MOBILITY 4Iiib AT&T AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm •3/4 \---s""s e AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in lit OTC. Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 a Conn. Seizure Time Time CUTC) ST Originating Terminating Number Number MORI INSI CT Feature 1 03/01/20 19:58:27 0:09 0:00 NM 2 03/02/20 16:34:38 0:03 0:00 MO 3 03/02/20 16:35:15 0:10 0:00 MT (1 4 03/02/20 16:35:19 0:24 0:00 MO 5 03/02/20 16:36:05 0:06 0:00 MT (NIORI 6 03/02/20 16:36:05 0:07 0:00 MO 7 03/02/20 16:36:53 0:09 0:47 MO 8 03/02/20 16:43:46 0:09 0:04 MT 9 03/02/20 16:44:06 0:06 2:06 MO 10 03/03/20 21:36:01 0:07 30:41 MO 11 03/04/20 18:52:26 0:08 1:40 MT 12 03/04/20 19:46:37 0:20 0:05 MO 13 03/04/20 22:07:25 0:05 47:57 MO 14 03/04/20 23:04:25 0:03 0:39 MO 15 03/05/20 00:56:24 0:33 0:00 MO AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 1 SDNY_GM_00170884 EFTA01342942

.111020 MOBILITY S AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm "‘" ss° AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in \C ite UTC. Run Date: Run Time: Voice Usage For: Item Conn. Date 0""n.. dildimmo Conn. Seizure Time Tine (UTc) Er Originating Terminating SRI INBI Cr Member Number Feature 16 03/05/20 00:58:14 0:07 0:26 MT (Ni-ri:NIOPI 17 03/05/20 13:22:45 0:11 1:13 NO (Ni-ri:MIORI 18 03/05/20 14:04:59 0:20 0:00 MT (NIOPI 19 03/05/20 15:49:47 0:29 0:00 MT (Ni-ri:NIOPI 20 03/05/20 15:49:48 0:30 0:01 MT (MI - ri:NIOP:CFNA:VM] 21 03/05/20 15:50:04 0:08 0:00 MT (MI -fi:NI081 22 03/05/20 17:14:12 0:02 0:34 MO CM/ -fi:NIOA1 23 03/05/20 17:15:32 0:07 0:00 MO 24 03/05/20 18:27:34 0:19 0:05 MO 25 03/05/20 18:29:16 0:20 0:04 MO 26 03/05/20 18:42:42 0:20 0:03 MO 27 03/05/20 20:38:46 0:10 9:04 MO (VCORAI 28 03/05/20 20:51:35 0:05 0:00 MO (1 29 03/06/20 15:08:17 0:04 1:07 NO (W1-81:N101:1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 2 SDNY_GM_00170885 EFTA01342943

.111020 MOBILITY `~~ AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: Run Tine: Voice Usage For: Item Conn. Date 06/17/2020 NM= Conn. Seizure Tim Sum (USC) CT Originating Terminating DC IM8I Cr Number number Feature 30 03/06/20 20:02:56 0:20 0:05 MO [Ni-fil 31 03/06/20 20:51:24 0:03 0:58 MO [Ni-fi:NIOA1 32 03/06/20 21:03:38 0:14 0:00 MT [Ni-fi:NIOPI 33 03/06/20 21:04:01 0:08 0:00 MT [Ni-fi:NIOPI 34 03/06/20 21:04:33 0:03 0:16 MO [Ni-fi:NIOAI 35 03/06/20 21:09:32 0:03 0:51 MO [Ni-fi:NIOAI 36 03/06/20 21:32:36 0:03 1:11 MO [Ni-fi:NIOAI 37 03/07/20 00:02:25 0:13 0:00 MT (1 38 03/07/20 00:02:25 0:24 0:00 ST [HIM 39 03/07/20 00:02:26 0:25 0:05 ST (NIOP:CfNA:VM] 40 03/07/20 16:17:45 0:15 0:00 ST (NIOPI 41 03/07/20 18:21:38 0:05 0:08 MT (MITR:INIORI 42 03/07/20 18:21:40 0:25 0:04 MO -ri:NIORI 43 03/07/20 18:39:48 0:06 0:00 MT -ri:NIOPI 44 03/08/20 00:01:01 0:22 0:00 MT (Mt -ri:NIOPI AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 3 SDNY_GM_00170886 EFTA01342944

.111020 MOBILITY 4III, AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm C at id 1e /4 1..... AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Dato: Run Tine: Voice Usage For: Item Conn. Dato 08/17/2020 Conn. Tama (UMC) Seizure Time ET Originating Terminating DMZ INSI Number number CT Feature 45 03/08/20 18:09:41 0:11 0:00 MT (Ni-Pi:NIOPI 46 03/08/20 18:23:28 0:13 0:00 MT (Ni-Pi:NIOPI 47 03/09/20 00:45:20 0:27 0:00 MT (Ni-Pi:NIOP1 48 03/09/20 00:45:22 0:29 0:01 MT (Ni- ri:NIOP:CPNA:VNI 49 03/09/20 01:30:41 0:17 18:35 MT (NIOA:VCORA1 50 03/09/20 01:30:41 0:18 18:35 NO (Ni-ri:NIOA1 51 03/09/20 14:52:35 0:17 0:00 MT (Ni-ri:NIOPI 52 03/09/20 15:46:24 0:07 0:00 MT (Ni-ri:NIOA1 53 03/09/20 18:49:59 0:04 0:00 NO (Ni-ri:NIOA1 54 03/10/20 17:41:33 0:14 0:00 MT (Ni-ri:NIOPI 55 03/10/20 17:43:58 0:23 0:00 MT (Ni-ri:NIORI 56 03/10/20 17:44:00 0:25 0:58 MT (Ni- ri:NIOA:CPNA:VNI 57 03/10/20 18:36:22 0:13 0:00 MT (Ni-ri:NIOA1 58 03/10/20 23:20:53 0:01 0:00 NO (Ni-ri:NIOA1 59 03/10/20 23:20:57 0:02 0:00 NO (Ni-ri:NIOA1 1PHONE8 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 4 SDNY_GNL00170887 EFTA01342945

.111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm t1/4-15 AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Dato: Run Time: Voice Osage For: Item Conn. Date 0""n.. dildimmo Conn. Seizure Tim Tine (OTC) ET Originating Terminating a@I nMS1 Number Member Cr Feature 60 03/11/20 20:57:26 0:20 0:04 MO (Ili -ri:MIORI 61 03/11/20 21:36:41 0:20 0:04 MO (Ili -ri:MIORI 62 03/11/20 21:48:29 0:20 0:05 MO (Wi-Pit 63 03/11/20 21:56:49 0:21 0:04 MO (Wi-Pit 64 03/12/20 00:33:30 0:02 0:00 MT (RIM 65 03/12/20 16:00:34 0:08 7:20 MO (Wi-Pit 66 03/12/20 18:12:35 0:20 0:03 MO (Wi-Pit 67 03/12/20 19:34:27 0:06 1:09 MO (Wi-Pit 68 03/12/20 19:39:16 0:12 0:00 MO (Wi-Pit 69 03/12/20 19:49:52 0:20 0:03 MO (Wi-Pit 70 03/13/20 16:33:25 0:21 0:04 MO (Wi-Pit 71 03/13/20 17:59:47 0:20 0:03 MO (Wi-Pit 72 03/14/20 15:39:45 0:28 0:00 MT (Wi-ri:MIOPI 73 03/14/20 15:39:45 0:28 0:00 MT (WI- ri:MIOP:CFNA:VM] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 5 SDNY_GM_00170888 EFTA01342946

.111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41.. ..„`•-_--s at's 1/4-6 AT&T Run Date: Run Tine: Voice Usage For: Item Conn. Date 06/17/2020 dill's' Conn. Seizure Tina TiaDO (UTC) ET Originating Terminating =RI INSI Numbor Maher CT Feature 74 03/14/20 20:56:04 0:03 0:02 NO (Mt -ril 75 03/14/20 20:56:10 0:02 0:03 NO (Mt -8/1 76 03/14/20 20:56:19 0:05 0:03 NO (Ni-fil 77 03/14/20 20:56:42 0:02 0:03 NO (Ni-Pil 78 03/14/20 22:49:35 0:19 0:00 MT (NIOP1 79 03/14/20 22:49:36 0:20 0:04 MT (NIOP:CPNR:VN1 80 03/14/20 23:33:17 0:14 0:00 MT (Ni -Pi:NIOP1 81 03/15/20 00:44:05 0:02 0:00 MT (NIOP1 82 03/15/20 00:44:23 0:11 0:00 MT (NIOP1 83 03/15/20 00:44:23 0:11 0:09 MT (NIOP:CPNR:VN1 84 03/15/20 15:46:15 0:18 0:00 MT (Ni -Pi:NIOR1 85 03/16/20 00:36:19 0:14 0:00 MT (1 86 03/16/20 00:36:19 0:25 0:00 ST (NIOR1 87 03/16/20 00:36:21 0:27 0:07 ST (NIOR:CFNA:VN1 88 03/19/20 16:30:35 0:39 0:00 NO -P i1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 6 SDNY_GNL001708.89 EFTA01342947

MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 dildimmo Conn. Seizure Time Time (UTC) ET Originating Terminating DISI Number Number CT Feature 89 03/19/20 19:26:50 0:18 0:00 NO (Ni-Fil 90 03/23/20 03:56:33 0:14 0:00 NT (1 91 03/23/20 03:56:33 0:25 0:00 ST (NIOP1 92 03/23/20 03:56:35 0:27 0:03 ST (NIOS:CVNA:VM] 93 03/23/20 04:01:36 0:26 0:00 NT (Ni-ri:NI081 94 03/24/20 00:20:32 0:24 0:00 NT -Pi:NIOP1 95 03/24/20 00:20:32 0:24 0:00 NT -Pi:NIOP1 96 03/24/20 00:20:38 0:30 0:05 NT (Ni- Pi:NIOP:CFNA:VNI 97 03/24/20 00:20:38 0:30 0:05 NO (Ni-Fil 98 03/24/20 23:44:26 0:06 0:06 NO (Ni-Fil 99 03/24/20 23:45:05 0:22 0:00 NT (Ni-Pi:NIOP1 100 03/24/20 23:45:05 0:22 0:00 NT (NIOP:CNN1 101 03/24/20 23:45:12 0:29 0:04 NT (NIOP:CPNA:CbM:VM1 102 03/24/20 23:45:12 0:29 0:04 NO (Ni-Fil 103 03/26/20 23:55:56 0:20 0:00 NT (Xi —Pi:NIOP1 104 03/27/20 02:21:32 0:13 0:00 NT —Pi:NIOP1 105 03/27/20 14:05:36 0:06 0:00 NT (NIOP1 106 03/27/20 14:05:42 0:13 0:00 ST (NIOP1 107 03/27/20 14:05:42 0:14 0:00 NO (Ni-Fil 1PHONE8 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 7 SDNY_GM_00170890 EFTA01342948

MOBILITY P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 Conn. Time (DMC) Seizure Time CT Originating Terminating LNSI CT Number Number Feature 108 03/27/20 20:17:37 0:05 0:00 MT (Ni-Ti:NIOPI 109 03/27/20 20:52:41 0:11 0:00 MT (Ni-ri:NIOPI 110 03/30/20 23:55:43 0:21 0:00 MT (Ni-ri:NIOPI 111 03/31/20 17:28:06 0:01 0:00 NO (Ni-ril 112 03/31/20 17:28:18 0:07 4:39 NO (Ni-ril 113 04/01/20 16:49:44 0:12 0:00 MT (Ni-ri:NIOPI 114 04/01/20 16:49:44 0:12 0:00 MT (Ni-ri:NIOPI 115 04/01/20 16:49:48 0:16 0:03 MT (Ni-ri:NIOP:CPB:VM] 116 04/01/20 16:49:48 0:16 0:03 NO (Ni-ril 117 04/01/20 16:50:01 0:04 44:44 MT (Ni-ri:NIOPI 118 04/01/20 16:50:01 0:04 14:01 NO (Ni-ril 119 04/01/20 17:04:02 0:00 0:12 NO (1 120 04/01/20 17:04:14 0:00 12:58 NO (Ni-fil 121 04/01/20 17:17:12 0:00 0:12 NO (1 122 04/01/20 17:17:24 0:00 0:15 NO (Ni-fil 123 04/01/20 17:17:39 0:00 0:11 NO (1 124 04/01/20 17:17:50 0:00 3:32 NO (Ni-fil 125 04/01/20 17:21:22 0:00 0:12 NO (1 126 04/01/20 17:21:34 0:00 5:33 NO (Ni-fil 127 04/01/20 17:27:07 0:00 0:11 NO (1 128 04/01/20 17:27:18 0:00 2:26 NO (Ni-fil 129 04/01/20 17:29:44 0:00 0:11 NO (1 130 04/01/20 17:29:55 0:00 0:21 NO (Ni-fil 131 04/01/20 17:30:16 0:00 0:11 NO (1 132 04/01/20 17:30:27 0:00 4:18 NO (Ni-fil AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 8 SDNY_GM_001708.91 EFTA01342949

P.020 MOBILITY "-a. AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm t--_„•-•° AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: Run Time: Voice Usage For: Item Conn. Date 0""n.. dildimmo Conn. Seizure Tine Time (uTc) LT Originating Terminating flax DWI CT Number Number Feature 133 04/01/20 21:54:18 0:21 0:00 MT (Ni-Fi:NIOPI 134 04/01/20 21:54:18 0:21 0:00 MT (Ni-Fi:NIOPI 135 04/01/20 21:54:22 0:25 0:02 MT Fi:NIOP:CFNA:VM] 136 04/01/20 21:54:22 0:25 0:02 MO (Ni-Fil 137 04/01/20 22:49:44 0:10 4:27 MO (Ni-Fil 138 04/01/20 22:49:44 0:10 61:40 MT (Ni-Fi:NIOPI 139 04/01/20 22:54:11 0:00 0:11 MO (1 140 04/01/20 22:54:22 0:00 13:02 MO (Ni-ril 141 04/01/20 23:07:24 0:00 0:09 MO (1 142 04/01/20 23:07:33 0:00 13:50 MO (Ni-ril 143 04/01/20 23:21:23 0:00 0:10 MO (1 144 04/01/20 23:21:33 0:00 2:28 MO (Ni-811 145 04/01/20 23:24:01 0:00 0:12 MO (1 146 04/01/20 23:24:13 0:00 13:03 MO (Ni-ril 147 04/01/20 23:37:16 0:00 0:21 MO (1 148 04/01/20 23:37:37 0:00 6:17 MO ($11-811 149 04/01/20 23:43:54 0:00 0:12 MO (1 150 04/01/20 23:44:06 0:00 0:53 MO (Ni-ril 151 04/01/20 23:44:59 0:00 6:25 MO (VCORR1 152 04/03/20 14:24:29 0:15 0:00 MT (Ni-Fi:NIOPI 153 04/03/20 20:07:32 0:03 0:27 MO -Fil 154 04/03/20 20:08:13 0:04 0:57 MO -Fil 155 04/06/20 21:07:53 0:02 0:00 MT (Ni-Fi:NIOPI 156 04/06/20 21:08:13 0:22 0:00 MT (Ni-Fi:NIOPI 157 04/06/20 21:08:17 0:26 0:01 MT Fi:NIOP:CFNA:VM] 158 04/06/20 21:08:17 0:26 0:01 MO (Ni-Fil AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 9 SDNY_GNL00170892 EFTA01342950

.111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. `ca -ase• ""s AT&T Run Dato: Run Tine: Voice Osage For: Item Conn. Date 06/17/2020 dildimmo Conn. Seizure Tim Time MMC) ET Originating Terminating L@I IMSI Cr Number Weber Feature 159 04/06/20 21:08:54 0:09 5:49 MO (Ili-Pit 160 04/06/20 21:08:54 0:09 5:49 MT (Ili -Pi:NIOP1 161 04/06/20 21:15:03 0:03 12:03 NO (Mi-Pit 162 04/06/20 21:15:03 0:03 12:03 NT (NIOP1 163 04/06/20 22:56:05 0:01 0:00 NO (Mi-Pit 164 04/06/20 22:57:06 0:21 0:00 MT (Mi-Pi:NIOP1 165 04/06/20 22:57:06 0:21 0:00 MT (Mi-Pi:NIOP1 166 04/06/20 22:57:10 0:25 0:02 NT (Ili- ri:NIOP:CPNA:VM1 167 04/06/20 22:57:10 0:26 0:02 NO (Mi-Pit 168 04/06/20 22:58:08 0:39 0:00 NO (Mi-Pit 169 04/06/20 23:18:27 0:23 0:00 MT (Mi-Pi:NIOP1 170 04/06/20 23:18:27 0:23 0:00 MT (Mi-Pi:NIOP1 171 04/06/20 23:18:31 0:27 0:04 MT (Ili- ri:NIOP:CPNA:VM1 172 04/06/20 23:18:31 0:28 0:04 MO (Mi-Pit 173 04/06/20 23:28:26 0:22 0:00 MT (Mi-Pi:NIOP1 174 04/06/20 23:28:26 0:22 0:00 MT (Mi-Pi:NIOP1 175 04/06/20 23:28:29 0:25 0:01 MT (Ili- ri:NIOP:CPNA:VM1 176 04/06/20 23:28:29 0:25 0:01 MO (Mi-Pit 177 04/07/20 00:15:42 0:23 0:00 MT (Mi-Pi:NIOP) 178 04/07/20 00:15:44 0:25 0:07 MT (Mt- ri:NIOP:CPNA:VM1 179 04/07/20 00:15:44 0:26 0:07 MO (Mi-Pit AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 10 SDNY_GN1_00170893 EFTA01342951

.111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in VTC. ...."-_ 1,/ `'s AT&T Run Date: Run Tine: Voice Usage For: Item Conn. Date 06/17/2020 dildimmo Conn. Seizure Tine Sum (DSc) ET Originating Terminating flax DWI CT Number Number Feature 180 04/07/20 00:31:15 0:14 0:00 MT (Ni-Fi:NIOPI 181 04/07/20 00:31:15 0:14 18:52 MT (Ni-Fi:NIOPI 182 04/07/20 00:31:15 0:14 18:52 NO (Ni-Fil 183 04/07/20 14:35:18 0:07 48:52 NO (1 184 04/07/20 17:03:18 0:22 0:00 MT (Ni-ri:NIOPI 185 04/07/20 17:03:18 0:22 0:00 MT (Ni-fi:NIOP1 186 04/07/20 17:03:23 0:27 0:02 MT (Wi- fi:NIOP:CZNA:VM] 187 04/07/20 17:03:23 0:28 0:02 MO (Ni-fil 188 04/07/20 21:49:43 0:04 0:00 MT (NIOP1 189 04/07/20 22:24:55 0:22 0:00 MT (Ni-fi:NIOP1 190 04/07/20 22:24:55 0:22 0:00 MT (Ni-fi:NIOP1 191 04/07/20 22:25:00 0:27 0:06 MT (Wi- fi:NIOP:CZNA:VM] 192 04/07/20 22:25:00 0:27 0:06 NO (Ni-fil 193 04/08/20 19:59:50 0:03 18:27 NO (Ni-fil 194 04/09/20 14:31:59 0:19 7:35 NO CI 195 04/09/20 19:29:43 0:16 0:00 MT (Ni-Pi:NIOP1 196 04/09/20 19:29:43 0:16 0:00 MT (Ni-Pi:NIOP1 197 04/09/20 19:29:43 0:16 0:00 NO (1 198 04/09/20 19:30:14 0:22 0:00 MT (NIOP1 199 04/09/20 19:30:16 0:24 0:10 NO (Ni-fil AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 11 SDNY_GM_00170894 EFTA01342952

P.020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided UTC. a AT&T in Run Dato: Run Time: Voice Osage For: Item Conn. Date 0""n0.0 dildimmo Conn. Seizure T10.0 Sum (DTC) ST Originating Terminating !MIT DO3I Number Number CT Feature 200 04/09/20 19:30:16 0:24 0:10 MT (NIOP:CrNA:VM1 201 04/09/20 19:37:50 0:23 0:00 MT (Ni-ri:NIOPI 202 04/09/20 19:37:50 0:23 0:00 MT (Ni-ri:NIOPI 203 04/09/20 19:37:51 0:24 0:02 MT (Wi- ri:NIOP:ClNA:VM1 204 04/09/20 19:37:51 0:25 0:02 NO (1 205 04/09/20 19:48:23 0:01 0:00 MT (Ni-ri:NIOP1 206 04/09/20 19:48:23 0:01 0:00 MT (NIOP1 207 04/09/20 19:48:23 0:02 0:00 NO (1 208 04/09/20 20:39:36 0:22 0:00 MT (NIOP1 209 04/09/20 20:39:38 0:24 0:02 NO (1 210 04/09/20 20:39:38 0:24 0:02 MT (NIOP:CrNA:VM1 211 04/09/20 21:03:46 0:10 22:09 MT (NIOP:VCORR1 212 04/09/20 21:03:46 0:11 22:09 NO (1 213 04/09/20 21:29:49 0:05 27:57 NO (1 214 04/09/20 22:33:59 0:06 13:20 NO (NIOR1 215 04/09/20 22:49:27 0:04 4:06 NO (1 216 04/09/20 23:32:11 0:05 0:29 MT (NIOP:VCORR1 217 04/09/20 23:32:11 0:06 0:05 NO (Ni-ril 218 04/09/20 23:32:16 0:00 0:13 NO (1 219 04/09/20 23:32:29 0:00 0:11 NO (Ni-ril 220 04/09/20 23:33:32 0:04 0:00 MT (Ni-ri:NIOP1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 12 SDNY_GN1_00170895 EFTA01342953

.111020 MOBILITY dn. AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm ..., 1/4=s) 4*-6 AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Seizure Time CT Originating Terminating flat INSI Number Maher CT Feature 221 04/09/20 23:33:32 0:04 0:21 MT (Ni-Pi:NIOPI 222 04/09/20 23:33:32 0:04 0:21 NO (VCORAI 223 04/09/20 23:33:53 0:00 0:00 MT (NIOP:VCORR1 224 04/10/20 00:24:44 0:13 1:54 MO (Mi-Fil 225 04/10/20 00:24:44 0:13 1:54 MT (NIOP1 226 04/10/20 18:26:36 0:27 0:00 MT (Mi-Pi:NIOP1 227 04/10/20 18:26:38 0:29 0:14 MT (NI - ri:NIOP:CPNA:VN1 228 04/13/20 15:24:09 0:12 0:00 MT (Ni -Pi:NIOP1 229 04/15/20 21:58:10 0:08 0:00 (NIOP1 230 04/15/20 22:54:21 0:21 0:00 MT (Ni-Pi:NIOP1 231 04/15/20 22:54:21 0:21 0:00 MT (NIOP:CNN1 232 04/15/20 22:54:25 0:25 0:03 MT (NIOP:CFNA:CbM:VN1 233 04/15/20 22:54:25 0:25 0:03 MO —Fil 234 04/15/20 23:06:43 0:10 25:16 (Ni—Pi:NIOP1 235 04/15/20 23:06:43 0:10 3:54 ND (1 236 04/15/20 23:10:37 0:00 13:18 MO (Ni-fil 237 04/15/20 23:23:55 0:00 1:52 NO (1 238 04/15/20 23:25:47 0:00 6:12 NO (Ni-fil 239 04/16/20 22:15:29 0:22 0:00 MT (NIOP1 240 04/16/20 22:15:30 0:23 1:02 (NIOP:CFNA:VN1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 13 SDNY_GM_00170896 EFTA01342954

.111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm ..4:1/44 AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Seizure Time UT Originating Terminating SRI INBI Number Number CT Feature 241 04/16/20 22:30:40 0:01 0:00 MT 242 04/17/20 00:28:51 0:07 0:04 NO (Ni-fil 243 04/17/20 01:54:30 0:14 41:46 MT (NIOP:VCORR1 244 04/17/20 01:54:30 0:15 41:46 NO (Ni-fil 245 04/17/20 15:23:40 0:06 0:00 MT 246 04/17/20 21:16:10 0:07 0:00 MT (Ni-ri:NIOPI 247 04/21/20 00:50:15 0:15 0:00 MT (MIOP:00,1 248 04/21/20 00:50:15 0:16 0:00 NO (Ni-fil 249 04/21/20 00:50:39 0:21 0:00 MT (MIOP:00,1 250 04/21/20 00:50:42 0:24 0:32 MT (NIOP:CFNA:001:VM1 251 04/21/20 00:50:42 0:24 0:32 NO (1 252 04/21/20 00:53:30 0:11 0:00 MT 253 04/21/20 00:53:31 0:12 0:09 NO (VCORR1 254 04/21/20 00:53:31 0:12 0:09 MT (NIOP:CtUR:VM1 255 04/21/20 03:11:37 0:11 0:00 MT (NIOP1 256 04/21/20 03:11:38 0:12 0:30 MT (NIOP:CtUR:VM1 257 04/22/20 20:59:27 0:17 0:00 MT (NIOP1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 14 SDNY_GM_00170897 EFTA01342955

P.020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm \1/4 .77: 11 00 "-a AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Dato: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 dildimmo Conn. Seizure Time Time (OTC) CT Originating Terminating EMI IMSI Number Number CT Feature 258 04/22/20 21:49:51 0:28 0:02 NO (VCORR1 259 04/22/20 21:51:33 0:06 0:05 NO (VCORR1 260 04/25/20 14:13:47 0:00 0:00 NO (1 261 04/25/20 14:14:08 0:01 0:14 NO (NIOR:VM1 262 04/28/20 19:16:39 0:21 0:00 NT -Fi:NIOR1 263 04/28/20 19:16:39 0:21 0:00 NT -Fi:NIOR1 264 04/28/20 19:16:43 0:25 0:02 NT (MI - ri:NIOR:CFNA:Vbil 265 04/28/20 19:16:43 0:25 0:02 NO (MI —Fi:NIOR1 266 04/28/20 19:44:14 0:03 45:03 MO (Ni-ri:NIOR1 267 04/28/20 21:03:10 0:17 36:49 MO (Ni-ri:NIOR1 268 04/28/20 23:39:52 0:24 0:00 MT (NIOR1 269 04/28/20 23:40:00 0:32 0:35 MT (NIOR:CFNA:VM1 270 04/28/20 23:40:00 0:32 0:35 MO (MI -Fi:NIOR1 271 04/28/20 23:45:33 0:22 0:00 MT (MI -Fi:NIOR1 272 04/28/20 23:45:33 0:22 0:00 NT (MI -Fi:NIOR1 273 04/28/20 23:45:37 0:26 0:03 NT (MI - ri:NIOR:CFNA:Vbil 274 04/28/20 23:45:38 0:27 0:02 MO (MI —Fi:NIOR1 275 04/29/20 00:07:11 0:22 0:00 NT (MI -Fi:NIOR1 276 04/29/20 00:07:11 0:22 0:00 MT (MI -Fi:NIOR1 277 04/29/20 00:07:15 0:26 0:02 MT (MI - Fi:NIOR:CFNA:VM1 The information contained here is for use by authorized persons only and is not for general distribution. Page 15 SDNY_GM_00170898 EFTA01342956

MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided UTC. in AT&T Run Dato: Run Time: Voice Osage For: Item Conn. Date 0""n.. dildimmo Conn. Seizure Tim Sum (VC) ET Originating Terminating LORI Number number CT Feature 278 04/29/20 00:07:15 0:26 0:02 NO (Ni-Pi:NIOR1 279 04/29/20 16:53:22 0:05 0:00 MT (Ni-Pi:NIOR1 280 04/29/20 16:53:22 0:05 0:00 MT (Ni-Pi:NIOR1 281 04/29/20 16:53:22 0:05 0:00 NO (Ni-Pi:NIOR1 282 04/29/20 16:54:04 0:21 0:00 MT (Ni-ri:NIOPI 283 04/29/20 16:54:04 0:21 0:00 MT (Ni-ri:NIOPI 284 04/29/20 16:54:08 0:25 0:02 MT (WI- ri:NIOP:ClNA:VN1 285 04/29/20 16:54:08 0:25 0:02 NO (Ni-Pil 286 04/29/20 19:29:51 0:03 1:01 NO (Ni-Pil 287 04/29/20 20:52:10 0:07 0:00 MT (Ni-ri:NIOPI 288 04/29/20 20:52:10 0:07 19:48 NO 289 04/29/20 20:52:10 0:07 4:08 MT (Wi -Pi:NIOP1 290 04/29/20 20:56:18 0:00 15:40 MT (NIOP:VCORR1 291 04/30/20 20:14:09 0:22 0:01 MT (Wi -Pi:NIOP1 292 04/30/20 20:14:09 0:22 0:01 MT (NIOP1 293 04/30/20 20:14:13 0:26 0:05 MT (NIOP:CPNA:VN1 294 04/30/20 20:14:13 0:26 0:05 NO (Ni-Pil 295 04/30/20 21:11:42 0:22 0:00 MT (Wi -Pi:NIOP1 296 04/30/20 21:11:42 0:22 0:00 MT (NIOP1 297 04/30/20 21:11:47 0:27 0:02 MT (NIOP:ClNA:VN1 298 04/30/20 21:11:47 0:28 0:01 NO (Wi -Pi1 299 04/30/20 21:26:48 0:07 28:07 NO (Wi -Pi1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 16 SDNY_GPV1_00170899 EFTA01342957

MOBILITY P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run pato: Run Time: Voice Doane For: Item Conn. Date 06/17/2020 Conn. Time (urc) Seizure Sum ZT Originating Terminating flax LO)r Member Number CT Feature 300 04/30/20 23:47:42 0:08 5:05 NO (Ni-Pit 301 05/01/20 00:19:46 0:22 0:00 MT (Ni -Pi:NIOP1 302 05/01/20 00:19:46 0:22 0:00 MT (NIOP1 303 05/01/20 00:19:50 0:26 0:01 MT (NIOP:CPNA:VN1 304 05/01/20 00:19:50 0:26 0:01 NO (Ni-Pit 305 05/01/20 01:27:25 0:04 22:24 NO (Ni-Pit 306 05/01/20 01:27:25 0:04 22:24 MT (NIOP:VCORAI 307 05/01/20 20:59:25 0:21 0:00 MT (Wi -fi:NIOP1 308 05/01/20 20:59:25 0:21 0:00 MT (Wi -fi:NIOP1 309 05/01/20 20:59:30 0:26 0:01 MT (Wi- fi:NIOP:CZNA:VM] 310 05/01/20 20:59:30 0:26 0:01 NO (Ni-Pit 311 05/04/20 22:10:28 0:14 17:33 MT (NIOP:VCORR1 312 05/04/20 22:10:28 0:15 17:33 NO (Ni-Pit 313 05/04/20 22:49:00 0:22 0:00 MT (Ni-fi:NIOP1 314 05/04/20 22:49:00 0:22 0:00 MT (Ni-fi:NIOPI 315 05/04/20 22:49:04 0:26 0:02 MT (Wi- fi:NIOP:CZNA:VM] 316 05/04/20 22:49:04 0:26 0:02 MO (Ni-Pit 317 05/04/20 23:22:53 0:21 0:00 MT (Wi-fi:NIOP1 318 05/04/20 23:22:53 0:21 0:00 MT (Wi-fi:NIOPI 319 05/04/20 23:22:58 0:26 0:02 MT (Wi- fi:NIOP:CZNA:VM] 320 05/04/20 23:22:58 0:27 0:02 MO (Ni-fit 321 05/05/20 20:49:17 0:21 0:00 MT (Ni-fi:NI08) 322 05/05/20 20:49:17 0:21 0:00 MT (Ni-fi:NI08) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 17 SDNY_GNL00170900 EFTA01342958

.111020 MOBILITY illir AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm •3/4 --s ""s `41 t AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in 4Ctoleli OTC. Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 Ma= Conn. Seizure Tim Time (urc) ET Originating Terminating flax DO3I CT Number Number Feature 323 05/05/20 20:49:21 0:25 0:02 MT (Ni- Fi:NIOP:CFNA:VN( 324 05/05/20 20:49:21 0:25 0:02 MO -fil 325 05/05/20 21:25:15 0:22 0:00 MT (Ni-ri:NIOPI 326 05/05/20 21:25:15 0:22 0:00 MT 327 05/05/20 21:25:19 0:26 0:05 MT ri:NIOP:ClNA:VM] 328 05/05/20 21:25:19 0:27 0:05 MO (Ni-fil 329 05/05/20 21:37:14 0:38 0:03 MO -ril 330 05/06/20 00:41:07 0:23 0:00 MT (Ni-ri:NIOP) 331 05/06/20 00:41:07 0:23 0:00 MT (Ni-ri:NIOPI 332 05/06/20 00:41:11 0:27 0:02 MT ri:NIOP:CfNA:VM] 333 05/06/20 00:41:11 0:28 0:02 MO (Ni-fil 334 05/06/20 00:41:32 0:00 0:00 MO (Ni-ril 335 05/06/20 00:41:43 0:08 0:00 MO (Ni-ril 336 05/06/20 00:41:53 0:06 0:03 MO (Ni-ril 337 05/07/20 14:49:32 0:23 0:00 MT (Ni-ri:NIOPI 338 05/07/20 14:49:39 0:30 0:02 MT ri:NIOP:CINA:VM] 339 05/07/20 14:49:39 0:31 0:02 MO (Ni-fil 340 05/07/20 17:03:16 0:23 0:00 MT (Ni-ri:NIOPI 341 05/07/20 17:03:27 0:34 0:01 MT ri:NIOP:CINA:VM] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 18 SDNY_GNL00170901 EFTA01342959

MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 0""n.. dildimmo Conn. Seizure Time Sum (OTC) ZT Originating Terminating EMU DWI Mmber Number CT Feature 342 05/07/20 17:03:27 0:34 0:01 NO (Ni-ril 343 05/07/20 17:48:17 0:24 0:00 NT (Ni-Fi:NIOP( 344 05/07/20 17:48:23 0:30 0:02 NT (Ni- Pi:NIOP:CPNA:VN( 345 05/07/20 17:48:23 0:31 0:02 NO -ril 346 05/07/20 19:12:18 0:22 0:00 NT (Ni-Fi:NIOP( 347 05/07/20 19:12:24 0:28 0:02 NT (Ni- Pi:NIOP:CFNA:VN( 348 05/07/20 19:12:24 0:28 0:02 NO -ril 349 05/07/20 19:16:22 0:07 0:00 NO (Mi 350 05/07/20 23:33:08 0:21 0:00 NT (Ni-ri:NIOP) 351 05/07/20 23:33:08 0:21 0:00 NT (Ni-ri:NIOPI 352 05/07/20 23:33:13 0:26 0:02 NT ri:NIOP:ClNA:VM] 353 05/07/20 23:33:13 0:26 0:02 NO (Ni-ril 354 05/07/20 23:33:46 0:01 0:00 NT (Ni-ri:NIOPI 355 05/07/20 23:33:46 0:01 0:00 NT (Ni-ri:NIOP1 356 05/07/20 23:33:46 0:01 0:00 NO (Ni-ril 357 05/07/20 23:34:32 0:39 0:03 NO (Mi 358 05/08/20 00:19:18 0:21 0:00 MT (Ni-ri:NIOPI 359 05/08/20 00:19:18 0:21 0:00 ST (NIOP:CHNI 360 05/08/20 00:19:22 0:25 0:03 ST (NIOP:ClNA:CHN:VM] 361 05/08/20 00:19:23 0:27 0:02 NO (Mi AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 19 SDNY_GNL00170902 EFTA01342960

.111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ....`t-e ad° 1/4"". AT&T Run Date: Run Time: voice Osage For: Item Conn. Date 06/17/2020 Ma= Conn. Seizure Time Time (OTC) ET Originating Terminating L@I nut CT Number Number Feature 362 05/08/20 14:29:29 0:05 74:10 NO (Ni-PSI 363 05/08/20 17:49:44 0:32 0:02 NO (Ni-PSI 364 05/08/20 17:58:22 0:21 0:23 NO (Ni-PSI 365 05/09/20 17:19:42 0:27 0:00 NT (Ni-ri:MIOP) 366 05/09/20 17:19:44 0:29 1:16 NT ri:NIOP:CfNA:VM] 367 05/11/20 13:49:51 0:16 0:55 NO (Ni-PSI 368 05/11/20 13:52:24 0:12 3:10 NO (Ni-PSI 369 05/11/20 13:55:47 0:08 15:51 NO (Ni-PSI 370 05/11/20 17:48:07 0:16 0:00 NO (Ni-PSI 371 05/11/20 20:27:52 0:09 0:29 NT -ri:MIOPI 372 05/11/20 21:18:16 0:11 0:30 NT -ri:MIOPI 373 05/11/20 21:39:04 0:12 1:11 NO (Ni-PSI 374 05/11/20 21:51:53 0:07 0:28 NT -ri:MIOPI 375 05/11/20 23:14:44 0:01 0:00 NO (Ni-PSI 376 05/11/20 23:15:02 0:07 33:55 NT (NIOP:VCORR1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 20 SDNY_GNL00170903 EFTA01342961

020 MOBILITY 4MIN0 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 SS= Conn. Seizure Time Time (UTC) Cr Originating Number Terminating Number ENE' 1NSI CT Feature 377 05/11/20 23:15:02 0:07 33:55 19785258484 13038983895 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE9 378 05/12/20 13:53:18 0:00 0:00 19785258484 14158666097 NT (NIOP) 379 05/12/20 13:53:19 0:01 0:11 19785258484 14158666097 NT (NIOP:CFNI:VNI 12096078210(t) 380 05/12/20 13:53:21 0:09 0:07 19785258484 442032862047 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE9 381 05/12/20 15:01:44 0:08 30:55 19785258484 19177695374 NT (NIOP:VCORR) 382 05/12/20 15:01:44 0:09 30:55 19785258484 19177695374 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE8 383 05/12/20 15:33:00 0:10 19:49 19785258484 13036196231 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE8 384 05/12/20 16:50:53 0:27 0:00 19785258484 19786751300 MT (Ni-Pi:NIOP) 385 05/12/20 16:50:58 0:32 0:07 19785258484 19786751300 MT (Ni- 14013693201(t) ri:NIOP:CINA:VNI 386 05/12/20 16:50:58 0:33 0:07 19785258484 19786751300 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE9 387 05/12/20 18:18:51 0:08 8:56 19785258484 12128217058 3587080982063726 310410214827503 NO (Ni-Pi:NIOR) APPLE IPHONE8 388 05/12/20 19:13:25 0:05 7:33 19785258484 15165822707 3587080982063726 310410214827503 NO (Ni-Pi:NIOR) APPLE IPHONE8 389 05/12/20 19:29:15 0:23 0:00 19785258484 19786751300 MT (NIOR) 390 05/12/20 19:29:20 0:28 0:06 19785258484 19786751300 MT (NIOR:CPNA:VNI 14013693201(P) 391 05/12/20 19:29:20 0:29 0:06 19785258484 19786751300 3587080982063726 310410214827503 NO (Ni-Pi:NIOR) APPLE IPHONE8 392 05/12/20 22:00:31 0:05 28:33 19785258484 19177695374 3587080982063726 310410214827503 NO (Ni-Pi:NIOR) APPLE IPHONE9 393 05/12/20 22:00:31 0:05 28:33 19785258484 19177695374 MT (NIOR:VCORR) 394 05/13/20 18:07:12 0:39 0:03 19785258484 13036196231 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE8 395 05/13/20 18:08:35 0:24 0:00 19785258484 19177695374 MT (NIOP) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 21 SDNY_GNL00170904 EFTA01342962

.111020 MOBILITY `~~ AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Dato: Run Time: Voice Usage For: Item Conn. Date 04/17/2020 dildimmo Conn. Seizure r10.0 Time (OTC) LT Originating Terminating IMMI INS1 Member Number R Feature 396 05/13/20 18:08:41 0:30 0:02 MO (Ni-Pit 397 05/13/20 18:08:41 0:30 0:02 MT (NIOP:CZNA:VMI 398 05/13/20 19:00:16 0:09 15:49 MO (Ni-Pit 399 05/13/20 19:00:16 0:09 15:49 MT (NIOP:VCORAI 400 05/13/20 19:52:36 0:22 0:00 MT (Mi-fi:NIOPI 401 05/13/20 19:52:46 0:32 0:02 MT (Mi - fi:NIOP:CZNA:VM] 402 05/13/20 19:52:46 0:33 0:02 NO (Ni-Pit 403 05/13/20 19:53:03 0:06 1:39 MT -Pi:NIOP1 404 05/13/20 19:54:59 0:06 4:35 NO (Ni-Pit 405 05/13/20 21:05:54 0:11 0:00 MT (NIOP1 406 05/13/20 21:05:55 0:12 0:07 MT (NIOP:CPNR:VM] 407 05/13/20 21:35:50 0:07 13:47 MO (Ni-Pit 408 05/13/20 22:14:50 0:23 0:00 MT (NIOP1 409 05/13/20 22:14:56 0:29 0:01 MT (NIOP:CfNA:Vbil 410 05/13/20 22:14:56 0:30 0:01 MO (Ni—Pit 411 05/13/20 23:54:11 0:26 0:00 MT (Mt —ri:MIOP) 412 05/13/20 23:54:12 0:27 0:05 MT - ri:NIOP:CFNA:VM] 413 05/13/20 23:54:12 0:27 0:05 MO (VCORR1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 22 SDNY_GNL00170905 EFTA01342963

.111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm " S it' AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Dato: Run Time: Voice Usage For: Item Conn. Date 08/17/2020 dila= Conn. Seizure Tillie Sum (UTC) ET Originating Terminating EMBI IIISI CT Number Number Feature 414 05/13/20 23:54:27 0:02 17:46 NO (Ni-Pil 415 05/13/20 23:54:27 0:02 17:46 NT (NIOP:VCORR1 416 05/14/20 14:39:29 0:22 0:00 NT -Pi:NIOP1 417 05/14/20 14:39:37 0:30 0:01 NT (MI - ri:NIOP:CIPNA:VM1 418 05/14/20 14:39:37 0:31 0:01 NO (Mt -Pil 419 05/14/20 14:39:48 0:10 0:00 NT (Ili -Pi:NIOP:0611 420 05/14/20 15:52:43 0:08 1:09 NO -Pil 421 05/14/20 16:15:14 0:16 0:54 NT -Pi:NIOP1 422 05/14/20 17:11:25 0:13 0:00 NT (1 423 05/14/20 17:11:25 0:24 0:00 ST (NIOP1 424 05/14/20 17:11:26 0:25 0:11 ST (NI08:CfNA:VM] 425 05/14/20 17:20:45 0:06 0:00 NT (NIOP1 426 05/14/20 17:20:45 0:06 8:46 NT (NIOP:VCORR1 427 05/14/20 17:20:45 0:06 8:46 NO -Pil 428 05/14/20 17:42:04 0:10 0:01 NT (NIOP1 429 05/14/20 17:42:05 0:11 0:03 NT (NIOP:CENR:VM1 430 05/14/20 18:14:46 0:04 0:00 NT -Pi:NIOP1 431 05/14/20 18:14:46 0:04 1:31 NT (NIOP1 432 05/14/20 18:14:46 0:05 1:31 NO -Pil AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 23 SDNY_GM_00170906 EFTA01342964

.111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ...„,,,,,o •ftaid %"""° AT&T Run Date: Run Tame: Voice Usage For: Item Conn. Date 0""n.. Skim Conn. Seizure Time Time (UTC) ET Originating Terminating IMMI IN= Member Member CT Feature 433 05/14/20 19:41:13 0:28 0:00 MT (ML-Pi:NIOP1 434 05/14/20 19:41:16 0:31 0:04 MT (MI- ri:NIOP:CPNA:VM1 435 05/17/20 21:54:23 0:06 3:05 MO (MI-Pi:NIOR1 436 05/19/20 01:55:50 0:00 0:00 MO (MI-Pi:NIOR1 437 05/19/20 20:41:12 0:09 8:05 MO (MI-Pi:NIOR1 438 05/19/20 20:49:29 0:05 2:33 MO (MI-Pi:NIOR1 439 05/19/20 21:14:58 0:23 0:00 NT (NIOR1 440 05/19/20 21:15:04 0:29 0:03 NO (MI-Pi:NIOR1 441 05/19/20 21:15:04 0:29 0:03 NT (NIOR:CFNA:VM1 442 05/19/20 22:29:37 0:22 0:00 NT (NIOR1 443 05/19/20 22:29:44 0:29 0:02 MT (NIOR:CFNA:VM1 444 05/19/20 22:29:44 0:30 0:02 MO (MI-Pi:NIOR1 445 05/19/20 23:03:59 0:22 0:00 MT (NIOR1 446 05/19/20 23:03:59 0:22 0:00 NO (Ni-ri:NIOnl 447 05/19/20 23:04:28 0:06 2:13 MT (NIOP:VCORR1 448 05/19/20 23:04:28 0:06 2:13 MO (MI-Pil 449 05/20/20 18:53:54 0:10 0:52 MT (MI-Pi:NIOPI 450 05/20/20 21:41:19 0:23 0:00 MT (NIOP1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 24 SDNY_GM_00170907 EFTA01342965

.111020 MOBILITY 4 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm ...1/47i# ""s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Voice Usage For: Item Conn. Data 06/17/2020 Conn. Time (DSC) Seizure Sum ET Originating Terminating MEI INSI CT Number number Feature 451 05/20/20 21:41:26 0:30 0:03 MT (NIOP:CFNA:VN1 452 05/20/20 21:41:26 0:30 0:03 NO (Ni-Fi) 453 05/20/20 21:58:25 0:23 0:00 NT (NIOP) 454 05/20/20 21:58:31 0:29 0:02 NT (NIOP:CFNA:VN1 455 05/20/20 21:58:31 0:30 0:02 NO (Ni-Fi) 456 05/20/20 21:59:01 0:01 0:00 NO (Ni-Fi) 457 05/20/20 21:59:40 0:37 0:04 NO (Ni-Fi) 458 05/20/20 22:00:20 0:22 0:00 NT (NIOP) 459 05/20/20 22:00:28 0:30 0:02 NT (NIOP:CFNA:VN1 460 05/20/20 22:00:28 0:31 0:02 NO (Ni-Fi) 461 05/21/20 00:31:09 0:03 35:29 NO (Ni-Fi) 462 05/21/20 00:31:09 0:03 54:04 MT (NIOP:VCORR) 463 05/21/20 01:06:38 0:00 0:21 NO (VCORR) 464 05/21/20 01:06:59 0:00 18:14 NO (Ni-Fi) 465 05/21/20 15:07:09 0:07 0:05 NO (Ni-Fi) 466 05/21/20 20:31:30 0:07 0:04 NO (Ni-Fi) 467 05/21/20 21:23:59 0:19 0:00 NT (Ni-Pi:NIOP) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 25 SDNY_GNL00170908 EFTA01342966

P.020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ....,• ••••-•a"" . AT&T Run Dato: Run Time: Voice Usage For: Item Conn. Date 0""n.. dildimmo Conn. Seizure Tine Time (UTC) LT Originating Terminating LORI nNSI CT Number Number Feature 468 05/21/20 21:31:01 0:15 26:49 MO (Mi-fil 469 05/22/20 00:18:09 0:24 0:01 MT (Mi-Pi:NIOP1 470 05/22/20 00:18:11 0:26 0:32 MT (Ili- ri:NIOP:CPNA:VM1 471 05/22/20 00:20:52 0:28 0:00 MT (Mi-Pi:NIOP1 472 05/22/20 00:20:53 0:29 0:04 MT ri:NIOP:CPNA:VM1 473 05/22/20 16:23:16 0:14 0:00 MT (1 474 05/22/20 16:23:16 0:25 0:00 ST (NIOP1 475 05/22/20 16:23:17 0:26 0:15 ST (NIOP:CPNA:VM1 476 05/22/20 17:37:15 0:06 22:47 MT (Mi-Pi:NIOP1 477 05/22/20 18:00:20 0:05 7:06 MO (Mi-Pil 478 05/22/20 18:33:59 0:23 0:00 MT (NIOP:044141 479 05/22/20 18:34:08 0:32 0:02 MO (Mi-Pil 480 05/22/20 18:34:08 0:32 0:02 MT (NIOP:CPNA:CMN:VM1 481 05/22/20 21:26:30 0:25 0:00 MT -Pi:NIOP1 482 05/22/20 21:26:31 0:26 0:05 MT (Mi- ri:NIOP:CPNA:VM1 483 05/22/20 21:26:31 0:26 0:05 MO (VCOAR1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 26 SDNY_GM_00170909 EFTA01342967

P.020 MOBILITY illir AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm ...1/477 i1 L# -6 AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 dildimmo Conn. Seizure Time Time (UTC) ET Originating Terminating LORI INS1 CT Number Member Feature 484 05/22/20 21:43:41 0:13 0:40 NO (Ni-fil 485 05/22/20 21:43:41 0:13 0:40 NT (NIOP:VCORR1 486 05/22/20 21:45:43 0:06 30:22 NO -ril 487 05/22/20 22:26:24 0:21 0:00 NT -ri:NIOPI 488 05/22/20 22:26:24 0:21 0:00 NT -ri:NIOPI 489 05/22/20 22:26:29 0:26 0:01 NT - ri:NIOP:CfNA:VM1 490 05/22/20 22:26:29 0:27 0:01 NO -fil 491 05/22/20 22:26:36 0:07 0:45 NT (Ni-ri:NIOP:0611 492 05/22/20 22:26:36 0:08 0:35 NO (Ni-fil 493 05/22/20 22:27:11 0:00 0:12 NO (1 494 05/22/20 22:27:21 0:00 6:09 NT (NIOP:CMN:VCORR1 495 05/22/20 22:27:23 0:00 6:07 NO -fil 496 05/22/20 22:46:06 0:18 0:00 NT -ri:NIOPI 497 05/22/20 22:46:06 0:18 3:09 NO -fil 498 05/22/20 22:46:06 0:18 0:38 NT -ri:NIOPI 499 05/22/20 22:46:44 0:00 0:29 NT (NIOP1 500 05/22/20 22:47:13 0:00 2:01 NT -ri:NIOPI 501 05/22/20 22:49:14 0:00 0:32 NT (NIOP1 502 05/22/20 22:49:15 0:00 0:54 NO (VCORRI 503 05/22/20 22:49:46 0:00 3:10 NT -ri:NIOPI 504 05/22/20 22:50:09 0:00 2:52 NO -fil 505 05/22/20 22:52:56 0:00 2:53 NT (NIOP1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 27 SDNY_GM_00170910 EFTA01342968

MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ‘•-• 40 ".". AT&T Run Dato: Run Time: Voice Usage For: Item Conn. Dato 06/17/2020 dildimmo Conn. Seizure Tame Time (OTC) ET Originating Terminating L@I INSI CT Number Number Feature 506 05/22/20 22:53:01 0:00 17:28 MO (VCOAN 507 05/22/20 22:55:49 0:00 14:40 MT (Mi -Pi:NIOP1 508 05/23/20 22:54:43 0:08 30:48 MT (NIOP:VCOAN 509 05/23/20 22:54:43 0:08 30:48 MO (Mi-Pi( 510 05/23/20 23:25:49 0:07 11:42 MT (NIOP:VCOAN 511 05/23/20 23:25:49 0:07 11:42 MO (Mi-Pi( 512 05/26/20 14:10:35 0:09 0:00 MT (Mi -Pi:NIOP1 513 05/26/20 18:03:44 0:24 0:00 MT (NIOP1 514 05/26/20 18:03:52 0:32 0:05 MT (NIOP:CPNA:VM1 515 05/26/20 18:03:52 0:32 0:05 MO (Mi-Pi( 516 05/26/20 19:02:46 0:23 0:00 MT (NIOP1 517 05/26/20 19:02:52 0:29 0:00 MT (NIOP:CPNA:VM1 518 05/26/20 19:02:52 0:29 0:00 MO (Mi-Pi( 519 05/26/20 19:13:13 0:25 0:00 MT (Mi -Pi:NIOP1 520 05/26/20 19:13:14 0:26 0:15 MT (Mi- ri:NIOP:CFNA:VM] 521 05/26/20 19:19:54 0:06 0:42 MO (Mi-Pi( 522 05/26/20 19:20:51 0:05 0:00 MO (Mi-Pi( 523 05/26/20 19:21:17 0:01 0:00 MT (NIOP:04M1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 28 SDNY_GM_00170IM1 EFTA01342969

MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Dato: Run Time: Voice Usage For: Item Conn. Date 04/17/2020 Conn. Time Curc) Seizure Time LT Originating Terminating flax CT Number Number Feature 524 05/26/20 19:21:17 0:01 0:04 MT (NIOP:CMCNN:VN1 525 05/26/20 19:21:18 0:22 0:00 MT (Ni-Pi:NIOP1 526 05/26/20 19:21:25 0:29 0:03 MT (Ni- ri:NIOP:CPNA:VN1 527 05/26/20 19:21:25 0:30 0:03 MO (Ni-Pil 528 05/26/20 19:21:36 0:06 6:58 MT (Ni-Pi:NIOP1 529 05/26/20 20:00:30 0:02 5:29 MO (Ni-Pil 530 05/26/20 20:06:12 0:02 0:42 MO (Ni-Pil 531 05/26/20 22:47:03 0:37 0:05 MO (Ni-Pil 532 05/27/20 19:58:08 0:23 0:00 MT (Ni-Pi:NIOP1 533 05/27/20 19:58:12 0:27 0:02 MT (Ni- ri:NIOP:CPNA:VN1 534 05/27/20 19:58:13 0:28 0:01 MO (Ni-Pil 535 05/27/20 20:19:38 0:10 2:16 MT (Ni-Pi:NIOP1 536 05/27/20 20:19:38 0:11 0:09 MO (Ni-Pil 537 05/27/20 20:19:47 0:00 0:15 MO (1 538 05/27/20 20:20:02 0:00 1:45 MO (Ni-PSI 539 05/27/20 20:21:47 0:00 0:09 MO (VCORR1 540 05/27/20 20:21:54 0:00 0:02 MT (NIOP:VCORR1 541 05/27/20 20:22:21 0:00 0:08 MO (Ni-Pil AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 29 SDNY_GNL00170912 EFTA01342970

.111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm t —IsS e s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 dildimmo Conn. Seizure Time Sum (UTC) tt Originating Terminating nez =SI Number Member CT Feature 542 05/27/20 20:22:21 0:08 0:00 NO (1 543 05/27/20 20:22:48 0:02 0:00 MT (NIOP1 544 05/27/20 20:22:49 0:18 0:00 ST (NIOP1 545 05/27/20 20:22:49 0:18 0:00 NO (Ni-ril 546 05/27/20 20:27:06 0:08 0:06 NO (Ni-ril 547 05/27/20 20:27:17 0:02 0:09 MT (Ni-ri:NIOPI 548 05/27/20 20:27:17 0:03 0:13 NO (Ni-ril 549 05/27/20 20:27:26 0:00 1:25 MT (NIOP1 550 05/27/20 20:27:30 0:00 2:23 NO (1 551 05/27/20 20:28:51 0:00 0:59 MT (Ni-ri:NIOPI 552 05/27/20 20:29:50 0:00 0:03 MT (NIOP:VCORR1 553 05/27/20 20:31:27 0:02 0:00 MT (NIOP:CMW] 554 05/27/20 20:31:27 0:03 0:00 NO (Ni-ril 555 05/27/20 20:34:42 0:21 8:33 MT (Ni-ri:NIOP1 556 05/27/20 20:43:15 0:00 7:44 MT (NIOP:VCORR1 557 05/27/20 20:51:20 0:10 38:47 MT (NIOP:CMN:VCORR1 558 05/27/20 20:51:20 0:10 0:02 NO (1 559 05/27/20 20:51:22 0:00 38:45 NO (Ni-ril 560 05/27/20 21:37:25 0:22 0:00 MT (Ni-ri:NIOP1 561 05/27/20 21:37:34 0:31 0:01 MT (Wi- ri:NIOP:CYNA:VM] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 30 SDNY_GN1_00170913 EFTA01342971

MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Tine: Voice Usage For: Item Conn. Date 06/17/2020 Skim Conn. Seizure Tillie Time (OTC) IT Originating Terminating IMMI INSI Number Humber CT Feature 562 05/27/20 21:37:34 0:31 0:01 MO (Mi-Pil 563 05/28/20 16:49:41 0:24 0:00 NT (NIOP1 564 05/28/20 16:49:50 0:33 0:02 NT (NIOP:CPNA:VM1 565 05/28/20 16:49:50 0:33 0:02 MO (Mi-Pil 566 05/28/20 16:50:02 0:00 0:00 MT (NIOP:0041 567 05/28/20 16:50:05 0:03 0:01 MT (NIOP:CPB:CMN:VM1 568 05/28/20 16:50:05 0:04 0:01 MO (Mi-Pil 569 05/28/20 16:50:38 0:20 0:03 MO (Mi-Pil 570 05/28/20 16:50:53 0:08 0:00 MT (NIOP1 571 05/28/20 16:50:53 0:08 0:00 MO (Mi-Pil 572 05/28/20 17:10:11 0:10 3:58 MT (Mi-Pi:NIOP1 573 05/28/20 17:14:19 0:05 22:33 MT (Mi-Pi:NIOP1 574 05/28/20 17:14:19 0:06 22:33 MO (VCORR1 575 05/29/20 18:23:50 0:12 8:19 MO (Mi-Pil 576 05/29/20 18:32:09 0:00 6:19 MO (VCORR1 577 05/29/20 18:52:27 0:08 24:52 MO (Mi-Pil 578 05/29/20 18:52:27 0:08 27:53 MT (NIOP:VCORR1 579 05/29/20 19:17:19 0:00 3:01 MO (VCORR1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 31 SDNY_GM_00170914 EFTA01342972

..020 MOBILITY illk, AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. Run Date: Run Tine: Voice Usage For: Item Conn. Date 06/17/2020 dildimmo Conn. Seizure Tame Time (VC) ET Originating Terminating nez INS1 CT Number Number Feature 580 05/30/20 15:17:28 0:21 0:00 MT (Ni-ri:NIOPI 581 05/30/20 15:17:29 0:22 0:14 MT (WI- ri:NIOP:CtRA:VM1 582 05/30/20 15:23:39 0:05 36:20 NO (Ni-fil 583 06/02/20 14:44:00 0:10 17:35 MT (NIOP:VCORR1 584 06/02/20 14:44:00 0:11 10:35 NO (Ni-ril 585 06/02/20 14:54:35 0:00 0:19 NO (VCORRI 586 06/02/20 14:54:54 0:00 6:41 NO (Ni-fil 587 06/02/20 17:04:25 0:03 10:19 MT (NIOP:VCORR1 588 06/02/20 17:04:25 0:04 10:19 NO (Ni-fil 589 06/02/20 17:33:58 0:10 0:54 MT (Ni-ri:NIOPI 590 06/03/20 00:07:18 0:16 6:39 MT (NIOP:VCORR1 591 06/03/20 00:07:18 0:16 6:39 NO (Ni-ril 592 06/03/20 19:09:20 0:23 0:00 MT (NIOP:04141 593 06/03/20 19:09:26 0:29 0:02 NO (Ni-fil 594 06/03/20 19:09:26 0:29 0:02 MT (NIOP:CrNA:CMN:VM1 595 06/03/20 20:31:08 0:07 17:32 MO (Ni-ri1 596 06/03/20 20:31:08 0:07 60:39 MT (NIOP:VCORR1 597 06/03/20 20:48:40 0:00 21:03 MO (1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 32 SDNY_GNL00170915 EFTA01342973

.111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e .....0 ‘•--00 AT&T Run Date: Run Fine: Voice Usage For: Item Conn. Date 08/17/2020 dildimmo Conn. Seizure 1.10.0 Time (UMC) ET Originating Terminating flax ntsI CT Number Number Feature 598 06/03/20 21:09:43 0:00 22:05 NO (Ai-Vi) 599 06/04/20 14:30:08 0:11 1:42 NT (Ai -Vi:NIOV) 600 06/05/20 19:34:05 0:26 0:00 NT (Ai -Vi:NIOV) 601 06/05/20 19:34:06 0:27 0:02 NO (VCORR) 602 06/05/20 19:34:06 0:27 0:02 NT (MI - Vi:NADV:CVNA:VM1 603 06/05/20 19:34:36 0:25 0:00 NT (Ai -Vi:NIOV) 604 06/05/20 19:34:38 0:27 0:02 NO (VCORR) 605 06/05/20 19:34:38 0:27 0:02 NT (NI- Fi:NIOP:CFNA:VN( 606 06/05/20 20:45:34 0:24 0:00 NT (NIOP) 607 06/05/20 20:45:41 0:31 0:02 NT (NIOV:CVNA:VM1 608 06/05/20 20:45:41 0:31 0:02 NO (Ai-Pi) 609 06/05/20 20:46:31 0:24 0:00 NT (NIOP) 610 06/05/20 20:46:37 0:30 0:02 NT (NIOV:CVNA:VM1 611 06/05/20 20:46:37 0:30 0:02 NO (Ai-Pi) 612 06/06/20 22:41:11 0:23 0:00 NT (NIOP) 613 06/06/20 22:41:16 0:28 1:04 NT (NIOV:CVNA:VM1 614 06/06/20 22:41:16 0:28 0:06 NO (Ai-Pi) 615 06/06/20 22:41:22 0:00 0:58 NO (VCORR) 616 06/06/20 22:43:40 0:04 3:36 NO (VCORR) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 33 SDNY_GNL00170916 EFTA01342974

P.020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e AT&T Run Dato: Run Time: Voice 'imago For: Item Conn. Date 06/17/2020 MI= Conn. Seizure Tim Time Co2c) Er Originating Terminating INS' Meter amber CT Feature 617 06/06/20 22:43:40 0:04 1:01 MT (NIOP:VCORR1 618 06/06/20 22:44:41 0:00 2:35 MT -22:NIOPI 619 06/09/20 20:00:48 0:01 2:22 MO -ril 620 06/09/20 20:59:57 0:10 40:05 MT (NIOP:VCORR1 621 06/09/20 20:59:57 0:11 40:05 MO (Ni-Pil 622 06/09/20 21:46:06 0:39 0:03 MO (Ni-Pil 623 06/09/20 21:46:34 0:11 0:00 MT (Ni -Pi:NIOP1 624 06/09/20 21:46:34 0:11 0:00 MT (NIOP1 625 06/09/20 21:46:39 0:16 0:01 MT (NIOP:CPS:VM1 626 06/09/20 21:46:39 0:17 0:01 MO (Ni-Pil 627 06/09/20 23:19:32 0:10 0:03 MO (Ni-Pil 628 06/09/20 23:19:41 0:03 0:00 MT (Ni -Pi:NIOP1 629 06/09/20 23:19:41 0:03 0:00 MT (Ni -Pi:NIOP1 630 06/09/20 23:19:46 0:08 0:02 MT (Ni-ri:NIOP:CPB:VM1 631 06/09/20 23:19:46 0:09 0:02 MO (Ni-Pil 632 06/09/20 23:58:57 0:02 0:00 MT (Ni -Pi:NIOP1 633 06/09/20 23:58:57 0:02 0:00 MT (Ni -Pi:NIOP1 634 06/09/20 23:59:00 0:05 0:02 MT (Ni-ri:NIOP:CPS:VM1 635 06/09/20 23:59:00 0:06 0:02 MO (Ni-Pil 636 06/10/20 14:55:12 0:23 0:00 MT (NIOP1 637 06/10/20 14:55:12 0:23 0:00 MT (Ni -Pi:NIOP1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 34 SDNY_GM_00170917 EFTA01342975

.111020 MOBILITY 4III, AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm •3/4--s "--6 \ 'AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .tor lYSI OTC. Run Date: Run Time: Voice Usage For: Item Conn. Date 08/17/2020 dildimmo Conn. Seizure 1.10.0 Time (OTC) Er Originating Terminating n@I INSI Number 'lumber CT Feature 638 06/10/20 14:55:16 0:27 0:02 MT (Wi- fi:NIOV:CZNA:VM1 639 06/10/20 14:55:16 0:27 0:02 MO (Ni-PSI 640 06/10/20 14:55:36 0:10 0:05 MO (Ni-PSI 641 06/10/20 18:51:20 0:23 0:00 MT (NI001 642 06/10/20 18:51:27 0:30 0:02 MT (NIOV:CZNA:VMI 643 06/10/20 18:51:27 0:31 0:02 MO (Ni-PSI 644 06/10/20 19:11:49 0:21 0:00 MT (NIOVI 645 06/10/20 19:11:53 0:25 0:02 MO (Ni-PSI 646 06/10/20 19:11:53 0:25 0:02 MT (NIOV:CZNA:VMI 647 06/10/20 22:21:12 0:23 0:00 MT (NIOVI 648 06/10/20 22:21:17 0:28 0:02 MO (Ni-PSI 649 06/10/20 22:21:17 0:28 0:02 MT (NIOV:CZNA:VMI 650 06/11/20 00:50:40 0:22 0:00 MT (MI001 651 06/11/20 00:50:40 0:22 0:00 MT (NS-fi:NIOVI 652 06/11/20 00:50:45 0:27 0:01 MT - fi:NIOV:CZNA:VMI 653 06/11/20 00:50:45 0:27 0:01 MO (Ni-PSI 654 06/11/20 01:00:17 0:06 44:39 MT (NIOV:VCOARI 655 06/11/20 01:00:17 0:07 44:39 MO (Ni-PSI 656 06/11/20 14:12:28 0:38 0:03 MO (Ni-PSI 657 06/11/20 23:57:41 0:00 0:00 MT (NI00:0011 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 35 SDNY_GM_00170918 EFTA01342976

MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 411. AT&T Run Dato: Run Tine: Voice Osage For: Item Conn. Dato 06/17/2020 dildimmo Conn. Soisurn Till* Time (VMC) ZS Originating Terminating DMZ INBI Mager Maims CT Feature 658 06/11/20 23:57:47 0:06 0:04 MT (NIOP:CPS:CMN:VM1 659 06/11/20 23:57:47 0:07 0:04 NO (Ni-Pil 660 06/12/20 00:35:53 0:39 0:04 NO (Ni-Pil 661 06/12/20 00:36:33 0:24 0:00 MT (NIOP1 662 06/12/20 00:36:39 0:30 0:02 MT (NIOP:CPNA:VM1 663 06/12/20 00:36:39 0:31 0:02 NO (Ni-Pil 664 06/12/20 13:40:56 0:17 0:38 MT (Ni-Pi:NIOP1 665 06/12/20 13:41:49 0:02 0:00 NO (Ni-Pil 666 06/12/20 16:43:56 0:25 0:00 MT (Ni-Pi:NIOP1 667 06/12/20 16:43:57 0:26 0:05 MT (Ili- ri:NIOP:CPNA:VM1 668 06/12/20 16:44:48 0:06 0:00 MT (Ni-Pi:NIOP1 669 06/12/20 16:47:03 0:36 0:03 NO (Ni-Pil 670 06/12/20 16:47:08 0:00 0:00 NO (Ni-Pil 671 06/12/20 16:47:56 0:35 0:05 NO (Ni-Pil 672 06/12/20 16:48:26 0:18 0:00 NO (Ni-Pil AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 36 SDNY_GM_00170919 EFTA01342977

.111020 MOBILITY 4Illo AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm traes `'s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: 0""n.. Voice Usage For: Item Conn. Conn. Seizure LT Originating Terminating flax INSI CT Feature Date Time Time (UTC) 673 06/12/20 16:49:51 0:13 0:43 NO (Mt -ril AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 37 SDNY_GM_00170920 EFTA01342978

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cre ‘•- . ia AT&T Run Date: Run Tine: Data Usage For: Item Conn. Date 06/17/2020 NM= Conn. Tama (OTC/ Originating ET Bytos Up Bytes Apn Dn EBBE IMBI MAKE MODEL 1 03/01/20 05:38:22 1:22 0 0 ims APPLE 'PHONES 2 03/01/20 05:41:28 60:00 11858 8720 ims APPLE 'PHONES 3 03/01/20 05:55:39 60:00 924 840 nxtgenpho ne APPLE 'PHONES 4 03/01/20 06:41:28 41:54 2580 1324 ims APPLE 'PHONES 5 03/01/20 06:55:39 60:00 865 525 nxtgenpho ne APPLE 'PHONES 6 03/01/20 07:23:22 60:00 11920 4220 ims APPLE 'PHONES 7 03/01/20 07:55:39 60:00 919 1036 nxtgenpho ne APPLE 'PHONES 8 03/01/20 08:23:22 60:00 6956 2648 ims APPLE 'PHONES 9 03/01/20 08:55:39 60:00 692 420 nxtgenpho ne APPLE 'PHONES 10 03/01/20 09:23:22 17:52 3424 1324 ims APPLE 'PHONES 11 03/01/20 09:44:39 60:00 11862 8772 ims APPLE 'PHONES 12 03/01/20 09:55:39 60:00 872 735 nxtgenpho ne APPLE 'PHONES 13 03/01/20 10:44:39 60:00 5192 2664 ims APPLE 'PHONES 14 03/01/20 10:55:39 60:00 635 525 nxtgenpho ne APPLE 'PHONES 15 03/01/20 11:44:39 60:00 5192 2648 ims APPLE 'PHONES 16 03/01/20 11:55:39 60:00 1038 630 nxtgenpho ne APPLE 'PHONES 17 03/01/20 12:44:39 27:07 2580 1324 ims APPLE 'PHONES 18 03/01/20 12:55:39 60:00 3838 5118 nxtgenpho ne APPLE 'PHONES 19 03/01/20 13:11:46 10:55 3424 1340 ims APPLE 'PHONES 20 03/01/20 13:25:26 18:05 7402 6102 ims APPLE 'PHONES 21 03/01/20 13:43:31 39:19 10252 4128 ims APPLE 'PHONES 22 03/01/20 13:55:39 60:00 7138 6900 nxtgenpho ne APPLE 'PHONES 23 03/01/20 14:24:05 0:19 9754 7358 ims APPLE 'PHONES 24 03/01/20 14:24:24 8:29 5180 1696 ims APPLE 'PHONES 25 03/01/20 14:38:56 60:00 13027 7566 ims 26 03/01/20 14:55:39 9:59 173 105 nxtgenpho ne APPLE 'PHONES 27 03/01/20 15:05:38 3:44 6742 4956 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170921 The information contained here is for use by authorized persons only and is not for general distribution. Page 1 EFTA01342979

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:30:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 "MI= Conn. Time (OTC/ Originating Number ET Bytes Up Bytes Apn Dn IN/LI IMSI MAKS MODEL 28 03/01/20 15:09:22 0:12 0 0 nxtgonpho no APPLE 'PROMS 29 03/01/20 15:09:55 2:27 5220 5991 nxtgonpho no APPLE 'PEONES 30 03/01/20 15:09:56 2:27 5991 4932 nxtgenpho no APPLE 'PEONES 31 03/01/20 15:12:23 19:15 8268 7175 nxtgonphe ne APPLE 'PEONES 32 03/01/20 15:31:38 4:48 8406 5288 nxtgonpho no APPLE 'PHONES 33 03/01/20 15:36:25 1:43 6726 6727 nxtgonpho no APPLE 'PHONES 34 03/01/20 15:36:26 1:43 6727 6438 nxtgenpho ne APPLE 'PHONES 35 03/01/20 15:38:09 1:35 7450 5003 nxtgonphe ne APPLE 'PHONES 36 03/01/20 15:38:56 60:00 3532 1324 ims 37 03/01/20 15:39:44 0:22 5221 5991 nxtgonpho no APPLE 'PHONES 38 03/01/20 15:39:45 0:22 5991 4933 nxtgonphe no APPLE 'PHONES 39 03/01/20 15:40:07 31:31 21318 19563 nxtgenphe ne APPLE 'PHONES 40 03/01/20 16:02:35 17:49 9902 6262 ims 41 03/01/20 16:11:37 2:55 4504 5759 nxtgenpho ne APPLE 'PHONES 42 03/01/20 16:11:38 2:55 5759 4216 nxtgonphe no APPLE 'PHONES 43 03/01/20 16:14:33 0:05 0 0 nxtgonphe no APPLE 'PHONES 44 03/01/20 16:27:22 21:33 8365 6084 ims 45 03/01/20 16:29:19 1:40 7396 4952 nxtgonpho no APPLE 'PHONES 46 03/01/20 16:30:58 1:31 5220 5991 nxtgonpho no APPLE 'PHONES 47 03/01/20 16:30:59 1:31 5991 4932 nxtgonpho no APPLE 'PHONES 48 03/01/20 16:32:30 6:30 6040 4939 nxtgonpho no APPLE 'PHONES 49 03/01/20 16:38:56 60:00 0 0 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170922 The information contained here is for use by authorized persons only and is not for general distribution. Page 2 EFTA01342980

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. casso r ‘•- . 0° AT&T Run Date: Run Tine: Data Usage For: 06/17/2020 Item Conn. Conn. Date Time (uzz) 50 03/01/20 16:38:59 51 03/01/20 16:39:00 52 03/01/20 16:43:59 53 03/01/20 16:50:30 54 03/01/20 16:50:37 55 03/01/20 16:50:38 56 03/01/20 16:51:00 57 03/01/20 17:08:38 58 03/01/20 17:08:39 59 03/01/20 17:09:47 60 03/01/20 17:38:56 61 03/01/20 17:50:30 62 03/01/20 17:51:25 63 03/01/20 17:51:32 64 03/01/20 17:51:33 65 03/01/20 18:01:09 66 03/01/20 18:06:21 67 03/01/20 18:13:49 68 03/01/20 18:25:49 69 03/01/20 18:35:07 70 03/01/20 18:36:35 71 03/01/20 18:44:38 72 03/01/20 18:44:39 73 03/01/20 18:50:30 74 03/01/20 18:50:53 Originating Number ET Bytos Bytes Apn MEI INSI MAKE MODEL Up Dn 4:59 6299 7586 nxtgonpho APPLE !PHONES no 4:59 7586 5915 nxtgonpho APPLE !PHONES no 6:39 7933 19165 nxtgonpho APPLE !PHONES no 60:00 24775 18430 ims 0:21 288 48 nxtgonpho APPLE !PHONES no 0:22 48 0 nxtgonpho APPLE !PHONES no 17:39 19037 30448 nxtgonpho APPLE !PHONES no 1:08 5117 6043 nxtgonpho APPLE !PHONES no 1:08 6043 4829 nxtgonpho APPLE !PHONES no 41:45 65228 67623 nxtgonpho APPLE !PHONES no 12:29 0 0 ims 60:00 0 0 ims 6:34 8423 6138 ims 45:02 14269 13073 nxtgonpho APPLE !PHONES no 45:02 13073 17918 nxtgonpho APPLE !PHONES ne 2:30 8313 6090 ims 5:55 11275 10058 ims 8:59 8187 6296 ims 5:48 8263 7472 ims 26:02 8371 6016 ims 8:04 43532 18469 nxtgonpho APPLE !PHONES no 6:14 10852 13435 nxtgonpho APPLE !PHONES no 6:14 13435 21886 nxtgonpho APPLE !PHONES no 60:00 0 0 ims 2:02 9758 6565extgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170923 The information contained here is for use by authorized persons only and is not for general distribution. Page 3 EFTA01342981

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Dunbar ET Bytes Up Bytes Apn Dn MBE! IMSI MARE MODEL 75 03/01/20 18:50:54 2:02 6565 9470 nxtgonpho ne APPLE 'PHONES 76 03/01/20 18:52:56 60:00 19262 29639 nxtgonpho ne APPLE 'PHONES 77 03/01/20 19:02:56 60:00 22413 16301 ims 78 03/01/20 19:50:30 60:00 0 0 ims 79 03/01/20 19:52:56 9:07 173 105 nxtgonpho no APPLE 'PHONES 80 03/01/20 19:58:23 0:05 0 3613 ims 81 03/01/20 20:02:02 2:03 5218 5973 nxtgonpho no APPLE 'PHONES 82 03/01/20 20:02:03 2:03 5973 4930 nxtgenpho ne APPLE 'PHONES 83 03/01/20 20:02:56 60:00 6956 2864 ims 84 03/01/20 20:04:06 60:00 32943 15861 nxtgonpho ne APPLE 'PHONES 85 03/01/20 20:50:30 58:40 0 0 ims 86 03/01/20 21:02:56 32:46 8480 3004 ims 87 03/01/20 21:04:06 3:13 0 0 nxtgonpho ne APPLE 'PHONES 88 03/01/20 21:07:19 40:44 7436 11745 nxtgonpho no APPLE 'PHONES 89 03/01/20 21:43:30 0:16 48 0 ims APPLE 'PHONES 90 03/01/20 21:43:46 51:58 11627 7387 ims APPLE 'PHONES 91 03/01/20 21:48:02 2:57 5221 6043 nxtgonpho no APPLE 'PHONES 92 03/01/20 21:48:03 2:57 6043 4933 nxtgonpho no APPLE 'PHONES 93 03/01/20 21:51:00 2:13 6040 4892 nxtgonpho no APPLE 'PHONES 94 03/01/20 21:53:12 2:03 5221 5991 nxtgonpho no APPLE 'PHONES 95 03/01/20 21:53:13 2:03 5991 4933 nxtgonpho ne APPLE 'PHONES 96 03/01/20 21:55:16 15:41 9091 5311 nxtgonpho no APPLE 'PHONES 97 03/01/20 22:10:56 2:03 5177 6103 nxtgonpho no APPLE 'PHONES 98 03/01/20 22:10:57 2:03 6103 4889 nxtgonpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170924 The information contained here is for use by authorized persons only and is not for general distribution. Page 4 EFTA01342982

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Date: Run Tine: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Timm (OTC) Originating Number ET Bytes Up Bytes Apn Dn LBSI IMSI MAKE 99 03/01/20 22:13:00 60:00 6976 5733 nxtgonpho ne APPLE 100 03/01/20 22:42:34 13:34 6778 6105 ims APPLE 101 03/01/20 22:56:08 40:20 7172 3696 ims APPLE 102 03/01/20 23:13:00 60:00 1471 4996 nxtgonpho no APPLE 103 03/01/20 23:38:48 0:05 0 0 ims APPLE 104 03/01/20 23:53:31 42:44 17191 8099 ims 105 03/02/20 00:13:00 60:00 4177 4210 nxtgonpho no APPLE 106 03/02/20 00:47:05 36:22 8553 7960 ims 107 03/02/20 01:13:00 58:51 4775 11416 nxtgonpho ne APPLE 108 03/02/20 01:28:01 19:50 8228 7855 ims APPLE 109 03/02/20 01:47:51 2:30 3532 1340 ims APPLE 110 03/02/20 01:58:42 60:00 13603 7860 ims 111 03/02/20 02:11:50 2:11 5221 6043 nxtgonpho no APPLE 112 03/02/20 02:11:51 2:11 6043 4933 nxtgonpho no APPLE 113 03/02/20 02:14:02 60:00 7529 5854 nxtgonpho no APPLE 114 03/02/20 02:58:42 59:06 13444 4516 ims 115 03/02/20 03:14:02 60:00 1746 1500 nxtgonpho no APPLE 116 03/02/20 03:58:49 60:00 12186 9034 ims APPLE 117 03/02/20 04:14:02 60:00 1320 1250 nxtgonpho no APPLE 118 03/02/20 04:58:49 60:00 5192 2664 ims APPLE 119 03/02/20 05:14:02 60:00 1095 1341 nxtgonpho ne APPLE 120 03/02/20 05:58:49 60:00 5192 2664 ims APPLE 121 03/02/20 06:14:02 60:00 639 375 nxtgonpho no APPLE 122 03/02/20 06:58:49 41:03 2596 1324 ims APPLE 123 03/02/20 07:14:02 25:50 369 375 nxtgonpho no APPLE 124 03/02/20 07:39:52 0:15 495 293 nxtgonpho no APPLE 125 03/02/20 07:39:52 0:07 0 0 ims APPLE MODEL 'PEONES IPEOME8 'PEONES 'PHONED 'PHONED 'PHONED 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170925 The information contained here is for use by authorized persons only and is not for general distribution. Page 5 EFTA01342983

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:56:66pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Timm: Data Usage For: Item Conn. Data 06/17/2020 WM= Conn. Time (UTC) Originating Numbor ET Bytes Up Bytes Apn Dn neer IMSI MAKE MODEL 126 03/02/20 07:39:59 22:50 4840 1572 Las APPLE !PHONES 127 03/02/20 07:40:07 60:00 582 572 nxtgonpho no APPLE !PHONES 128 03/02/20 08:07:09 29:52 9262 7340 Las APPLE !PHONES 129 03/02/20 08:37:01 6:04 8728 7072 Las APPLE !PHONES 130 03/02/20 08:40:07 2:56 252 269 nxtgonpho no APPLE !PHONES 131 03/02/20 12:01:08 29:41 103877 370807 nxtgonpho no APPLE !PHONES 132 03/02/20 12:01:11 29:38 14032 12064 Las APPLE !PHONES 133 03/02/20 16:16:03 30:50 152117 587017 nxtgonpho no APPLE !PHONES 134 03/02/20 16:16:05 1:10 8816 6194 Las APPLE !PHONES 135 03/02/20 16:17:15 60:00 79112 44236 Las APPLE !PHONES 136 03/02/20 16:34:35 0:04 0 2210 Las APPLE !PHONES 137 03/02/20 16:34:56 0:23 7149 31933 ims APPLE !PHONES 138 03/02/20 16:35:59 0:06 5581 12969 ims APPLE !PHONES 139 03/02/20 16:36:44 0:56 117835 139892 ims APPLE !PHONES 140 03/02/20 16:43:41 0:09 11001 4562 ims APPLE !PHONES 141 03/02/20 16:44:01 2:12 235412 454074 ims APPLE !PHONES 142 03/02/20 16:46:52 2:07 5464 7722 nxtgonpho no APPLE !PHONES 143 03/02/20 16:46:53 2:07 7722 5176 nxtgonpho no APPLE !PHONES 144 03/02/20 16:48:59 21:34 10832 12811 nxtgonpho no APPLE !PHONES 145 03/02/20 17:10:33 44:52 11500 13087 nxtgonpho no APPLE !PHONES 146 03/02/20 17:10:34 44:52 13087 13674 nxtgonpho no APPLE !PHONES 147 03/02/20 17:17:15 8:46 0 0 ims APPLE !PHONES 148 03/02/20 17:28:07 14:50 8207 7090 ims 149 03/02/20 17:48:50 11:14 8225 6088 ims 150 03/02/20 17:55:26 3:03 7794 5274 nxtgonpho ne APPLE !PHONES 151 03/02/20 17:58:28 18:22 321797 68055 nxtgonpho ne APPLE !PHONES 152 03/02/20 17:58:29 18:22 68055 350874 nxtgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170926 The information contained here is for use by authorized persons only and is not for general distribution. Page 6 EFTA01342984

