PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. „lee AT&T Run Dato: Run Time: Data usage For: Item conn. Date 06/17/2020 Si= Conn. Time (OTC/ Originating Number ET Bytes up Bytes Apn Dn IMEI IMSI MIME MODEL 1534 03/10/20 21:56:35 27:45 0 Onstgenpho ne APPLE 'PEONES 1535 03/10/20 22:24:20 64:28 192 0 nxtgenpho ne APPLE 'PEONES 1536 03/10/20 22:24:21 60:00 0 0 nxtgenpho ne APPLE 'PEONES 1537 03/10/20 22:28:35 60:00 24512 11828 ims 1538 03/10/20 23:20:52 0:01 0 0 ims 1539 03/10/20 23:20:55 0:03 0 1356 ims 1540 03/10/20 23:24:21 4:28 0 0 nxtgenpho ne APPLE 'PEONES 1541 03/10/20 23:28:35 60:00 11796 4376 ims 1542 03/10/20 23:28:49 47:34 0 0 nxtgenpho ne APPLE 'PHONES 1543 03/11/20 00:16:23 0:54 0 0 nxtgenpho ne APPLE 'PHONES 1544 03/11/20 00:17:16 2:09 192 0 nxtgenpho ne APPLE 'PHONES 1545 03/11/20 00:17:17 2:10 0 0 nxtgenpho ne APPLE 'PHONES 1546 03/11/20 00:19:26 5:58 0 0 nxtgenpho ne APPLE 'PHONES 1547 03/11/20 00:25:23 5:22 192 0 nxtgenpho ne APPLE !PHONES 1548 03/11/20 00:25:24 5:22 0 0 nxtgenpho ne APPLE !PHONES 1549 03/11/20 00:28:35 60:00 7048 2912 ims 1550 03/11/20 00:30:46 60:00 0 0 nxtgenpho ne APPLE !PHONES 1551 03/11/20 01:28:35 59:42 8604 3160 ims 1552 03/11/20 01:30:46 52:17 0 0 nxtgenpho ne APPLE !PHONES 1553 03/11/20 02:24:15 2:47 0 0 nxtgenpho ne APPLE !PHONES 1554 03/11/20 02:27:01 70:00 192 0 nxtgenpho ne APPLE !PHONES 1555 03/11/20 02:27:02 60:00 0 0 nxtgenpho ne APPLE !PHONES 1556 03/11/20 02:27:28 15:13 6353 33200 ims APPLE !PHONES 1557 03/11/20 02:27:29 15:13 6672 6089 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170984 The information contained here is for use by authorized persons only and is not for general distribution. Page 64 EFTA01343042

P.020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm ...1/47,e,# ""s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ‘‘.......tzse OTC. Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Numbor ET Bytes Up Bytes Apn Dn IMMIX IMEI MAKE MODEL 1558 03/11/20 02:28:17 60:00 8371 6178 ims 1559 03/11/20 02:42:36 60:00 15069 8676 ims 1560 03/11/20 03:27:02 60:00 0 0 nxtgonpho no 31 APPLE 'PHONES 1561 03/11/20 03:28:17 60:00 0 0 ims 1562 03/11/20 03:42:36 56:47 13320 5856 ims 1563 03/11/20 04:27:02 4:24 0 0 nxtgonpho no 31 APPLE 'PHONES 1564 03/11/20 04:28:17 3:12 0 0 ims 1565 03/11/20 04:31:26 3:35 0 0 nxtgonpho no 31 APPLE 'PHONES 1566 03/11/20 04:31:29 0:00 0 0 ims 31 APPLE 'PHONES 1567 03/11/20 04:35:00 7:56 192 0 nxtgonpho no 31 APPLE 'PHONES 1568 03/11/20 04:35:01 7:56 0 0 nxtgonpho no 31 APPLE 'PHONES 1569 03/11/20 04:39:23 60:00 16467 9128 ims 1570 03/11/20 04:42:57 21:02 0 0 nxtgonpho no 31 APPLE 'PHONES 1571 03/11/20 05:03:58 8:20 192 0 nxtgonpho no 31 APPLE 'PHONES 1572 03/11/20 05:03:59 8:20 0 0 nxtgonpho no 31 APPLE 'PHONES 1573 03/11/20 05:12:19 8:19 0 0 nxtgonpho no 3! APPLE 'PHONES 1574 03/11/20 05:20:37 21:06 192 0 nxtgonpho no 3 APPLE 'PHONES 1575 03/11/20 05:20:38 21:06 0 0 nxtgonpho no 3 APPLE 'PHONES 1576 03/11/20 05:39:23 60:00 7032 2756 ims 1577 03/11/20 05:41:44 29:04 0 0 nxtgonpho no 3 APPLE 'PHONES 1578 03/11/20 06:10:47 2:09 192 0 nxtgonpho no 3 APPLE 'PHONES 1579 03/11/20 06:10:49 2:08 0 0 nxtgonpho no 3 APPLE 'PHONES 1580 03/11/20 06:12:58 60:00 0 0 nxtgonpho no 3 APPLE 'PHONES 1581 03/11/20 06:39:23 60:00 6816 2540 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 65 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170985 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343043

