 U.S.Cellular, hone _USA 1304 06/18/20 08:42:22 33:47 6261 6673 Lens APPLE !PHONES (366491269:1431606::::01 U.S.Cellular, _USA 1305 06/18/20 08:42:22 33:48 7064 7895 nxtgenp APPLE !PHONES (311580084491269:1217109705044::::01 hone 1306 06/18/20 08:42:23 33:47 6673 5997 iota APPLE !PHONES (311580084491269:1217109705044::::01 1307 06/18/20 09:16:10 60:00 20480 42074 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310785:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1308 06/18/20 09:16:12 60:00 11647 8627 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1309 06/18/20 10:16:10 59:28 1317 5196 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1310 06/18/20 10:16:12 59:26 216 108 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1311 06/18/20 12:55:28 60:00 45693 84872 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 68 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170716 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342778 MOBILITY (with cell location) 44.0 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm tres_si AT&T `'s AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Ma= Item Conn. Conn. Originating BY Bytes Bytes Apn DEBI IMSI MARE MODEL Cell Location Data Tim Number Up on (OTC) 1312 06/18/20 12:55:29 11:28 7425 6122 ims APPLE !PHONES [02331060S:91057:- 71.9598779:43.2972525:150:-1.01 1313 06/18/20 13:06:57 44:26 20664 10860 ims APPLE !PHONES 1314 06/18/20 13:07:07 0:02 0 0 ims APPLE !PHONES 1315 06/18/20 13:07:41 43:42 6561716 5805918 ims APPLE !PHONES 1316 06/18/20 13:51:23 0:58 10452 5608 ims APPLE !PHONES [02331060S:91057:- 71.9598779:43.2972525:150:-1.01 1317 06/18/20 13:51:23 0:58 25134 239381 ims APPLE !PHONES (02331060S:91057:- 71.9598779:43.2972525:150:-1.01 1318 06/18/20 13:52:21 60:00 26684 12076 ims APPLE !PHONES 1319 06/18/20 13:52:21 14:41 1865657 2255199 ims APPLE !PHONES 1320 06/18/20 13:55:28 60:00 7323 7327nxtgenp APPLE !PHONES (02331060S:91057:- hone 71.9598779:43.2972525:150:-1.01 1321 06/18/20 14:52:21 11:04 0 0 ims APPLE !PHONES 1322 06/18/20 14:55:28 60:00 39110 108526 nxtgenp APPLE !PHONES (02331060S:91057:- hone 71.9598779:43.2972525:150:-1.01 1323 06/18/20 15:03:25 6:20 3952 1464 ims APPLE !PHONES (02331060S:91057:- 71.9598779:43.2972525:150:-1.01 1324 06/18/20 15:09:52 60:00 18034 10218 ins 1325 06/18/20 15:55:28 7:40 0 0nxtgenp APPLE !PHONES (02331060S:91057:- hone 71.9598779:43.2972525:150:-1.01 1326 06/18/20 16:03:08 60:00 6163 7676nxtgenp APPLE !PHONES (02331060S:91057:- hone 71.9598779:43.2972525:150:-1.01 1327 06/18/20 16:09:52 60:00 6848 2772 ins 1328 06/18/20 17:03:08 44:48 35070 23761nxtgenp APPLE !PHONES (02331060S:91057:- hone 71.9598779:43.2972525:150:-1.01 1329 06/18/20 17:09:52 60:00 6366 3036 ins 1330 06/18/20 17:47:55 0:23 5220 6314 nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 1331 06/18/20 17:47:56 0:23 6314 4932 nxtgenp APPLE !PHONES (311580084491266:1217109705044::::01 hone 1332 06/18/20 17:48:19 11:30 47456 29214nxtgenp APPLE !PHONES [02331060S:91057:- hone 71.9598779:43.2972525:150:-1.01 1333 06/18/20 17:59:50 7:16 7792 4964nxtgenp APPLE !PHONES [02331060S:91057:- hone 71.9598779:43.2972525:150:-1.01 1334 06/18/20 18:07:05 1:00 5222 6314nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 1335 06/18/20 18:07:07 1:00 6314 4934nxtgenp APPLE !PHONES (311580084491266:1217109705044::::01 hone AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 69 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170717 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342779 MOBILITY (with cell location) a 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. OrIginating ET Bytes Bytom Apn INSI MAKE MODEL Cell Location Data T11021 Number Up Dn (OTC) 1336 06/18/20 18:08:07 60:00 57138 197153 nxtgenp APPLE !PHONES (024577552:96006:- hone 71.9906006:43.3717995:210:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1337 06/18/20 18:09:52 2:18 0 0 ims APPLE !PHONES 1338 06/18/20 18:12:10 5:44 52128 1340 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 1339 06/18/20 18:12:10 5:44 2596 1340 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 1340 06/18/20 18:17:54 19:10 3532 1448 ims APPLE !PHONES 1341 06/18/20 18:37:04 1:38 3968 1464 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 1342 06/18/20 18:37:04 1:38 3904 1464 ins APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 1343 06/18/20 18:38:42 60:00 11920 5268 ism APPLE !PHONES 1344 06/18/20 19:08:07 60:00 634 1680 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1345 06/18/20 19:38:42 29:31 6848 2840 ism APPLE !PHONES 1346 06/18/20 20:08:07 60:00 52203 102296 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1347 06/18/20 20:08:13 27:42 5256 2680 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 1.01 1348 06/18/20 20:08:13 27:42 5192 2680 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1349 06/18/20 20:35:55 60:00 15000 4764 ins APPLE !PHONES 1350 06/18/20 21:08:07 60:00 97567 78269 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1351 06/18/20 21:35:55 31:33 3640 1464 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 70 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170718 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342780 MOBILITY a (with cell location) 020 •,...a tesial.gri AT&T AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in UTC. Run Date: 06/19/1010 Run Ties: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytes Apn =MI I MSS MAKE MODEL Cell Location Data Tama Number Up Dn (OTC) 1352 06/18/20 22:07:28 0:15 43120 3496 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 1353 06/18/20 22:07:28 0:15 6160 3496 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1354 06/18/20 22:07:43 0:53 3532 1340 ims APPLE !PHONES 1355 06/18/20 22:08:07 60:00 8270 24949nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 1.0] 1356 06/18/20 22:08:35 0:47 8372 1464 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1357 06/18/20 22:08:36 0:46 3328 1464 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1358 06/18/20 22:09:22 60:00 15232 4996 ims APPLE !PHONES 1359 06/18/20 23:08:07 60:00 43394 20976nxtgenp APPLE !PHONES (024577552:96006:- hone 71.9906006:43.3717995:210:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1360 06/18/20 23:09:22 60:00 8604 3160 ims APPLE !PHONES 1361 06/19/20 00:08:07 49:36 62198 41886nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1362 06/19/20 00:09:22 60:00 8388 2928 ims APPLE !PHONES 1363 06/19/20 00:57:43 13:28 6619 5611 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1364 06/19/20 01:09:22 60:00 17424 6480 ims APPLE !PHONES 1365 06/19/20 01:11:10 2:04 901 280nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 1366 06/19/20 01:11:11 2:04 280 613nxtgenp APPLE !PHONES (311580084491266:1217109705044::::01 hone 1367 06/19/20 01:13:15 3:12 48 0nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1368 06/19/20 01:16:26 8:22 288 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 1369 06/19/20 01:16:27 8:22 48 0nxtgenp APPLE !PHONES (311580084491266:1217109705044::::0] hone AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 71 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170719 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342781 MOBILITY a (with cell location) 111111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in Inc. Run Date: 06/29/2020 Run Tins: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn flat 1MSI MAKE MODEL Col/ Location Data Tima Number Up On (OTC) 1370 06/19/20 01:24:49 0:33 48 Onxtgenp APPLE !PHONES [024577552:96006:- hone 71.9906006:43.3717995:210:-1.01 1371 06/19/20 01:25:21 2:04 266 48nxtgenp APPLE !PHONES (366513795:1431694::::01 U.S.Cellular, hone _USA 1372 06/19/20 01:25:22 2:04 48 Onxtgenp APPLE !PHONES (311580084513795:1217109705132::::01 hone 1373 06/19/20 01:27:26 60:00 9130 10200 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1374 06/19/20 02:09:22 60:00 10268 3300 ims APPLE !PHONES 1375 06/19/20 02:27:26 60:00 3677 891 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1376 06/19/20 03:09:22 60:00 8496 3036 ims APPLE !PHONES 1377 06/19/20 03:27:26 60:00 635 525 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1378 06/19/20 04:09:22 60:00 13568 4640 ims APPLE !PHONES 1379 06/19/20 04:27:26 60:00 3529 6063 nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1380 06/19/20 05:09:22 60:00 9928 3284 ims APPLE !PHONES 1381 06/19/20 05:27:26 60:00 803 840 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1382 06/19/20 06:09:22 60:00 10596 4536 ims APPLE !PHONES 1383 06/19/20 06:27:26 60:00 346 210 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1384 06/19/20 07:09:22 60:00 6366 3144 ims APPLE !PHONES 1385 06/19/20 07:27:26 60:00 462 420 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1386 06/19/20 08:09:22 60:00 6848 2896 ims APPLE !PHONES 1387 06/19/20 08:27:26 60:00 346 210 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1388 06/19/20 09:09:22 60:00 14860 4640 ims APPLE !PHONES 1389 06/19/20 09:27:26 60:00 635 525 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1390 06/19/20 10:09:22 60:00 9926 3284 ims APPLE !PHONES 1391 06/19/20 10:27:26 60:00 462 420 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1392 06/19/20 11:09:22 60:00 13568 4892 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 72 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170720 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342782 MOBILITY (with cell location) • 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm ..... `‘ai0,• AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: SS= Item Conn. Conn. Originating ET Bytes Bytes Apn flat IMBI MAKE MODEL Coll Location Data Tam Number Up On (MC) 1393 06/19/20 11:27:26 52:09 346 210nxtgenp PLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1394 06/19/20 12:09:22 60:00 6848 2788 ims PLE !PHONES 1395 06/19/20 12:19:35 1:42 48 0nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1396 06/19/20 12:21:17 60:00 11160 5333 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1397 06/19/20 13:09:22 16:39 3532 1340 ims APPLE !PHONES 1398 06/19/20 13:21:17 60:00 6684 8864 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1399 06/19/20 13:26:01 1:48 50424 1324 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 1400 06/19/20 13:26:01 1:48 2596 1324 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 1401 06/19/20 13:27:49 60:00 10488 4468 ims APPLE IPHONE8 1402 06/19/20 14:21:17 60:00 26527 275322nxtgenp APPLE IPHONE8 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 1.01 1403 06/19/20 14:27:49 49:03 6956 2680 ims APPLE IPHONE8 1404 06/19/20 15:16:52 60:00 9301 7338 ims APPLE IPHONE8 1023310601:91057:- 71.9598779:43.2972525:150:-1.0. 024581905:96023:-71.88656:42.84158:329:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1405 06/19/20 15:16:52 60:00 9237 7338 Lots APPLE !PHONES 1023310601:91057:- 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 73 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170721 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342783 MOBILITY a (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm u AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in WPC. Run Date: 06/29/2020 Run Ties: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INEZ INBI MAKE MODEL Coll Location Date Tame Number Up Dn (OTC) 1406 06/19/20 15:21:17 60:00 88838 204055 nxtgenp APPLE !PHONES (023310601:91057:- hone 71.9598779:43.2972525:150:-1.0. 