From: a (USANYS)" To: (USANYS)" Subject: RE: Maxwell Date: Mon, 07 Jun 2021 16:51:03 +0000 Inline-Images: image003.jpg; image002.jpg Excellent. Thanks for your careful handling. On Jun 7, 2021, at 12:43 PM, (USANYS) wrote: From: (USAEO) Sent: Monday, June 7, 202112:11 PM To: (USANYS) ; Subject: RE: Maxwell Thanks M. CISSP, CI EH Assistant Director & Chief Information Security Officer Department of Justice Executive Office for the United States Attorneys' Office of the Chief Information Officer, Cybersecurity Services Group <image002.jpg> From: (USANYS) c Sent: Monday, June 7, 2021 11:49 AM To: (USAEO) Cc: (USAEO) ca. Subject: RE: Maxwell The issue as it relates to conduct of s closed. As to he is leaving CACI's employ this Friday, but it has nothing to do with the transfer of documents. I think we can let it die on Friday. Thanks, (USAEO) EFTA00029020

I From: (USAEO) ‹ > Sent: Monday, June 7, 2021 10:56 AM To: (USANYS) Cc: (USAEO) Subject: RE: Maxwell Good morning GCO's records show that this matter, as it applies to S was already addressed by GCO back on April 19. Those records show that the USAO took necessary steps to mitigate the action and did not wish to proceed with any disciplinary actions given the circumstances. Would you like to discuss the circumstances regarding the new incident with employee who I understand is also a contractor? Thank you, Assistant United States Attorney General Counsel's Office (On Detail) Executive Office for U.S. Attorneys From: (USAEO) Sent: Friday, June 4, 2021 12:45 PM To: SOC-EOUSA .; Cc: (usAms)<I > (USAEO) (USAEO) (USAEO) (USAEO) (USAEO) < > Subject: RE: Maxwell Importance: High < SOC, Please complete the following actions with the district: • I've spoken with M, this is not a classified spill. The data label is based on a protective order issued by the court. • The Information Disclosure will need to be completed as there was a substantial amount of Pll included in the upload. • Validate the information was received by the intended recipient. • Insure the data has been removed from and I believe the district did speak to the individual on this, not sure if you have any further questions. A summary of the incident is below for your reference. • On April 13th, uploaded 5.5 GB of data to • Analysts determined the content of these files were discovery for the Jeffrey Epstein case against Ghislaine Maxwell. It contained the under-age victim names among other PII. • The CISO notification was sent May 26th and the SOC notification with the Information Disclosure form sent on May 28th. EFTA00029021

• Contractor stated they chose to use the Sharefile.com instead of USAfx. • In the last 24 hours, another user from the same district, uploaded less than a GB of data to another law firm that uses sharefile.com. This user is: in NYS. R/G CISSP, C I EH Assistant Director & Chief Information Security Officer Department of Justice Executive Office for the United States Attorneys' Office of the Chief Information Officer, Cybersecurity Services Group <image003.jpg> From: (USANYS) < M> Sent: Thursday, June 3, 2021 1:59 PM To: (USAEO) < > Subject: FW: Maxwell From: (USANYS) Sent: Thursday, June 3, 2021 1:49 PM To: (USANYS) < > Cc: (USANYS) Subject: Maxwell S Attached is the Court ordered protective order, which requires us to mark things as confidential (paragraph 7). The production uploaded was non-testifying witness 3500. An example page is attached, and includes our "confidential" marking that we applied pursuant to the protective order. Given that this information clearly contains Pll for victims, the designation is necessary. We'd also ask that this page not be widely disseminated outside of those at EOUSA who already have access. Thank you, Chief, Public Corruption Unit U.S. Attorney's Office Southern District of New York EFTA00029022

THE EXECUTIVE OFFICE 'A UNITED STATES ATTORNEYS Cybersecurity Staff THE EXECUTIVE OFFICE f ir UNITED STATES ATTORNEYS Cybersecurity Staff EFTA00029023