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e s, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating CT Time Number (UTC) Bytes Up Bytes Apn Dn DOLT INS! MANE Merl. 153 03/02/20 18:04:26 12:24 6316 6778 ims APPLE 'PHONED 154 03/02/20 18:04:27 12:24 6670 5964 ims APPLE 'PHONED 155 03/02/20 18:15:35 17:29 10178 6494 ims 156 03/02/20 18:16:51 8:26 5439 6387 nxtgenpho ne APPLE 'PHONED 157 03/02/20 18:16:52 8:26 6387 5151 nxtgenpho ne APPLE 'PHONED 158 03/02/20 18:25:18 15:26 8963 10970 nxtgenpho ne APPLE 'PHONED 159 03/02/20 18:36:22 13:47 8199 5999 ims APPLE IPHONEO 160 03/02/20 18:40:43 2:07 13092 7135 nxtgenpho ne APPLE 'PHONES 161 03/02/20 18:40:44 2:07 7135 12804 nxtgenpho ne APPLE 'PHONES 162 03/02/20 18:42:51 60:00 11769 17044 nxtgenpho ne APPLE 'PHONES 163 03/02/20 18:50:09 2:18 2984 1340 ims APPLE 'PHONES 164 03/02/20 18:50:09 2:18 2812 1340 ims APPLE 'PHONES 165 03/02/20 18:52:27 4:13 3424 1448 ims APPLE 'PHONES 166 03/02/20 18:58:32 4:46 0 0 ims 167 03/02/20 19:14:25 15:41 9323 6918 ims 168 03/02/20 19:32:47 17:39 8477 6283 ims 169 03/02/20 19:42:51 54:20 10545 9322 nxtgenpho ne APPLE 'PHONES 170 03/02/20 19:56:40 10:31 0 0 ims 171 03/02/20 20:09:27 60:00 16978 9252 ims 172 03/02/20 20:37:10 2:07 5578 6598 nxtgenpho ne APPLE !PHONES 173 03/02/20 20:37:11 2:07 6457 5290 nxtgenpho ne APPLE !PHONES 174 03/02/20 20:39:18 27:09 8245 11360 nxtgenpho ne APPLE !PHONES 175 03/02/20 21:06:26 2:18 6296 8106 nxtgenpho ne APPLE !PHONES 176 03/02/20 21:06:27 2:19 8106 6008 nxtgenpho ne APPLE !PHONES 177 03/02/20 21:08:46 38:39 8309 6108 nxtgenpho ne APPLE !PHONES 178 03/02/20 21:09:27 15:00 0 0 ims 179 03/02/20 21:32:03 20:42 8203 5998 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170927 The information contained here is for use by authorized persons only and is not for general distribution. Page 7 EFTA01342985

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e s, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number CT Bytes Up Bytes Apn Dn DMZ IBS! ISAN2L MOMS 180 03/02/20 21:47:24 12:15 17860 39013 nxtgonpho no APPLE 'PHONES 181 03/02/20 21:47:25 12:16 39013 17476 nxtgenpho no APPLE IPHONE8 182 03/02/20 21:58:20 30:21 0 0 isms 183 03/02/20 21:59:40 34:23 32299 48475 nxtgonpho no APPLE 'PHONES 184 03/02/20 21:59:41 34:23 48475 32752 nxtgonpho no APPLE !PHONES 185 03/02/20 22:06:58 22:20 10591 8188 ims 186 03/02/20 22:28:40 5:23 6305 6732 isms APPLE !PHONES 187 03/02/20 22:28:41 5:23 6732 6041 isms APPLE !PHONES 188 03/02/20 22:31:33 6:26 10063 8268 isms 189 03/02/20 22:34:03 7:05 8089 10976 nxtgonpho no APPLE !PHONES 190 03/02/20 22:34:05 7:04 10976 7801 nxtgonpho no APPLE !PHONES 191 03/02/20 22:40:32 32:40 19107 12870 isms 192 03/02/20 22:41:09 1:04 8543 5515 nxtgonpho no APPLE !PHONES 193 03/02/20 22:42:12 2:10 5792 7397 nxtgonpho no APPLE !PHONES 194 03/02/20 22:42:13 2:10 7397 5504 nxtgonpho no APPLE !PHONES 195 03/02/20 22:44:23 12:58 8379 5971 nxtgonpho no APPLE !PHONES 196 03/02/20 22:57:20 10:17 9677 19783 nxtgenpho no APPLE !PHONES 197 03/02/20 22:57:21 10:17 19783 9389 nxtgenpho no APPLE !PHONES 198 03/02/20 23:07:38 0:51 7248 5395 nxtgenpho no APPLE !PHONES 199 03/02/20 23:08:29 99:47 12346 13625 nxtgenpho no APPLE !PHONES 200 03/02/20 23:08:30 60:00 6907 8351 nxtgonpho no APPLE !PHONES 201 03/02/20 23:13:34 94:42 9570 9722 isms APPLE !PHONES 202 03/02/20 23:13:35 60:00 9614 9414 isms APPLE !PHONES 203 03/02/20 23:14:47 0:01 0 0 isms 204 03/02/20 23:17:19 34:17 11811 7693 isms AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170928 The information contained here is for use by authorized persons only and is not for general distribution. Page 8 EFTA01342986

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:30:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Tine: Data Usage For: Item Conn. Date 06/17/2020 Ma= Conn. TIM* (OTC/ Originating B2 Bytes up Bytes Apn EMU IMSI MAKE 0n MODEL 205 03/02/20 23:56:48 60:00 14766 7840 ims 206 03/03/20 00:08:30 39:48 6718 6727 nxtgenpho ne APPLE 'PEONES 207 03/03/20 00:13:35 34:43 0 0 ims APPLE 'PEONES 208 03/03/20 00:48:17 4:13 7806 5708 nxtgenpho ne APPLE 'PEONES 209 03/03/20 00:52:30 14:10 64691 46658 nxtgenpho ne APPLE 'PEONES 210 03/03/20 00:52:35 56:22 20187 11190 ims 211 03/03/20 00:56:48 60:00 0 0 ims 212 03/03/20 01:06:40 2:06 5584 6435 nxtgenpho ne APPLE 'PHONES 213 03/03/20 01:06:41 2:06 6435 5296 nxtgenpho ne APPLE 'PHONES 214 03/03/20 01:08:47 2:21 7926 5519 nxtgenpho ne APPLE 'PHONES 215 03/03/20 01:11:07 1:20 5584 6507 nxtgenpho ne APPLE 'PHONES 216 03/03/20 01:11:08 1:19 6507 5296 nxtgenpho ne APPLE 'PHONES 217 03/03/20 01:12:28 30:56 17894 13813 nxtgenpho ne APPLE 'PHONES 218 03/03/20 01:43:23 14:47 6083 6888 nxtgenpho ne APPLE 'PHONES 219 03/03/20 01:43:24 14:47 6888 5795 nxtgenpho ne APPLE 'PHONES 220 03/03/20 01:53:38 32:27 16630 8649 ims 221 03/03/20 01:56:48 60:00 0 0 ims 222 03/03/20 01:58:11 60:00 8925 7567 nxtgenpho ne APPLE 'PHONES 223 03/03/20 02:35:26 60:00 13553 7876 ims 224 03/03/20 02:56:48 60:00 0 0 ims 225 03/03/20 02:58:11 60:00 852 500 nxtgenpho ne APPLE 'PHONES 226 03/03/20 03:35:26 60:00 13444 4360 ims 227 03/03/20 03:56:48 45:12 0 0 ims 228 03/03/20 03:58:11 60:00 6285 9286 nxtgenpho ne APPLE 'PHONES 229 03/03/20 04:35:26 11:25 0 0 ims 230 03/03/20 04:54:33 26:00 11002 6192 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170929 The information contained here is for use by authorized persons only and is not for general distribution. Page 9 EFTA01342987

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 45, AT&T Run Data: Run Tine: Data Usage For: Item Conn. Date 06/17/2020 Conn. TIM* (07C) Originating BT Bytos Up Bytes Apn Dn IMAI IIS! MAKE MODEL 231 03/03/20 04:58:11 60:00 1008 750 nxtgenpho ne APPLE 'PEONES 232 03/03/20 05:28:33 5:32 0 0 ims 233 03/03/20 05:42:12 11:36 8451 6230 ims 234 03/03/20 05:58:11 30:15 426 250 nxtgenpho ne APPLE 'PEONES 235 03/03/20 06:05:52 0:25 9552 7198 ims APPLE 'PEONES 236 03/03/20 06:06:17 60:00 12012 4560 ims APPLE 'PEONES 237 03/03/20 06:28:26 2:10 5221 6055 nxtgenpho ne APPLE 'PEONES 238 03/03/20 06:28:27 2:10 6055 4933 nxtgonpho no APPLE !PHONES 239 03/03/20 06:30:37 12:02 6265 5017 nxtgonpho no APPLE !PHONES 240 03/03/20 06:42:39 61:49 6703 7688 nxtgonpho no APPLE !PHONES 241 03/03/20 06:42:40 60:00 7515 6310 nxtgenpho ne APPLE 'PHONES 242 03/03/20 07:06:17 7:58 0 0 ims APPLE !PHONES 243 03/03/20 07:23:35 20:53 7325 6792 ims APPLE !PHONES 244 03/03/20 07:23:36 20:53 6792 7061 ims APPLE !PHONES 245 03/03/20 07:23:52 10:34 11234 6390 ims 246 03/03/20 07:42:38 38:41 13368 7571 ims 247 03/03/20 07:42:40 1:49 173 105 nxtgenpho ne APPLE !PHONES 248 03/03/20 07:44:29 15:24 7635 5218 nxtgenpho ne APPLE !PHONES 249 03/03/20 07:59:52 8:49 7621 7231 nxtgenpho ne APPLE !PHONES 250 03/03/20 07:59:53 8:49 7231 7237 nxtgenpho ne APPLE !PHONES 251 03/03/20 08:08:42 0:48 6870 4955 nxtgenpho no APPLE !PHONES 252 03/03/20 08:09:29 0:48 5116 6055 nxtgenpho ne APPLE !PHONES 253 03/03/20 08:09:30 0:48 6055 4828 nxtgenpho ne APPLE !PHONES 254 03/03/20 08:10:18 0:40 6112 4952 nxtgenpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 10 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170930 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342988

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn LBSS IMSI MAKE MODEL 255 03/03/20 08:10:57 2:36 5117 6055 nxtgonpho no APPLE 'PEONES 256 03/03/20 08:10:58 2:36 6055 4829 nxtgonpho no APPLE 'PEONES 257 03/03/20 08:13:33 8:22 5113 6105 nxtgonpho no APPLE 'PEONES 258 03/03/20 08:13:35 8:21 6105 4825 nxtgonpho ne APPLE 'PEONES 259 03/03/20 08:21:56 60:00 7213 5837 nxtgenpho ne APPLE 'PEONES 260 03/03/20 08:31:42 16:37 9802 6142 ims 261 03/03/20 08:49:57 41:51 14587 7694 ims 262 03/03/20 09:21:56 5:17 173 105 nxtgenpho ne APPLE 'PEONES 263 03/03/20 09:27:12 2:06 5116 6055 nxtgenpho ne APPLE 'PEONES 264 03/03/20 09:27:13 2:06 6055 4828 nxtgenpho ne APPLE 'PEONES 265 03/03/20 09:29:19 60:00 8500 5638 nxtgenpho ne APPLE 'PEONES 266 03/03/20 09:43:56 4:50 0 0 ims 267 03/03/20 09:58:18 3:50 11004 6250 ims 268 03/03/20 10:07:18 25:12 9679 6398 ims 269 03/03/20 10:29:19 60:00 8133 2343 nxtgenpho ne APPLE 'PHONES 270 03/03/20 10:47:22 0:14 48 0 ims APPLE 'PHONES 271 03/03/20 10:47:36 34:54 13747 8456 ism APPLE 'PHONES 272 03/03/20 11:29:05 33:39 13398 7586 ims 273 03/03/20 11:29:19 37:34 9542 6573 nxtgonpho no APPLE 'PHONES 274 03/03/20 12:06:52 8:49 5221 6055 nxtgenpho ne APPLE 'PHONES 275 03/03/20 12:06:54 8:48 6055 4933 nxtgenpho ne APPLE 'PHONES 276 03/03/20 12:07:05 60:00 18679 8370 ims 277 03/03/20 12:15:42 2:09 5216 6053 nxtgenpho ne APPLE 'PHONES 278 03/03/20 12:15:43 2:09 6053 4928 nxtgenpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170931 The information contained here is for use by authorized persons only and is not for general distribution. Page 11 EFTA01342989

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating Time Number ET Bytes Up Bytes Apn Dn TAINT MANZ MODEL. (UTC) 279 03/03/20 12:17:52 19:55 7630 6275 nxtgenpho ne APPLE 'PEONES 280 03/03/20 12:37:46 2:06 5532 9011 nxtgenpho no APPLE 'PEONES 281 03/03/20 12:37:47 2:06 9011 5244 nxtgenpho no APPLE 'PEONES 282 03/03/20 12:39:53 31:03 7586 5843 nxtgenpho no APPLE 'PEONES 283 03/03/20 13:07:05 22:45 4964 1572 ims 284 03/03/20 13:10:55 0:40 5325 6280 nxtgenpho ne APPLE 'PHONES 285 03/03/20 13:10:56 0:40 6280 5037 nxtgonpho no APPLE 'PHONES 286 03/03/20 13:11:36 7:06 9026 5966 nxtgenpho no APPLE 'PHONES 287 03/03/20 13:18:41 8:16 5217 6105 nxtgenpho no APPLE 'PHONES 288 03/03/20 13:18:42 8:16 6105 4929 nxtgenpho no APPLE 'PHONES 289 03/03/20 13:26:58 0:46 6870 4956 nxtgenpho ne APPLE 'PHONES 290 03/03/20 13:27:43 2:06 10413 7087 nxtgenpho ne APPLE 'PHONES 291 03/03/20 13:27:44 2:06 7087 10125 nxtgenpho ne APPLE 'PHONES 292 03/03/20 13:29:50 38:38 13586 8797 nxtgenpho ne APPLE 'PHONES 293 03/03/20 13:33:07 0:25 16290 13240 ims APPLE 'PHONES 294 03/03/20 13:33:32 33:21 10840 10928 ims APPLE 'PHONES 295 03/03/20 14:08:27 6:02 5221 6055 nxtgenpho no APPLE 'PHONES 296 03/03/20 14:08:28 6:02 6055 4933 nxtgenpho no APPLE 'PHONES 297 03/03/20 14:14:30 46:03 26448 21682 nxtgenpho no APPLE 'PHONES 298 03/03/20 14:14:32 10:03 8808 6173 ims APPLE 'PHONES 299 03/03/20 14:24:35 29:19 8248 3004 ims APPLE 'PHONES 300 03/03/20 14:54:30 0:29 8098 7128 ims APPLE 'PHONES 301 03/03/20 14:54:59 39:09 9804 3052 ims APPLE 'PHONES 302 03/03/20 15:00:32 13:07 24019 14458 nxtgenpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170932 The information contained here is for use by authorized persons only and is not for general distribution. Page 12 EFTA01342990

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ce. AT&T Run Dato: Run Time: Data Usage For: 06/17/2020 Item Conn. Conn. Date Time (OTC/ 303 03/03/20 15:00:33 13:07 14458 23635 nxtgonpho no 304 03/03/20 15:13:40 58:17 7179 6785 nxtgenpho no 305 03/03/20 15:35:15 0:06 0 0 ims 306 03/03/20 15:43:23 5:03 18043 11424 ims 307 03/03/20 15:48:44 55:52 13475 8142 ims 308 03/03/20 16:20:12 2:10 7680 8328 nxtgonpho no 309 03/03/20 16:20:13 2:10 8328 7392 nxtgonpho no 310 03/03/20 16:22:23 52:40 60305 22538 nxtgonpho no 311 03/03/20 16:45:35 60:00 12603 7786 ims 312 03/03/20 17:15:02 2:07 13534 92096 nxtgonpho no 313 03/03/20 17:15:03 2:07 92096 13246 nxtgonpho no 314 03/03/20 17:17:10 40:59 10564 6373 nxtgonpho no 315 03/03/20 17:45:35 29:47 5088 1572 ims 316 03/03/20 17:58:08 11:42 11259 12573 nxtgenpho no 317 03/03/20 17:58:09 11:42 12573 24067 nxtgonpho no 318 03/03/20 18:09:51 35:52 6810 5733 nxtgonpho no 319 03/03/20 18:17:26 18:56 6670 5963 ims 320 03/03/20 18:36:22 60:00 11996 4328 ims 321 03/03/20 18:45:42 2:07 5218 6105 nxtgonpho ne 322 03/03/20 18:45:43 2:07 6105 4930 nxtgonpho no 323 03/03/20 18:47:50 2:26 9442 11383 nxtgonpho no 324 03/03/20 18:50:15 2:15 5535 9029 nxtgonpho ne 325 03/03/20 18:50:16 2:15 9029 5247 nxtgonpho ne 326 03/03/20 18:52:31 21:26 15301 35155 nxtgenpho no Originating Number BT Bytes Bytes Apn DIRT IM9I NAM MODEL Up Dn APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 13 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170933 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342991

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 1/4e. AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn LEI TM! MANZ MOBIL 327 03/03/20 19:13:. 2:25 5768 7851 nxtgonpho ne APPLE 'PEONES 328 03/03/20 19:13: 2:24 7851 5480 nxtgonpho ne APPLE 'PEONES 329 03/03/20 19:16: 52:45 731753 3170468 nxtgonpho ne APPLE 'PEONES 330 03/03/20 19:16: 52:45 3170468 731465 nxtgonpho ne APPLE 'PEONES 331 03/03/20 19:36: 60:00 6956 2880 ims APPLE 'PHONES 332 03/03/20 20:09: 1:12 7245 5092 nxtgonpho ne APPLE 'PHONES 333 03/03/20 20:10: 12:53 8802 7894 nxtgonpho no APPLE 'PHONES 334 03/03/20 20:10: 12:53 7894 8514 nxtgonpho no APPLE 'PHONES 335 03/03/20 20:23: 2:10 7526 5166 nxtgonpho no APPLE 'PHONES 336 03/03/20 20:25: 2:09 5345 7525 nxtgonpho no APPLE 'PHONES 337 03/03/20 20:25: 2:09 7525 5057 nxtgonpho no APPLE 'PHONES 338 03/03/20 20:27: 3:08 6340 5292 nxtgonpho no APPLE 'PHONES 339 03/03/20 20:30: 14:54 5752 7585 nxtgonpho no APPLE 'PHONES 340 03/03/20 20:30: 14:54 7585 5464 nxtgonpho no APPLE 'PHONES 341 03/03/20 20:36: 16:16 3532 1324 ims APPLE 'PHONES 342 03/03/20 20:45: 0:06 0 48 nxtgonpho ne APPLE 'PHONES 343 03/03/20 20:45: 0:05 48 0 nxtgonpho ne APPLE 'PHONES 344 03/03/20 20:45: 1:55 5221 6055 nxtgonpho no APPLE 'PHONES 345 03/03/20 20:45: 1:56 6055 4933 nxtgonpho no APPLE 'PHONES 346 03/03/20 20:47: 13:12 9776 11284 nxtgonpho no APPLE 'PHONES 347 03/03/20 20:53: 0:34 19114 16639 ims APPLE 'PHONES 348 03/03/20 20:54: 28:56 8836 3160 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170934 The information contained here is for use by authorized persons only and is not for general distribution. Page 14 EFTA01342992

MOBILITY PRIO2O AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro ‘•- . 00 AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating KT %It weilwr Bytes Up Bytes Apn Dn 1:1012 INSI MAKE MODEL 349 03/03/20 21:00:55 2:06 5117 6055 nxtgenpho ne APPLE 'PHONES 350 03/03/20 21:00:56 2:06 6055 4829 nxtgenpho ne APPLE 'PHONES 351 03/03/20 21:03:02 4:40 7630 5224 nxtgenpho ne APPLE 'PHONES 352 03/03/20 21:07:41 2:07 5281 6115 nxtgenpho ne APPLE 'PHONES 353 03/03/20 21:07:42 2:07 6115 4993 nxtgenpho ne APPLE 'PHONES 354 03/03/20 21:09:49 0:05 0 Onxtgonpho ne APPLE 'PHONES 355 03/03/20 21:09:58 25:19 7879 5848 nxtgenpho ne APPLE 'PHONES 356 03/03/20 21:24:20 8:46 0 0 ims 357 03/03/20 21:35:17 113:52 6856 11128 nxtgenpho ne APPLE 'PHONES 358 03/03/20 21:35:18 60:00 192 Onxtgonpho ne APPLE 'PHONES 359 03/03/20 21:35:20 112:43 7134 6744 ims APPLE 'PHONES 360 03/03/20 21:35:21 60:00 6744 6978 ims APPLE 'PHONES 361 03/03/20 21:35:37 60:00 32623 20498 ims 362 03/03/20 21:35:54 30:49 5373088 4436025 ims 363 03/03/20 22:35:18 53:52 10936 6280 nxtgenpho ne APPLE 'PHONES 364 03/03/20 22:35:21 52:43 0 0 ims APPLE 'PHONES 365 03/03/20 22:35:37 37:55 3532 1340 ims 366 03/03/20 23:15:41 8:11 0 0 ims 367 03/03/20 23:27:35 0:59 6262 6666 ims APPLE 'PHONES 368 03/03/20 23:27:36 0:59 6666 5998 ims APPLE 'PHONES 369 03/03/20 23:28:02 0:03 0 0 ims 370 03/03/20 23:28:09 1:00 7266 6862 ims APPLE 'PHONES 371 03/03/20 23:28:10 1:00 6798 7002 ims APPLE 'PHONES 372 03/03/20 23:28:33 58:37 18422 9574 ims 373 03/03/20 23:29:10 0:36 7462 5052 nxtgenpho ne APPLE 'PHONES 374 03/03/20 23:29:45 24:20 30213 52870 nxtgenpho ne APPLE 'PHONES 375 03/03/20 23:29:46 24:20 52870 29925 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 15 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170935 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342993

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 1/44% AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 Conn. Time (OTC) Originating Numbor ET Bytes Up Bytes Apn Dn nom IISI WA= MOD= 376 03/03/20 23:54:06 15:46 17645 20423 nxtgonpho ne APPLE 'PROM 377 03/03/20 23:54:07 15:47 20423 17069 nxtgonpho ne APPLE 'PROM 378 03/04/20 00:09:54 0:46 11507 6439 nxtgonpho no APPLE 'PROM 379 03/04/20 00:10:39 52:20 56711 52938 nxtgonpho no APPLE 'PICNICS 380 03/04/20 00:10:40 52:20 52938 68486 nxtgonpho ne APPLE 'PHONES 381 03/04/20 00:32:25 2:30 0 0 ims 382 03/04/20 00:45:06 17:53 6510 8370 ims APPLE 'PHONES 383 03/04/20 00:45:07 17:53 8302 6354 ims APPLE 'PHONES 384 03/04/20 00:45:49 0:03 0 0 ims 385 03/04/20 00:46:19 60:00 15323 9894 ims 386 03/04/20 01:03:00 0:59 48 Onxtgonpho no APPLE 'PHONES 387 03/04/20 01:03:58 30:52 55514 57373 nxtgonpho no APPLE 'PHONES 388 03/04/20 01:03:59 30:52 57373 56180 nxtgonpho no APPLE 'PHONES 389 03/04/20 01:34:51 0:06 0 0 nxtgonpho no APPLE !PHONES 390 03/04/20 01:37:32 21:01 25916 28070 nxtgonpho no APPLE !PHONES 391 03/04/20 01:37:33 21:01 28070 25517 nxtgonpho ne APPLE !PHONES 392 03/04/20 01:46:19 55:23 8620 2928 ims 393 03/04/20 01:58:34 63:59 105999 112162 nxtgonpho ne APPLE !PHONES 394 03/04/20 01:58:35 60:00 111873 105108 nxtgonpho ne APPLE !PHONES 395 03/04/20 02:49:16 12:28 264 112 ims APPLE 'PHONES 396 03/04/20 02:49:17 12:28 48 0 ims APPLE 'PHONES 397 03/04/20 02:50:28 6:33 0 0 ims 398 03/04/20 02:58:35 3:59 289 315 nxtgonpho ne APPLE !PHONES 399 03/04/20 03:01:22 0:25 7234 6788 ims APPLE 'PHONES 400 03/04/20 03:01:23 0:26 6788 6970 ims APPLE 'PHONES 401 03/04/20 03:01:44 0:05 2567 1210 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 16 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170936 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342994

..020 MOBILITY 41110 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm ::-_„,•-•° ""s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number lu7C1 Bytes Up Bytes Apn Dn INKS INSI MAKE MODEL 402 03/04/20 03:01:47 0:46 6360 6670 ism APPLE !PHONES 403 03/04/20 03:01:48 0:46 6670 6096 ism APPLE !PHONES 404 03/04/20 03:02:11 39:31 14275 8051 ism 405 03/04/20 03:02:34 0:39 0 Onstgonpho no APPLE !PHONES 406 03/04/20 03:03:12 73:18 28513 15701 nxtgonpho no APPLE !PHONES 407 03/04/20 03:03:13 60:00 7682 13726 nxtgonpho no APPLE !PHONES 408 03/04/20 03:53:13 23:17 7231 6796 Las APPLE !PHONES 409 03/04/20 03:53:14 23:17 6796 7075 iota APPLE !PHONES 410 03/04/20 03:54:40 14:02 9119 6273 iota 411 03/04/20 04:03:13 13:18 8019 14307 nxtgonpho no APPLE !PHONES 412 03/04/20 04:13:39 36:38 13443 7848 iota 413 03/04/20 04:16:31 6:11 6032 5599 nxtgonpho no APPLE !PHONES 414 03/04/20 04:22:41 20:00 11994 13097 nxtgonpho no APPLE !PHONES 415 03/04/20 04:22:42 60:00 65817 44943 nxtgonpho no APPLE !PHONES 416 03/04/20 04:42:41 62:23 34539 53298 nxtgonpho no APPLE !PHONES 417 03/04/20 04:48:51 56:13 7374 39842 Las APPLE !PHONES 418 03/04/20 04:48:52 56:13 6794 7110 iota APPLE !PHONES 419 03/04/20 05:05:48 60:00 15313 8908 iota 420 03/04/20 05:22:42 22:23 578 630 nxtgonpho no APPLE !PHONES 421 03/04/20 05:45:05 2:17 5221 6023 nxtgonpho no APPLE !PHONES 422 03/04/20 05:45:06 2:17 6023 4933 nxtgonpho no APPLE !PHONES 423 03/04/20 05:47:23 37:45 27157 37423 nxtgonpho no APPLE !PHONES 424 03/04/20 05:47:24 37:45 37423 26773 nxtgonpho no APPLE !PHONES 425 03/04/20 06:05:48 16:56 0 0 iota 426 03/04/20 06:25:10 48:24 9251 11190 nxtgonpho no APPLE !PHONES 427 03/04/20 06:26:41 13:02 8491 6410 ism AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170937 The information contained here is for use by authorized persons only and is not for general distribution. Page 17 EFTA01342995