024581905:96023:-71.88656:42.84158:329:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1407 06/19/20 16:16:52 10:59 0 0 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1408 06/19/20 16:16:52 10:59 0 0 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0( 1409 06/19/20 16:21:17 60:00 11666 18805 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0( 1410 06/19/20 16:27:51 60:00 13676 4624 ims APPLE !PHONES 1411 06/19/20 17:21:17 60:00 26340 20752nxtgenp APPLE 'PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0( 1412 06/19/20 17:27:51 60:00 20136 9840 ims APPLE 'PHONES 1413 06/19/20 17:59:00 0:04 0 1656 ims APPLE 'PHONES 1414 06/19/20 18:21:17 60:00 164044 89070nxtgenp APPLE 'PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0( 1415 06/19/20 18:27:51 60:00 12136 4500 ims APPLE !PHONES 1416 06/19/20 19:21:17 60:00 45740 37315nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1417 06/19/20 19:27:51 60:00 16726 13868 ims APPLE !PHONES 1418 06/19/20 20:15:49 0:13 6623 13318 ims APPLE !PHONES 1419 06/19/20 20:21:17 45:05 126524 179946 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 1.01 1420 06/19/20 20:27:51 1:13 0 0 Lots APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 74 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170722 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342784 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:11pm 4*-1.0. AT&T trim; AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Byte, Apn flat HISS MANE MODEL Cell Location Date Tim Number Up Dn (OTC) 1421 06/19/20 20:29:04 31:43 86308 3052 ims APPLE IPHONE8 (023310601:91057:- 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1422 06/19/20 20:29:04 31:43 8148 3052 ims APPLE IPHONE8 (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 1423 06/19/20 21:00:47 3:19 3640 1572 ims APPLE !PHONES 1424 06/19/20 21:04:06 2:16 13320 2840 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 1425 06/19/20 21:04:06 2:16 5192 2840 ims APPLE IPHONE8 (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 1426 06/19/20 21:06:21 2:04 288 48nxtgenp APPLE !PHONES (366491266:1431606::::0) U.S.Cellular, hone _USA 1427 06/19/20 21:06:22 2:03 6226 6673 ims APPLE !PHONES (366491266:1431606::::0) U.S.Cellular, _USA 1428 06/19/20 21:06:22 2:04 48 Onxtgenp APPLE IPHONt8 (311580084491266:1217109705044::::0) hone 1429 06/19/20 21:06:24 2:02 6673 5962 ims APPLE !PHONES (311580084491266:1217109705044::::0) 1430 06/19/20 21:08:26 60:00 116343 143372nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1431 06/19/20 21:08:27 12:38 6675 5919 ims APPLE IPHONE8 (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1432 06/19/20 21:21:05 0:17 11652 5916 ims APPLE !PHONES 1433 06/19/20 21:22:11 5:11 7961 6122 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1434 06/19/20 21:27:22 22:47 3666 1356 ims APPLE !PHONES 1435 06/19/20 21:50:09 0:19 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1436 06/19/20 21:50:28 60:00 10720 4268 ims APPLE !PHONES 1437 06/19/20 22:08:26 60:00 1097 945 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1438 06/19/20 22:50:28 60:00 6728 3268 ims APPLE !PHONES 1439 06/19/20 23:08:26 60:00 53768 33974nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1440 06/19/20 23:50:28 60:00 7312 3696 ims APPLE !PHONES 1441 06/20/20 00:08:26 60:00 78826 52824 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 75 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170723 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342785 MOBILITY (with cell location) • ill111 1 120 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm tz-si.. "—r o AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Tine: Data Usage For: Sim Eton Conn. Conn. Originating Et Bytes Bytes Apn flat IMSI MARE MODEL Cell Location Data Time Number Up Dn (OTC) 1442 06/20/20 00:50:28 25:26 4964 1480 ins APPLE !PHONES 1443 06/20/20 01:08:26 60:00 1012 5292nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310785:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1444 06/20/20 01:15:54 0:40 3952 1464 ins APPLE !PHONES (023310785:91057:- 71.9598779:43.2972525:150:-1.0] 1445 06/20/20 01:16:34 60:00 20072 6512 ins APPLE !PHONES 1446 06/20/20 02:08:26 60:00 52228 32384 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1447 06/20/20 02:16:34 60:00 6956 2680 ins APPLE !PHONES 1448 06/20/20 03:08:26 60:00 1017 4831 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1449 06/20/20 03:16:34 60:00 9926 3068 ins APPLE !PHONES 1450 06/20/20 04:08:26 60:00 1121 5180 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1451 06/20/20 04:16:34 60:00 8604 3036 ins APPLE !PHONES 1452 06/20/20 05:08:26 60:00 462 420 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1453 06/20/20 05:16:34 60:00 6972 3572 ins APPLE !PHONES 1454 06/20/20 06:08:26 60:00 635 525 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1455 06/20/20 06:16:34 60:00 15668 5984 ins APPLE !PHONES 1456 06/20/20 07:08:26 18:53 12350 10452nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1457 06/20/20 07:16:34 60:00 8156 2912 ins APPLE !PHONES 1458 06/20/20 07:27:19 56:59 78459 82186nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1459 06/20/20 08:16:34 60:00 8496 3052 Les APPLE !PHONES 1460 06/20/20 08:24:17 2:04 5220 6314nxtgenp APPLE !PHONES (366513795:1431694::::01 U.S.Cellular, hone _USA 1461 06/20/20 08:24:19 2:03 6314 4932nxtgenp APPLE !PHONES (311580084513795:1217109705132::::01 hone 1462 06/20/20 08:26:22 60:00 7762 6278nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1463 06/20/20 09:16:34 60:00 10036 3392 ins APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 76 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170724 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342786 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm tr,_„•-s`a di AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in Inc. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn flat L19I NA= NUDEL Cell Location Date Fine Number Up on (ozo) 1464 06/20/20 09:26:2: 60:00 1097 945nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310785:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1465 06/20/20 10:16:3 60:00 13568 4640 Las APPLE !PHONES 1466 06/20/20 10:26:2 60:00 976 945nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1467 06/20/20 11:16:3 60:00 15216 5264 Lau APPLE !PHONES 1468 06/20/20 11:26:2 60:00 2820 6762nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1469 06/20/20 12:16:3 60:00 9928 3176 Lau APPLE !PHONES 1470 06/20/20 12:26:2 60:00 751 787nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1471 06/20/20 13:16:3 60:00 7172 2696 Lau APPLE !PHONES 1472 06/20/20 13:26:2 60:00 2379 6166nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1473 06/20/20 14:16:3 18:19 4964 1588 Lau APPLE !PHONES 1474 06/20/20 14:26:2 52:52 23341 13608nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1475 06/20/20 14:34:5 0:56 47820 1676 Lau APPLE !PHONES (023310785:91057:- 71.9598779:43.2972525:150:-1.0) 1476 06/20/20 14:34:5 0:56 4684 1588 Lau APPLE !PHONES (023310785:91057:- 71.9598779:43.2972525:150:-1.01 1477 06/20/20 14:35:49 3:39 3532 1464 Lau APPLE !PHONES 1478 06/20/20 14:39:2( 2:21 4200 3336 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1479 06/20/20 14:39:2 2:21 4200 3248 Lau APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 1480 06/20/20 14:41:4 60:00 14536 4640 Lau APPLE !PHONES 1481 06/20/20 15:19:1 2:04 5740 8165nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 1482 06/20/20 15:19:1 2:04 6165 5452nxtgenp APPLE !PHONES (311580084491266:1217109705044::::0) hone 1483 06/20/20 15:21:1 11:33 337 567nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1484 06/20/20 15:32:5( 2:19 9261 9881nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 1485 06/20/20 15:32:5 2:19 9661 8973nxtgenp APPLE !PHONES (311580084491266:1217109705044::::0) hone AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 77 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170725 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342787 MOBILITY 4111. (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Tine: Data Usage For: Sim Item Conn. Conn. Originating ET Bytes Bytes Apn DRI 1MSI MAKE MODEL Coll Location Dato Timo Number Up On (UTC) 1486 06/20/20 15:35:09 6:04 999 337 nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 1487 06/20/20 15:35:10 6:04 337 711nxtgenp APPLE !PHONES (311580084491266:1217109705044::::0] hone 1488 06/20/20 15:41:14 0:59 6673 4935nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1489 06/20/20 15:41:49 60:00 10144 3176 ins APPLE !PHONES 1490 06/20/20 15:42:12 2:04 1003 339nxtgenp APPLE !PHONES (366491266:1431606::::0] U.S.Cellular, hone _USA 1491 06/20/20 15:42:13 2:04 339 715nxtgenp APPLE !PHONES (311580084491266:1217109705044::::0] hone 1492 06/20/20 15:44:17 17:29 6739 4913nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1493 06/20/20 16:01:46 2:04 1003 339nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 1494 06/20/20 16:01:47 2:04 339 715nxtgenp APPLE !PHONES (311580084491266:1217109705044::::0] hone 1495 06/20/20 16:03:51 51:01 8049 6601nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 1496 06/20/20 16:41:49 60:00 13908 4924 ins APPLE !PHONES 1497 06/20/20 16:54:51 2:06 288 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 1498 06/20/20 16:54:53 2:05 48 Onxtgenp APPLE !PHONES (311580084491266:1217109705044::::01 hone 1499 06/20/20 16:56:58 1:53 48 Onxtgenp APPLE !PHONES (023310601:91057:- hone 71.9598779:43.2972525:150:-1.0] 1500 06/20/20 16:58:50 2:04 288 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 1501 06/20/20 16:58:51 2:04 48 Onxtgenp APPLE !PHONES (311580084491266:1217109705044::::0] hone 1502 06/20/20 17:00:55 60:00 9672 7470nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1503 06/20/20 17:41:49 53:24 6848 2896 ims APPLE !PHONES 1504 06/20/20 18:00:55 60:00 142666 89333 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310785:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 78 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170726 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342788 MOBILITY (with cell location) • 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DEBI INS! MAKE MODEL Coll Location Data Tam Number Up Dn (OTC) 1505 06/20/20 18:35:13 0:25 41240 1552 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 1506 06/20/20 18:35:13 0:25 3952 1464 Lm APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 1507 06/20/20 18:35:38 60:00 13460 4624 Lm APPLE !PHONES 1508 06/20/20 19:00:55 60:00 17481 29585 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310785:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1509 06/20/20 19:35:38 60:00 10036 3068 Lm APPLE !PHONES 1510 06/20/20 20:00:55 0:35 0 525 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1511 06/20/20 20:01:31 60:00 25001 21195 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1512 06/20/20 20:35:38 60:00 4872 6064 Lm APPLE !PHONES 1513 06/20/20 20:53:27 60:00 20002 9764 Lm 1514 06/20/20 21:01:31 60:00 117349 72608 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023413008:91457:-72.166667:43.205:100:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1515 06/20/20 21:35:38 60:00 0 0 Lm APPLE !PHONES 1516 06/20/20 21:53:27 60:00 8604 