pm. MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. cre AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Siam Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn LBSI IMSI MAKE MODEL 1582 03/11/20 07:12:58 60:00 0 0 nxtgonpho no APPLE 'PHONES 1583 03/11/20 07:39:23 60:00 8388 3144 ims 1584 03/11/20 08:12:58 33:16 0 0 nxtgonpho ne APPLE 'PHONES 1585 03/11/20 08:39:23 60:00 6816 2896 ims 1586 03/11/20 08:46:13 2:09 192 0 nxtgonpho ne APPLE 'PHONES 1587 03/11/20 08:46:14 2:09 0 0 nxtgonpho ne APPLE 'PHONES 1588 03/11/20 08:48:23 55:08 0 0 nxtgonpho ne APPLE 'PHONES 1589 03/11/20 09:39:23 60:00 13524 5520 ims 1590 03/11/20 09:43:30 2:09 192 0 nxtgonpho ne APPLE 'PHONES 1591 03/11/20 09:43:31 2:09 0 0 nxtgonpho ne APPLE 'PHONES 1592 03/11/20 09:45:40 60:00 0 0 nxtgonpho ne APPLE 'PHONES 1593 03/11/20 10:39:23 60:00 7140 2788 ims 1594 03/11/20 10:45:40 60:00 0 0 nxtgonpho no APPLE 'PHONES 1595 03/11/20 11:39:23 44:33 3516 1340 ims 1596 03/11/20 11:45:40 36:54 0 0 nxtgonpho ne APPLE 'PHONES 1597 03/11/20 12:22:33 2:10 192 0 nxtgonpho ne APPLE 'PHONES 1598 03/11/20 12:22:34 2:10 0 0 nxtgonpho ne APPLE 'PHONES 1599 03/11/20 12:22:38 2:05 6439 8606 ims APPLE 'PHONES 1600 03/11/20 12:22:39 2:05 8462 6175 ims APPLE 'PHONES 1601 03/11/20 12:23:56 60:00 16789 9202 ims 1602 03/11/20 12:24:44 22:13 0 Onactgonpho ne APPLE 'PHONES 1603 03/11/20 12:46:56 8:20 192 0 nxtgonpho ne APPLE 'PHONES 1604 03/11/20 12:46:57 8:20 0 0 nxtgonpho ne APPLE 'PHONES 1605 03/11/20 12:55:17 60:00 0 0 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 66 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00170486 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343044

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:50:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. c to AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytos Up Bytes Apn Dn ENE! INSI MAKE MODEL 1606 03/11/20 13:23:56 60:00 6956 2988 ims 1607 03/11/20 13:55:17 60:00 0 Onmtgenpho ne APPLE !PHONES 1608 03/11/20 14:23:56 60:00 6940 2756 ims 1609 03/11/20 14:55:17 19:02 0 0 nmtgenpho ne APPLE !PHONES 1610 03/11/20 15:14:18 2:01 192 0 nxtgenpho ne APPLE !PHONES 1611 03/11/20 15:14:19 2:01 0 0 nxtgenpho ne APPLE !PHONES 1612 03/11/20 15:16:20 0:32 0 0 nxtgenpho ne APPLE !PHONES 1613 03/11/20 15:16:51 2:10 192 0 nxtgenpho ne APPLE !PHONES 1614 03/11/20 15:16:52 2:10 0 0 nxtgenpho ne APPLE !PHONES 1615 03/11/20 15:19:02 32:43 0 0 nxtgenpho ne APPLE !PHONES 1616 03/11/20 15:23:56 16:09 3532 1324 ims APPLE !PHONES 1617 03/11/20 15:40:05 0:24 2768 1324 ims APPLE !PHONES 1618 03/11/20 15:40:05 0:24 2704 1324 ims APPLE !PHONES 1619 03/11/20 15:40:29 11:44 4964 1680 ims APPLE !PHONES 1620 03/11/20 15:51:45 2:09 192 Onmtgenpho ne APPLE !PHONES 1621 03/11/20 15:51:46 2:09 0 0 nxtgenpho ne APPLE !PHONES 1622 03/11/20 15:52:12 1:05 6370 7972 ims APPLE !PHONES 1623 03/11/20 15:52:13 1:05 7972 6106 ims APPLE !PHONES 1624 03/11/20 15:52:58 0:21 11358 6562 ims 1625 03/11/20 15:53:16 0:38 6244 6668 ims APPLE !PHONES 1626 03/11/20 15:53:17 0:38 6668 5980 ims APPLE !PHONES 1627 03/11/20 15:53:46 0:56 8511 6170 ims 1628 03/11/20 15:53:55 0:42 0 Onmtgenpho ne APPLE !PHONES 1629 03/11/20 15:54:36 2:10 192 0 nxtgenpho ne APPLE !PHONES 1630 03/11/20 15:54:37 2:10 0 0 nxtgenpho ne APPLE !PHONES 1631 03/11/20 15:54:40 2:06 6262 6666 ims APPLE !PHONES 1632 03/11/20 15:54:42 2:05 6666 5998 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170987 The information contained here is for use by authorized persons only and is not for general distribution. Page 67 EFTA01343045

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Tame MC/ Originating Number CT Bytes Up Bytes Apn Dn Ian SAES MOM 1633 03/11/20 15:55:34 60:00 18402 10186 ims 1634 03/11/20 15:56:47 23:07 0 0 nxtgenpho ne APPLE 'PEONES 1635 03/11/20 16:19:54 2:19 192 0 nxtgonphe ne APPLE 'PEONES 1636 03/11/20 16:19:55 2:20 0 0 nxtgonphe ne APPLE 'PEONES 1637 03/11/20 16:22:15 31:18 0 0 nxtgonphe ne APPLE 'PEONES 1638 03/11/20 16:53:32 8:20 192 0 nxtgonphe ne APPLE 'PEONES 1639 03/11/20 16:53:33 8:21 0 0 nxtgonphe ne APPLE IPHOME8 1640 03/11/20 16:55:34 60:00 8496 3144 ims 1641 03/11/20 17:01:53 7:53 0 0 nxtgonphe ne APPLE !PHONES 1642 03/11/20 17:09:46 0:47 0 0 nxtgonphe ne APPLE !PHONES 1643 03/11/20 17:10:32 2:09 192 0 nxtgonphe ne APPLE !PHONES 1644 03/11/20 17:10:33 2:09 0 0 nxtgonphe ne APPLE !PHONES 1645 03/11/20 17:12:42 30:27 0 0 nxtgonphe ne APPLE !PHONES 1646 03/11/20 17:43:08 2:10 192 0 nxtgonphe ne APPLE !PHONES 1647 03/11/20 17:43:10 2:09 0 0 nxtgonphe ne APPLE !PHONES 1648 03/11/20 17:45:19 11:39 0 0 nxtgonphe ne APPLE !PHONES 1649 03/11/20 17:55:34 60:00 8496 3036 ims 1650 03/11/20 17:56:58 61:35 192 0 nxtgonphe ne APPLE !PHONES 1651 03/11/20 17:56:59 60:00 0 0 nxtgonphe ne APPLE !PHONES 1652 03/11/20 18:55:34 60:00 8588 3052 ims 1653 03/11/20 18:56:59 1:35 0 0 nxtgonphe ne APPLE !PHONES 1654 03/11/20 18:58:34 6:44 0 0 nxtgonphe ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 68 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00170488 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343046