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 1/45, ‘•- .a# AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Tame (DTC) Originating Numbor ET Bytes Up Bytes Apn DOM INSI MAKE Dn MODEL 428 03/04/20 06:46:22 60:00 13338 7746 ims 1 429 03/04/20 07:13:33 2:05 5222 6075nxtgonphe ne APPLE !PHONES 430 03/04/20 07:13:34 2:05 6075 4934 nxtgenpho ne APPLE !PHONES 431 03/04/20 07:15:39 60:00 8970 6813 nxtgenpho ne APPLE !PHONES 432 03/04/20 07:46:22 0:17 0 0 ims 433 03/04/20 07:51:19 6:15 48 0 ims APPLE !PHONES 434 03/04/20 07:57:34 60:00 15137 8951 ims APPLE !PHONES 435 03/04/20 08:15:39 60:00 58544 77226nxtgonphe ne APPLE !PHONES 436 03/04/20 08:57:34 9:27 0 0 ims APPLE !PHONES 437 03/04/20 09:11:30 8:59 0 0 ims 438 03/04/20 09:15:39 60:00 1723 3095nxtgonphe ne APPLE !PHONES 439 03/04/20 09:25:04 60:00 16490 8950 ims 440 03/04/20 10:15:39 60:00 1384 968 nxtgenpho ne APPLE !PHONES 441 03/04/20 10:25:04 49:47 8388 3036 ims 442 03/04/20 11:15:39 60:00 22590 24929 nxtgenpho ne APPLE !PHONES 443 03/04/20 11:18:22 46:42 14778 8892 ims 444 03/04/20 12:09:39 15:38 8367 6072 ims 445 03/04/20 12:15:39 19:26 21920 25058 nxtgenpho ne APPLE !PHONES 446 03/04/20 12:32:29 15:21 14115 12665 ims 447 03/04/20 12:35:04 2:56 5221 6023 nxtgenpho ne APPLE !PHONES 448 03/04/20 12:35:05 2:56 6023 4933 nxtgenpho ne APPLE !PHONES 449 03/04/20 12:38:01 11:43 7596 6216 nxtgenpho ne APPLE !PHONES 450 03/04/20 12:49:44 34:12 15878 18653 nxtgenpho ne APPLE !PHONES 451 03/04/20 12:49:45 34:12 18653 16658 nxtgenpho ne APPLE !PHONES 452 03/04/20 12:49:49 2:11 8453 6430 Las 453 03/04/20 12:51:43 0:05 0 0 Las APPLE !PHONES 454 03/04/20 12:52:18 26:35 6262 6670 Las APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 18 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170938 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342996

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. c r. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn IMRE INSI BANS MODEL 455 03/04/20 12:52:19 26:35 6670 6106 isms APPLE 'PEONES 456 03/04/20 12:52:35 16:07 8313 5982 isms 457 03/04/20 13:13:15 1:38 0 0 isms 458 03/04/20 13:17:35 6:21 6248 6666 isms APPLE 'PEONES 459 03/04/20 13:17:36 6:21 6666 6092 isms APPLE 'PEONES 460 03/04/20 13:18:53 60:00 16575 9018 isms 461 03/04/20 13:23:57 2:15 14505 5862 nxtgenpho ne APPLE 'PEONES 462 03/04/20 13:26:12 1:08 5112 6021 nxtgenpho ne APPLE 'PEONES 463 03/04/20 13:26:13 1:08 6021 4824 nxtgenpho ne APPLE 'PHONES 464 03/04/20 13:27:21 2:26 6020 4893 nxtgenpho ne APPLE 'PHONES 465 03/04/20 13:29:46 2:07 5222 6196 nxtgenpho ne APPLE 'PHONES 466 03/04/20 13:29:47 2:07 6196 4934 nxtgenpho ne APPLE 'PHONES 467 03/04/20 13:31:54 60:00 25665 13703 nxtgenpho ne APPLE 'PHONES 468 03/04/20 14:18:53 46:08 8496 2820 isms 469 03/04/20 14:31:54 60:00 341 1155 nxtgenpho ne APPLE 'PHONES 470 03/04/20 15:04:19 60:00 0 0 isms 471 03/04/20 15:05:01 26:14 11655 7628 isms 472 03/04/20 15:31:54 9:53 0 0 nxtgenpho ne APPLE 'PHONES 473 03/04/20 15:42:35 60:00 16282 9102 Les 474 03/04/20 16:04:19 11:00 0 0 Les 475 03/04/20 16:08:38 60:00 16925 11000 nxtgenpho ne APPLE 'PHONES 476 03/04/20 16:15:18 0:07 0 0 Les 477 03/04/20 16:17:32 19:08 9817 6348 Les 478 03/04/20 16:40:18 1:19 7364 6104 isms APPLE 'PHONES 479 03/04/20 16:41:37 60:00 12028 4220 isms APPLE 'PHONES 480 03/04/20 16:42:35 60:00 0 0 isms 481 03/04/20 17:08:38 11:35 237 210 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 19 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170939 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342997

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 MS= Conn. Tame (OTC/ Originating Ntivnl-sar ET Bytes Up Bytes Apn DOLT INSI MAKE Dn MODEL 482 03/04/20 17:20:1 2:07 5222 6023 nxtgenpho ne APPLE 'PHONES 483 03/04/20 17:20:1 2:07 6023 4934 nxtgenpho ne APPLE 'PHONES 484 03/04/20 17:22:2 17:42 15481 6441 nxtgenpho ne APPLE 'PHONES 485 03/04/20 17:40:0 21:24 22364 19777 nxtgenpho ne APPLE 'PHONES 486 03/04/20 17:40:0 21:24 19777 21884 nxtgenpho ne APPLE 'PHONES 487 03/04/20 17:41:3 60:00 6956 2756 ims APPLE 'PHONES 488 03/04/20 17:42:3 60:00 0 0 ims 489 03/04/20 18:01:2 34:35 31417 25433 nxtgenpho ne APPLE 'PHONES 490 03/04/20 18:36:0 10:11 123900 267707 nxtgenpho ne APPLE 'PHONES 491 03/04/20 18:41:3 44:17 18788 8828 ims APPLE 'PHONES 492 03/04/20 18:42:3 41:54 0 0 ims 493 03/04/20 18:46:1 14:32 2738331 1371751 nxtgenpho ne APPLE 'PHONES 494 03/04/20 18:46:1 14:32 1371751 2737947 nxtgenpho ne APPLE 'PHONES 495 03/04/20 18:52:2 1:45 146201 318486 ims APPLE 'PHONES 496 03/04/20 19:00:4 16:05 54281 30349 nxtgenpho ne APPLE 'PHONES 497 03/04/20 19:16:4 4:26 8112 8235 nxtgenpho ne APPLE 'PHONES 498 03/04/20 19:16:4 4:26 8235 7824 nxtgenpho ne APPLE 'PHONES 499 03/04/20 19:21:1 5:10 12167 13427 nxtgenpho ne APPLE 'PHONES 500 03/04/20 19:21:1 5:10 13427 11783 nxtgenpho ne APPLE 'PHONES 501 03/04/20 19:24:2 1:57 7266 6862 ims APPLE 'PHONES 502 03/04/20 19:24:2 1:57 6794 7002 ims APPLE 'PHONES 503 03/04/20 19:26:2 4:02 11620 6086 nxtgenpho ne APPLE 'PHONES 504 03/04/20 19:26:2 60:00 29067 17646 ims 505 03/04/20 19:30:2 8:16 5707 6616 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 20 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170940 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342998

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e t. AT&T Run Date: Run Time: Data Usage For: 06/17/2020 Item Conn. Conn. Date Time (OTC) 506 03/04/20 19:30:29 8:16 6616 5419 nxtgonpho no 507 03/04/20 19:38:45 42:09 22349 17236 nxtgenpho no 508 03/04/20 19:46:18 0:24 27681 51638 ims 509 03/04/20 20:20:53 7:50 7092 7276 nxtgonpho no 510 03/04/20 20:20:54 7:50 7276 6708 nxtgonpho no 511 03/04/20 20:26:28 55:05 8604 3036 ims 512 03/04/20 20:28:44 0:05 0 0 nxtgenpho no 513 03/04/20 20:30:50 93:46 76696 88972 nxtgonpho no 514 03/04/20 20:30:51 60:00 52778 46425 nxtgenpho no 515 03/04/20 21:25:15 39:21 8517 8866 ims 516 03/04/20 21:25:16 39:21 8758 8253 ims 517 03/04/20 21:29:51 60:00 25598 14171 ims 518 03/04/20 21:30:51 33:46 36194 29351 nxtgenpho ne 519 03/04/20 22:04:37 4:46 6080 4929 nxtgenpho ne 520 03/04/20 22:07:20 48:02 5023984 9542836 ims 521 03/04/20 22:09:22 1:51 5584 6403 nxtgonpho no 522 03/04/20 22:09:23 1:51 6403 5296 nxtgenpho ne 523 03/04/20 22:11:14 4:08 7260 6155 nxtgenpho ne 524 03/04/20 22:15:21 2:11 5436 6473 nxtgonpho no 525 03/04/20 22:15:22 2:11 6473 5148 nxtgonpho ne 526 03/04/20 22:17:32 15:05 14750 26225 nxtgonpho no 527 03/04/20 22:17:33 15:05 26225 15206 nxtgonpho no 528 03/04/20 22:29:51 60:00 20512 12964 ims 529 03/04/20 22:32:38 18:11 11974 14957 nxtgonpho Originating Number ET Bytes Bytes Apn max IMBI MIME MODEL Up Dn no APPLE IPECIJQB APPLE 'PEONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPHONE8 APPLE IPHONE8 APPLE IPEONE8 APPLE IPEONE8 APPLE IPEONE8 APPLE IPEONE8 APPLE IPEONE8 APPLE IPEONE8 APPLE IPEONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170941 The information contained here is for use by authorized persons only and is not for general distribution. Page 21 EFTA01342999

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e s, AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Ma= Conn. Time (OTC/ Originating mink.: BT Bytes Up Bytes Apn MOLT IBIS! Ise Dn Mori. 530 03/04/20 22:32:39 18:11 14957 11590 nxtgenpho no APPLE 'PEONES 531 03/04/20 22:50:50 3:38 9791 5778 nxtgenpho no APPLE 'PEONES 532 03/04/20 22:54:27 1:02 5221 6023 nxtgenpho no APPLE 'PEONES 533 03/04/20 22:54:28 1:02 6023 4933 nxtgenpho no APPLE 'PEONES 534 03/04/20 22:55:30 4:48 136342 110705 nxtgenpho ne APPLE 'PHONES 535 03/04/20 23:00:17 9:59 16815 14603 nxtgenpho ne APPLE 'PHONES 536 03/04/20 23:00:19 9:58 14603 16431 nxtgenpho ne APPLE 'PHONES 537 03/04/20 23:04:22 0:43 92872 57448 ims 538 03/04/20 23:10:17 4:26 8747 5322 nxtgenpho ne APPLE 'PHONES 539 03/04/20 23:14:42 8:28 5220 6075 nxtgenpho no APPLE 'PHONES 540 03/04/20 23:14:43 8:28 6075 4932 nxtgenpho no APPLE 'PHONES 541 03/04/20 23:23:11 5:52 6866 5015 nxtgenpho no APPLE 'PHONES 542 03/04/20 23:29:02 8:29 5282 6135 nxtgenpho ne APPLE 'PHONES 543 03/04/20 23:29:04 8:28 6135 4994 nxtgenpho ne APPLE 'PHONES 544 03/04/20 23:29:51 22:47 4980 1588 ims 545 03/04/20 23:37:32 4:06 6018 4936 nxtgenpho no APPLE 'PHONES 546 03/04/20 23:41:37 8:28 6755 6847 nxtgenpho no APPLE 'PHONES 547 03/04/20 23:41:38 8:28 6847 6467 nxtgenpho no APPLE 'PHONES 548 03/04/20 23:50:06 35:32 11569 7003 nxtgenpho no APPLE 'PHONES 549 03/04/20 23:54:57 24:22 9623 6213 ims 550 03/05/20 00:22:15 0:19 96 0 ims APPLE 'PHONES 551 03/05/20 00:23:33 25:46 20534 11770 ims 552 03/05/20 00:25:37 3:04 5117 6023 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170942 The information contained here is for use by authorized persons only and is not for general distribution. Page 22 EFTA01343000

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 alai= Conn. Time (UTC) Originating KT Bytes Up Bytes Apn Dn max INS! ISAPZZ Mori. 553 03/05/20 00:25:38 3:04 6023 4829 nxtgenpho ne APPLE 'PEONES 554 03/05/20 00:28:41 6:06 6068 6035 nxtgenpho ne APPLE 'PEONES 555 03/05/20 00:28:42 6:06 6035 5780 nxtgenpho ne APPLE 'PEONES 556 03/05/20 00:34:48 7:20 7430 4957 nxtgenpho ne APPLE 'PEONES 557 03/05/20 00:42:07 0:52 5221 6075 nxtgenpho ne APPLE 'PEONES 558 03/05/20 00:42:08 0:52 6075 4933 nxtgenpho no APPLE 'PEONES 559 03/05/20 00:43:00 2:32 6193 5009 nxtgonpho no APPLE IPEOII68 560 03/05/20 00:45:31 2:07 5118 6023 nxtgenpho ne APPLE !PHONES 561 03/05/20 00:45:33 2:06 6023 4830 nxtgenpho ne APPLE 'PHONES 562 03/05/20 00:47:40 5:43 16247 12433 nxtgenpho no APPLE 'PHONES 563 03/05/20 00:51:15 0:00 0 0 ims APPLE 'PHONES 564 03/05/20 00:51:24 11:26 31254 20844 ims 565 03/05/20 00:53:22 6:04 7012 10966 nxtgenpho no APPLE 'PHONES 566 03/05/20 00:53:23 6:04 10966 6724 nxtgenpho no APPLE 'PHONES 567 03/05/20 00:55:51 0:33 1723 0 ims 568 03/05/20 00:58:09 0:32 74020 62275 isms 569 03/05/20 00:59:27 8:23 6804 4951 nxtgenpho ne APPLE 'PHONES 570 03/05/20 01:07:12 22:51 10774 6954 isms 571 03/05/20 01:07:49 8:29 5113 6021 nxtgenpho ne APPLE 'PHONES 572 03/05/20 01:07:50 8:29 6021 4825 nxtgenpho ne APPLE 'PHONES 573 03/05/20 01:16:19 15:28 7603 5208 nxtgenpho ne APPLE 'PHONES 574 03/05/20 01:31:46 2:06 5784 6614 nxtgenpho no APPLE 'PHONES 575 03/05/20 01:31:47 2:06 6614 5496 nxtgenpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 23 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170943 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343001

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. cre AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 "IS= Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn IMMIX INSI MAKE MODEL 576 03/05/20 01:32:07 1:45 6262 6666 ims APPLE 'PHONES 577 03/05/20 01:32:08 1:45 6666 5998 ims APPLE 'PHONES 578 03/05/20 01:33:54 35:09 33154 14141 nxtgonpho ne APPLE 'PHONES 579 03/05/20 01:33:59 49:38 15602 8058 ims 580 03/05/20 02:09:03 27:21 708 1490 nxtgonpho ne APPLE 'PHONES 581 03/05/20 02:24:41 6:43 8962 7128 ims APPLE 'PHONES 582 03/05/20 02:31:24 60:00 12336 4468 ims APPLE 'PHONES 583 03/05/20 02:36:23 2:33 5583 6387 nxtgonpho ne APPLE 'PHONES 584 03/05/20 02:36:24 2:33 6387 5295 nxtgonpho ne APPLE 'PHONES 585 03/05/20 02:38:56 12:47 5709 6616 nxtgonpho no APPLE 'PHONES 586 03/05/20 02:38:57 12:47 6616 5421 nxtgonpho no APPLE 'PHONES 587 03/05/20 02:51:44 2:18 0 0 nxtgonpho no APPLE 'PHONES 588 03/05/20 02:54:01 3:01 5535 6475 nxtgonpho ne APPLE 'PHONES 589 03/05/20 02:54:02 3:01 6475 5247 nxtgonpho ne APPLE 'PHONES 590 03/05/20 02:57:03 2:04 5435 6401 nxtgonpho no APPLE 'PHONES 591 03/05/20 02:57:04 2:04 6401 5147 nxtgonpho no APPLE 'PHONES 592 03/05/20 02:59:08 13:23 6613 5266 nxtgonpho ne APPLE 'PHONES 593 03/05/20 03:12:30 8:47 5499 6678 nxtgonpho ne APPLE 'PHONES 594 03/05/20 03:12:31 8:47 6678 5211 nxtgonpho ne APPLE 'PHONES 595 03/05/20 03:21:18 10:02 8179 5715 nxtgonpho ne APPLE 'PHONES 596 03/05/20 03:31:20 26:07 8414 6032 nxtgonpho ne APPLE 'PHONES 597 03/05/20 03:31:24 2:30 0 0 ims APPLE 'PHONES 598 03/05/20 03:41:55 22:09 10019 6550 ims 599 03/05/20 03:57:28 4:01 7810 5394 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170944 The information contained here is for use by authorized persons only and is not for general distribution. Page 24 EFTA01343002

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cm% 1/4-.00 AT&T Run Date,: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Date Conn. Time (OTC) 600 03/05/20 04:01:29 601 03/05/20 04:09:31 602 03/05/20 04:10:48 603 03/05/20 04:17:53 604 03/05/20 04:18:50 605 03/05/20 04:18:51 606 03/05/20 04:27:44 607 03/05/20 04:27:45 608 03/05/20 04:38:18 609 03/05/20 04:54:28 610 03/05/20 04:59:22 611 03/05/20 05:00:01 612 03/05/20 05:00:02 613 03/05/20 05:02:07 614 03/05/20 05:09:08 615 03/05/20 05:12:23 616 03/05/20 05:18:36 617 03/05/20 05:18:37 618 03/05/20 05:20:41 619 03/05/20 05:34:29 620 03/05/20 05:34:58 621 03/05/20 05:39:49 Originating Number ET Bytes Bytes Apn flat ItC3I MAKE MODEL Up Dn 16:23 7079 6004 nxtgenpho ne APPLE 'PHONES 1:17 48 0 ims APPLE 'PHONES 43:41 13523 7927 ims APPLE 'PHONES 0:58 6388 5102 nxtgenpho ne APPLE 'PHONES 8:54 5584 6475 nxtgenpho ne APPLE 'PHONES 8:54 6475 5296 nxtgenpho ne APPLE 'PHONES 10:33 5438 6475 nxtgenpho ne APPLE 'PHONES 10:33 6475 6150 nxtgenpho ne APPLE 'PHONES 16:10 6658 5674 nxtgenpho ne APPLE 'PHONES 5:33 6030 5595 nxtgenpho ne APPLE 'PHONES 60:00 16731 9110 ims 2:05 5221 6075nmtgonphe ne APPLE 'PHONES 2:06 6075 4933 nxtgenpho ne APPLE 'PHONES 7:01 7430 4955 nxtgenpho ne APPLE 'PHONES 3:15 6866 5015 nxtgenpho ne APPLE 'PHONES 6:13 6080 4953 nxtgenpho ne APPLE 'PHONES 2:04 5281 6083 nxtgenpho ne APPLE 'PHONES 2:04 6083 4993 nxtgenpho ne APPLE 'PHONES 13:47 7603 5112 nxtgenpho ne APPLE 'PHONES 0:29 6231 5060 nxtgenpho ne APPLE 'PHONES 4:52 6806 4955 nxtgenpho ne APPLE 'PHONES 2:06 288 48 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 25 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. S0NY_GM_00170945 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343003

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. „sow AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 "MI= Conn. originating BT Time Number (OTC) Bytes Up Bytes Apn THE Dn IMSI IOR MODEL 622 03/05/20 05:39:51 2:05 48 0 nxtgenphe ne 3587080982063725 310410214827503 APPLE IPROME8 623 03/05/20 05:41:56 23:40 6364 5098 nxtgenphe ne APPLE IPROME8 624 03/05/20 05:59:22 15:46 0 0 ims 625 03/05/20 06:05:35 2:05 5221 6075 nxtgenphe ne APPLE IPHONE8 626 03/05/20 06:05:36 2:05 6075 4933 nxtgenphe ne APPLE 'PHONES 627 03/05/20 06:07:41 13:59 7847 5533 nxtgenphe ne APPLE 'PHONES 628 03/05/20 06:16:28 8:43 0 0 ims 629 03/05/20 06:21:40 4:18 6866 5017 nxtgenphe ne APPLE 'PHONES 630 03/05/20 06:25:58 14:03 7847 5582 nxtgenphe ne APPLE 'PHONES 631 03/05/20 06:30:52 47:56 23127 9750 ims 632 03/05/20 06:40:01 0:54 7546 5108 nxtgenphe ne APPLE 'PHONES 633 03/05/20 06:40:55 0:44 48 0 nxtgenphe ne APPLE 'PHONES 634 03/05/20 06:41:38 2:06 288 48 nxtgenphe ne APPLE 'PHONES 635 03/05/20 06:41:40 2:05 48 0 nxtgenphe ne APPLE 'PHONES 636 03/05/20 06:43:45 12:14 6193 5044 nxtgenphe ne APPLE !PHONES 637 03/05/20 06:55:58 2:17 5281 6135 nxtgenphe ne APPLE 'PHONES 638 03/05/20 06:56:00 2:16 6135 4993 nxtgenphe ne APPLE 'PHONES 639 03/05/20 06:58:16 22:26 7546 6684 nxtgenphe ne APPLE 'PHONES 640 03/05/20 07:08:46 1:37 0 0 ims 641 03/05/20 07:18:49 60:00 20702 10498 ims 642 03/05/20 07:34:11 10:14 8655 5731 nxtgenphe ne APPLE 'PHONES 643 03/05/20 08:18:49 3:30 0 0 ims 644 03/05/20 08:29:56 16:06 8407 6169 ims 645 03/05/20 08:49:39 9:48 8187 5998 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 26 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170946 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343004

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. c o . AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 "IS= Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn WANE MODEM 646 03/05/20 09:06:19 60:00 16685 9202 ims 647 03/05/20 10:06:19 16:47 0 0 ims 648 03/05/20 10:09:57 19:22 6191 5041 nxtgonpho no APPLE IPEOEW68 649 03/05/20 10:28:37 60:00 15269 8862 ims 650 03/05/20 10:29:19 14:38 5326 6248 nxtgonpho no APPLE 'PHONES 651 03/05/20 10:29:20 14:38 6248 5038 nxtgonpho no APPLE !PHONES 652 03/05/20 10:43:58 55:27 7625 8243 nxtgonpho no APPLE !PHONES 653 03/05/20 11:28:37 18:22 0 0 ims 654 03/05/20 11:39:26 60:00 12056 9665 nxtgonpho no APPLE !PHONES 655 03/05/20 11:48:45 4:26 0 0 ins APPLE !PHONES 656 03/05/20 11:53:11 0:00 0 0 ims APPLE !PHONES 657 03/05/20 11:53:11 0:00 0 0 ims APPLE !PHONES 658 03/05/20 12:00:53 60:00 19677 10140 ims 659 03/05/20 12:39:26 53:45 36378 21287 nxtgonpho no APPLE !PHONES 660 03/05/20 13:00:53 54:06 19612 10568 ims 661 03/05/20 13:22:35 1:24 123162 257851 ims 662 03/05/20 13:33:11 0:21 5381 6256 nxtgonpho no APPLE !PEONES 663 03/05/20 13:33:12 0:21 6256 5093 nxtgonpho no APPLE !PEONES 664 03/05/20 13:33:33 32:14 9598 8370 nxtgonpho no APPLE !PEONES 665 03/05/20 13:57:56 7:15 17920 16272 ims APPLE !PEONES 666 03/05/20 14:04:43 0:17 0 24131 ims APPLE !PEONES 667 03/05/20 14:05:11 60:00 15448 4980 ims APPLE !PEONES 668 03/05/20 14:05:46 2:07 5554 9296 nxtgonpho no APPLE !PEONES 669 03/05/20 14:05:48 2:06 9296 5266 nxtgonpho no APPLE !PEONES 670 03/05/20 14:07:54 35:19 26806 16478 nxtgonpho no APPLE IPEONE8 671 03/05/20 14:43:12 2:07 5222 6075 nxtgonpho no APPLE IPEONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 27 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SONY_GM_00170947 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343005

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. dro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 NM= Conn. Time (OTC) Originating ET Bytes up Bytes Apn Dn EMU IMSI MAKS MODEL 672 03/05/20 14:43:13 2:07 6075 4934 nxtgenpho ne APPLE 'PEONES 673 03/05/20 14:45:20 9:32 6659 6136 nxtgenpho ne APPLE 'PROMS 674 03/05/20 14:54:52 2:02 12120 10092 nxtgenpho ne APPLE 'PROMS 675 03/05/20 14:56:54 2:09 5221 6023 nxtgenpho ne APPLE IPE06E6 676 03/05/20 14:56:55 2:09 6023 4933 nxtgenpho ne APPLE 'PHONES 677 03/05/20 14:59:05 13:21 7223 5581 nxtgenpho ne APPLE 'PHONES 678 03/05/20 15:05:11 56:38 38340 20760 ims APPLE !PHONES 679 03/05/20 15:12:25 2:07 5116 6023 nxtgenpho ne APPLE !PHONES 680 03/05/20 15:12:27 2:06 6023 4828 nxtgenpho ne APPLE !PHONES 681 03/05/20 15:14:33 15:06 33334 21642 nxtgenpho ne APPLE !PHONES 682 03/05/20 15:29:38 2:07 5117 6023 nxtgenpho ne APPLE !PHONES 683 03/05/20 15:29:39 2:07 6023 4829 nxtgenpho ne APPLE !PHONES 684 03/05/20 15:31:46 13:19 7667 5217 nxtgenpho ne APPLE !PHONES 685 03/05/20 15:45:05 8:11 5220 6023 nxtgenpho ne APPLE !PHONES 686 03/05/20 15:45:06 8:11 6023 4932 nxtgenpho ne APPLE !PHONES 687 03/05/20 15:49:25 0:22 0 1254 ims APPLE !PHONES 688 03/05/20 15:49:58 0:07 0 1548 ims APPLE !PHONES 689 03/05/20 15:53:17 15:34 12631 10152 nxtgenpho ne APPLE !PHONES 690 03/05/20 16:02:35 60:00 11799 7322 ims 691 03/05/20 16:08:50 2:18 5221 6023 nxtgenpho ne APPLE !PHONES 692 03/05/20 16:08:51 2:18 6023 4933 nxtgenpho ne APPLE !PHONES 693 03/05/20 16:11:08 1:25 5221 6075 nxtgenpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 28 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170948 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343006

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. cro AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 NM= Conn. Time (OTC) Originating Dunbar ET Bytes Up Bytes Apn MOM II I MAKE Dn MODEL 694 03/05/20 16:11:09 1:25 6075 4933 nxtgonpho no APPLE 'PHONES 695 03/05/20 16:12:34 0:49 12388 5896 nxtgenpho no APPLE 'PHONES 696 03/05/20 16:13:22 14:41 5839 6939 nxtgonpho no APPLE 'PHONES 697 03/05/20 16:13:23 14:41 6939 5551 nxtgonpho no APPLE 'PHONES 698 03/05/20 16:28:04 1:36 0 0 nxtgenpho no APPLE 'PHONES 699 03/05/20 16:29:39 1:14 5218 6073 nxtgonpho no APPLE 'PHONES 700 03/05/20 16:29:40 1:14 6073 4930 nxtgonpho no APPLE 'PHONES 701 03/05/20 16:30:54 10:00 9273 7536 nxtgonpho no APPLE 'PHONES 702 03/05/20 16:40:53 8:56 12853 8449 nxtgonpho no APPLE 'PHONES 703 03/05/20 16:40:54 8:56 8449 12565 nxtgonpho no APPLE 'PHONES 704 03/05/20 16:49:50 0:05 0 Onxtgonpho ne APPLE 'PHONES 705 03/05/20 16:50:18 23:43 11746 8806 nxtgonpho no APPLE 'PHONES 706 03/05/20 17:02:35 60:00 30884 17448 imo 707 03/05/20 17:14:00 0:51 5118 6023 nxtgonpho no APPLE 'PHONES 708 03/05/20 17:14:02 0:50 6023 4830 nxtgonpho no APPLE 'PHONES 709 03/05/20 17:14:10 0:37 24028 73435 imo 710 03/05/20 17:14:52 9:12 39449 28212 nxtgonpho no APPLE 'PHONES 711 03/05/20 17:15:25 0:08 3465 13132 imo 712 03/05/20 17:24:04 6:01 14748 12013 nxtgonpho no APPLE 'PHONES 713 03/05/20 17:30:04 2:10 8275 9000 nxtgonpho no APPLE 'PHONES 714 03/05/20 17:30:06 2:09 9000 7891 nxtgonpho no APPLE 'PHONES 715 03/05/20 17:32:15 48:36 34297 24332 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 29 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170949 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343007