3128 Lm 1517 06/20/20 22:01:31 60:00 5266 7318nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1518 06/20/20 22:35:38 60:00 0 0 Lau APPLE !PHONES 1519 06/20/20 22:53:27 60:00 8388 2928 Lau 1520 06/20/20 23:01:31 24:31 170665 79787nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1521 06/20/20 23:26:01 2:05 288 48nxtgenp APPLE !PHONES (366491266:1431606::::0) U.S.Cellular, hone _USA AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 79 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170727 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342789 MOBILITY a (with cell location) ill1111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm t:7 4*-st 7/o AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Tins: Data Osage For: Item Cann. Conn. Originating BS Bytes Bytes Apn flat INSI MAKE MODEL Coll Location Date Tana Number UP On (MC) 1522 06/20/20 23:26:03 2:04 48 O nxtgenp APPLE !PHONES (311580084491266:1217109705044::::0) hone 1523 06/20/20 23:28:07 8:12 6314 4841 nxtgenp APPLE !PHONES (023413008:91457:-72.166667:43.205:100:-1.0. hone 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1524 06/20/20 23:35:38 60:00 0 0 ins APPLE !PHONES 1525 06/20/20 23:36:18 26:17 6093 6949 nxtgenp APPLE !PHONES (366491266:1431606::::0) U.S.Cellular, hone _USA 1526 06/20/20 23:36:19 26:17 6949 5805 nxtgenp APPLE !PHONES (311580084491266:1217109705044-- hone 311580084491269:1217109705044 311580084491266:1217109705044::::0) 1527 06/20/20 23:53:27 60:00 7264 3020 ins 1528 06/21/20 00:02:36 60:00 62763 29341 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1529 06/21/20 00:35:38 19:16 0 0 ins APPLE !PHONES 1530 06/21/20 00:53:27 60:00 19228 6868 ins 1531 06/21/20 01:02:36 38:38 1213 1155 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1532 06/21/20 01:41:13 9:05 288 48 nxtgenp APPLE !PHONES (366513795:1431694::::0) U.S.Cellular, hone _USA 1533 06/21/20 01:41:15 9:04 48 O nxtgenp APPLE !PHONES (311580084513795:1217109705132::::0) hone 1534 06/21/20 01:50:19 60:00 7245 5950 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1535 06/21/20 01:53:27 60:00 8604 2928 ins 1536 06/21/20 02:50:19 60:00 635 525 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1537 06/21/20 02:53:27 60:00 7032 2788 ins 1538 06/21/20 03:50:19 60:00 1197 2284 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1539 06/21/20 03:53:27 60:00 7032 2788 ims 1540 06/21/20 04:50:19 60:00 965 1271 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1541 06/21/20 04:53:27 60:00 13368 4608 ims 1542 06/21/20 05:50:19 60:00 635 525 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1543 06/21/20 05:53:27 60:00 10348 5228 ins AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 80 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170728 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342790 MOBILITY (with cell location) ill1111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm .._,• •••-•s`' . AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Ties: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn Dar 'Nal MAKE MODEL Cell Location Data Tana Number Up On (OTC) 1544 06/21/20 06:50:19 60:00 635 525 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1545 06/21/20 06:53:27 60:00 6832 3588 Las 1546 06/21/20 07:50:19 60:00 1684 2425 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1547 06/21/20 07:53:27 60:00 8496 3036 Las 1548 06/21/20 08:50:19 60:00 346 210 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1549 06/21/20 08:53:27 60:00 6816 2680 Las 1550 06/21/20 09:50:19 60:00 398 315 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1551 06/21/20 09:53:27 60:00 15048 4764 Las 1552 06/21/20 10:50:19 60:00 3388 472nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1553 06/21/20 10:53:27 60:00 12120 4676 Las 1554 06/21/20 11:50:19 1:42 0 Onxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1555 06/21/20 11:52:02 60:00 93849 72682nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 1556 06/21/20 11:53:27 60:00 10068 3176 Las 1557 06/21/20 12:52:02 60:00 3838 1837 nxtgenp APPLE !PHONES (023310601:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1558 06/21/20 12:53:27 60:00 7032 2912 Las 1559 06/21/20 13:52:02 60:00 125362 107569nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1560 06/21/20 13:53:27 60:00 8496 2928 Las 1561 06/21/20 14:52:02 60:00 73849 48304 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1562 06/21/20 14:53:27 60:00 15140 4980 Las 1563 06/21/20 15:52:02 60:00 1825 6072nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1564 06/21/20 15:53:27 60:00 20492 13596 Las AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 81 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170729 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342791 MOBILITY (with cell location) ill111 1 120 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Ties: Data usage For: Item Conn. Conn. Originating ET Bytom Bytom Apn flat mai mum MODEL Cell Location Data Tim ()umber Up on (UTC) 1565 06/21/20 16:52:02 60:00 29755 16213 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 024577039:96004:-72.0936944:43.4636388:115:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1566 06/21/20 16:53:2' 60:00 8496 3036 Las 1567 06/21/20 17:52:0 60:00 23456 16067 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1568 06/21/20 17:53:2' 22:01 3532 2232 Las APPLE !PHONES 1569 06/21/20 18:15:2 0:17 131072 1588 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1570 06/21/20 18:15:2$ 0:17 4044 1588 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1571 06/21/20 18:15:4! 60:00 11904 4160 Las APPLE !PHONES 1572 06/21/20 18:52:0 60:00 966 945nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1573 06/21/20 19:15:4! 23:56 1116 1364 ims APPLE !PHONES 1574 06/21/20 19:39:4 42:49 9242 7296 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1575 06/21/20 19:39:4 42:49 9176 7296 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1576 06/21/20 19:52:0 60:00 924 840nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1577 06/21/20 20:22:3( 60:00 15372 4748 Las APPLE !PHONES 1578 06/21/20 20:52:0 60:00 635 525nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1579 06/21/20 21:22:3( 25:58 5088 1588 Las APPLE !PHONES 1580 06/21/20 21:48:2 1:01 2660 1340 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1581 06/21/20 21:48:2 1:01 2596 1340 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1582 06/21/20 21:49:2 60:00 13924 4748 Las APPLE !PHONES 1583 06/21/20 21:52:0 60:00 519 315nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1584 06/21/20 22:49:2 60:00 9728 3268 Las APPLE !PHONES 1585 06/21/20 22:52:0 60:00 5438 6955nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1586 06/21/20 23:49:2 60:00 10068 3176 Las APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 82 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00170730 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342792 MOBILITY (with cell location) ill1111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm ......„. /144" -10 AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. Run Date: 06/29/2020 Run Time: Data Usage For: Sim Item Conn. Conn. Originating ET Bytes Bytes Apn =az INS' NM MODEL Cell Location Data Time Number Up On (OTC) 1587 06/21/20 23:52:02 60:00 4123 2423nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.01 1588 06/22/20 00:49:29 60:00 12136 4568 ims APPLE !PHONES 1589 06/22/20 00:52:02 60:00 2501043 2396909nxtgenp APPLE !PHONES (023413008:91457:-72.166667:43.205:100:-1.0, hone 023310608:91057:-71.9598779:43.2972525:150:- 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1590 06/22/20 01:49:29 60:00 15264 4764 ims APPLE !PHONES 1591 06/22/20 01:52:02 7:47 0 Onxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1592 06/22/20 01:59:50 60:00 7800 6646 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1593 06/22/20 02:49:29 60:00 8388 2820 ims APPLE !PHONES 1594 06/22/20 02:59:50 60:00 4169 902 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1595 06/22/20 03:49:29 60:00 8604 3160 ims APPLE !PHONES 1596 06/22/20 03:59:50 60:00 635 525 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1597 06/22/20 04:49:29 60:00 8496 2820 ims APPLE !PHONES 1598 06/22/20 04:59:50 60:00 8311 12712nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1599 06/22/20 05:49:29 60:00 15544 6124 ims APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 83 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170731 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342793 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Dato: 06/29/2020 Run Tame: Data Usage For: Item Conn. Conn. Originating ET Bytos Bytes Apn DOI 1MSI MAKE MODEL Celt Location Data Tame Mamba: Up Dn (OTC) 1600 06/22/20 05:59:50 60:00 635 525nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1601 06/22/20 06:49:29 60:00 8172 2820 ins APPLE !PHONES 1602 06/22/20 06:59:50 60:00 519 315nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1603 06/22/20 07:49:29 60:00 10284 3284 ins APPLE !PHONES 1604 06/22/20 07:59:50 60:00 519 315nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1605 06/22/20 08:49:29 60:00 13584 4516 ins APPLE !PHONES 1606 06/22/20 08:59:50 60:00 519 315nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1607 06/22/20 09:49:29 60:00 10068 3284 ims APPLE !PHONES 1608 06/22/20 09:59:50 60:00 635 525nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1609 06/22/20 10:49:29 60:00 11904 4644 ins APPLE !PHONES 1610 06/22/20 10:59:50 60:00 3773 787nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1611 06/22/20 11:49:29 60:00 7156 2912 ims APPLE !PHONES 1612 06/22/20 11:59:50 60:00 12845 7770nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1613 06/22/20 12:49:29 60:00 11904 4160 ins APPLE !PHONES 1614 06/22/20 12:59:50 60:00 2276 5699nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1615 06/22/20 13:49:29 60:00 6816 2680 ims APPLE !PHONES 1616 06/22/20 13:59:50 60:00 1422 6001nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1617 06/22/20 14:49:29 60:00 10300 3300 ins APPLE !PHONES 1618 06/22/20 14:59:50 17:25 0 Onxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1619 06/22/20 15:17:14 15:19 5295 6342nxtgenp APPLE !PHONES (366513795:1431694::::01 U.S.Cellular, hone _USA 1620 06/22/20 15:17:15 15:19 6342 5007nxtgenp APPLE !PHONES (311580084513795:1217109705132::::01 hone 1621 06/22/20 15:32:34 60:00 93660 52928nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1622 06/22/20 15:49:29 60:00 10068 3176 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 84 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170732 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342794 MOBILITY a (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm `•-es AT&T ..,,,• "- AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. Run Date: 06/29/2020 Run Time: Data Usage For: Sim Item Conn. Conn. Originating ET Bytes Bytes Apn flat 1MSI MAKE MODEL Cell Location Data Tim* Up On (UTc) 1623 06/22/20 16:32:34 60:00 52710 107282nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1624 06/22/20 16:49:29 7:16 7048 2964 ims APPLE !PHONES 1625 06/22/20 16:56:45 17:42 76620 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1626 06/22/20 16:56:45 17:42 2596 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1627 06/22/20 17:14:27 60:00 11904 4268 ims APPLE !PHONES 1628 06/22/20 17:32:34 60:00 4082 1312 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1629 06/22/20 18:14:27 60:00 6616 2680 ims APPLE !PHONES 1630 06/22/20 18:32:34 60:00 66626 45701nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1631 06/22/20 19:14:27 60:00 30928 21708 ims APPLE !PHONES 1632 06/22/20 19:32:34 60:00 70874 39856 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1633 06/22/20 20:05:35 0:04 0 0 ims APPLE !PHONES 1634 06/22/20 20:05:57 0:42 11642 49924 ims APPLE !PHONES 1635 06/22/20 20:14:27 60:00 8496 3144 ims APPLE IPRONE8 1636 06/22/20 20:32:34 60:00 100921 67805nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1637 06/22/20 21:14:27 60:00 15760 6124 ims APPLE !PHONES 1638 06/22/20 21:32:34 60:00 35571 19147 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1639 06/22/20 22:14:27 60:00 10408 3408 ims APPLE !PHONES 1640 06/22/20 22:32:34 60:00 2059 1719nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1641 06/22/20 23:14:27 60:00 38668 13608 ims APPLE !PHONES 1642 06/22/20 23:31:39 0:23 0 320 ims APPLE IPRONE8 1643 06/22/20 23:32:34 49:27 56127 36614 nxtgenp APPLE 'PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1644 06/23/20 00:14:27 21:19 3516 1448 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 85 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170733 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342795 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm ...„ed •---0. AT&T `""a AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Data: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. OrlainatIng ET Bytes Bytes Apn MCI IMSI BARE MODEL Cell Location Data Time Nuabar Up On (OTC) 1645 06/23/20 00:22:00 2:04 268 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 1646 06/23/20 00:22:01 2:04 48 Onxtgenp APPLE IPE0NE8 (311580084491266:1217109705044::::0] hone 1647 06/23/20 00:24:05 26:46 55051 38248nxtgenp APPLE !PHONES (023413008:91457:-72.166667:43.205:100:-1.0, hone 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1648 06/23/20 00:35:46 1:10 127936 1464 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 1649 06/23/20 00:35:46 1:10 3264 1464 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1650 06/23/20 00:36:56 60:00 12012 4500 ims APPLE !PHONES 1651 06/23/20 00:50:51 2:16 5317 6414 nxtgenp APPLE IPE0NE8 (366491266:1431606::::0] U.S.Cellular, hone _USA 1652 06/23/20 00:50:52 2:16 6414 4933 nxtgenp APPLE !PHONES (311580084491266:1217109705044 hone 311580084491269:1217109705044::::0] 1653 06/23/20 00:53:08 17:57 6819 5431 nxtgenp APPLE IPE0NE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1654 06/23/20 01:11:04 8:26 16293 11875 nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 1655 06/23/20 01:11:06 8:25 11875 16005 nxtgenp APPLE !PHONES (311580084491266:1217109705044::::0] hone 1656 06/23/20 01:19:31 60:00 7307 5895 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1657 06/23/20 01:36:56 60:00 10300 3408 ims APPLE IPE0NE8 1658 06/23/20 02:19:31 60:00 635 525 nxtgenp APPLE IPE0NE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1659 06/23/20 02:36:56 60:00 13584 4892 ims APPLE IPE0NE8 1660 06/23/20 03:19:31 60:00 5077 8033 nxtgenp APPLE IPE0NE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1661 06/23/20 03:36:56 60:00 11580 3944 ims APPLE IPE0NE8 1662 06/23/20 04:19:31 60:00 635 525 nxtgenp APPLE IPE0NE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1663 06/23/20 04:36:56 60:00 8820 3036 ims APPLE IPE0NE8 1664 06/23/20 05:19:31 60:00 635 525 nxtgenp APPLE IPE0NE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1665 06/23/20 05:36:56 60:00 8386 2928 ims APPLE !PHONES 1666 06/23/20 06:19:31 60:00 751 735 nxtgenp APPLE IPE0NE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1667 06/23/20 06:36:56 60:00 9960 3284 ims APPLE IPE0NE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 86 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNO0170734 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342796 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm tre:/ 4"—::• AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Sim Item Conn. Conn. originating ET Bytes Bytom Apn flat 1MSI MAKE MODEL Col/ Location Data Time Number Up On (OTC) 1668 06/23/20 07:19:31 60:00 462 420nxtgen APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1669 06/23/20 07:36:56 60:00 18348 6048 Las APPLE !PHONES 1670 06/23/20 08:19:31 60:00 462 420nxtgen APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1671 06/23/20 08:36:56 60:00 7156 2912 Las APPLE !PHONES 1672 06/23/20 09:19:31 60:00 462 420nxtgen APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1673 06/23/20 09:36:56 60:00 8496 3052 Las APPLE !PHONES 1674 06/23/20 10:19:31 60:00 346 210nxtgen APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1675 06/23/20 10:36:56 53:52 8496 3036 ims APPLE !PHONES 1676 06/23/20 11:19:31 20:46 173 105nxtgen APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1677 06/23/20 11:36:38 1:56 6693 5938 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 1678 06/23/20 11:38:34 42:29 7064 2572 Las APPLE !PHONES 1679 06/23/20 11:40:16 0:22 5064 6330 nxtgen APPLE !PHONES (366491266:1431606::::0] U.S.Cellular, hone _USA 1680 06/23/20 11:40:17 0:22 6330 4776 nxtgen APPLE !PHONES (311580084491266:1217109705044::::0] hone 1681 06/23/20 11:40:39 60:00 13388 12733 nxtgen APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1682 06/23/20 12:22:25 60:00 15081 7947 Las 1683 06/23/20 12:40:39 53:58 3793 1262 nxtgen APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1684 06/23/20 13:22:25 22:23 5304 1944 Las 1685 06/23/20 13:34:36 2:03 288 48nxtgen APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 1686 06/23/20 13:34:37 2:03 48 Onxtgen APPLE !PHONES (311580084491266:1217109705044::::01 hone 1687 06/23/20 13:36:40 60:00 6908 5270 nxtgen APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1688 06/23/20 13:46:21 3:26 6669 5978 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.0] 1689 06/23/20 13:49:47 60:00 12028 4220 ims APPLE !PHONES 1690 06/23/20 14:36:40 60:00 8608 8038 nxtgen APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1691 06/23/20 14:49:47 60:00 8388 2896 Las APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 87 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170735 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342797 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn IMSI MAKE MODEL Cell Location Date Tam Number Up Dn (OTC) 1692 06/23/20 15:36:40 60:00 33798 191067 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310785:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 1.01 1693 06/23/20 15:49:47 21:35 4964 1572 ims APPLE !PHONES 1694 06/23/20 16:11:22 17:11 2644 1324 ims APPLE !PHONES 1023310785:91057:- 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1695 06/23/20 16:28:33 60:00 8496 3004 ins APPLE !PHONES 1696 06/23/20 16:36:40 60:00 10834 7749nxtgenp APPLE !PHONES 1023310601:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1697 06/23/20 16:59:19 13:03 9801 6172 ims APPLE !PHONES 1698 06/23/20 17:12:21 0:16 2768 1324 ims APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 1699 06/23/20 17:12:22 0:15 2704 1324 ims APPLE !PHONES 1023310608:91057:- 71.9598779:43.2972525:150:-1.01 1700 06/23/20 17:12:37 60:00 10656 4484 ims APPLE !PHONES 1701 06/23/20 17:28:33 52:57 0 0 ims APPLE !PHONES 1702 06/23/20 17:36:40 34:29 0 722nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1703 06/23/20 18:12:37 60:00 0 0 ims APPLE !PHONES 1704 06/23/20 18:21:30 13:52 24936 13005 ims 1705 06/23/20 18:35:21 60:00 66641 41957 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1706 06/23/20 18:35:28 60:00 17517 8870 ims 1707 06/23/20 19:12:37 60:00 0 0 ims APPLE !PHONES 1708 06/23/20 19:35:21 60:00 142193 695018 nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1709 06/23/20 19:35:28 15:51 5072 1588 ims 3587080982063727 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 88 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00170736 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342798 MOBILITY 4111111. (with cell location) ill1111020 .....s 1/4 "-s. -06 AT&T AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Sim Item Conn. Conn. ozzglnatIng LE Bytom Bytom Apn flat INBI MAKE MODEL Cell Location Date Time Number Up Dm (OTC) 1710 06/23/20 19:51:19 29:42 42880 2648 ism APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1711 06/23/20 19:51:19 29:42 5192 2648 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1712 06/23/20 20:12:3 60:00 0 0 ims APPLE !PHONES 1713 06/23/20 20:21:01 47:01 6848 2788 ims APPLE !PHONES 1714 06/23/20 20:35:21 60:00 70318 275344nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1715 06/23/20 21:08:0 4:36 2596 1340 ims APPLE !PHONES [023310601:91057:- 71.9598779:43.2972525:150:-1.0] 1716 06/23/20 21:08:0 4:37 2660 1340 ims APPLE !PHONES [023310601:91057:- 71.9598779:43.2972525:150:-1.0] 1717 06/23/20 21:12:3 51:51 0 0 ims APPLE !PHONES 1718 06/23/20 21:12:36 0:40 124 496 ims APPLE !PHONES 1719 06/23/20 21:13:16 24:20 10406 7106 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1720 06/23/20 21:13:16 24:20 10342 7106 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 1721 06/23/20 21:35:21 60:00 76033 57317nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1722 06/23/20 21:37:36 60:00 10596 4236 ims APPLE !PHONES 1723 06/23/20 22:35:21 48:49 12627 11681nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1724 06/23/20 22:37:36 60:00 8496 2928 ims APPLE IPHONE8 1725 06/23/20 23:24:09 2:06 288 48nxtgenp APPLE IPHONE8 (366513795:1431694::::01 U.S.Cellular, hone _USA 1726 06/23/20 23:24:10 2:06 48 Onxtgenp APPLE !PHONES (311580084513795:1217109705132::::01 hone AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 89 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170737 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342799 MOBILITY (with cell location) r ill1111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm .._,• ``ai AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: NM= Item Conn. Conn. Originating Cr Bytos Bytes awl DEBI INS' NM MODEL Cell Location Date Tame Number Up On (OTC) 1727 06/23/20 23:26:16 28:26 9581 5111nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1728 06/23/20 23:37:38 60:00 8620 3052 ims APPLE !PHONES 1729 06/23/20 23:54:41 0:21 901 280 nxtgenp APPLE !PHONES (366491266:1431606::::0) U.S.Cellular, hone USA 1730 06/23/20 23:54:42 0:21 260 613 nxtgenp APPLE !PHONES (311580084491266:1217109705044::::0) hone 1731 06/23/20 23:55:03 60:00 25885 41066 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1732 06/24/20 00:37:38 60:00 9928 3176 ims APPLE !PHONES 1733 06/24/20 00:55:03 40:09 55402 23380 nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1734 06/24/20 01:35:13 60:00 7736 6196 nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1735 06/24/20 01:37:38 60:00 17100 6048 ims APPLE !PHONES 1736 06/24/20 02:35:13 60:00 450 472nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1737 06/24/20 02:37:38 60:00 7064 2788 ims APPLE !PHONES 1738 06/24/20 03:35:13 60:00 502 525 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1739 06/24/20 03:37:38 60:00 10036 3284 ims APPLE !PHONES 1740 06/24/20 04:35:13 60:00 225 210 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1741 06/24/20 04:37:38 60:00 7064 3252 ims APPLE !PHONES 1742 