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. k..70 .0 AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn MBE! INSI MAKE MODEL 1655 03/11/20 19:05:17 21:01 192 Onactgonpho ne APPLE !PHONES 1656 03/11/20 19:05:18 21:01 0 0 nxtgenpho ne APPLE !PHONES 1657 03/11/20 19:26:19 14:15 0 0 nxtgenpho ne APPLE !PHONES 1658 03/11/20 19:40:33 2:09 192 0 nxtgenpho ne APPLE !PHONES 1659 03/11/20 19:40:34 2:09 0 0 nxtgenpho ne APPLE !PHONES 1660 03/11/20 19:42:43 10:04 0 0 nxtgenpho ne APPLE !PHONES 1661 03/11/20 19:52:46 2:10 192 Onactgonpho ne APPLE !PHONES 1662 03/11/20 19:52:48 2:09 0 0 nxtgenpho ne APPLE !PHONES 1663 03/11/20 19:54:57 27:31 0 0 nxtgenpho ne APPLE !PHONES 1664 03/11/20 19:55:34 60:00 7188 2804 ims 1665 03/11/20 20:22:27 4:17 192 0 nxtgenpho ne APPLE !PHONES 1666 03/11/20 20:22:28 4:17 0 Onactgonpho ne APPLE !PHONES 1667 03/11/20 20:26:45 31:09 0 0 nxtgenpho ne APPLE !PHONES 1668 03/11/20 20:55:34 60:00 41608 20964 ims 1669 03/11/20 20:57:06 0:24 19460 45298 ims 1670 03/11/20 20:57:54 5:20 192 Onactgonpho ne APPLE !PHONES 1671 03/11/20 20:57:55 5:20 0 0 nxtgenpho ne APPLE !PHONES 1672 03/11/20 21:03:16 24:05 0 0 nxtgenpho ne APPLE !PHONES 1673 03/11/20 21:27:20 2:10 192 Onactgonpho ne APPLE !PHONES 1674 03/11/20 21:27:21 2:10 0 Onactgonpho ne APPLE !PHONES 1675 03/11/20 21:29:31 5:23 0 0 nxtgenpho ne APPLE !PHONES 1676 03/11/20 21:34:53 2:45 192 0 nxtgenpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 69 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170589 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343047

MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn EBBS IMSI MAKE MODEL 1677 03/11/20 21:34:54 2:45 0 Onxtgonpho ne APPLE !PHONES 1678 03/11/20 21:36:21 0:24 16926 44638 ims 1679 03/11/20 21:37:38 8:33 192 Onxtgonpho no APPLE !PHONES 1680 03/11/20 21:37:39 8:33 0 0 nxtgonpho no APPLE !PHONES 1681 03/11/20 21:46:12 2:53 0 0 nxtgonpho no APPLE 'PHONES 1682 03/11/20 21:48:10 0:24 36612 45576 ims 1683 03/11/20 21:49:04 1:41 192 0 nxtgonpho no APPLE 'PHONES 1684 03/11/20 21:49:05 1:41 0 0 nxtgonpho no APPLE 'PHONES 1685 03/11/20 21:50:45 2:09 192 0 nxtgenpho no APPLE 'PHONES 1686 03/11/20 21:50:46 2:09 0 0 nxtgenpho no APPLE 'PHONES 1687 03/11/20 21:52:55 4:37 0 0 nxtgenpho no APPLE 'PHONES 1688 03/11/20 21:55:34 60:00 23372 11084 ims 1689 03/11/20 21:56:29 0:24 15044 47925 ims 1690 03/11/20 21:57:31 2:32 192 0 nxtgonpho ne APPLE 'PHONES 1691 03/11/20 21:57:32 2:32 0 0 nxtgenpho ne APPLE !PHONES 1692 03/11/20 22:00:04 16:53 0 0 nxtgonpho no APPLE 'PHONES 1693 03/11/20 22:16:57 2:09 192 0 nxtgonpho no APPLE 'PHONES 1694 03/11/20 22:16:58 2:09 0 0 nxtgonpho ne APPLE 'PHONES 1695 03/11/20 22:19:08 33:25 0 0 nxtgonpho no APPLE 'PHONES 1696 03/11/20 22:52:32 8:24 192 0 nxtgonpho no APPLE 'PHONES 1697 03/11/20 22:52:33 8:24 0 0 nxtgenpho no APPLE 'PHONES 1698 03/11/20 22:55:34 11:56 0 0 ims 1699 03/11/20 23:00:57 1:54 0 0 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 70 customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00170990 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343048