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ct, `-- .4 AT&T Run Data: Run Timm: Data usage For: Item Conn. Data 06/17/2020 Conn. Tame (OTC: Originating Number BT Bytes Up Bytes Apn DMZ I16I MANZ Dn MODEL 716 03/05/20 18:02:35 52:23 43408 28432 ims 717 03/05/20 18:20:51 1:46 5318 6071 nxtgenpho ne APPLE 'PEONES 718 03/05/20 18:20:52 1:46 6071 4934 nxtgenpho ne APPLE 'PEONES 719 03/05/20 18:22:38 27:23 63753 41374 nxtgenpho ne APPLE 'PEONES 720 03/05/20 18:27:15 0:24 12736 49564 ims 721 03/05/20 18:28:56 0:24 15889 46520 ims 722 03/05/20 18:42:22 0:24 16574 44337 ims 723 03/05/20 18:50:00 2:09 5113 6073 nxtgenpho ne APPLE 'PHONES 724 03/05/20 18:50:01 2:09 6073 4825 nxtgenpho ne APPLE IPHONE8 725 03/05/20 18:52:10 1:34 6020 4941 nxtgenpho ne APPLE IPHONE8 726 03/05/20 18:53:43 15:50 377833 92026 nxtgenpho ne APPLE IPHONE8 727 03/05/20 18:53:44 15:50 91974 379105 nxtgenpho ne APPLE IPHONE8 728 03/05/20 18:54:57 10:21 7160 6814 ims APPLE IPHONE8 729 03/05/20 18:54:58 10:21 6746 7004 ims APPLE IPHONE8 730 03/05/20 19:02:11 10:31 11538 6746 ims 731 03/05/20 19:05:18 4:15 6316 6646 ims APPLE IPHONE8 732 03/05/20 19:05:19 4:15 6646 5964 ims APPLE IPHONE8 733 03/05/20 19:09:34 16:58 56922 89719 nxtgenpho ne APPLE IPHONE8 734 03/05/20 19:09:37 16:55 8904 7985 ims APPLE IPHONE8 735 03/05/20 19:26:32 0:41 2654 4560 nxtgenpho ne APPLE IPHONE8 736 03/05/20 19:26:32 0:41 0 0 ims APPLE IPHONE8 737 03/05/20 19:27:13 0:42 3250 7682 nxtgenpho ne APPLE IPHONE8 738 03/05/20 19:27:13 0:42 0 0 ims APPLE IPHONE8 739 03/05/20 19:27:55 0:30 0 Onstgenpho ne APPLE IPHONE8 740 03/05/20 19:27:55 0:30 0 0 ims APPLE IPHONE8 741 03/05/20 19:28:25 21:30 1429910 18614505 nxtgenpho ne APPLE IPHONE8 742 03/05/20 19:28:25 60:00 7788 4128 ims APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 30 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00170950 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343008

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e s, AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 Conn. Originating ET Time Number (UTC) sytos Up Bytes Apn IN/LI IMSI MESE Dn MODEL 743 03/05/20 19:49:55 32:08 1214122 3567455 nxtgonphe no APPLE 'PEONES 744 03/05/20 20:22:03 5:52 351921 19649061 nxtgonphe no APPLE 'PEONES 745 03/05/20 20:27:55 35:39 1936311 18204765 nxtgonphe no APPLE 'PEONES 746 03/05/20 20:28:25 60:00 23956 16172 ims APPLE IPEONE8 747 03/05/20 20:38:36 9:14 1550472 1193028 ims APPLE IPHONE8 748 03/05/20 20:51:31 0:04 2449 10497 ims APPLE IPHONE8 749 03/05/20 21:03:34 20:51 824545 926983 nxtgonphe no APPLE !PHONES 750 03/05/20 21:24:25 9:16 676408 792894 nxtgonphe no APPLE !PHONES 751 03/05/20 21:28:25 5:16 0 0 ims APPLE !PHONES 752 03/05/20 21:33:41 0:50 0 Onxtgonphe no APPLE !PHONES 753 03/05/20 21:33:41 0:50 0 0 ims APPLE !PHONES 754 03/05/20 21:34:31 1:02 0 Onmtgonphe no APPLE !PHONES 755 03/05/20 21:34:31 1:02 0 0 ims APPLE !PHONES 756 03/05/20 21:35:33 1:43 0 Onmtgonphe no APPLE !PHONES 757 03/05/20 21:35:33 1:43 0 0 ims APPLE !PHONES 758 03/05/20 21:37:16 8:54 22653 43544 nxtgonphe no APPLE !PHONES 759 03/05/20 21:37:16 8:54 0 0 ims APPLE !PHONES 760 03/05/20 21:46:09 3:53 21998 14343 nxtgonphe no APPLE !PHONES 761 03/05/20 21:46:10 3:52 6246 6668 ims APPLE !PHONES 762 03/05/20 21:46:10 3:53 14343 21710 nxtgonphe no APPLE !PHONES 763 03/05/20 21:46:11 3:52 6668 5982 ims APPLE !PHONES 764 03/05/20 21:50:03 1:12 13504 14911 nxtgonphe no APPLE !PHONES 765 03/05/20 21:50:05 1:10 6666 5964 ims APPLE !PHONES 766 03/05/20 21:51:14 8:20 913741 108412 nxtgonphe no APPLE !PHONES 767 03/05/20 21:51:16 8:18 6226 6774 ims APPLE !PHONES 768 03/05/20 21:51:16 8:19 108412 927006 nxtgonphe no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170951 The information contained here is for use by authorized persons only and is not for general distribution. Page 31 EFTA01343009

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ‘•- .s. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn DMZ INSI MAKE MODEL 769 03/05/20 21:51:17 8:18 6666 5962 isms APPLE 'PHONES 770 03/05/20 21:59:34 1:24 15373 13467 nxtgenpho ne APPLE 'PHONES 771 03/05/20 21:59:35 1:23 6316 6778 isms APPLE 'PHONES 772 03/05/20 21:59:35 1:24 13467 20245 nxtgenpho ne APPLE 'PHONES 773 03/05/20 21:59:37 1:22 6670 5964 isms APPLE 'PHONES 774 03/05/20 22:00:58 5:42 5220 6023 nxtgenpho ne APPLE 'PHONES 775 03/05/20 22:00:59 5:42 6023 4932 nxtgenpho ne APPLE 'PHONES 776 03/05/20 22:01:03 10:56 8523 6446 isms 777 03/05/20 22:04:31 2:09 7114 6846 isms APPLE 'PHONES 778 03/05/20 22:04:32 2:09 6738 6850 isms APPLE 'PHONES 779 03/05/20 22:06:41 0:06 0 0nxtgonpho ne APPLE 'PHONES 780 03/05/20 22:08:13 16:17 20308 20681 nxtgenpho ne APPLE 'PHONES 781 03/05/20 22:08:14 14:56 6262 6782 isms APPLE 'PHONES 782 03/05/20 22:08:14 16:16 20681 39271 nxtgenpho ne APPLE 'PHONES 783 03/05/20 22:08:15 14:56 6674 5998 isms APPLE 'PHONES 784 03/05/20 22:23:11 0:00 0 0 isms APPLE 'PHONES 785 03/05/20 22:23:12 1:18 6263 6674 isms APPLE 'PHONES 786 03/05/20 22:23:13 1:19 6674 5999 isms APPLE 'PHONES 787 03/05/20 22:24:32 5:58 9126 5538 nxtgenpho ne APPLE 'PHONES 788 03/05/20 22:24:34 4:29 8898 8820 isms APPLE 'PHONES 789 03/05/20 22:29:07 1:23 7958 6082 isms APPLE 'PHONES 790 03/05/20 22:30:29 3:34 7691 8133 nxtgenpho ne APPLE 'PHONES 791 03/05/20 22:30:31 3:32 7136 6852 isms APPLE 'PHONES 792 03/05/20 22:30:31 3:33 8133 9592 nxtgenpho ne APPLE 'PHONES 793 03/05/20 22:30:32 3:32 6744 6872 isms APPLE 'PHONES 794 03/05/20 22:33:37 0:33 144 144 isms APPLE 'PHONES 795 03/05/20 22:34:04 15:16 19427 29128 nxtgenpho ne APPLE 'PHONES 796 03/05/20 22:34:10 1:36 8070 6138 isms APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170952 The information contained here is for use by authorized persons only and is not for general distribution. Page 32 EFTA01343010

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. cro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytos Up Bytes Apn Dn L@I INSI MAKE MODEL 797 03/05/20 22:34: 1:36 8006 6138 ism APPLE 'PHONES 798 03/05/20 22:35: 6:23 3408 1340 ism APPLE 'PHONES 799 03/05/20 22:42:1 7:11 3344 1464 ism APPLE 'PHONES 800 03/05/20 22:42:1 7:11 3280 1464 ism APPLE 'PHONES 801 03/05/20 22:49: 17:10 7929 6401 nxtgenpho ne APPLE 'PHONES 802 03/05/20 22:49: 17:09 6458 7404 ism APPLE 'PHONES 803 03/05/20 22:49: 17:10 6401 8586 nxtgenpho ne APPLE 'PHONES 804 03/05/20 22:49: 17:09 7404 6214 ism APPLE 'PHONES 805 03/05/20 22:54: 7:36 16014 11770 ism 806 03/05/20 23:06: 42:29 1120699 1146855 nxtgenpho ne APPLE 'PHONES 807 03/05/20 23:06: 42:26 10802 10151 ism APPLE 'PHONES 808 03/05/20 23:48: 12:42 13580 47470 nxtgenpho ne APPLE 'PHONES 809 03/05/20 23:49: 12:42 46210 16744 nxtgenpho ne APPLE 'PHONES 810 03/05/20 23:49: 12:40 6248 31006 ism APPLE 'PHONES 811 03/05/20 23:49: 12:40 6670 6092 ism APPLE 'PHONES 812 03/05/20 23:56: 60:00 18177 10135 ism 813 03/06/20 00:01: 39:39 13061 11748 nxtgenpho ne APPLE 'PHONES 814 03/06/20 00:41: 60:00 14747 12058 nxtgenpho ne APPLE 'PHONES 815 03/06/20 00:56: 48:52 7032 2772 ims 816 03/06/20 01:41: 60:00 11245 7612 nxtgenpho ne APPLE 'PHONES 817 03/06/20 01:47: 20:33 10047 6550 ism APPLE 'PHONES 818 03/06/20 02:08: 0:01 0 0 ism APPLE 'PHONES 819 03/06/20 02:08: 0:01 0 0 ims APPLE 'PHONES 820 03/06/20 02:08: 4:01 8573 6344 ism 821 03/06/20 02:14: 21:21 8307 6048 isms 822 03/06/20 02:38: 41:02 16240 8162 isms 823 03/06/20 02:41: 60:00 1322 1155 nxtgenpho ne APPLE 'PHONES 824 03/06/20 03:25: 7:24 0 0 isms 825 03/06/20 03:37: 60:00 16650 9085 isms AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 33 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170953 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343011

P.020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cm% :•-es AT&T Run Date: Run Tine: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC/ Originating Number 22 Bytes up Bytes Apn 0n IB@I IMSI MAKE MODEL 826 03/06/20 03:41:22 60:00 49981 10993 nxtgenpho ne APPIZ 'PROMS 827 03/06/20 04:37:25 22:28 4964 1588 ims 828 03/06/20 04:41:22 60:00 1433 1513 nxtgenpho ne APPIZ 'PROMS 829 03/06/20 05:06:31 30:16 8371 6046 ims 830 03/06/20 05:41:22 60:00 1270 1050 nxtgenpho ne APPIZ 'PROMS 831 03/06/20 05:45:39 34:57 8373 6162 ims 832 03/06/20 06:24:30 5:56 0 0 ims 833 03/06/20 06:37:01 60:00 16695 9034 ims 834 03/06/20 06:41:22 60:00 1211 735 nxtgenpho ne APPLE 'PHONES 835 03/06/20 07:37:01 13:53 0 0 ims 836 03/06/20 07:41:22 60:00 1270 1050 nxtgenpho ne APPLE 'PHONES 837 03/06/20 07:52:58 11:23 8199 5962 ims 838 03/06/20 08:07:51 60:00 11735 7554 ims 839 03/06/20 08:41:22 60:00 865 525 nxtgenpho ne APPLE 'PHONES 840 03/06/20 09:07:51 13:42 3424 1340 ims 841 03/06/20 09:25:04 26:28 8311 6214 ims 842 03/06/20 09:41:22 60:00 1038 630 nxtgenpho ne APPLE 'PHONES 843 03/06/20 09:58:33 60:00 11769 7519 ims 844 03/06/20 10:41:22 60:00 986 589 nxtgenpho ne APPLE 'PHONES 845 03/06/20 10:58:33 13:38 3532 1324 ims 846 03/06/20 11:14:49 60:00 11623 7556 ims 847 03/06/20 11:41:22 5:25 510 3082 nxtgenpho ne APPLE 'PHONES 848 03/06/20 11:46:46 1:46 5440 6475 nxtgenpho ne APPLE 'PHONES 849 03/06/20 11:46:47 1:46 6475 5152 nxtgenpho ne APPLE 'PHONES 850 03/06/20 11:48:33 14:26 7666 5214 nxtgenpho ne APPLE 'PHONES 851 03/06/20 12:02:58 12:46 28108 29261 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170954 The information contained here is for use by authorized persons only and is not for general distribution. Page 34 EFTA01343012

PRI020 MOBILITY 4111. AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm •3/4-s "-a. AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in 41citsot il° OTC. Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Tame Number (OTC) Bytes Up Bytes Apn Dn ZIOLI INSI NAAS MODEL 852 03/06/20 12:02:59 12:46 29261 27532 nxtgonphe ne 3587080982063725 310410214827503 APPLE 'PHONES 853 03/06/20 12:14:49 17:54 5072 1572 ims 854 03/06/20 12:15:45 18:55 8345 5919nmtgonphe ne 3 APPLE !PHONES 855 03/06/20 12:34:17 60:00 15887 8782 ims 856 03/06/20 12:34:40 2:06 5931 10717 nxtgonphe ne 3 APPLE !PHONES 857 03/06/20 12:34:41 2:06 10717 5643 nxtgonphe ne 3 APPLE !PHONES 858 03/06/20 12:36:47 60:00 8424 7148 nxtgonphe ne 3 APPLE !PHONES 859 03/06/20 13:34:17 33:45 3424 1324 ims 860 03/06/20 13:36:47 60:00 2159 5574 nxtgonphe ne 3 APPLE !PHONES 861 03/06/20 14:11:36 33:17 11410 7501 ims 3 APPLE !PHONES 862 03/06/20 14:36:47 31:10 11189 6538 nxtgonphe ne 3 APPLE !PHONES 863 03/06/20 14:44:53 28:56 20364 11140 ims 3 APPLE !PHONES 864 03/06/20 15:07:56 1:30 5668 7321 nxtgonphe ne 3 APPLE !PHONES 865 03/06/20 15:07:57 1:30 7321 5380 nxtgonphe ne 3 APPLE !PHONES 866 03/06/20 15:08:13 1:12 183147 212153 ims 3 APPLE !PHONES 867 03/06/20 15:09:27 4:49 7244 5221 nxtgonphe ne 3 APPLE !PHONES 868 03/06/20 15:14:15 8:18 5583 6403nmtgonphe ne 3 APPLE !PHONES 869 03/06/20 15:14:16 8:18 6403 5295 nxtgonphe ne 3 APPLE !PHONES 870 03/06/20 15:15:16 4:51 8435 6304 ims 871 03/06/20 15:22:34 3:06 7244 5269nmtgonphe ne 3 APPLE !PHONES 872 03/06/20 15:22:49 10:49 8203 5938 ims 873 03/06/20 15:25:40 4:52 5644 6401 nxtgonphe ne 3 APPLE !PHONES 874 03/06/20 15:25:41 4:52 6401 5356 nxtgonphe ne 3 APPLE !PHONES 875 03/06/20 15:30:33 28:38 19589 13840 nxtgonphe ne 3 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 35 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170955 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343013

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. 1/4-00 AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 UM= Conn. Time (OTC) Originating ET Bytes Up Bytes Alm Dn IUME MOD= 876 03/06/20 15:40:47 4:29 7400 6103 ims APPLE !PEONES 877 03/06/20 15:45:16 12:01 5072 1572 ims APPLE !PEONES 878 03/06/20 15:58:22 0:24 8256 7072 ims APPLE !PEONES 879 03/06/20 15:58:46 60:00 10688 4144 ims APPLE !PEONES 880 03/06/20 15:59:10 2:07 5236 6256nmtgonphe no APPLE !PEONES 881 03/06/20 15:59:11 2:07 6256 4948 nxtgonphe ne APPLE !PEONES 882 03/06/20 16:01:18 44:18 16273 12620 nxtgonphe ne APPLE !PEONES 883 03/06/20 16:45:35 2:10 10586 7639 nxtgonphe ne APPLE 'PHONES 884 03/06/20 16:45:36 2:10 7639 10298 nxtgonphe no APPLE !PHONES 885 03/06/20 16:47:46 60:00 12772 15399 nxtgonphe no APPLE !PHONES 886 03/06/20 16:58:46 2:08 0 0 ims APPLE !PHONES 887 03/06/20 17:47:46 24:54 369 1125 nxtgonphe no APPLE !PHONES 888 03/06/20 18:01:13 3:34 11022 6113 ims 889 03/06/20 18:12:39 30:26 36081 41844 nxtgonphe no APPLE !PHONES 890 03/06/20 18:12:40 30:26 41844 39403 nxtgonphe no APPLE !PHONES 891 03/06/20 18:12:47 11:23 0 0 ism 892 03/06/20 18:23:51 19:14 6426 8082 ism APPLE !PHONES 893 03/06/20 18:23:52 19:14 8082 6162 ism APPLE !PHONES 894 03/06/20 18:24:10 60:00 16795 9035 ism 895 03/06/20 18:43:06 6:32 9119 5813 nxtgenpho no APPLE !PHONES 896 03/06/20 18:49:37 4:09 7995 10045 nxtgonphe ne APPLE !PHONES 897 03/06/20 18:49:38 4:10 10045 7611 nxtgonphe ne APPLE !PHONES 898 03/06/20 18:53:48 3:51 15430 12196 nxtgonphe ne APPLE !PHONES 899 03/06/20 18:57:38 8:24 7732 18371 nxtgonphe ne APPLE !PHONES 900 03/06/20 18:57:40 8:23 18371 7444 nxtgonphe APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 36 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170956 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343014

901 03/06/20 19:06:03 902 03/06/20 19:13:16 903 03/06/20 19:14:19 904 03/06/20 19:14:20 905 03/06/20 19:16:29 906 03/06/20 19:24:10 907 03/06/20 19:48:01 908 03/06/20 19:52:19 909 03/06/20 19:52:20 910 03/06/20 19:53:31 911 03/06/20 19:57:58 912 03/06/20 19:57:59 913 03/06/20 20:02:36 914 03/06/20 20:06:16 915 03/06/20 20:19:03 916 03/06/20 20:19:03 917 03/06/20 20:19:18 918 03/06/20 20:23:11 919 03/06/20 20:23:12 920 03/06/20 20:43:57 921 03/06/20 20:43:58 922 03/06/20 20:47:23 923 03/06/20 20:47:28 924 03/06/20 20:48:27 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 1/4-is AT&T Run Date: Run Tine: Data Usage For: 06/17/2020 Item Conn. Conn. Originating ST Bytes Bytes Apn DELI IMSI IUME MODEL Date Tine Number Up Dn (UTC) 7:13 8502 6668 nxtgenpho APPLE 'PEONES ne 1:04 6478 5616 nxtgonpho APPLE 'PEONES no 2:09 5117 6075 nxtgonpho APPLE IPECME8 no 2:09 6075 4829 nxtgonpho APPLE 'PHONED no 35:51 7480 6950 nxtgenpho APPLE 'PHONED ne 21:10 3424 1340 ims 31:02 23529 15801 ims APPLE 'PHONES 1:11 7184 7637 nxtgenpho APPLE 'PHONES ne 1:11 7637 6896 nxtgenpho APPLE 'PHONES ne 4:27 9262 7982 nxtgenpho APPLE 'PHONES ne 8:17 10717 21377 nxtgenpho APPLE 'PHONES ne 8:17 21377 10429 nxtgenpho APPLE 'PHONES ne 0:25 13104 53930 ims 16:56 14116 29041 nxtgenpho APPLE 'PHONES ne 0:15 6520 1432 ims APPLE 'PHONES 0:15 2920 1432 ims APPLE 'PHONES 12:10 3424 1324 ims APPLE 'PHONES 24:11 394055 54947 nxtgenpho APPLE 'PHONES ne 24:11 54947 400921 nxtgenpho APPLE 'PHONES ne 3:25 6245 6668 ims APPLE 'PHONES 3:25 6668 5981 ims APPLE 'PHONES 1:05 0 Onstgonpho APPLE 'PHONES no 1:00 11916 9299 ims APPLE 'PHONES 5:26 192 Onstgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170957 The information contained here is for use by authorized persons only and is not for general distribution. Page 37 EFTA01343015

MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 SS= Item Conn. Date Conn. Time (OTC) Originating number ET Bytes Up Bytes Apn Dn MBAI INBI 925 03/06/20 20:48:28 5:25 6572 6657 nxtgonpho ne 926 03/06/20 20:48:28 5:26 0 0 nxtgonpho ne 927 03/06/20 20:48:29 5:25 6657 6284 nxtgonpho no 928 03/06/20 20:48:35 60:00 95655 55560 ims 929 03/06/20 20:51:21 1:02 137665 211390 ims 930 03/06/20 20:53:54 10:42 6979 5113 nxtgonpho no 931 03/06/20 21:03:26 0:13 0 22616 ims 932 03/06/20 21:03:56 0:05 0 14202 ims 933 03/06/20 21:04:30 0:19 18001 51945 ims 934 03/06/20 21:04:35 3:32 5374 9015 nxtgonpho ne 935 03/06/20 21:04:36 3:32 9015 5086 nxtgonpho ne 936 03/06/20 21:08:08 1:34 7428 4951 nxtgonpho ne 937 03/06/20 21:09:30 0:53 98149 136719 ims 938 03/06/20 21:09:41 2:20 5116 6023 nxtgonpho ne 939 03/06/20 21:09:42 2:20 6023 4828 nxtgonpho ne 940 03/06/20 21:12:01 2:32 192 0 nxtgonpho no 941 03/06/20 21:12:02 2:31 5222 6075 nxtgonpho no 942 03/06/20 21:12:03 2:32 0 0 nxtgonpho no 943 03/06/20 21:12:03 2:32 6075 4934 nxtgonpho no 944 03/06/20 21:14:34 1:26 6212 6824 nxtgonpho ne 945 03/06/20 21:14:35 1:26 6824 5924 nxtgonpho no 946 03/06/20 21:16:01 1:08 6400 5239 nxtgonpho no 947 03/06/20 21:17:09 20:41 16484 135032 nxtgonpho ne BOAR Belt APPLE IPHONE8 APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 38 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170958 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343016

pm. MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ce. ‘•-. 00 AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 948 03/06/20 949 03/06/20 950 03/06/20 951 03/06/20 952 03/06/20 953 03/06/20 954 03/06/20 955 03/06/20 956 03/06/20 957 03/06/20 958 03/06/20 959 03/06/20 960 03/06/20 961 03/06/20 962 03/06/20 963 03/07/20 964 03/07/20 965 03/07/20 966 03/07/20 967 03/07/20 968 03/07/20 969 03/07/20 970 03/07/20 971 03/07/20 972 03/07/20 06/17/2020 Conn. Time (OTC) 21:17:10 21:32:33 21:37:51 21:48:35 21:50:54 21:50:55 21:58:10 22:10:04 22:13:03 22:58:10 23:13:03 23:37:22 23:37:36 23:56:38 23:58:10 00:03:08 00:03:24 00:06:49 00:06:50 00:15:07 00:31:35 00:31:36 00:52:34 00:56:07 00:56:08 Originating ET Bytes Bytes Apn ENE! INSI NAAS MODEL Up Dn 20:41 135032 16196 nxtgenpho ne APPLE !PHONES 1:15 142654 181807 ims 13:04 0 Onmtgonpho ne APPLE !PHONES 20:48 0 108 ims 7:15 192 0 nottgonpho ne APPLE !PHONES 7:15 0 Onmtgonpho ne APPLE !PHONES 60:00 0 0 nxtgenpho ne APPLE !PHONES 0:00 0 0 ims APPLE !PHONES 60:00 15339 9716 ims 60:00 0 0 nxtgenpho ne APPLE !PHONES 23:49 3532 1448 ims 0:00 0 0 ims APPLE !PHONES 12:30 10990 7899 ims 3:34 12230 6730 ims 8:40 0 Onactgonpho ne APPLE !PHONES 0:16 8078 6944 ims APPLE !PHONES 60:00 12120 4328 ims APPLE !PHONES 8:17 192 Onactgonpho ne APPLE !PHONES 8:17 0 0 nxtgenphe ne APPLE !PHONES 16:29 0 0 nxtgenphe ne APPLE !PHONES 20:57 192 0 nxtgenphe ne APPLE !PHONES 20:57 0 0 nxtgenphe ne APPLE !PHONES 3:34 0 0 nxtgenphe ne APPLE !PHONES 2:06 192 0 nxtgenphe ne APPLE !PHONES 2:06 0 0 nxtgenphe APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 39 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170959 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343017

pu020 MOBILITY illir AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm 1/4...r2s 4' s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Data: Run Tim: Data usage For: Item Conn. Data 06/17/2020 Conn. originating Er Ti.. number (OTC) Bytes up Bytes Apn Dn 7:11B2 INSI MAKE MODEL 973 03/07/20 00:58:14 39:51 0 0nxtgenpho ne APPLE 'PHONES 974 03/07/20 01:03:24 0:24 0 0 ims APPLE 'PHONES 975 03/07/20 01:19:41 4:34 8150 6944 ims APPLE 'PHONES 976 03/07/20 01:24:15 8:15 12056 6904 ims APPLE 'PHONES 977 03/07/20 01:33:01 0:45 17026 8556 ims 978 03/07/20 01:34:01 16:43 9644 6054 ims 979 03/07/20 01:38:05 3:37 0 0nxtgenpho ne APPLE 'PHONES 980 03/07/20 01:41:41 3:20 192 0nxtgenpho ne APPLE 'PHONES 981 03/07/20 01:41:42 3:20 0 0nxtgenpho ne APPLE 'PHONES 982 03/07/20 01:45:02 60:00 0 0nxtgenpho ne APPLE 'PHONES 983 03/07/20 01:56:42 0:00 0 0 ims APPLE 'PHONES 984 03/07/20 01:56:50 34:11 11647 9620 ims 985 03/07/20 02:34:49 0:00 0 0 ims APPLE 'PHONES 986 03/07/20 02:35:17 2:31 9694 6126 ims 987 03/07/20 02:42:07 60:00 18887 9464 ims 988 03/07/20 02:45:02 60:00 0 0nxtgenpho ne APPLE 'PHONES 989 03/07/20 03:42:07 1:22 0 0 ims 990 03/07/20 03:45:02 60:00 0 0nxtgenpho ne APPLE 'PHONES 991 03/07/20 03:47:37 3:47 9867 6478 ims 992 03/07/20 03:55:04 16:39 8367 6072 ims 993 03/07/20 04:13:11 60:00 15051 8988 ims 994 03/07/20 04:45:02 60:00 0 0nxtgenpho ne APPLE 'PHONES 995 03/07/20 05:13:11 59:03 6848 2664 ims 996 03/07/20 05:45:02 0:02 0 0nxtgenpho ne APPLE 'PHONES 997 03/07/20 05:45:06 60:00 0 0nxtgenpho ne APPLE 'PHONES 998 03/07/20 06:16:12 6:17 8203 6000 ims 999 03/07/20 06:31:28 60:00 15055 8878 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 40 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170960 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343018