06/24/20 05:35:13 60:00 225 210 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1743 06/24/20 05:37:38 60:00 11920 4376 ims APPLE !PHONES 1744 06/24/20 06:35:13 60:00 6646 4562 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1745 06/24/20 06:37:38 20:39 0 0 ims APPLE !PHONES 1746 06/24/20 06:58:17 1:45 41777 5998 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1747 06/24/20 06:58:17 1:45 6625 5998 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1748 06/24/20 07:00:02 60:00 12028 4252 ims APPLE !PHONES 1749 06/24/20 07:35:13 60:00 277 315 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 90 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170738 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342800 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. originating ET Bytes Bytes Apn DEBI 1MSI MAKE MODEL Cell Location Date Tame Number Up Dn Cuzc) 1750 06/24/20 08:00:02 60:00 6848 2680 Lau APPLE !PHONES 1751 06/24/20 08:35:13 60:00 7760 45929nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1752 06/24/20 09:00:02 10:16 0 0 Lau APPLE !PHONES 1753 06/24/20 09:10:17 6:27 2876 1556 Lau APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1754 06/24/20 09:10:18 6:26 2812 1556 Lau APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 1755 06/24/20 09:16:44 60:00 10272 4020 Lau APPLE !PHONES 1756 06/24/20 09:35:13 60:00 329 419nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1757 06/24/20 10:16:44 60:00 8728 3284 ims APPLE !PHONES 1758 06/24/20 10:35:13 60:00 763 4677 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1759 06/24/20 11:16:44 60:00 10488 4428 Lau APPLE !PHONES 1760 06/24/20 11:35:13 45:18 13562 1096nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1761 06/24/20 12:16:44 60:00 8604 3036 ins APPLE !PHONES 1762 06/24/20 12:20:31 2:04 266 48nxtgenp APPLE !PHONES (366513795:1431694::::01 U.S.Cellular, hone _USA 1763 06/24/20 12:20:32 2:04 48 Onxtgenp APPLE !PHONES (311580084513795:1217109705132::::01 hone 1764 06/24/20 12:22:36 60:00 26910 11689nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1765 06/24/20 13:16:44 60:00 13552 4516 ism APPLE !PHONES 1766 06/24/20 13:22:36 60:00 7098 7113nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1767 06/24/20 14:16:44 54:32 8480 3036 ins APPLE !PHONES 1768 06/24/20 14:22:36 17:19 5213 2033nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1769 06/24/20 14:39:54 1:17 266 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 1770 06/24/20 14:39:55 1:17 48 Onxtgenp APPLE !PHONES (311580084491266:1217109705044::::01 hone 1771 06/24/20 14:41:12 3:09 48 Onxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 91 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170739 The information contained here is for use by authorized persona only and is not for general distribution. EFTA01342801 MOBILITY a (with cell location) ill111 1 120 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn INEZ I0BI MAKE MODEL Cell Location Data Tame Number UP Dn (OTC) 1772 06/24/20 14:44:21 60:00 15309 53764 nxtgenp APPLE !PHONES (023413008:91457:-72.166667:43.205:100:-1.0. hone 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150: 1.0] 1773 06/24/20 15:11:16 37:58 5256 2680 /ma APPLE IPHONE8 (023310601:91057:- 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150: 1.0] 1774 06/24/20 15:11:16 37:58 5192 2680 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 1775 06/24/20 15:44:21 60:00 23112 107920nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150: 1.0] 1776 06/24/20 15:49:14 45:03 8496 3036 ims APPLE !PHONES 1777 06/24/20 16:34:17 2:17 3968 1464 ims APPLE IPHONE8 (023310785:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150: 1.0] 1778 06/24/20 16:34:17 2:17 3904 1464 ims APPLE IPHONE8 (023310785:91057:- 71.9598779:43.2972525:150:-1.0) 1779 06/24/20 16:36:34 5:04 3532 1340 ims APPLE !PHONES 1780 06/24/20 16:41:38 0:46 2660 1340 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 1781 06/24/20 16:41:38 0:46 2596 1340 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 1782 06/24/20 16:42:24 2:24 3424 1448 ims APPLE !PHONES 1783 06/24/20 16:44:21 50:18 57870 82031nxtgenp APPLE !PHONES (023310601:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 023429137:91520:-71.8684166:43.0803055:320:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 92 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170740 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342802 MOBILITY a 020 (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm . AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: MS= Item Conn. Conn. Originating ET Byte. Bytes Apn =MI INS' NM MODEL Cell Location Date Tiro Number Up On (OTC) 1784 06/24/20 16:44:4 4:19 3968 1464 ism APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0, 023429137:91520:-71.8684166:43.0803055:320:- 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 1785 06/24/20 16:44:4 4:17 3904 1464 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1786 06/24/20 16:49:0 60:00 18388 7268 ims APPLE !PHONES 1787 06/24/20 17:34:3 2:09 192 0nxtgenp APPLE !PHONES (366491266:1431606::::0) U.S.Cellular, hone _USA 1788 06/24/20 17:34:3 2:09 288 48nxtgenp APPLE !PHONES (366491266:1431606::::0) U.S.Cellular, hone _USA 1789 06/24/20 17:34:4 2:09 0 0nxtgenp APPLE !PHONES (311580084491266:1217109705044::::0) hone 1790 06/24/20 17:34:4 2:09 48 0nxtgenp APPLE !PHONES (311580084491266:1217109705044::::0) hone 1791 06/24/20 17:36:4 60:00 117092 92310 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 023310785:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1792 06/24/20 17:49:0 25:21 5072 1588 ims APPLE !PHONES 1793 06/24/20 18:14:2 4:12 76756 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1794 06/24/20 18:14:2 4:12 2596 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1795 06/24/20 18:18:3 6:06 3424 1340 ims APPLE !PHONES 1796 06/24/20 18:24:4 16:19 14792 1340 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1797 06/24/20 18:24:4 16:19 2596 1340 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 93 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170741 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342803 MOBILITY (with cell location) ill1111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Osage For: MS= Item Conn. Conn. Originating ST Bytes Bytes Apn INEZ INBI MAKE MODEL Col/ Location Date Tame Number up On (OTC) 1798 06/24/20 18:36:49 50:45 69271 47446nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1799 06/24/20 18:41:03 0:19 4964 1588 ims APPLE !PHONES 1800 06/24/20 18:41:22 0:47 2660 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1801 06/24/20 18:41:22 0:47 2596 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1802 06/24/20 18:42:09 60:00 11812 4268 ims APPLE !PHONES 1803 06/24/20 19:27:33 2:25 266 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 1804 06/24/20 19:27:34 2:25 46 Onxtgenp APPLE !PHONES (311580084491266:1217109705044::::01 hone 1805 06/24/20 19:29:59 60:00 29691 13021 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1806 06/24/20 19:42:09 51:13 6566 2928 ims APPLE !PHONES 1807 06/24/20 20:29:59 60:00 57441 41726 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1808 06/24/20 20:33:22 0:46 14792 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 94 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170742 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342804 MOBILITY (with cell location) • 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:13:13pm t--d as AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating Et Bytos Bytes Apn flat 1MSI MAKE MODEL Cell Location Data Time Number Up Dn (OTC) 1809 06/24/20 20:33:22 0:46 2596 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1810 06/24/20 20:34:08 1:33 7940 1836 ims APPLE !PHONES 1811 06/24/20 20:35:41 2:39 3752 1356 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1812 06/24/20 20:35:41 2:39 3666 1356 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1813 06/24/20 20:38:20 1:56 14734 14291 /ma APPLE !PHONES 1814 06/24/20 20:44:02 60:00 18185 10962 /ma 1815 06/24/20 21:29:59 60:00 177665 107429nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1816 06/24/20 21:44:02 60:00 11256 3300 ins 1817 06/24/20 22:29:59 3:58 564 388nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1818 06/24/20 22:33:56 2:05 266 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 1819 06/24/20 22:33:57 2:05 46 Onxtgenp APPLE !PHONES (311580084491266:1217109705044::::01 hone 1820 06/24/20 22:36:02 60:00 185337 124060 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1821 06/24/20 22:44:02 60:00 8496 2912 ims 1822 06/24/20 23:36:02 60:00 38099 23039nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1823 06/24/20 23:44:02 60:00 8604 3020 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 95 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170743 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342805 MOBILITY (with cell location) r 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm ..,, clas 4 .o AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating Br Bytes Bytes Apn Mei 1MSI MAKE MODEL Col/ Location Date Time Number Up Dn (1./TC) 1824 06/25/20 00:36:02 60:00 45447 34502 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1825 06/25/20 00:44:02 57:19 18532 6480 ims APPLE !PHONES 1826 06/25/20 01:36:02 60:00 147534 138895 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1827 06/25/20 01:41:21 1:30 196400 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 1828 06/25/20 01:41:21 1:30 2704 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1829 06/25/20 01:42:51 3:50 5072 1588 ims APPLE !PHONES 1830 06/25/20 01:46:40 21:14 2660 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1831 06/25/20 01:46:41 21:13 2596 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 1832 06/25/20 02:07:54 60:00 13212 4608 ims APPLE !PHONES 1833 06/25/20 02:36:02 60:00 13179 12641 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1834 06/25/20 03:07:54 60:00 8496 2928 ims APPLE !PHONES 1835 06/25/20 03:36:02 60:00 3684 892 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1836 06/25/20 04:07:54 60:00 10036 3284 ims APPLE !PHONES 1837 06/25/20 04:36:02 60:00 3556 787nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1838 06/25/20 05:07:54 60:00 15000 4764 ims APPLE !PHONES 1839 06/25/20 05:36:02 60:00 699 694 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1840 06/25/20 06:07:54 60:00 12028 4552 ims APPLE !PHONES 1841 06/25/20 06:36:02 60:00 462 420 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1842 06/25/20 07:07:54 60:00 8728 3160 ims APPLE !PHONES 1843 06/25/20 07:36:02 60:00 578 630 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1844 06/25/20 08:07:54 60:00 8496 3036 ims APPLE !PHONES 1845 06/25/20 08:36:02 60:00 225 210 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 96 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SONYGM00170744 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342806 MOBILITY (with cell location) ill1111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm t—sd as AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: MS= Item Conn. Conn. Originating ET Bytos Bytes Apn DMZ 1MSI MAKE MODEL Celt Location Date Time Number Up Dn (UTC) 1846 06/25/20 09:07:5 60:00 11236 3316 ims APPLE !PHONES 1847 06/25/20 09:36:0 60:00 289 315nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1848 06/25/20 10:07:5 60:00 12012 4608 ims APPLE !PHONES 1849 06/25/20 10:36:0 60:00 61425 122979nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1850 06/25/20 11:07:54 15:36 0 0 ims APPLE !PHONES 1851 06/25/20 11:23:3 5:53 2596 1340 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 1852 06/25/20 11:23:3( 5:54 2660 1340 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.0) 1853 06/25/20 11:29:2 60:00 16992 6016 ims APPLE !PHONES 1854 06/25/20 11:36:0 60:00 778 425nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1855 06/25/20 12:29:2 60:00 8496 3144 ims APPLE !PHONES 1856 06/25/20 12:36:0 60:00 32307 4431nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1857 06/25/20 13:29:2 31:11 3424 1340 ims APPLE !PHONES 1858 06/25/20 13:36:0 60:00 44758 199034nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310785:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1859 06/25/20 14:00:34 0:15 2660 1340 ims APPLE !PHONES 1023310601:91057:- 71.9598779:43.2972525:150:-1.01 1860 06/25/20 14:00:34 0:15 2596 1340 ims APPLE !PHONES 1023310601:91057:- 71.9598779:43.2972525:150:-1.01 1861 06/25/20 14:00:4 2:51 3532 1340 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 97 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170745 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342807 MOBILITY (with cell location) r ill1111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm u AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. Run Date: 06/29/2020 Run Time: Data Usage For: Sidi= Item Conn. Conn. OrIganatIng ET Bytos Bytes Apn flat 1MSI MAKE MODEL Coll Location Data Tam Number Up On (OTC) 1862 06/25/20 14:03:39 4:59 2660 1324 ims APPLE !PHONES (023310785:91057:- 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1863 06/25/20 14:03:40 4:58 2596 1324 ims APPLE !PHONES (023310785:91057:- 71.9598779:43.2972525:150:-1.01 1864 06/25/20 14:08:38 9:09 4732 1464 ims APPLE !PHONES 1865 06/25/20 14:17:46 1:36 2660 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 1866 06/25/20 14:17:47 1:35 2596 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1867 06/25/20 14:19:22 60:00 3208 1340 ims APPLE !PHONES 1868 06/25/20 14:23:55 4:13 9561 6301 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1869 06/25/20 14:28:08 2:38 3748 1556 ims APPLE !PHONES 1870 06/25/20 14:30:46 11:26 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1871 06/25/20 14:36:02 60:00 440300 395142 nxtgen APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1872 06/25/20 14:42:12 6:38 3424 1324 ims APPLE IPHONE8 1873 06/25/20 14:48:50 2:58 2644 1324 ims APPLE IPHONE8 (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 1874 06/25/20 14:51:48 0:52 3532 3324 ims APPLE IPHONE8 1875 06/25/20 14:52:40 3:13 6832 2696 ims APPLE IPHONE8 (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1876 06/25/20 14:55:53 60:00 37024 18412 ims APPLE IPHONE8 1877 06/25/20 15:00:44 0:34 18448 34400 ims APPLE IPHONE8 1878 06/25/20 15:06:06 54:31 7838254 7583642 ims APPLE IPHONE8 1879 06/25/20 15:19:22 60:00 0 0 ims APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 98 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170746 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342808 MOBILITY (with cell location) • 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm u AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn flat INBI MAKE MODEL Cell Location Data Time Nu:Moor Up Dn (OTC) 1880 06/25/20 15:36:02 60:00 110777 78766nxtgenp APPLE IPEONEB (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 1881 06/25/20 15:55:53 21:57 924 700 ins APPLE !PHONES 1882 06/25/20 16:17:50 0:48 3952 1448 ins APPLE IPEONEB (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1883 06/25/20 16:18:38 60:00 23292 11196 ins APPLE IPEONEB 1884 06/25/20 16:19:22 60:00 0 0 ins APPLE IPEONEB 1885 06/25/20 16:30:46 1:01 83465 129132 ins APPLE IPEONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 99 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170747 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342809 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm . AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: 06/29/2020 Run Timm: Data Osage For: MI= Item Conn. Conn. Originating IT Bytes Bytes Apn flat INS! MAKE MODEL Cell Location Data Tina Mamba: up Dn CUTC) 1886 06/25/20 16:36:02 60:00 187888 121445 nxtge APPLE !PHONES (023310601:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 1887 06/25/20 17:18:38 60:00 19112 12648 ims APPLE !PHONES 1888 06/25/20 17:19:22 60:00 0 0 ims APPLE !PHONES 1889 06/25/20 17:36:02 60:00 340809 172146nxtgen APPLE !PHONES (023310601:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1890 06/25/20 17:55:58 0:21 0 10318 ims APPLE IPHONE8 1891 06/25/20 18:18:38 60:00 46036 35500 ims APPLE IPHONE8 1892 06/25/20 18:19:22 0:04 0 0 ims APPLE IPHONE8 1893 06/25/20 18:25:21 1:18 115712 234551 ims APPLE IPHONE8 1894 06/25/20 18:36:02 60:00 43569 32289nxtgen APPLE IPHONE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1895 06/25/20 18:45:33 0:35 11955 27276 ims APPLE IPHONE8 1896 06/25/20 19:18:38 60:00 67312 37420 ims APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 100 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170748 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342810 MOBILITY (with cell location) 4o. 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DEBI 1MSI MAKE MODEL Cell Location Data Tina Number Up On (OTC) 1897 06/25/20 19:36:02 60:00 44408 32385nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1898 06/25/20 19:37:58 8:53 1058845 1710570 Las APPLE !PHONES 1899 06/25/20 19:51:50 0:57 173272 77769 Las APPLE !PHONES 1900 06/25/20 19:55:02 27:18 5465562 3519627 Las APPLE !PHONES 1901 06/25/20 20:18:38 25:27 6192 3384 Las APPLE !PHONES 1902 06/25/20 20:36:02 36:05 48926 100643 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1903 06/25/20 20:44:05 3:18 19140 14408 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1904 06/25/20 20:44:07 0:17 0 599 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1905 06/25/20 20:47:02 0:12 0 201 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1906 06/25/20 20:47:23 2:26 5180 1572 Las APPLE !PHONES 1907 06/25/20 20:49:49 20:10 2644 1324 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 1908 06/25/20 21:09:59 0:19 5072 1572 Las APPLE !PHONES 1909 06/25/20 21:10:18 1:49 2644 1324 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1910 06/25/20 21:12:06 8:18 288 48nxtgenp APPLE !PHONES (366491266:1431606::::0) U.S.Cellular, hone _USA 1911 06/25/20 21:12:08 8:17 48 Onxtgenp APPLE !PHONES (311580084491266:1217109705044::::0) hone AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 101 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170749 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342811 MOBILITY (with cell location) • ill1111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm 1/443/4 ....,,• -90 AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: MS= Item Conn. Conn. Originating ET Bytes Bytes Apn MAKE MODEL Cell Location Date Time Number Up Dn (UTc) 1912 06/25/20 21:12:0S 8:20 10327 6655 ims APPLE !PHONES 1913 06/25/20 21:20:25 60:00 47584 219173nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1914 06/25/20 21:20:29 46:20 5300 2648 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 1915 06/25/20 22:06:4 60:00 31996 15208 ins APPLE !PHONES 1916 06/25/20 22:20:2 28:39 346 262nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1917 06/25/20 22:27:2i 1:15 251021 183399 ins APPLE !PHONES 1918 06/25/20 22:49:0 2:05 288 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 1919 06/25/20 22:49:0 2:05 48 Onxtgenp APPLE !PHONES (311580084491266:1217109705044::::0] hone 1920 06/25/20 22:51:0 60:00 18868 11670nxtgenp APPLE IPHONE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1921 06/25/20 23:06:46 30:18 4948 1680 ins APPLE !PHONES 1922 06/25/20 23:37:0 0:44 3392 1448 ins APPLE IPHONE8 (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1923 06/25/20 23:37:0 0:44 3326 1448 ins APPLE IPHONE8 (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1924 06/25/20 23:37:51 60:00 12120 4344 ins APPLE !PHONES 1925 06/25/20 23:51:0 2:35 0 Onxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1926 06/25/20 23:53:4 2:04 901 280nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 1927 06/25/20 23:53:4 2:04 280 613nxtgenp APPLE !PHONES (311580084491266:1217109705044::::0] hone 1928 06/25/20 23:55:4 8:31 6363 4737nxtgenp APPLE IPHONE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1929 06/26/20 00:04:1 8:17 5065 6366nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 1930 06/26/20 00:04:20 8:17 6366 4777nxtgenp APPLE !PHONES (311580084491266:1217109705044::::01 hone 1931 06/26/20 00:12:3 34:00 9133 11824nxtgenp APPLE IPHONE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1932 06/26/20 00:37:51 60:00 10128 3144 ins APPLE !PHONES 1933 06/26/20 00:46:3i 2:04 288 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 1934 06/26/20 00:46:3 2:04 48 Onxtgenp APPLE !PHONES (311580084491266:1217109705044::::0] hone AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 102 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170750 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342812 MOBILITY (with cell location) 111111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: 06/29/2020 Run Time: Data Osage For: Ma= Item Conn. Conn. Originating ET Bytes Bytes Apn flat IWBI WARE MODEL Cell Location Date Time Number Up Dn (OTC) 1935 06/26/20 00:48:41 60:00 41494 30132nxtgenp APPLE !PHONES (024577552:96006:- hone 71.9906006:43.3717995:210:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1936 06/26/20 01:37:51 60:00 15448 5032 ims APPLE !PHONES 1937 06/26/20 01:48:41 60:00 770 1470nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1938 06/26/20 02:37:51 60:00 10036 4020 ism APPLE !PHONES 1939 06/26/20 02:48:41 60:00 99220 56050nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1940 06/26/20 03:37:51 60:00 10160 3268 ism APPLE !PHONES 1941 06/26/20 03:48:41 60:00 38617 38564nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1942 06/26/20 04:37:51 60:00 12028 4344 ism APPLE !PHONES 1943 06/26/20 04:48:41 60:00 30036 25061nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1944 06/26/20 05:37:51 38:28 5196 1572 ism APPLE !PHONES 1945 06/26/20 05:48:41 60:00 15794 12694nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1946 06/26/20 06:16:19 0:01 0 0 ism APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1947 06/26/20 06:16:19 0:01 0 0 ism APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1948 06/26/20 06:17:27 60:00 16287 9236 ism 1949 06/26/20 06:48:41 60:00 96 630nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1950 06/26/20 07:17:27 60:00 6924 2756 ism 1951 06/26/20 07:48:41 36:47 0 92nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1952 06/26/20 08:17:27 60:00 6616 2756 ism 1953 06/26/20 09:17:27 60:00 7156 2896 ism 1954 06/26/20 10:17:27 47:03 6512 3880 ism APPLE !PHONES 1955 06/26/20 10:53:49 60:00 22428 26251nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1956 06/26/20 11:04:29 1:19 2660 1324 ism APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1957 06/26/20 11:04:30 1:18 2596 1324 ism APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1958 