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro ‘•- .ai. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 INA= Conn. Originating BT Time Number (07C) Bytes Up Bytes Apn INKS INSI BARB Dn MODEL 1700 03/11/20 23:02:51 14:31 192 Onxtgonpho ne APPLE 'PHONES 1701 03/11/20 23:02:52 14:32 0 0 nxtgenpho ne APPLE 'PHONES 1702 03/11/20 23:03:05 14:17 6204 6742 ims APPLE 'PHONES 1703 03/11/20 23:03:06 14:18 6674 5940 ims APPLE 'PHONES 1704 03/11/20 23:17:24 10:02 0 Onxtgonpho ne APPLE 'PHONES 1705 03/11/20 23:17:29 60:00 16825 9216 ims 1706 03/11/20 23:27:25 8:34 192 0 nxtgenpho ne APPLE 'PHONES 1707 03/11/20 23:27:26 8:34 0 0 nxtgenpho ne APPLE 'PHONES 1708 03/11/20 23:36:00 40:21 0 0 nxtgenpho ne APPLE 'PHONES 1709 03/12/20 00:16:20 6:06 192 0 nxtgenpho ne APPLE 'PHONES 1710 03/12/20 00:16:21 6:06 0 0 nxtgonpho no APPLE 'PHONES 1711 03/12/20 00:17:29 9:41 0 0 ims 1712 03/12/20 00:22:27 39:48 0 0 nxtgenpho no APPLE 'PHONES 1713 03/12/20 00:32:04 0:00 0 0 ims APPLE 'PHONES 1714 03/12/20 00:32:10 0:16 6670 5998 ims APPLE 'PHONES 1715 03/12/20 00:32:26 3:19 13976 7532 ims APPLE 'PHONES 1716 03/12/20 00:35:45 0:32 4276 1696 ims APPLE 'PHONES 1717 03/12/20 00:36:17 60:00 12136 4376 ims APPLE 'PHONES 1718 03/12/20 01:02:14 14:09 192 Onxtgonpho ne APPLE 'PHONES 1719 03/12/20 01:02:15 14:10 0 0 nxtgenpho ne APPLE 'PHONES 1720 03/12/20 01:16:25 20:21 0 0 nxtgenpho ne APPLE 'PHONES 1721 03/12/20 01:36:17 54:55 8388 3020 ims APPLE 'PHONES 1722 03/12/20 01:36:46 14:19 0 0 nxtgenpho ne APPLE 'PHONES 1723 03/12/20 01:51:04 2:35 192 0 nxtgenpho ne APPLE 'PHONES 1724 03/12/20 01:51:05 2:35 0 0 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170991 The information contained here is for use by authorized persons only and is not for general distribution. Page 71 EFTA01343049

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. cro AT&T Run Data: Run Tina: Data Usage Tor: Item Conn. Data 06/17/2020 INA= Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn LBSS IMSI MAKE MOD= 1725 03/12/20 01:53:40 8:44 192 Onxtgonpho ne APPLE 'PEONES 1726 03/12/20 01:53:41 8:44 0 0 nxtgonpho ne APPLE 'PEONES 1727 03/12/20 02:02:25 4:58 0 0 nxtgonpho ne APPLE 'PEONES 1728 03/12/20 02:07:22 90:00 192 0 nxtgonpho ne APPLE 'PEONES 1729 03/12/20 02:07:23 60:00 0 0 nxtgonpho ne APPLE 'PEONES 1730 03/12/20 02:31:11 70:00 6226 6646 ims APPLE 'PEONES 1731 03/12/20 02:31:12 60:00 6646 6070 ims APPLE 'PEONES 1732 03/12/20 02:33:14 60:00 16043 9169 ims 1733 03/12/20 03:07:23 60:00 0 0 nxtgonpho no APPLE IPH0t1E8 1734 03/12/20 03:31:12 55:35 0 0 ims APPLE !PHONES 1735 03/12/20 03:33:14 60:00 6816 2648 ims 1736 03/12/20 04:07:23 19:24 0 Onxtgonpho ne APPLE !PHONES 1737 03/12/20 04:26:46 240:03 192 0 nxtgonpho ne APPLE !PHONES 1738 03/12/20 04:26:47 60:00 0 0 nxtgonpho ne APPLE !PHONES 1739 03/12/20 04:33:14 60:00 6816 2788 ims 1740 03/12/20 05:26:47 60:00 0 0 nxtgonpho no APPLE !PHONES 1741 03/12/20 05:33:14 60:00 8836 3144 ims 1742 03/12/20 06:26:47 60:00 0 0 nxtgonpho ne APPLE !PHONES 1743 03/12/20 06:33:14 60:00 6816 2680 ims 1744 03/12/20 07:26:47 60:00 0 0 nxtgonpho ne APPLE !PHONES 1745 03/12/20 07:33:14 60:00 15312 6108 ims 1746 03/12/20 08:26:47 0:03 0 0 nxtgonpho ne APPLE !PHONES 1747 03/12/20 08:33:14 60:00 6924 2680 ims 1748 03/12/20 08:48:31 114:46 192 0 nxtgonpho ne APPLE !PHONES 1749 03/12/20 08:48:32 60:00 0 0 nxtgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170992 The information contained here is for use by authorized persons only and is not for general distribution. Page 72 EFTA01343050

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. t,; sio AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Si= Conn. Originating ET Time Number (OTC/ Bytes Up Bytes Apn Dn flat IMSI MAKE MODEL 1750 03/12/20 09:33:14 60:00 6816 2680 ims 1751 03/12/20 09:48:32 54:46 0 Onmtgonpho no APPLE 'PHONES 1752 03/12/20 10:33:14 60:00 13352 4716 ims 1753 03/12/20 10:43:18 55:17 192 0 nmtgonpho ne APPLE 'PHONES 1754 03/12/20 10:43:19 55:17 0 0 nmtgonpho ne APPLE 'PHONES 1755 03/12/20 11:33:14 60:00 7048 2696 ims 1756 03/12/20 11:38:36 60:00 0 0 nmtgonpho no APPLE 'PHONES 1757 03/12/20 12:33:14 46:01 23828 16392 ims 1758 03/12/20 12:38:36 10:29 0 0 nmtgonpho ne APPLE 'PHONES 1759 03/12/20 12:49:04 1:58 192 0 nmtgonpho ne APPLE 'PHONES 1760 03/12/20 12:49:06 1:57 0 0 nmtgonpho ne APPLE 'PHONES 1761 03/12/20 12:51:03 4:18 0 0 nmtgonpho no APPLE 'PHONES 1762 03/12/20 12:55:20 2:13 192 0 nmtgonpho no APPLE 'PHONES 1763 03/12/20 12:55:21 2:13 0 0 nmtgonpho ne APPLE 'PHONES 1764 03/12/20 12:57:34 5:28 0 0 nmtgonpho ne APPLE 'PHONES 1765 03/12/20 13:03:01 3:17 192 0 nmtgonpho no APPLE 'PHONES 1766 03/12/20 13:03:02 3:17 0 0 nmtgonpho no APPLE 'PHONES 1767 03/12/20 13:06:19 0:37 0 0 nmtgonpho ne APPLE 'PHONES 1768 03/12/20 13:06:55 8:47 192 0 nmtgonpho ne APPLE 'PHONES 1769 03/12/20 13:06:56 8:48 0 0 nmtgonpho ne APPLE 'PHONES 1770 03/12/20 13:15:43 2:19 192 0 nmtgonpho ne APPLE 'PHONES 1771 03/12/20 13:15:44 2:19 0 0 nmtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 73 customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170993 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343051