MOBILITY 1000 03/07/20 06:45:0 60:00 0 Onmtgonpho ne 3587080982063725 1001 03/07/20 07:31:2 24:58 3408 1448 ims -1 1002 03/07/20 07:45:0 60:00 0 Onmtgonpho ne 3587080982063725 1003 03/07/20 08:02:5 3:28 8315 6122 ims -1 1004 03/07/20 08:11:0, 60:00 16811 9252 ims -1 1005 03/07/20 08:45:0 60:01 0 Onmtgonpho ne 3587080982063725 1006 03/07/20 09:11:0, 5:47 0 0 ims -1 1007 03/07/20 09:20:1! 60:00 18679 10125 ims -1 1008 03/07/20 09:45:0 60:00 0 Onmtgonpho ne 3587080982063725 1009 03/07/20 10:20:1! 37:07 3424 1324 ims -1 1010 03/07/20 10:45:0 60:00 0 Onmtgonpho ne 3587080982063725 1011 03/07/20 11:05:2 22:12 8311 6104 ims -1 1012 03/07/20 11:32:5 0:00 0 0 ims 3587080982063725 1013 03/07/20 11:35:3 12:17 8455 6338 ims -1 1014 03/07/20 11:45:0 60:00 0 Onmtgonpho ne 3587080982063725 1015 03/07/20 11:51:5! 56:14 21443 9826 ims -1 1016 03/07/20 12:45:0 60:00 0 Onmtgonpho no 3587080982063725 1017 03/07/20 12:48:0' 6:31 8453 6214 ims -1 1018 03/07/20 12:57:2: 47:41 13399 7751 ims -1 1019 03/07/20 13:45:0 0:01 0 Onxtgonpho ne 3587080982063725 1020 03/07/20 13:45:1 14:28 0 0 nxtgonpho no 3587080982063725 1021 03/07/20 13:47:3 60:00 17165 9495 ims -1 1022 03/07/20 13:59:4 60:00 0 0 nxtgonpho no 3587080982063725 1023 03/07/20 14:47:3 38:17 5072 1572 ims -1 1024 03/07/20 14:59:4 12:27 0 0 nxtgonpho ne 3587080982063725 1025 03/07/20 15:12:0 8:21 192 Onxtgonpho ne 3587080982063725 1026 03/07/20 15:12:0 8:20 0 Onxtgonpho 3587080982063725 ne ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cito AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Conn. Originating ET Bytes Bytes Apn IMEI IASI ISMS MODEL Date Time Number Up Dn (OTC/ APPLE 'PEONES APPLE 'PEONES APPLE 'PEONES APPLE 'PEONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170961 The information contained here is for use by authorized persons only and is not for general distribution. Page 41 EFTA01343019

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. 1/4.T. AT&T Run Date: Run Time: Data Usage For: 06/17/2020 Item Conn. Conn. Date Tine (UTC) 1027 03/07/20 15:20:28 1028 03/07/20 15:32:55 1029 03/07/20 15:33:04 1030 03/07/20 15:59:08 1031 03/07/20 16:18:14 1032 03/07/20 16:18:18 1033 03/07/20 16:19:05 1034 03/07/20 16:19:06 1035 03/07/20 16:20:58 1036 03/07/20 16:23:56 1037 03/07/20 16:23:57 1038 03/07/20 16:26:06 1039 03/07/20 16:36:56 1040 03/07/20 16:37:11 1041 03/07/20 16:49:40 1042 03/07/20 16:49:42 1043 03/07/20 16:57:59 1044 03/07/20 16:59:00 1045 03/07/20 16:59:01 1046 03/07/20 17:01:18 1047 03/07/20 17:01:19 1048 03/07/20 17:07:25 1049 03/07/20 17:11:22 Originating Number ET Bytes Bytes Apn Up Dn 57:46 0 0 nactgonpho ne 0:00 0 0 Less 16:06 9491 6883 Las 16:46 11990 6446 Las 0:52 0 0nactgonpho ne 14:21 8203 5996 Las 1:52 192 0 nactgonpho ne 1:52 0 0 nactgonpho ne 2:59 0 0 nactgonpho ne 2:09 192 0 nactgonpho ne 2:09 0 0 nactgonpho ne 23:35 0 0 nactgonpho ne 0:15 7488 5572 Las 59:00 14696 8116 Las 8:18 192 0 nactgonpho ne 8:17 0 0 nactgonpho ne 1:02 0 0 nactgonpho no 2:18 192 0 nactgonpho no 2:18 0 0 nmtgonpho ne 6:06 192 0 nmtgonpho ne 6:06 0 0 nmtgonpho ne 3:58 0 0 nmtgonpho ne 8:26 192 0 nmtgonpho ne TAINT TItOT AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. MAKE MODEL APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES SDNY_GNL00170962 The information contained here is for use by authorized persons only and is not for general distribution. Page 42 EFTA01343020

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:38:58pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. cro AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating ?lumbar ET Bytes Up Bytes Apn Dn ENKE IM9I MAKE MODEL 1050 03/07/20 17:11:23 8:26 0 0 'mtg.:mph* no APPLE 'PHONES 1051 03/07/20 17:19:49 11:27 0 0 nstgempho no APPLE 'PHONES 1052 03/07/20 17:31:15 0:50 192 0 nstgempho no APPLE 'PHONES 1053 03/07/20 17:31:17 0:49 0 0 nstgempho no APPLE 'PHONES 1054 03/07/20 17:32:06 3:19 0 0 nxtgonpho no APPLE !PHONES 1055 03/07/20 17:35:24 2:06 192 0 nstgempho no APPLE 'PHONES 1056 03/07/20 17:35:25 2:06 0 0 nstgempho no APPLE !PHONES 1057 03/07/20 17:35:52 1:38 7318 8814 ims APPLE 'PHONES 1058 03/07/20 17:35:54 1:37 8814 7054 ims APPLE !PHONES 1059 03/07/20 17:36:11 60:00 45387 23034 ims 1060 03/07/20 17:37:31 34:49 0 Onstgonpho no APPLE !PHONES 1061 03/07/20 18:12:19 2:41 192 0 nstgempho no APPLE 'PHONES 1062 03/07/20 18:12:20 2:41 0 0 nstgempho no APPLE 'PHONES 1063 03/07/20 18:15:01 4:44 192 0 nstgempho no APPLE 'PHONES 1064 03/07/20 18:15:02 4:44 0 °asty:mph* no APPLE 'PHONES 1065 03/07/20 18:19:46 7:15 0 0 astgonpho no APPLE !PHONES 1066 03/07/20 18:21:16 0:34 61632 26652 ims 1067 03/07/20 18:27:00 1:05 192 0 nstgonpho no APPLE 'PHONES 1068 03/07/20 18:27:02 1:04 0 0 nxtgenpho no APPLE 'PHONES 1069 03/07/20 18:28:06 13:15 0 0 astympho no APPLE 'PHONES 1070 03/07/20 18:36:11 30:45 13316 7812 ims 1071 03/07/20 18:39:44 0:05 0 2318 ims 1072 03/07/20 18:41:19 2:07 192 Onstympho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 43 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170963 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343021

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:30:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 1/4-writ AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn DMZ IMSI MAKE MODEL 1073 03/07/20 18:41:21 2:06 0 0 nxtgonpho ne APPLE 'PHONES 1074 03/07/20 18:43:27 26:50 0 0 nxtgonpho ne APPLE 'PHONES 1075 03/07/20 19:10:16 2:07 192 0nxtgonpho ne APPLE 'PHONES 1076 03/07/20 19:10:17 2:07 0 0 nxtgonpho ne APPLE 'PHONES 1077 03/07/20 19:10:35 1:48 7213 6790 imp APPLE 'PHONES 1078 03/07/20 19:10:36 1:48 6790 6949 imp APPLE 'PHONES 1079 03/07/20 19:11:08 15:58 8311 6213 imp 1080 03/07/20 19:12:24 4:40 0 0 nxtgonpho ne APPLE 'PHONES 1081 03/07/20 19:17:03 8:47 192 0 nxtgonpho ne APPLE 'PHONES 1082 03/07/20 19:17:05 8:46 0 0 nxtgonpho ne APPLE 'PHONES 1083 03/07/20 19:25:50 2:22 192 0 nxtgonpho ne APPLE 'PHONES 1084 03/07/20 19:25:52 2:21 0 0 nxtgonpho ne APPLE 'PHONES 1085 03/07/20 19:28:12 6:09 192 0 nxtgonpho ne APPLE 'PHONES 1086 03/07/20 19:28:13 6:09 0 0 nxtgonpho ne APPLE 'PHONES 1087 03/07/20 19:34:23 0:37 0 0 nxtgonpho ne APPLE 'PHONES 1088 03/07/20 19:34:29 60:00 19394 10386 ims 1089 03/07/20 19:35:00 21:20 192 0nxtgonpho ne APPLE 'PHONES 1090 03/07/20 19:35:01 21:20 0 0 nxtgonpho ne APPLE 'PHONES 1091 03/07/20 19:56:20 2:09 192 0nxtgonpho ne APPLE 'PHONES 1092 03/07/20 19:56:21 2:09 0 0 nxtgonpho ne APPLE 'PHONES 1093 03/07/20 19:58:30 1:27 0 0 nxtgonpho ne APPLE 'PHONES 1094 03/07/20 19:59:57 21:10 192 0 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170964 The information contained here is for use by authorized persons only and is not for general distribution. Page 44 EFTA01343022

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. c o . AT&T Run Date: Run Time: Data Usage For: 06/17/2020 Item Conn. Conn. Date Time (OTC) 1095 03/07/20 19:59:58 21:10 0 Onstgenpho ne 1096 03/07/20 20:21:07 2:24 192 0 nxtgonpho ne 1097 03/07/20 20:21:08 2:24 0 0 nxtgonpho ne 1098 03/07/20 20:23:31 6:07 192 0 nxtgonpho ne 1099 03/07/20 20:23:33 6:06 0 0 nxtgonpho ne 1100 03/07/20 20:29:39 4:48 0 0 nxtgonpho ne 1101 03/07/20 20:34:26 71:33 192 0 nxtgonpho ne 1102 03/07/20 20:34:27 60:00 0 0 nxtgenpho ne 1103 03/07/20 20:34:29 3:10 0 0 ims 1104 03/07/20 20:43:44 52:50 6354 6668 ims 1105 03/07/20 20:43:45 52:50 6668 6090 ims 1106 03/07/20 20:47:45 30:08 14287 8338 ims 1107 03/07/20 21:32:01 13:58 7228 6718 ims 1108 03/07/20 21:32:02 13:58 6718 6964 ims 1109 03/07/20 21:34:27 11:33 0 Onxtgonpho ne 1110 03/07/20 21:36:33 4:51 11664 7557 ims 1111 03/07/20 21:46:00 3:06 0 0 nxtgonpho ne 1112 03/07/20 21:49:05 2:10 192 0 nxtgonpho no 1113 03/07/20 21:49:07 2:09 0 0 nxtgonpho no 1114 03/07/20 21:49:18 1:57 7112 6720 ims 1115 03/07/20 21:49:19 1:57 6720 6848 ims 1116 03/07/20 21:51:16 0:39 0 Onxtgonpho ne 1117 03/07/20 21:51:18 0:00 0 0 ims 1118 03/07/20 21:51:54 27:15 192 Onxtgonpho ne 1119 03/07/20 21:51:55 27:15 0 0 nxtgonpho Originating Number BT Bytes Bytes Apn ZRE2 IMSI MARE MOM Up Dn no APPLE IPECISB APPLE IPECISB APPLE IPECISB APPLE IPECISB APPLE IPHONE8 APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 45 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170965 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343023

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:30:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro ‘•- . 00 AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (UTC) Bytes Up Bytes Apn Dn 1120 03/07/20 21:52:20 26:49 7262 6854 ims 1121 03/07/20 21:52:21 26:49 6746 6998 ims 1122 03/07/20 21:53:58 14:15 10099 6418 ims 1123 03/07/20 22:19:10 2:09 192 Onmtgonpho ne 1124 03/07/20 22:19:11 2:08 6246 6672 ims 1125 03/07/20 22:19:11 2:09 0 0 nmtgonpho ne 1126 03/07/20 22:19:12 2:08 6672 5982 ims 1127 03/07/20 22:21:20 0:37 0 0 nmtgonpho ne 1128 03/07/20 22:21:21 0:01 0 0 ims 1129 03/07/20 22:21:29 10:12 11698 6686 ims 1130 03/07/20 22:21:57 21:16 192 Onmtgonpho ne 1131 03/07/20 22:21:58 21:16 0 0 ructgonpho ne 1132 03/07/20 22:37:29 5:44 6316 6778 ims 1133 03/07/20 22:37:30 5:44 6670 5964 ims 1134 03/07/20 22:41:47 33:34 15774 8758 ims 1135 03/07/20 22:43:14 0:36 0 0 nmtgonpho no 1136 03/07/20 22:43:49 15:04 192 Onmtgonpho ne 1137 03/07/20 22:43:50 15:04 0 0 nmtgonpho ne 1138 03/07/20 22:58:54 27:38 192 0 nmtgonpho ne 1139 03/07/20 22:58:55 27:38 0 0 nmtgonpho ne 1140 03/07/20 23:26:32 34:00 192 0 nmtgonpho ne 1141 03/07/20 23:26:33 34:00 0 0 nmtgonpho ne 1142 03/07/20 23:26:37 33:55 6370 6674 ims 1143 03/07/20 23:26:38 33:55 6674 6106 ims 1144 03/07/20 23:27:04 39:15 42891 24018 ims 1145 03/08/20 00:00:33 5:46 0 0 nmtgonpho no 1146 03/08/20 00:00:45 0:16 0 55513 ims AT&T Proprietary MAKE MODEL APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES The AT&T network constantly communicates with Internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 46 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170966 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343024

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 4,15.• AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Timo Number (OTC) Bytos Up Bytes Apn Dn LBSI IMSI MOSE MODEL 1147 03/08/20 15:41:04 _1_02SL.._250,112,1_ 60:00 0 Onstgenphe ne APPLE 'PHONES 1148 03/08/20 15:41:06 0:17 8148 6924 ims APPLE 'PHONES 1149 03/08/20 15:41:23 60:00 14740 4576 ims APPLE 'PHONES 1150 03/08/20 16:41:04 60:00 0 Onstgenpho ne APPLE 'PHONES 1151 03/08/20 16:41:23 60:00 10020 3144 ims APPLE 'PHONES 1152 03/08/20 17:41:04 43:30 0 Onstgenpho ne APPLE 'PHONES 1153 03/08/20 17:41:23 60:00 42980 20732 ims APPLE 'PHONES 1154 03/08/20 18:09:35 0:06 0 6927 ims APPLE 'PHONES 1155 03/08/20 18:23:21 0:07 0 7700 ims APPLE 'PHONES 1156 03/08/20 18:24:33 2:09 192 Onstgenpho ne APPLE 'PHONES 1157 03/08/20 18:24:34 2:09 0 0 nxtgenpho ne APPLE 'PHONES 1158 03/08/20 18:26:43 14:23 0 0 nxtgenpho ne APPLE 'PHONES 1159 03/08/20 18:41:06 3:35 0 0 nxtgenpho ne APPLE 'PHONES 1160 03/08/20 18:41:23 60:00 3408 1432 ims APPLE 'PHONES 1161 03/08/20 18:44:41 16:06 0 0 nxtgenpho ne APPLE 'PHONES 1162 03/08/20 18:55:40 0:00 0 0 ims APPLE 'PHONES 1163 03/08/20 18:55:48 60:00 16793 8983 ims 1164 03/08/20 19:00:46 7:34 192 Onstgenpho ne APPLE !PHONES 1165 03/08/20 19:00:47 7:34 0 0 nxtgenpho ne APPLE !PHONES 1166 03/08/20 19:08:21 0:32 0 0 nxtgenpho ne APPLE !PHONES 1167 03/08/20 19:08:51 5:10 192 0 nxtgenpho ne APPLE !PHONES 1168 03/08/20 19:08:53 5:09 0 0 nxtgenpho ne APPLE !PHONES 1169 03/08/20 19:14:02 0:06 0 0 nxtgenpho ne APPLE !PHONES 1170 03/08/20 19:14:24 3:41 192 0 nxtgenpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170967 The information contained here is for use by authorized persons only and is not for general distribution. Page 47 EFTA01343025

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ‘sel. AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 MI= Conn. Originating BT Time Number (OTC) Bytes Up Bytes Apn INKS INSI MAKE Dn MODEL 1171 03/08/20 19:14:25 3:42 0 Onxtgenpho ne APPLE 'PHONES 1172 03/08/20 19:18:06 5:01 192 0 nxtgenpho ne APPLE 'PHONES 1173 03/08/20 19:18:07 5:01 0 0 nxtgenpho ne APPLE 'PHONES 1174 03/08/20 19:23:08 13:33 192 0 nxtgenpho ne APPLE 'PHONES 1175 03/08/20 19:23:09 13:34 0 0 nxtgenpho ne APPLE 'PHONES 1176 03/08/20 19:36:43 1:33 0 0 nxtgenpho ne APPLE 'PHONES 1177 03/08/20 19:38:15 2:10 192 0 nxtgenpho ne APPLE 'PHONES 1178 03/08/20 19:38:17 2:09 0 0 nxtgenpho ne APPLE 'PHONES 1179 03/08/20 19:40:26 3:26 0 0 nxtgenpho ne APPLE 'PHONES 1180 03/08/20 19:41:23 60:00 0 0 ims APPLE 'PHONES 1181 03/08/20 19:43:52 16:56 192 0 nxtgenpho ne APPLE 'PHONES 1182 03/08/20 19:43:53 16:56 0 0 nxtgenpho ne APPLE 'PHONES 1183 03/08/20 19:55:48 60:00 12652 3408 ims 1184 03/08/20 20:00:49 16:17 0 0 nxtgenpho ne APPLE 'PHONES 1185 03/08/20 20:17:06 4:04 192 0 nxtgenpho ne APPLE 'PHONES 1186 03/08/20 20:17:07 4:04 0 0 nxtgenpho ne APPLE 'PHONES 1187 03/08/20 20:21:11 0:56 0 0 nxtgenpho ne APPLE 'PHONES 1188 03/08/20 20:22:06 2:36 192 0 nxtgenpho ne APPLE 'PHONES 1189 03/08/20 20:22:07 2:36 0 0 nxtgenpho ne APPLE 'PHONES 1190 03/08/20 20:24:44 6:10 192 0 nxtgenpho ne APPLE 'PHONES 1191 03/08/20 20:24:46 6:09 0 0 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 48 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170968 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343026

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e s. ‘•- .a° AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Ma= Conn. Time (UTC) Originating Nflmhaw BT Bytes Up Bytes Apn Dn 73IZI IM9I MAKE MODEL 1192 03/08/20 20:30:55 4:54 0 Onmtgenpho ne APPLE !PHONES 1193 03/08/20 20:35:48 14:11 192 0 nmtgenpho ne APPLE !PHONES 1194 03/08/20 20:35:49 14:11 0 0 nmtgenpho ne APPLE !PHONES 1195 03/08/20 20:41:23 60:00 0 0 ims APPLE !PHONES 1196 03/08/20 20:50:00 12:34 192 0 nmtgonpho ne APPLE !PHONES 1197 03/08/20 20:50:01 12:34 0 0 nmtgonpho ne APPLE !PHONES 1198 03/08/20 20:55:48 60:00 10580 4096 ims 1199 03/08/20 21:02:34 6:10 192 0 nmtgenpho no APPLE !PHONES 1200 03/08/20 21:02:35 6:10 0 0 nmtgenpho no APPLE !PHONES 1201 03/08/20 21:08:45 60:00 0 0 nmtgenpho no APPLE !PHONES 1202 03/08/20 21:41:23 60:00 0 0 ims APPLE !PHONES 1203 03/08/20 21:55:48 60:00 6924 2772 ims 1204 03/08/20 22:08:45 0:58 0 0 nmtgenpho no APPLE !PHONES 1205 03/08/20 22:09:43 1:38 0 0 nmtgenpho ne APPLE !PHONES 1206 03/08/20 22:11:22 22:21 0 0 nmtgenpho ne APPLE !PHONES 1207 03/08/20 22:33:42 2:10 192 0 nmtgenpho no APPLE !PHONES 1208 03/08/20 22:33:43 2:10 0 0 nmtgenpho no APPLE !PHONES 1209 03/08/20 22:35:53 6:31 0 0 nmtgenpho no APPLE !PHONES 1210 03/08/20 22:41:23 18:00 0 0 ims APPLE !PHONES 1211 03/08/20 22:42:23 2:10 192 0 nmtgenpho ne APPLE !PHONES 1212 03/08/20 22:42:25 2:09 0 0 nmtgenpho no APPLE !PHONES 1213 03/08/20 22:44:34 4:14 0 0 nmtgenpho no APPLE !PHONES 1214 03/08/20 22:48:47 2:27 192 0 nmtgenpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 49 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170969 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343027

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Sidi= Conn. Originating ET Tame Number MC/ Bytes Up Bytes Apn Dn DOLT INSI MAKE MODEL 1215 03/08/20 22:48:48 2:27 0 Onmtgonphe ne APPLE !PHONES 1216 03/08/20 22:51:14 12:30 192 0 nmtgonphe ne APPLE !PHONES 1217 03/08/20 22:51:15 12:30 0 0 nmtgonphe ne APPLE !PHONES 1218 03/08/20 22:55:48 60:00 10160 3144 ism 1219 03/08/20 23:03:45 2:05 0 Onmtgonphe ne APPLE !PHONES 1220 03/08/20 23:05:49 8:43 192 0 nactgonphe ne APPLE !PHONES 1221 03/08/20 23:05:50 8:43 0 0 nactgonphe ne APPLE !PHONES 1222 03/08/20 23:14:33 60:00 0 0 nmtgonphe ne APPLE !PHONES 1223 03/08/20 23:55:48 55:14 51404 17880 Lam 1224 03/09/20 00:14:33 36:44 0 Onmtgonphe ne APPLE !PHONES 1225 03/09/20 00:44:58 0:23 0 43856 Lam 1226 03/09/20 00:51:16 22:51 192 0 nmtgonphe ne APPLE !PHONES 1227 03/09/20 00:51:17 22:51 0 0 nmtgonphe ne APPLE !PHONES 1228 03/09/20 00:51:17 4:16 7160 6810 ism APPLE !PHONES 1229 03/09/20 00:51:18 4:16 6742 6896 ism APPLE !PHONES 1230 03/09/20 00:55:02 0:31 756 0 ism 1231 03/09/20 00:55:32 18:35 7376 6794 Las APPLE !PHONES 1232 03/09/20 00:55:33 18:35 6794 7112 Las APPLE !PHONES 1233 03/09/20 00:56:28 60:00 24207 16162 Las 1234 03/09/20 01:14:08 2:02 0 Onmtgonphe ne APPLE !PHONES 1235 03/09/20 01:16:09 14:18 192 0 nmtgonphe ne APPLE !PHONES 1236 03/09/20 01:16:10 14:18 0 0 nmtgonphe ne APPLE !PHONES 1237 03/09/20 01:30:23 18:53 3007685 3052551 ism 1238 03/09/20 01:30:29 10:30 0 Onmtgonphe ne APPLE !PHONES 1239 03/09/20 01:40:58 18:18 192 0 nmtgonphe ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 50 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170970 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343028

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ‘se# AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. TIM* (07C) Originating Number ET Bytes Up Bytes Apn Dn ENE! INSI MAKE MODEL 1240 03/09/20 01:40:59 18:18 0 0nxtgonpho no APPLE !PHONES 1241 03/09/20 01:56:28 60:00 6940 2896 ism 1242 03/09/20 01:59:17 0:54 0 0 nxtgenpho ne APPLE 'PHONES 1243 03/09/20 02:00:10 5:09 192 0 nxtgonpho no APPLE 'PHONES 1244 03/09/20 02:00:11 5:09 0 0 nxtgonpho no APPLE 'PHONES 1245 03/09/20 02:05:19 8:38 192 0 nxtgonpho no APPLE !PHONES 1246 03/09/20 02:05:20 8:38 0 0 nxtgonpho no APPLE !PHONES 1247 03/09/20 02:13:58 5:51 192 0 nxtgonpho no APPLE !PHONES 1248 03/09/20 02:13:59 5:51 0 0 nxtgonpho no APPLE !PHONES 1249 03/09/20 02:19:50 55:27 0 0 nxtgOnphe ne APPLE !PHONES 1250 03/09/20 02:56:28 60:00 6848 2788 ism 1251 03/09/20 03:15:16 20:00 192 0 nxtgonpho ne APPLE !PHONES 1252 03/09/20 03:15:17 59:01 0 0 nxtgonpho no APPLE !PHONES 1253 03/09/20 03:56:28 60:00 8496 2928 ism 1254 03/09/20 04:14:18 60:00 0 0 nxtgenpho ne APPLE !PHONES 1255 03/09/20 04:56:28 60:00 16884 6232 ism 1256 03/09/20 05:14:18 60:00 0 0 nxtgenpho ne APPLE !PHONES 1257 03/09/20 05:56:28 60:00 8496 2928 ism 1258 03/09/20 06:14:18 60:00 0 0 nxtgenpho ne APPLE !PHONES 1259 03/09/20 06:56:28 60:00 8496 3160 ism 1260 03/09/20 07:14:18 60:00 0 0 nxtgenpho ne APPLE !PHONES 1261 03/09/20 07:56:28 60:00 8496 2928 ism 1262 03/09/20 08:14:18 0:01 0 0 nxtgonpho ne APPLE !PHONES 1263 03/09/20 08:47:44 2:23 192 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170971 The information contained here is for use by authorized persons only and is not for general distribution. Page 51 EFTA01343029