06/26/20 11:05:48 60:00 15312 5828 ism APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 103 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170751 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342813 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm ...... "--a"" • AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn =MI INS' HARE MODEL Cell Location Data Ties Number Up On (OTC) 1959 06/26/20 11:53:49 13:03 225 210nxtgenp APPLE !PHONES (023310608:91057:— hone 71.9598779:43.2972525:150:—1.01 1960 06/26/20 12:05:48 60:00 7032 2772 Las APPLE !PHONES 1961 06/26/20 12:06:51 2:06 288 48nxtgenp APPLE !PHONES (366513795:1431694::::01 U.S.Cellular, hone _USA 1962 06/26/20 12:06:52 2:06 48 Onxtgenp APPLE !PHONES (311580084513795:1217109705132::::01 hone 1963 06/26/20 12:08:58 60:00 8453 11625nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1964 06/26/20 13:05:48 60:00 13584 4576 Lau APPLE !PHONES 1965 06/26/20 13:08:58 47:00 42255 29979nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1966 06/26/20 13:55:57 2:04 288 48nxtgenp APPLE !PHONES [366491266:1431606::::01 U.S.Cellular, hone _USA 1967 06/26/20 13:55:59 2:03 48 Onxtgenp APPLE !PHONES (311580084491266:1217109705044::::01 hone 1968 06/26/20 13:58:02 60:00 58914 35107nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1969 06/26/20 14:05:48 60:00 8604 2896 Lau APPLE !PHONES 1970 06/26/20 14:58:02 60:00 81189 48093nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1971 06/26/20 15:05:48 60:00 8496 3004 Lau APPLE !PHONES 1972 06/26/20 15:58:02 60:00 27438 16520nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1973 06/26/20 16:05:48 54:03 13476 4752 Lau APPLE !PHONES 1974 06/26/20 16:58:02 60:00 7609 12693nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1975 06/26/20 16:59:51 0:02 0 0 Lau APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1976 06/26/20 16:59:51 0:02 0 0 Lau APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1977 06/26/20 17:00:00 3:41 10686 7494 Lau APPLE !PHONES 1978 06/26/20 17:03:41 3:06 2836 1340 Las APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 1979 06/26/20 17:03:41 3:06 2704 1340 Lau APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1980 06/26/20 17:06:47 60:00 14984 4824 ims APPLE !PHONES 1981 06/26/20 17:58:02 60:00 36340 23730nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1982 06/26/20 18:06:47 60:00 8496 2928 Lau APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 104 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170752 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342814 MOBILITY e (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Sim Item Conn. Conn. Originating ET Bytes Bytes Apn L@I INSI MAKE MODEL Cell Location Data Timm Number Up Dn (UTC) 1983 06/26/20 18:58:02 2:24 0 Onxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1984 06/26/20 19:00:25 2:04 288 48nxtgenp APPLE !PHONES (366491266:1431606::::0) U.S.Cellular, hone _USA 1985 06/26/20 19:00:26 2:04 48 Onxtgenp APPLE !PHONES (311580084491266:1217109705044::::0) hone 1986 06/26/20 19:02:30 60:00 29594 25706nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1987 06/26/20 19:06:47 60:00 6712 3036 ims APPLE !PHONES 1988 06/26/20 20:02:30 60:00 96984 58541 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1989 06/26/20 20:06:47 60:00 6632 2572 ims APPLE !PHONES 1990 06/26/20 21:02:30 60:00 82722 101556 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 1991 06/26/20 21:06:47 38:02 8496 3036 ims APPLE !PHONES 1992 06/26/20 21:44:49 16:18 87880 3088 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 1993 06/26/20 21:44:49 16:18 7232 3088 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 1994 06/26/20 22:01:07 60:00 32520 12668 ims APPLE !PHONES 1995 06/26/20 22:02:30 60:00 1486 6526 nxtgenp APPLE !PHONES (023310601:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1996 06/26/20 22:20:12 0:19 0 5454 ims APPLE !PHONES 1997 06/26/20 23:01:07 60:00 6820 3392 ims APPLE !PHONES 1998 06/26/20 23:02:30 60:00 249949 80477 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1999 06/27/20 00:01:07 60:00 8604 3052 ims APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 105 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170753 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342815 MOBILITY (with cell location) ill1111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm ...,„0 4a`" -es AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: MS= Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ 1MSI MAKE MODEL Cell Location Data Tana Number Up Dn (OTC) 2000 06/27/20 00:02:30 54:31 29024 25916nxtgen APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2001 06/27/20 00:57:00 2:05 9569 6971nxtgen APPLE !PHONES (366491269:1431606::::0) U.S.Cellular, hone _USA 2002 06/27/20 00:57:01 2:05 6971 9281nxtgen APPLE !PHONES (311580084491269:1217109705044::::0) hone 2003 06/27/20 00:59:06 60:00 4175518 4170231nxtgen APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 2004 06/27/20 01:01:07 33:05 3532 1340 ims APPLE !PHONES 2005 06/27/20 01:34:12 3:29 75600 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 2006 06/27/20 01:34:12 3:29 2704 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 2007 06/27/20 01:37:41 60:00 13676 4624 ims APPLE !PHONES 2008 06/27/20 01:59:06 46:08 18642 28862 nxtgen APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2009 06/27/20 02:37:41 60:00 13568 4800 ims APPLE !PHONES 2010 06/27/20 02:45:13 1:16 901 280nxtgen APPLE !PHONES (366491266:1431606::::0) U.S.Cellular, hone _USA 2011 06/27/20 02:45:14 1:16 280 613nxtgen APPLE !PHONES (311580084491266:1217109705044::::0) hone 2012 06/27/20 02:46:30 60:00 62398 29324 nxtgen APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2013 06/27/20 03:37:41 60:00 8496 2928 ims APPLE !PHONES 2014 06/27/20 03:46:30 29:02 0 0nxtgen APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2015 06/27/20 04:37:41 60:00 10380 4020 ims APPLE !PHONES 2016 06/27/20 05:37:41 60:00 6848 2896 ims APPLE !PHONES 2017 06/27/20 06:37:41 60:00 6848 2572 ims APPLE !PHONES 2018 06/27/20 07:37:41 60:00 11920 4552 ims APPLE 1PHONE8 2019 06/27/20 08:37:41 60:00 6956 2788 ims APPLE 1PHONE8 2020 06/27/20 09:37:41 60:00 13368 4532 ims APPLE 1PHONE8 2021 06/27/20 10:37:41 60:00 8696 3036 ims APPLE 1PHONE8 2022 06/27/20 11:37:41 60:00 12136 4552 ims APPLE !PHONES 2023 06/27/20 12:37:41 60:00 10036 3500 ims APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 106 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SONYGM00170754 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342816 MOBILITY (with cell location) 111111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm u AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: ISSN Item Conn. Conn. Originating ET Bytes. Bytes Apn flat INSI MAKE MODEL Col/ Location Data Tama Number Up Dn (OTC) 2024 06/27/20 13:37:41 60:00 10036 3176 ims APPLE !PHONES 2025 06/27/20 14:37:41 60:00 13352 4732 ims APPLE !PHONES 2026 06/27/20 15:37:41 60:00 8496 3144 ims APPLE 'PHONES 2027 06/27/20 16:37:41 60:00 10036 3176 ims APPLE IPHONEB 2028 06/27/20 17:15:18 60:00 28467 24322 nxtgenp APPLE IPHONEB (023310601:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 2029 06/27/20 17:37:41 60:00 12600 5048 ims APPLE !PHONES 2030 06/27/20 18:15:18 60:00 1033 840 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2031 06/27/20 18:37:41 60:00 13460 4624 ims APPLE !PHONES 2032 06/27/20 19:15:18 60:00 38243 23394 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2033 06/27/20 19:37:41 60:00 12796 3548 ims APPLE !PHONES 2034 06/27/20 20:15:18 60:00 751 735nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2035 06/27/20 20:37:41 35:19 3532 1340 ims APPLE !PHONES 2036 06/27/20 21:13:00 1:21 71836 1464 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 2037 06/27/20 21:13:00 1:21 3328 1464 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 2038 06/27/20 21:14:21 60:00 13460 4624 ims APPLE !PHONES 2039 06/27/20 21:15:18 60:00 4476 9652 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2040 06/27/20 22:14:21 60:00 17868 5172 ims APPLE !PHONES 2041 06/27/20 22:15:18 19:22 173 105 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2042 06/27/20 22:34:40 2:03 288 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 2043 06/27/20 22:34:41 2:03 48 Onxtgenp APPLE !PHONES (311580084491266:1217109705044::::01 hone 2044 06/27/20 22:36:44 0:32 48 Onxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2045 06/27/20 22:37:16 1:51 288 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 107 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170755 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342817 MOBILITY (with cell location) • 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm tzTs`"" 1:• AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. Run Date: 06/29/2020 Run Tins: Data Usage For: Item Conn. Conn. Originating Er Bytes Bytes Apn DMZ DISE MAKE MODEL Coll Location Data Time Number UP On (OTC) 2046 06/27/20 22:37:17 1:51 48 Onxtgenp APPLE !PHONES (311580084491266:1217109705044::::0] hone 2047 06/27/20 22:39:08 4:49 48 Onxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2048 06/27/20 22:43:56 8:16 5222 6382nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 2049 06/27/20 22:43:57 8:16 6362 4934nxtgenp APPLE !PHONES (311580084491266:1217109705044::::0] hone 2050 06/27/20 22:52:13 60:00 7471 6350 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 2051 06/27/20 23:14:21 60:00 12996 3424 ims APPLE !PHONES 2052 06/27/20 23:52:13 60:00 87635 54889nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 2053 06/28/20 00:14:21 60:00 8604 3052 ims APPLE !PHONES 2054 06/28/20 00:52:13 4:28 4613 3978nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2055 06/28/20 00:56:41 1:11 192 Onxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 2056 06/28/20 00:56:41 1:11 286 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S.Cellular, hone _USA 2057 06/28/20 00:56:42 1:11 48 Onxtgenp APPLE !PHONES (311580084491266:1217109705044::::0] hone 2058 06/28/20 00:56:42 1:11 0 Onxtgenp APPLE !PHONES (311580084491266:1217109705044::::01 hone 2059 06/28/20 00:57:53 60:00 50230 29632 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2060 06/28/20 01:14:21 60:00 13584 4640 ims APPLE !PHONES 2061 06/28/20 01:57:53 60:00 42211 26196 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 2062 06/28/20 02:14:21 60:00 8496 3052 ims APPLE !PHONES 2063 06/28/20 02:57:53 60:00 202322 228580 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 2064 06/28/20 03:14:21 57:41 11920 4536 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 108 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170756 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342818 MOBILITY 400. (with cell location) 020 \\ *t os AT&T AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DEBI IMSI MAKE MODEL Celt Location Data Tine Number Up Dn (ox) 2065 06/28/20 03:57:53 60:00 924 840nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2066 06/28/20 04:15:34 0:00 0 0 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 2067 06/28/20 04:17:29 2:42 6675 5980 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 2068 06/28/20 04:20:11 60:00 14876 4592 ins APPLE !PHONES 2069 06/28/20 04:57:53 60:00 571 420nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2070 06/28/20 