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. „two AT&T Run Date: Run Tim: Data Usage For: Item Conn. Date 06/17/2020 alai= Conn. Tine (OTC) Originating Bytes up Bytes Apn on DMZ IIalI MDME MODEL 1772 03/12/20 13:18:03 2:44 0 0 nxtgenpho ne APPLE 'PHONED 1773 03/12/20 13:20:16 1:19 19792 12737 isms 1774 03/12/20 13:20:46 1:39 192 0 nxtgenpho ne APPLE 'PEONES 1775 03/12/20 13:20:48 1:38 0 0 nxtgenpho ne APPLE IP90NB8 1776 03/12/20 13:22:26 2:48 0 0 nxtgenpho ne APPLE IP90N18 1777 03/12/20 13:22:28 2:46 8904 7088 isms APPLE IPHOME8 1778 03/12/20 13:25:14 2:09 192 0 nxtgenpho ne APPLE IP90N18 1779 03/12/20 13:25:15 2:08 7096 6742 isms APPLE 'PHONES 1780 03/12/20 13:25:15 2:09 0 0 nxtgenpho ne APPLE IP90N18 1781 03/12/20 13:25:16 2:08 6742 6832 isms APPLE IP90N18 1782 03/12/20 13:26:04 60:00 16699 9051 isms 1783 03/12/20 13:27:24 60:00 0 0 nxtgenpho ne APPLE IP90N18 1784 03/12/20 14:26:04 60:00 7188 2896 isms 1785 03/12/20 14:27:24 60:00 0 0 nxtgenpho ne APPLE 'PHONES 1786 03/12/20 15:26:04 60:00 24520 13060 isms 1787 03/12/20 15:27:24 60:00 0 0 nxtgenpho ne APPLE 2990918 1788 03/12/20 16:00:27 7:27 1180538 1151123 isms 1789 03/12/20 16:26:04 60:00 7064 2896 isms 1790 03/12/20 16:27:24 60:01 0 Onxtgonpho ne APPLE 'PHONES 1791 03/12/20 17:26:04 60:00 12044 4672 isms 1792 03/12/20 17:27:26 45:17 0 0 nxtgenpho ne APPLE 'PHONES 1793 03/12/20 18:08:59 0:00 0 0 isms APPLE 'PHONES 1794 03/12/20 18:09:58 60:00 25799 15893 isms 1795 03/12/20 18:12:16 0:23 30532 40404 isms 1796 03/12/20 18:12:42 8:26 192 Onstgonpho ne APPLE 'PHONES 1797 03/12/20 18:12:43 8:26 0 Onxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170994 The information contained here is for use by authorized persons only and is not for general distribution. Page 74 EFTA01343052

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. dre AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn L@2 INSI MAKE MODEL 1798 03/12/20 18:21:09 55:07 0 0 nxtgenpho ne APPLE !PHONES 1799 03/12/20 18:26:04 55:32 0 0 ism 1800 03/12/20 19:09:58 9:30 4856 2712 ism 1801 03/12/20 19:16:15 2:10 192 Onxtgonpho ne APPLE !PHONES 1802 03/12/20 19:16:16 2:10 0 Onxtgonpho ne APPLE !PHONES 1803 03/12/20 19:18:26 1:37 0 0 nxtgenpho ne APPLE !PHONES 1804 03/12/20 19:20:02 6:01 192 0 nxtgonpho ne APPLE !PHONES 1805 03/12/20 19:20:03 6:00 6352 6648 ism APPLE !PHONES 1806 03/12/20 19:20:03 6:01 0 Onxtgonpho ne APPLE !PHONES 1807 03/12/20 19:20:04 6:00 6648 6088 ism APPLE !PHONES 1808 03/12/20 19:21:36 0:56 15122 11060 ism 1809 03/12/20 19:22:44 0:30 13547 10699 ism 1810 03/12/20 19:23:30 60:00 44687 29586 ism 1811 03/12/20 19:26:04 7:32 0 0 nxtgonpho no APPLE !PHONES 1812 03/12/20 19:33:35 2:10 192 0 nxtgonpho ne APPLE !PHONES 1813 03/12/20 19:33:36 2:10 0 0 nxtgenpho ne APPLE !PROMS 1814 03/12/20 19:34:21 1:15 167363 118968 ism 1815 03/12/20 19:35:46 5:54 0 0 nxtgenpho ne APPLE !PHONES 1816 03/12/20 19:39:03 0:14 0 0 ism 1817 03/12/20 19:41:40 2:09 192 0 nxtgenpho ne APPLE !PHONES 1818 03/12/20 19:41:41 2:09 0 0 nxtgenpho no APPLE !PHONES 1819 03/12/20 19:43:50 1:07 0 0 nxtgonpho no APPLE !PHONES 1820 03/12/20 19:44:56 2:12 192 0 nxtgonpho no APPLE !PHONES 1821 03/12/20 19:44:57 2:12 0 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 75 customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170995 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343053