P.020 MOBILITY 4111. AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm •3/4--s ""a. AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Tame (OTC) Originating Number ET Bytos Up Bytes Apn ENE! INSI MAKE Dn MODEL 1264 03/09/20 08:47:46 2:22 0 0 nxtgonpho no APPLE !PHONES 1265 03/09/20 08:50:07 6:02 192 0 nxtgonpho no APPLE !PHONES 1266 03/09/20 08:50:08 6:03 0 0 nxtgonpho no APPLE !PHONES 1267 03/09/20 08:56:10 3:22 192 0 nxtgonpho no APPLE !PHONES 1268 03/09/20 08:56:11 3:22 0 0 nxtgonpho no APPLE !PHONES 1269 03/09/20 08:56:28 60:00 11812 4484 ism 1270 03/09/20 08:59:33 60:00 0 0 nxtgonpho no APPLE !PHONES 1271 03/09/20 09:56:28 60:00 12044 4552 ism 1272 03/09/20 09:59:33 51:11 0 0 nxtgonpho no APPLE !PHONES 1273 03/09/20 10:50:44 10:15 192 0 nxtgonpho no APPLE !PHONES 1274 03/09/20 10:50:45 10:15 0 0 nxtgonpho no APPLE !PHONES 1275 03/09/20 10:56:28 60:00 6832 2680 ism 1276 03/09/20 11:01:00 56:23 0 0 nxtgonpho no APPLE !PHONES 1277 03/09/20 11:56:28 60:00 13352 4732 ism 1278 03/09/20 11:57:22 2:59 192 0 nxtgonpho no APPLE !PHONES 1279 03/09/20 11:57:23 2:59 0 0 nxtgonpho no APPLE !PHONES 1280 03/09/20 12:00:21 20:57 192 0 nxtgonpho no APPLE !PHONES 1281 03/09/20 12:00:22 20:57 0 0 nxtgonpho no APPLE !PHONES 1282 03/09/20 12:21:18 7:42 192 0 nxtgonpho no APPLE !PHONES 1283 03/09/20 12:21:20 7:41 0 0 nxtgonpho no APPLE !PHONES 1284 03/09/20 12:29:01 13:08 192 0 nxtgonpho no APPLE !PHONES 1285 03/09/20 12:29:02 13:08 0 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170972 The information contained here is for use by authorized persons only and is not for general distribution. Page 52 EFTA01343030

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 4,12.• AT&T Run pato: Run Time: Data usage For: Item Conn. Data 06/17/2020 Coma. Time (OTC) Originating number BT Bytes Up Bytes Apn 0n DMZ IMSI WARR MOD= 1286 03/09/20 12:42:11 4 23:32 0 Onstgenpho ne APPLE 'PROMO 1287 03/09/20 12:56:28 4 60:00 7064 2804 ims 1288 03/09/20 13:05:42 4 8:24 192 Onstgenpho ne APPLE 'PROMO 1289 03/09/20 13:05:43 4 8:24 0 Onstgenpho ne APPLE 'PROMO 1290 03/09/20 13:14:07 4 13:42 0 Onstgenpho ne APPLE 'PROMO 1291 03/09/20 13:27:48 4 2:10 192 Onstgenpho ne APPLE 'PROMO 1292 03/09/20 13:27:50 4 2:09 0 Onstgenpho ne APPLE IPHONE8 1293 03/09/20 13:29:59 4 14:10 0 Onstgenpho ne APPLE 'PHONES 1294 03/09/20 13:44:08 4 5:25 192 Onstgenpho ne APPLE 'PHONES 1295 03/09/20 13:44:09 4 5:25 0 Onstgenpho ne APPLE 'PHONES 1296 03/09/20 13:49:34 4 5:02 0 Onstgenpho ne APPLE 'PHONES 1297 03/09/20 13:54:35 4 9:50 192 Onstgenpho ne APPLE 'PHONES 1298 03/09/20 13:54:36 4 9:50 0 Onstgenpho ne APPLE 'PHONES 1299 03/09/20 13:56:28 4 60:00 23568 10996 ims 1300 03/09/20 14:04:25 4 5:32 192 Onstgenpho ne APPLE 'PHONES 1301 03/09/20 14:04:27 4 5:31 0 Onstgenpho ne APPLE 'PHONES 1302 03/09/20 14:09:58 4 9:08 0 Onstgenpho ne APPLE 'PHONES 1303 03/09/20 14:19:05 4 0:44 192 Onstgenpho ne APPLE 'PHONES 1304 03/09/20 14:19:06 4 0:44 0 Onstgenpho ne APPLE 'PHONES 1305 03/09/20 14:19:50 4 60:00 0 Onstgenpho ne APPLE 'PHONES 1306 03/09/20 14:52:26 4 0:10 0 6685 ims 1307 03/09/20 14:56:28 4 60:00 29368 14756 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 53 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170973 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343031

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ce. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Si= Conn. Tine (OTC) Originating ET Bytes Up Bytes Apn IN= IISI MA= Dn MODEL 1308 03/09/20 15:19:50 52:16 0 0 nxtgenpho ne APPLE 'PEONES 1309 03/09/20 15:46:20 0:04 0 8568 ims 1310 03/09/20 15:56:28 50:29 8820 3468 ims 1311 03/09/20 16:37:57 2:26 192 0 nxtgenpho ne APPLE 'PEONES 1312 03/09/20 16:37:58 2:26 0 0 nxtgenpho ne APPLE 'PEONES 1313 03/09/20 16:40:24 6:23 0 0 nxtgenpho ne APPLE 'PEONES 1314 03/09/20 16:46:46 18:32 192 0 nxtgenpho ne APPLE SPRAWLS 1315 03/09/20 16:46:47 18:32 0 0 nxtgenpho ne APPLE 'PHONES 1316 03/09/20 16:46:56 18:22 7240 7554 ims APPLE 'PHONES 1317 03/09/20 16:46:57 18:22 7486 6976 ims APPLE 'PHONES 1318 03/09/20 17:05:19 14:42 0 0 nxtgenpho ne APPLE 'PHONES 1319 03/09/20 17:05:21 7:10 7406 6121 ims APPLE 'PHONES 1320 03/09/20 17:12:31 10:30 5180 1696 ims APPLE 'PHONES 1321 03/09/20 17:14:37 60:00 16620 9004 ims 1322 03/09/20 17:20:00 9:52 288 0 nxtgenpho ne APPLE 'PHONES 1323 03/09/20 17:20:01 9:52 0 0 nxtgenpho ne APPLE 'PHONES 1324 03/09/20 17:29:53 5:29 192 0 nxtgenpho ne APPLE IPHONE8 1325 03/09/20 17:29:54 5:29 0 0 nxtgenpho ne APPLE IPHONE8 1326 03/09/20 17:35:23 3:53 0 0 nxtgenpho ne APPLE IPHONE8 1327 03/09/20 17:39:15 2:16 192 0 nxtgenpho ne APPLE IPHONE8 1328 03/09/20 17:39:16 2:16 0 0 nxtgenpho ne APPLE IPHONE8 1329 03/09/20 17:41:32 15:20 192 0 nxtgenpho ne APPLE IPHONE8 1330 03/09/20 17:41:33 15:20 0 0 nxtgenpho ne APPLE IPHONE8 1331 03/09/20 17:56:53 60:00 0 0 nxtgenpho ne APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170974 The information contained here is for use by authorized persons only and is not for general distribution. Page 54 EFTA01343032

pu020 MOBILITY " a. AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm tres AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ‘‘.......sizse OTC. Run Date: Run Time: Data Usage For: 06/17/2020 it= Item Conn. Conn. Originating ET Bytes Bytes Apn DMZ IMSI MAKE MODEL Date Time Number Up Dn (UTC) 1332 03/09/20 18:14:37 60:00 14340 6952 ims 1333 03/09/20 18:49:56 0:04 0 104 ims 1334 03/09/20 18:56:53 29:12 0 Onstgenphe APPLE !PHONES ne 1335 03/09/20 19:14:37 60:00 9960 3144 ims 1336 03/09/20 19:26:04 2:09 192 Onxtgenpho APPLE !PHONES ne 1337 03/09/20 19:26:05 2:09 0 0 nxtgenpho APPLE !PHONES ne 1338 03/09/20 19:28:14 37:51 0 0 nxtgenpho APPLE !PHONES ne 1339 03/09/20 20:06:04 2:10 192 0 nxtgenpho APPLE !PHONES ne 1340 03/09/20 20:06:06 2:09 0 0 nxtgenpho APPLE !PHONES ne 1341 03/09/20 20:08:15 0:47 0 0 nxtgenpho APPLE !PHONES ne 1342 03/09/20 20:09:01 8:34 192 0 nxtgenpho APPLE !PHONES ne 1343 03/09/20 20:09:02 8:34 0 0 nxtgenpho APPLE !PHONES ne 1344 03/09/20 20:14:37 60:00 8604 3020 ims 1345 03/09/20 20:17:36 0:59 0 Onxtgenpho APPLE !PHONES ne 1346 03/09/20 20:18:35 15:42 192 0 nxtgenpho APPLE !PHONES ne 1347 03/09/20 20:18:36 15:42 0 0 nxtgenpho APPLE !PHONES ne 1348 03/09/20 20:34:18 5:53 0 0 nxtgenpho APPLE !PHONES ne 1349 03/09/20 20:40:11 3:12 192 0 nxtgenpho APPLE !PHONES ne 1350 03/09/20 20:40:12 3:12 0 0 nxtgenpho APPLE !PHONES ne 1351 03/09/20 20:43:24 6:12 0 0 nxtgenpho APPLE !PHONES ne 1352 03/09/20 20:49:35 8:31 192 0 nxtgenpho APPLE !PHONES ne 1353 03/09/20 20:49:36 8:31 0 0 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 55 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170975 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343033

..020 MOBILITY illOb AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm ...1/47,:si `'s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Tine (UTC) Originating Number KT Bytes Up Bytes Apn Dn II I MAKE MODEL 1354 03/09/20 20:58:07 9:29 0 Onmtgonpho ne APPLE 'PHONES 1355 03/09/20 21:07:35 1:02 192 Onmtgonpho ne APPLE 'PHONES 1356 03/09/20 21:07:36 1:02 0 Onmtgonpho ne APPLE 'PHONES 1357 03/09/20 21:08:38 3:54 0 Onmtgonpho ne APPLE 'PHONES 1358 03/09/20 21:12:31 2:56 192 Onmtgonpho ne APPLE 'PHONES 1359 03/09/20 21:12:32 2:56 0 Onmtgonpho ne APPLE 'PHONES 1360 03/09/20 21:14:37 18:28 3408 1324 ims 1361 03/09/20 21:15:28 1:22 0 Onmtgonpho ne APPLE 'PHONES 1362 03/09/20 21:16:49 2:09 192 Onmtgonpho ne APPLE 'PHONES 1363 03/09/20 21:16:50 2:09 0 Onmtgonpho ne APPLE 'PHONES 1364 03/09/20 21:18:59 10:53 0 Onmtgonpho ne APPLE 'PHONES 1365 03/09/20 21:29:52 20:16 192 Onmtgonpho ne APPLE 'PHONES 1366 03/09/20 21:29:53 20:15 6244 6740 ims APPLE 'PHONES 1367 03/09/20 21:29:53 20:16 0 Onmtgonpho ne APPLE 'PHONES 1368 03/09/20 21:29:54 20:15 6672 5980 ims APPLE 'PHONES 1369 03/09/20 21:46:37 60:00 18655 9854 ims 1370 03/09/20 21:50:09 2:03 0 Onmtgonpho ne APPLE 'PHONES 1371 03/09/20 21:52:11 9:24 192 Onmtgonpho ne APPLE 'PHONES 1372 03/09/20 21:52:12 9:25 0 Onmtgonpho ne APPLE 'PHONES 1373 03/09/20 22:01:37 30:59 0 Onmtgonpho ne APPLE 'PHONES 1374 03/09/20 22:32:36 17:41 192 Onmtgonpho ne APPLE 'PHONES 1375 03/09/20 22:32:36 17:42 0 Onmtgonpho ne APPLE 'PHONES 1376 03/09/20 22:46:37 46:07 10160 6456 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 56 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170976 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343034

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro ••- .ai. AT&T Run Dato: Run Tine: Data Usage For: Item Conn. Date 06/17/2020 Sid= Conn. Originating ET Time Number (UTC) Bytes Up Bytes Apn cm MAKE MODEL 1377 03/09/20 22:50:17 1:16 192 0nxtgonpho ne APPLE 'PHONES 1378 03/09/20 22:50:18 1:16 0 0 nxtgonpho ne APPLE 'PHONES 1379 03/09/20 22:51:34 5:52 0 0 nxtgonpho ne APPLE 'PHONES 1380 03/09/20 22:57:25 3:56 192 0 nxtgonpho ne APPLE 'PHONES 1381 03/09/20 22:57:27 3:57 0 0 nxtgonpho ne APPLE 'PHONES 1382 03/09/20 23:01:24 4:13 0 0 nxtgonpho ne APPLE 'PHONES 1383 03/09/20 23:05:36 3:35 192 0 nxtgonpho ne APPLE 'PHONES 1384 03/09/20 23:05:37 3:35 0 0 nxtgonpho ne APPLE 'PHONES 1385 03/09/20 23:09:12 11:34 0 0 nxtgonpho ne APPLE 'PHONES 1386 03/09/20 23:20:45 2:21 192 0 nxtgonpho ne APPLE 'PHONES 1387 03/09/20 23:20:46 2:21 0 0 nxtgonpho ne APPLE 'PHONES 1388 03/09/20 23:23:07 11:56 0 0 nxtgonpho ne APPLE 'PHONES 1389 03/09/20 23:33:05 0:34 840 72 isms APPLE 'PHONES 1390 03/09/20 23:33:39 0:00 0 0 isms APPLE 'PHONES 1391 03/09/20 23:33:39 0:01 0 0 isms APPLE 'PHONES 1392 03/09/20 23:33:43 60:00 18363 9389 isms 1393 03/09/20 23:35:02 7:16 192 0nxtgonpho ne APPLE 'PHONES 1394 03/09/20 23:35:03 7:16 0 0 nxtgonpho ne APPLE 'PHONES 1395 03/09/20 23:42:19 5:00 0 0 nxtgonpho ne APPLE 'PHONES 1396 03/09/20 23:47:18 1:15 192 0 nxtgonpho ne APPLE 'PHONES 1397 03/09/20 23:47:20 1:14 0 0 nxtgonpho ne APPLE 'PHONES 1398 03/09/20 23:48:34 3:06 0 0 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170977 The information contained here is for use by authorized persons only and is not for general distribution. Page 57 EFTA01343035

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e s, AT&T Run Date: Run Timm: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn TERI TEST MAR Dn MODEL 1399 03/09/20 23:51:40 5:17 192 Onxtgonpho no APPLE 'PROEMS 1400 03/09/20 23:51:41 5:17 0 0 nxtgonpho no APPLE 'PEONES 1401 03/09/20 23:56:58 8:46 192 0 nxtgonpho no APPLE 'PEONES 1402 03/09/20 23:56:59 8:46 0 0 nxtgonpho no APPLE 'PEONES 1403 03/10/20 00:05:45 12:31 192 0 nxtgonpho no APPLE 'PHONES 1404 03/10/20 00:05:46 12:31 0 0 nxtgonpho ne APPLE 'PHONES 1405 03/10/20 00:18:17 23:13 0 0 nxtgonpho ne APPLE 'PHONES 1406 03/10/20 00:33:43 60:00 8604 3052 ims 1407 03/10/20 00:41:29 8:25 192 °asty:mph* no APPLE 'PHONES 1408 03/10/20 00:41:31 8:24 0 0 nxtgonpho no APPLE 'PHONES 1409 03/10/20 00:49:55 17:25 0 0 nxtgonpho no APPLE 'PHONES 1410 03/10/20 01:07:20 58:34 192 0 nxtgonpho no APPLE 'PHONES 1411 03/10/20 01:07:21 58:34 0 0 nxtgonpho no APPLE 'PHONES 1412 03/10/20 01:33:43 60:00 9928 3176 ims 1413 03/10/20 02:05:55 60:00 0 0 nxtgonpho no APPLE 'PHONES 1414 03/10/20 02:33:43 60:00 8496 3160 ims 1415 03/10/20 03:05:55 50:07 0 0 nxtgonpho no APPLE 'PHONES 1416 03/10/20 03:33:43 60:00 8012 2804 ims 1417 03/10/20 03:56:02 16:34 192 0 nxtgonpho no APPLE 'PHONES 1418 03/10/20 03:56:03 16:34 0 0 nxtgonpho no APPLE 'PHONES 1419 03/10/20 04:12:37 41:56 192 0 nxtgonpho no APPLE 'PHONES 1420 03/10/20 04:12:38 41:56 0 0 nxtgonpho no APPLE 'PHONES 1421 03/10/20 04:33:43 60:00 16636 6232 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 58 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170978 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343036

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 45, AT&T Run Data: Run Time: Data usage For: Item conn. Data 06/17/2020 Si= Conn. Time (OTC/ Originating Ez Bytes up Bytes Apn INEZ IMSI MAKE on MODEL 1422 03/10/20 04:54:34 60:00 0 Onmtgenpho ne APPLE 'PROMS 1423 03/10/20 05:33:43 60:00 8604 3252 ims 1424 03/10/20 05:54:34 50:23 0 0 nxtgenpho ne APPLE 'PROMS 1425 03/10/20 06:33:43 60:00 6848 2680 ims 1426 03/10/20 06:44:57 28:57 192 Onmtgenpho ne APPLE 'PROMS 1427 03/10/20 06:44:58 28:57 0 0 nxtgenpho ne APPLE 'PHONES 1428 03/10/20 07:13:55 60:00 0 0 nxtgenpho ne APPLE IPHONE8 1429 03/10/20 07:33:43 60:00 8496 3052 ims 1430 03/10/20 08:13:55 49:45 0 0 nxtgenpho ne APPLE 'PHONES 1431 03/10/20 08:33:43 60:00 11596 4160 ism 1432 03/10/20 09:03:39 2:23 192 Onstgenpho ne APPLE 'PHONES 1433 03/10/20 09:03:40 2:23 0 0 nxtgenpho ne APPLE 'PHONES 1434 03/10/20 09:06:03 9:09 192 0 nxtgenpho ne APPLE 'PHONES 1435 03/10/20 09:06:04 9:09 0 0 nxtgenpho ne APPLE 'PHONES 1436 03/10/20 09:15:12 9:23 192 0 nxtgenpho ne APPLE IPHONE8 1437 03/10/20 09:15:13 9:23 0 0 nxtgenpho ne APPLE IPHONE8 1438 03/10/20 09:24:36 6:46 192 0 nxtgenpho ne APPLE IPHONE8 1439 03/10/20 09:24:37 6:46 0 0 nxtgenpho ne APPLE IPHONE8 1440 03/10/20 09:31:23 56:05 0 0 nxtgenpho ne APPLE IPHONE8 1441 03/10/20 09:33:43 60:00 15092 4908 ims 1442 03/10/20 10:27:27 14:56 192 Onstgenpho ne APPLE IPHONE8 1443 03/10/20 10:27:28 14:56 0 0 nxtgenpho ne APPLE IPHONE8 1444 03/10/20 10:33:43 60:00 9928 3176 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 59 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170979 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343037

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e s, AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Siam Conn. Time (OTC) Originating Numbor ET Bytes Up Bytes Apn Dn DMZ IMBI MDME MODEL 1445 03/10/20 10:42:2 2:10 0 0 nxtgonpho no APPLE IPROME8 1446 03/10/20 10:44:3 60:00 0 0 nxtgonpho no APPLE 'PEONES 1447 03/10/20 10:44:3 84:53 192 0 nxtgonpho no APPLE 'PEONES 1448 03/10/20 11:33:43 60:00 6956 2680 ims 1449 03/10/20 11:44:3 24:54 0 0 nxtgenpho no APPLE IPEONE8 1450 03/10/20 12:09:2 34:27 0 0 nxtgonpho no APPLE !PHONES 1451 03/10/20 12:33:43 60:00 9928 3176 ims 1452 03/10/20 12:43:5 2:10 192 0 nxtgonpho no APPLE !PHONES 1453 03/10/20 12:43:5 2:10 0 0 nxtgonpho no APPLE !PHONES 1454 03/10/20 12:46:05 60:00 0 0 nxtgenpho ne APPLE !PHONES 1455 03/10/20 13:33:43 60:00 8604 3052 ims 1456 03/10/20 13:46:0 19:47 0 0 nxtgonpho ne APPLE !PHONES 1457 03/10/20 14:05:5 0:40 192 0 nxtgonpho ne APPLE !PHONES 1458 03/10/20 14:05:5 0:40 0 0 nxtgonpho ne APPLE !PHONES 1459 03/10/20 14:06:3 1:23 0 Onxtgonpho ne APPLE !PHONES 1460 03/10/20 14:07:5 8:25 192 0 nxtgonpho ne APPLE !PHONES 1461 03/10/20 14:07:5 8:24 0 0 nxtgonpho no APPLE !PHONES 1462 03/10/20 14:16:2 58:09 0 0 nxtgonpho no APPLE !PHONES 1463 03/10/20 14:33:43 60:00 13912 6092 ims 1464 03/10/20 15:14:2 1:16 192 0 nxtgonpho no APPLE !PHONES 1465 03/10/20 15:14:3 1:16 0 0 nxtgonpho no APPLE !PHONES 1466 03/10/20 15:15:46 2:14 0 0 nxtgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 60 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00170480 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343038

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. cro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Numbor ET Bytes Up Bytes Apn Dn MMEI IMSI MAKE MODEL 1467 03/10/20 15:17:59 0:57 192 Onstgonpho ne APPLE 'PEONES 1468 03/10/20 15:18:00 0:57 0 0 nxtgenpho ne APPLE 'PEONES 1469 03/10/20 15:18:57 4:52 0 0 nxtgenpho ne APPLE 'PEONES 1470 03/10/20 15:23:48 20:00 192 0 nxtgenpho ne APPLE 'PEONES 1471 03/10/20 15:23:49 27:14 0 0 nxtgenpho ne APPLE 'PEONES 1472 03/10/20 15:33:43 53:28 16092 5276 ims 1473 03/10/20 15:51:03 36:17 0 Onstgonpho ne APPLE 'PEONES 1474 03/10/20 16:27:20 1:23 192 0 nxtgenpho ne APPLE 'PEONES 1475 03/10/20 16:27:21 1:22 7232 6864 ims APPLE IPEOME8 1476 03/10/20 16:27:21 1:23 0 0 nxtgenpho ne APPLE 'PHONES 1477 03/10/20 16:27:22 1:22 6796 6968 ims APPLE 'PHONES 1478 03/10/20 16:28:35 60:00 18395 12138 ims 1479 03/10/20 16:28:44 0:05 0 Onstgonpho no APPLE 'PHONES 1480 03/10/20 16:29:06 1:09 192 0 nxtgonpho no APPLE 'PHONES 1481 03/10/20 16:29:07 1:09 0 0 nxtgenpho ne APPLE 'PHONES 1482 03/10/20 16:30:16 7:18 0 0 nxtgenpho ne APPLE 'PHONES 1483 03/10/20 16:37:33 2:30 192 0 nxtgenpho ne APPLE 'PHONES 1484 03/10/20 16:37:34 2:31 0 0 nxtgenpho ne APPLE 'PHONES 1485 03/10/20 16:40:04 24:25 192 0 nxtgenpho ne APPLE !PHONES 1486 03/10/20 16:40:05 24:25 0 0 nxtgonpho no APPLE !PHONES 1487 03/10/20 17:04:31 0:36 0 0 nxtgonpho no APPLE !PHONES 1488 03/10/20 17:05:06 2:10 192 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170981 The information contained here is for use by authorized persons only and is not for general distribution. Page 61 EFTA01343039

pu020 MOBILITY 411B. AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm ...1/47,„• `""s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 lad= Conn. Originating ET Time Number (OTC/ Bytes Up Bytes AP^ DOLT INSI MAKE Dn MODEL 1489 03/10/20 17:05:07 2:10 0 0 nstgonphe ne APPLE 'PHONES 1490 03/10/20 17:07:17 6:45 0 0 nstgonphe ne APPLE 'PHONES 1491 03/10/20 17:14:01 2:09 192 0 nstgonpho ne APPLE 'PHONES 1492 03/10/20 17:14:02 2:09 0 0 nstgonpho ne APPLE 'PHONES 1493 03/10/20 17:16:11 1:26 0 0 nstgonpho ne APPLE 'PHONES 1494 03/10/20 17:17:36 4:47 192 0 nstgonpho ne APPLE 'PHONES 1495 03/10/20 17:17:37 4:47 0 0 nstgonpho ne APPLE 'PHONES 1496 03/10/20 17:22:25 2:41 0 0 nstgonpho ne APPLE 'PHONES 1497 03/10/20 17:25:06 18:51 0 0 nstgonpho ne APPLE 'PHONES 1498 03/10/20 17:28:35 60:00 25256 17492 ims 1499 03/10/20 17:41:29 0:04 0 4743 ims 1500 03/10/20 17:43:37 0:21 0 40524 ims 1501 03/10/20 17:43:57 38:21 192 Onstgonpho ne APPLE 'PHONES 1502 03/10/20 17:43:58 38:21 0 0 nstgonpho ne APPLE 'PHONES 1503 03/10/20 18:22:19 2:30 0 0 nstgonpho ne APPLE 'PHONES 1504 03/10/20 18:24:49 0:40 192 0 nstgonpho ne APPLE 'PHONES 1505 03/10/20 18:24:50 0:40 0 0 nstgonpho ne APPLE 'PHONES 1506 03/10/20 18:25:30 4:37 0 0 nstgonpho ne APPLE 'PHONES 1507 03/10/20 18:28:35 60:00 16008 10668 ims 1508 03/10/20 18:30:06 2:10 192 0 nstgonpho ne APPLE 'PHONES 1509 03/10/20 18:30:07 2:10 0 0 nstgonpho ne APPLE 'PHONES 1510 03/10/20 18:32:17 5:41 0 0 nstgonpho ne APPLE 'PHONES 1511 03/10/20 18:36:19 0:03 0 4743 ims AT&T Proprietary The AT&T network constantly communicates with Internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170982 The information contained here is for use by authorized persons only and is not for general distribution. Page 62 EFTA01343040

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. ci sme AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 "MI= Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn EMBI IMSI MAKE MODEL 1512 03/10/20 18:37:58 52:57 192 0 'mtg.:mph* no APPLE 'PROMO 1513 03/10/20 18:37:59 52:57 0 0 nxtgenphe no APPLE 'PROMO 1514 03/10/20 19:28:35 60:00 13460 4500 ims 1515 03/10/20 19:30:56 54:37 0 0 nxtgenphe no APPLE 'PROMO 1516 03/10/20 20:25:32 2:14 192 0 nxtgonpho no APPLE 'PROMO 1517 03/10/20 20:25:33 2:14 0 0 nxtgonpho no APPLE 'PROMO 1518 03/10/20 20:27:47 19:12 0 0 nxtgenphe ne APPLE IPNONE8 1519 03/10/20 20:28:35 60:00 6924 2788 ims 1520 03/10/20 20:46:58 15:19 192 0 nxtgonpho ne APPLE !PHONES 1521 03/10/20 20:46:59 15:19 0 0 nxtgenphe ne APPLE 'PHONES 1522 03/10/20 21:02:18 21:25 0 0 nxtgenphe ne APPLE 'PHONES 1523 03/10/20 21:23:42 3:11 192 0 nxtgonpho ne APPLE !PHONES 1524 03/10/20 21:23:43 3:11 0 0 nxtgonpho ne APPLE !PHONES 1525 03/10/20 21:26:53 8:23 192 0 nxtgenphe no APPLE 'PHONES 1526 03/10/20 21:26:54 8:23 0 0 nxtgenphe no APPLE 'PHONES 1527 03/10/20 21:28:35 60:00 10656 4288 ims 1528 03/10/20 21:35:17 1:15 0 0 nxtgenphe no APPLE 'PHONES 1529 03/10/20 21:36:32 7:33 0 0 nxtgonpho no APPLE !PHONES 1530 03/10/20 21:44:05 10:19 192 0 nxtgonphe ne APPLE 'PHONES 1531 03/10/20 21:44:06 10:19 0 0 nxtgenphe ne APPLE 'PHONES 1532 03/10/20 21:54:25 2:09 192 0 nxtgenphe ne APPLE 'PHONES 1533 03/10/20 21:54:26 2:09 0 0 nxtgenphe ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 63 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170983 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343041