05:20:11 60:00 6956 2772 ins APPLE !PHONES 2071 06/28/20 05:57:53 60:00 687 630nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2072 06/28/20 06:20:11 60:00 10036 3144 ins APPLE !PHONES 2073 06/28/20 06:57:53 60:00 3536 6012nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2074 06/28/20 07:20:11 60:00 13460 4592 ins APPLE !PHONES 2075 06/28/20 07:57:53 60:00 635 525nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2076 06/28/20 08:20:11 60:00 10036 3144 ins APPLE !PHONES 2077 06/28/20 08:57:53 60:00 908 1120nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2078 06/28/20 09:20:11 60:00 12012 4504 ins APPLE !PHONES 2079 06/28/20 09:57:53 60:00 346 210nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2080 06/28/20 10:20:11 41:21 6956 2880 ins APPLE !PHONES 2081 06/28/20 10:57:53 60:00 22177 17284nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2082 06/28/20 11:01:32 31:15 5240 2648 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 2083 06/28/20 11:32:47 60:00 11920 4220 ins APPLE !PHONES 2084 06/28/20 11:57:53 60:00 867 945nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2085 06/28/20 12:32:47 60:00 10144 3144 ins APPLE !PHONES 2086 06/28/20 12:57:53 60:00 14181 1781nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2087 06/28/20 13:32:47 60:00 15000 4608 ins APPLE !PHONES 2088 06/28/20 13:57:53 60:00 462 420nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2089 06/28/20 14:32:47 60:00 12152 4628 ins APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 109 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170757 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342819 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm u AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn =MI ISM MARE MODEL Coll Location Data Time Number Up On (OTC) 2090 06/28/20 14:57:53 60:00 7365 12430nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 2091 06/28/20 15:32:47 4:02 0 0 Las APPLE !PHONES 2092 06/28/20 15:36:49 1:09 2644 1324 Lau APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 2093 06/28/20 15:37:58 60:00 15000 4948 Lau APPLE !PHONES 2094 06/28/20 15:57:53 52:43 519 315nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 2095 06/28/20 16:37:58 60:00 10376 3268 Lau APPLE !PHONES 2096 06/28/20 16:50:36 60:00 7234 5761nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2097 06/28/20 17:37:58 60:00 8496 3004 Lau APPLE !PHONES 2098 06/28/20 17:50:36 60:00 24391 13042 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2099 06/28/20 18:37:58 60:00 10036 3036 Lau APPLE !PHONES 2100 06/28/20 18:50:36 60:00 2824 2304 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2101 06/28/20 19:37:58 60:00 16868 6076 Lau APPLE !PHONES 2102 06/28/20 19:50:36 60:00 58713 37399nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2103 06/28/20 20:37:58 60:00 9928 3036 Lau APPLE !PHONES 2104 06/28/20 20:50:36 60:00 36619 57095nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 2105 06/28/20 21:37:58 12:34 0 0 Lau APPLE !PHONES 2106 06/28/20 21:50:32 38:29 18240 2860 Lau APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 2107 06/28/20 21:50:32 38:29 5972 2772 Lau APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 2108 06/28/20 21:50:36 60:00 69100 281243 nxtgenp APPLE !PHONES (023310601:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 110 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170758 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342820 MOBILITY 4111116 (with cell location) 111111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm 1/4 <‘..". rf oll0 AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Dato: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn MCI IMSI MAKE MODEL Celt Location Date IMO Number Up Dn (MC) 2109 06/28/20 22:29:01 60:00 13908 4716 ims APPLE !PHONES 2110 06/28/20 22:50:3 60:00 1638 5118nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2111 06/28/20 23:29:01 60:00 10376 3392 ims APPLE !PHONES 2112 06/28/20 23:50:3f 60:00 13365 13177nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 2113 06/29/20 00:29:01 28:10 3408 1432 ims APPLE !PHONES 2114 06/29/20 00:50:3f 60:00 15439 15330nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2115 06/29/20 00:57:11 0:02 0 0 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 2116 06/29/20 00:57:11 0:02 0 0 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 2117 06/29/20 00:57:1 8:15 10806 6602 ims APPLE !PHONES 2118 06/29/20 01:05:3 0:02 0 0 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 2119 06/29/20 01:05:3 0:02 0 0 Ms APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 2120 06/29/20 01:08:11 12:59 6687 5919 Ms APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 2121 06/29/20 01:21:10 54:16 14016 4716 Ms APPLE !PHONES 2122 06/29/20 01:50:3f 60:00 751 735nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2123 06/29/20 02:15:2f 45:43 5240 2540 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 2124 06/29/20 02:50:3f 60:00 97896 245373nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2125 06/29/20 03:01:0 60:00 13460 4576 ims APPLE !PHONES 2126 06/29/20 03:50:3f 60:00 578 630nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2127 06/29/20 04:01:0 60:00 10128 3144 ims APPLE !PHONES 2128 06/29/20 04:50:3f 60:00 519 315nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2129 06/29/20 05:01:0 60:00 8604 3236 ims APPLE !PHONES 2130 06/29/20 05:50:3f 60:00 346 210nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2131 06/29/20 06:01:0 60:00 13676 4644 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 111 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170759 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342821 MOBILITY (with cell location) • ill1111020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Data: 06/29/2020 Run Timm: Data Usage For: MI= Item Conn. Conn. Originating ET Bytes Bytom Apn DEBI BOX MAKE MODEL Cell Location Date Tama Number Up Dn (UTC) 2132 06/29/20 06:50:3i 60:00 519 315nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2133 06/29/20 07:01:0 60:00 11812 4328 Las APPLE !PHONES 2134 06/29/20 07:50:3i 60:00 8316 6271nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2135 06/29/20 08:01:0 60:00 8388 3004 Las APPLE !PHONES 2136 06/29/20 08:50:3i 60:00 346 210nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2137 06/29/20 09:01:0 60:00 6636 3144 Las APPLE !PHONES 2138 06/29/20 09:50:3i 60:00 995 1155nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2139 06/29/20 10:01:0 60:00 8496 3128 Las APPLE !PHONES 2140 06/29/20 10:50:3i 60:00 514 525nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2141 06/29/20 11:01:0 60:00 18300 6308 Las APPLE !PHONES 2142 06/29/20 11:50:3i 60:00 9936 7546nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.01 2143 06/29/20 12:01:0 60:00 10144 3360 ism APPLE !PHONES 2144 06/29/20 12:50:3i 60:00 4351 6992nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2145 06/29/20 13:01:0 60:00 10144 3252 ism APPLE !PHONES 2146 06/29/20 13:50:3i 60:00 67496 10318nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2147 06/29/20 14:01:0 60:00 14896 4592 ism APPLE !PHONES 2148 06/29/20 14:50:3i 6:52 0 0nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2149 06/29/20 14:57:2 2:04 48 0nxtgenp APPLE !PHONES (311580084491266:1217109705044::::0) hone 2150 06/29/20 14:59:3 60:00 119030 61260nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2151 06/29/20 15:01:0 60:00 10144 3252 ism APPLE !PHONES 2152 06/29/20 15:59:3 60:00 34394 26273nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 2153 06/29/20 16:01:09 60:00 8712 3128 Las APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 112 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00170760 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342822 MOBILITY 4111110 (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm u AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: SS= Item Conn. Conn. Originating ET Bytes Bytes Apn flat INS' MBE MODEL Cell Location Date Time Up On (UTC) 2154 06/29/20 16:59:32 60:00 12739 53439nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 2155 06/29/20 17:01:09 54:59 11920 4412 Lou APPLE !PHONES 2156 06/29/20 17:57:47 8:14 6669 5938 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 2157 06/29/20 17:59:32 60:00 40145 42018 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 2158 06/29/20 18:06:01 60:00 10052 3268 /ma APPLE !PHONES 2159 06/29/20 18:37:47 16:42 14483 7707 /ma APPLE !PHONES 2160 06/29/20 18:54:29 25:29 2768 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 2161 06/29/20 18:54:29 25:29 2704 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 2162 06/29/20 18:59:32 60:00 15191 13519nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 2163 06/29/20 19:06:01 60:00 0 0 ims APPLE !PHONES 2164 06/29/20 19:19:58 60:00 13476 4748 ims APPLE !PHONES 2165 06/29/20 19:59:32 60:00 1246 1050 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 2166 06/29/20 20:06:01 60:00 0 0 ims APPLE !PHONES 2167 06/29/20 20:19:58 60:00 6924 2772 ims APPLE !PHONES 2168 06/29/20 20:59:32 51:42 4547 4458nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2169 06/29/20 21:06:01 60:00 0 0 ims APPLE !PHONES 2170 06/29/20 21:19:58 60:00 10176 3160 ims APPLE !PHONES 2171 06/29/20 21:51:15 2:03 48 Onxtgonp APPLE !PHONES (311580084513795:1217109705132::::01 hone 2172 06/29/20 21:53:19 9:10 48 Onxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2173 06/29/20 22:02:29 2:04 48 0nxtgenp APPLE !PHONES (311580084491269:1217109705044::::01 hone 2174 06/29/20 22:04:33 15:36 7689 4952nxtgenp APPLE IPHONE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2175 06/29/20 22:06:01 25:01 0 0 ims APPLE IPHONE8 2176 06/29/20 22:19:58 60:00 8712 3160 ims APPLE IPHONE8 2177 06/29/20 22:20:09 1:47 48 0nxtgenp APPLE IPHONE8 (311580084491266:1217109705044::::01 hone 2178 06/29/20 22:21:56 55:45 7274 5995 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 113 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170761 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342823 MOBILITY (with cell location) 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn MARE MODEL Cell Location Date Tame DP Dn (OTC) 2179 06/29/20 23:17:42 2:04 48 Onxtgenp APPLE IPE0NE8 (311580084491266:1217109705044::::0) hone 2180 06/29/20 23:19:45 60:00 80390 40970nxtgenp APPLE IPE0NE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.01 2181 06/29/20 23:19:58 60:00 19736 6388 ims APPLE IPE0NE8 2182 06/30/20 00:19:45 5:00 2633 2591nxtgenp APPLE IPE0NE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2183 06/30/20 00:24:45 11:44 48 0nxtgenp APPLE IPE0NE8 (311580084491269:1217109705044::::0) hone AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 114 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170762 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342824 MOBILITY (with cell location) e t, 020 AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: 0""n0.0 SMS Linage For: Item Conn. Conn. Or inati Teraina! IICI INS! Dose MMS Type Mature Cell Location Date Time MC) 1 06/08/20 15:49:4 MST 2 06/15/20 17:15:4 ONO 3 06/15/20 17:16:3 MST 4 06/25/20 17:56:5 MST 5 06/25/20 18:26:0' MST 6 06/25/20 18:26:3: MST AT&T Proprietary Page 1 The information contained here is for use by authorized persons only and is not for general distribution. SDNY_GM_00170763 EFTA01342825