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 M.= Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn 17@I II 8f MAPS 1822 03/12/20 19:47:09 2:44 0 0 nactgonpho ne APPLE 1823 03/12/20 19:49:32 0:24 51463 45228 ims 1824 03/12/20 19:49:52 0:43 192 0 nactgonpho ne APPLE 1825 03/12/20 19:49:53 0:43 0 0 nactgonpho ne APPLE 1826 03/12/20 19:50:36 30:57 0 0 nactgonpho ne APPLE 1827 03/12/20 20:21:32 2:09 192 0 nactgonpho ne APPLE 1828 03/12/20 20:21:33 2:09 0 0 nactgonpho ne APPLE 1829 03/12/20 20:23:30 60:00 7048 3004 ims 1830 03/12/20 20:23:42 42:51 0 0 nactgonpho ne APPLE 1831 03/12/20 21:06:32 14:44 192 0 nactgonpho ne APPLE 1832 03/12/20 21:06:33 14:44 0 0 nactgonpho ne APPLE 1833 03/12/20 21:21:17 8:01 0 0 nactgonpho ne APPLE 1834 03/12/20 21:23:30 60:00 6924 2788 ims 1835 03/12/20 21:29:18 60:00 0 0 nactgonpho ne APPLE 1836 03/12/20 22:23:30 60:00 13476 4500 ims 1837 03/12/20 22:29:18 45:03 0 0 nactgonpho ne APPLE 1838 03/12/20 23:14:22 60:00 0 0 nactgonpho ne APPLE 1839 03/12/20 23:23:30 60:00 10300 3408 ims 1840 03/13/20 00:14:22 51:33 0 0 nactgonpho ne APPLE 1841 03/13/20 00:23:30 60:00 14864 4872 ims 1842 03/13/20 01:05:54 92:25 192 0 nottgonpho ne APPLE 1843 03/13/20 01:05:55 60:00 0 0 nactgonpho ne APPLE 1844 03/13/20 01:23:30 60:00 14600 4656 ims 1845 03/13/20 02:05:55 32:25 0 0 nactgonpho ne APPLE MODEL IPACETA IPACETA IPACETA IPACETA IPACETA IPNONE8 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES !PHONES !PHONES 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 76 customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170996 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343054

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Date: Run Tine: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating Br Time Number (uzC) Bytes Up Bytes Apn L@I IMSI MAKE Dn MODEL 1846 03/13/20 02:23:30 60:00 8820 3252 ins 1847 03/13/20 02:38:20 60:00 192 Onstgonpho no APPLE 'PEONES 1848 03/13/20 02:38:21 60:00 0 0 nxtgonpho no APPLE 'PEONES 1849 03/13/20 03:23:30 40:50 12092 6752 ins 1850 03/13/20 03:38:21 12:11 0 0 nxtgonpho ne APPLE 'PEONES 1851 03/13/20 03:50:31 2:55 192 0 nxtgonpho ne APPLE 'PHONES 1852 03/13/20 03:50:32 2:55 0 0 nxtgonpho ne APPLE 'PHONES 1853 03/13/20 03:53:27 10:51 192 0 nxtgonpho no APPLE 'PHONES 1854 03/13/20 03:53:28 10:51 0 0 nxtgonpho no APPLE 'PHONES 1855 03/13/20 04:08:13 34:26 192 0 nxtgonpho no APPLE 'PHONES 1856 03/13/20 04:08:14 34:26 0 0 nxtgonpho no APPLE 'PHONES 1857 03/13/20 04:08:52 0:44 7459 8824 ins APPLE !PHONES 1858 03/13/20 04:08:53 0:44 8824 7107 ins APPLE !PHONES 1859 03/13/20 04:09:08 0:01 0 0 ins 1860 03/13/20 04:09:21 0:19 6244 6754 isms APPLE !PHONES 1861 03/13/20 04:09:22 0:19 6690 5980 isms APPLE 'PHONES 1862 03/13/20 04:09:37 0:03 2565 1210 isms 1863 03/13/20 04:09:39 0:20 6344 6674 isms APPLE !PHONES 1864 03/13/20 04:09:40 0:20 6674 6080 isms APPLE !PHONES 1865 03/13/20 04:09:56 0:04 2565 1212 isms 1866 03/13/20 04:09:59 0:36 8342 8629 isms APPLE 'PHONES 1867 03/13/20 04:10:00 0:36 8629 8078 isms APPLE 'PHONES 1868 03/13/20 04:10:14 0:01 0 0 isms 1869 03/13/20 04:10:19 32:22 7376 6864 isms APPLE 'PHONES 1870 03/13/20 04:10:20 32:22 6800 7112 isms APPLE !PHONES 1871 03/13/20 04:10:35 60:00 15405 9050 isms 1872 03/13/20 04:42:08 0:35 3412 9535 nxtgenpho ne 1873 03/13/20 04:42:42 62:11 192 0 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170997 The information contained here is for use by authorized persons only and is not for general distribution. Page 77 EFTA01343055

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. gre ‘•- .a# AT&T Run pato: Run Time: Data Usage Tor: Item Conn. Dato 06/17/2020 M.= Conn. Tim (OTC) Originating Number BT Bytes Op Bytes AP^ Dn 7:KEI IMSI HAKE MODEL 1874 03/13/20 04:42:43 60:00 0 0 nactgonpho ne APPLE !PHONES 1875 03/13/20 05:10:35 60:00 6848 2664 ims 1876 03/13/20 05:42:43 22:11 0 0 nactgonpho ne APPLE !PHONES 1877 03/13/20 06:04:53 2:22 192 0 nactgonpho no APPLE !PHONES 1878 03/13/20 06:04:54 2:22 0 0 nactgonpho ne APPLE !PHONES 1879 03/13/20 06:07:15 6:06 192 0 nactgonpho ne APPLE !PHONES 1880 03/13/20 06:07:17 6:05 0 0 nactgonpho ne APPLE !PHONES 1881 03/13/20 06:10:35 60:00 8372 2912 ism 1882 03/13/20 06:13:22 0:47 0 0 nactgonpho ne APPLE !PHONES 1883 03/13/20 06:14:09 18:41 192 0 nactgonpho ne APPLE !PHONES 1884 03/13/20 06:14:10 18:41 0 0 nactgonpho ne APPLE !PHONES 1885 03/13/20 06:32:51 58:16 0 0 nactgonpho ne APPLE !PHONES 1886 03/13/20 07:10:35 60:00 6956 2788 igloo 1887 03/13/20 08:10:35 60:00 17084 7312 igloo 1888 03/13/20 09:10:35 60:00 8496 3036 igloo 1889 03/13/20 10:10:35 60:00 9912 3176 igloo 1890 03/13/20 11:10:35 60:00 10052 3284 ism 1891 03/13/20 12:10:35 60:00 11920 4268 ism 1892 03/13/20 12:38:02 9:35 192 Onxtgonpho ne APPLE !PHONES 1893 03/13/20 12:38:03 9:35 0 0 nactgonpho ne APPLE !PHONES 1894 03/13/20 12:47:37 25:08 192 0 nactgonpho ne APPLE !PHONES 1895 03/13/20 12:47:38 25:08 0 0 nactgonpho ne APPLE !PHONES 1896 03/13/20 13:10:35 10:57 0 0 ism 1897 03/13/20 13:12:46 2:03 192 0 nactgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 78 customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00170998 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343056

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:58:68pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. *• 0 e t, AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC/ Originating Number ET Bytes Up Bytes Apn Dn DMZ 1848z MAKE MODEL 1898 03/13/20 13:12:47 2:03 0 0 nxtgonpho no APPLE 'PHONES 1899 03/13/20 13:14:50 21:25 0 0 nxtgonpho no APPLE 'PHONES 1900 03/13/20 13:21:33 60:00 15267 8752 ims 1901 03/13/20 13:36:15 4:11 0 0 nxtgonpho no APPLE 'PHONES 1902 03/13/20 13:40:25 120:00 192 0 nxtgonpho no APPLE 'PHONES 1903 03/13/20 13:40:26 60:00 0 0 nxtgonpho no APPLE 'PHONES 1904 03/13/20 14:21:33 60:00 8372 3112 ims 1905 03/13/20 14:40:26 60:00 0 0 nxtgenpho no APPLE 'PHONES 1906 03/13/20 15:21:33 60:00 8512 3912 ims 1907 03/13/20 15:40:26 55:16 0 0 nxtgonpho no APPLE 'PHONES 1908 03/13/20 16:21:33 59:35 18408 11284 ims 1909 03/13/20 16:33:05 0:25 42857 50460 ims 1910 03/13/20 16:35:42 1:50 0 0 nxtgonpho no APPLE 'PHONES 1911 03/13/20 16:37:31 2:17 192 0 nxtgonpho no APPLE 'PHONES 1912 03/13/20 16:37:32 2:17 0 0 nxtgonpho no APPLE 'PHONES 1913 03/13/20 16:39:49 22:25 0 0 nxtgonpho no APPLE 'PHONES 1914 03/13/20 16:54:03 22:47 15237 10960 ims 1915 03/13/20 17:02:13 5:32 192 0 nxtgonpho no APPLE 'PHONES 1916 03/13/20 17:02:14 5:32 0 0 nxtgonpho no APPLE 'PHONES 1917 03/13/20 17:07:46 13:19 192 0 nxtgonpho no APPLE 'PHONES 1918 03/13/20 17:07:47 13:19 0 0 nxtgonpho no APPLE 'PHONES 1919 03/13/20 17:17:55 8:43 8193 6048 ims 1920 03/13/20 17:21:06 39:09 192 0 nxtgonpho no APPLE 'PHONES 1921 03/13/20 17:21:07 39:09 0 0 nxtgonpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 79 customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00170999 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343057

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:59pm ...1/4ri "--6 AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 M.= Conn. Originating CT Time Number (OTC) Bytes Up Bytes Apn Dn DOLT INSI MAKE MODEL 1922 03/13/20 17:21:08 0:00 0 0 ims APPLE 'PHONES 1923 03/13/20 17:21:15 39:00 6372 6676 ims APPLE 'PHONES 1924 03/13/20 17:21:16 39:00 6676 6108 ims APPLE 'PHONES 1925 03/13/20 17:29:41 60:00 25131 14008 ims 1926 03/13/20 17:59:27 0:23 14717 40025 ims 1927 03/13/20 18:00:17 10:30 0 0 nmtgenpho ne APPLE 'PHONES 1928 03/13/20 18:10:46 79:05 192 0nmtgenpho ne APPLE 'PHONES 1929 03/13/20 18:10:47 60:00 0 0 nmtgenpho ne APPLE 'PHONES 1930 03/13/20 18:29:41 60:00 7156 2988 ims 1931 03/13/20 19:10:47 19:05 0 0 nmtgenpho ne APPLE 'PHONES 1932 03/13/20 19:29:41 60:00 6816 2756 ims 1933 03/13/20 19:29:51 53:02 192 0nmtgenpho ne APPLE 'PHONES 1934 03/13/20 19:29:52 53:02 0 0 nmtgenpho ne APPLE 'PHONES 1935 03/13/20 20:22:54 8:56 0 0 nmtgenpho ne APPLE 'PHONES 1936 03/13/20 20:29:41 30:16 3640 1448 ims 1937 03/13/20 20:31:49 2:04 192 0nmtgenpho ne APPLE 'PHONES 1938 03/13/20 20:31:50 2:04 0 0 nmtgenpho ne APPLE 'PHONES 1939 03/13/20 20:33:54 3:23 0 0 nmtgenpho ne APPLE 'PHONES 1940 03/13/20 20:37:16 2:03 192 0 nmtgenpho ne APPLE 'PHONES 1941 03/13/20 20:37:17 2:03 0 0 nxtgenpho ne APPLE 'PHONES 1942 03/13/20 20:39:20 5:40 0 0 nmtgenpho ne APPLE 'PHONES 1943 03/13/20 20:44:59 2:04 192 0nmtgenpho ne APPLE 'PHONES 1944 03/13/20 20:45:00 2:04 0 0 nmtgenpho ne APPLE 'PHONES 1945 03/13/20 20:47:04 0:37 0 0 nmtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 80 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171000 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343058

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 M.= Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn =IT IMSI MARE MODEL 1946 03/13/20 20:47:40 2:04 192 0 nxtgenpho ne APPLE 'PHONES 1947 03/13/20 20:47:41 2:04 0 0 nxtgenpho ne APPLE 'PHONES 1948 03/13/20 20:49:45 1:18 0 0 nxtgenpho ne APPLE 'PHONES 1949 03/13/20 20:51:02 8:51 192 0 nxtgenpho ne APPLE 'PHONES 1950 03/13/20 20:51:03 8:51 0 0 nxtgenpho ne APPLE 'PHONES 1951 03/13/20 20:51:10 13:44 8373 6106 ims 1952 03/13/20 20:59:54 2:10 192 Onxtgonpho ne APPLE 'PHONES 1953 03/13/20 20:59:55 2:11 0 0 nxtgenpho ne APPLE 'PHONES 1954 03/13/20 20:59:56 2:08 7136 6746 ims APPLE 'PHONES 1955 03/13/20 20:59:57 2:09 6746 6872 ims APPLE 'PHONES 1956 03/13/20 21:02:06 3:47 0 Onxtgonpho ne APPLE 'PHONES 1957 03/13/20 21:05:53 5:41 192 0 nxtgenpho ne APPLE 'PHONES 1958 03/13/20 21:05:54 5:42 0 0 nxtgenpho ne APPLE 'PHONES 1959 03/13/20 21:07:53 2:08 5700 4896 ims 1960 03/13/20 21:09:59 1:35 8160 6868 ims APPLE 'PHONES 1961 03/13/20 21:10:00 1:36 6868 7896 ims APPLE 'PHONES 1962 03/13/20 21:11:36 0:34 0 0 nxtgenpho ne APPLE 'PHONES 1963 03/13/20 21:12:09 26:51 192 0 nxtgenpho ne APPLE 'PHONES 1964 03/13/20 21:12:10 26:51 0 0 nxtgenpho ne APPLE 'PHONES 1965 03/13/20 21:17:20 10:53 8073 10078 ims 1966 03/13/20 21:24:14 6:02 0 0 ims 1967 03/13/20 21:28:12 3:25 14031 10764 ims 1968 03/13/20 21:32:41 2:10 7138 6754 ims APPLE 'PHONES 1969 03/13/20 21:32:42 2:10 6754 6874 ims APPLE 'PHONES 1970 03/13/20 21:34:37 1:31 84 288 ims 1971 03/13/20 21:34:50 2:14 7116 6744 ims APPLE 'PHONES 1972 03/13/20 21:34:51 2:14 6744 6852 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171001 The information contained here is for use by authorized persons only and is not for general distribution. Page 81 EFTA01343059

MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. cro 1/4-4.4 AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating m”..0-0.,- ET Bytes Up Bytes Apn Dn IRRI IRMI MAKZ MODEL 1973 03/13/20 21:36:09 0:56 6601 5083 ims 1974 03/13/20 21:37:04 1:56 7234 6798 isms APPLE 'PEONES 1975 03/13/20 21:37:05 1:56 6798 6970 ims APPLE 'PROEM 1976 03/13/20 21:39:01 1:17 0 Onmtgonpho ne APPLE 'PROEM 1977 03/13/20 21:39:06 1:12 8122 6924 ims APPLE 'PHONES 1978 03/13/20 21:40:17 2:04 192 Onmtgonpho ne APPLE 'PHONES 1979 03/13/20 21:40:18 2:03 6056 6330 ims APPLE 'PHONES 1980 03/13/20 21:40:18 2:04 0 Onmtgonpho ne APPLE 'PHONES 1981 03/13/20 21:40:19 2:03 6330 5792 ims APPLE 'PHONES 1982 03/13/20 21:42:22 0:06 0 Onmtgonpho ne APPLE 'PHONES 1983 03/13/20 21:42:39 0:45 0 Onmtgonpho ne APPLE 'PHONES 1984 03/13/20 21:42:41 0:43 7940 7712 ims APPLE 'PHONES 1985 03/13/20 21:43:23 8:15 192 Onmtgonpho ne APPLE 'PHONES 1986 03/13/20 21:43:24 8:14 6202 6676 ims APPLE 'PHONES 1987 03/13/20 21:43:24 8:15 0 Onmtgonpho ne APPLE 'PHONES 1988 03/13/20 21:43:25 8:14 6676 5938 ims APPLE !PHONES 1989 03/13/20 21:51:39 12:14 0 Onmtgonpho ne APPLE IPHOME8 1990 03/13/20 21:51:43 12:10 19770 12004 ims APPLE 'PHONES 1991 03/13/20 22:03:52 2:10 192 Onmtgonpho ne APPLE !PHONES 1992 03/13/20 22:03:53 2:09 6225 6776 ims APPLE !PHONES 1993 03/13/20 22:03:53 2:10 0 Onmtgonpho ne APPLE !PHONES 1994 03/13/20 22:03:54 2:09 6668 5961 ims APPLE !PHONES 1995 03/13/20 22:06:03 6:11 0 Onmtgonpho ne APPLE !PHONES 1996 03/13/20 22:06:06 6:08 12060 9324 ims APPLE !PHONES 1997 03/13/20 22:12:13 2:16 192 Onmtgonpho ne APPLE !PHONES 1998 03/13/20 22:12:14 2:15 6228 6774 ims APPLE !PHONES 1999 03/13/20 22:12:14 2:16 0 Onmtgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171002 The information contained here is for use by authorized persons only and is not for general distribution. Page 82 EFTA01343060

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:58:58pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ce. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Ma= Conn. Time (OTC) Originating Mtivehn BT Bytes Up Bytes Apn INEX IMES MAKE Dn MODEL 2000 03/13/20 22:12:16 2:14 6666 5964 ims APPLE 'PEONES 2001 03/13/20 22:14:30 2:24 0 Onmtgonpho ne APPLE 'PEONES 2002 03/13/20 22:14:34 2:20 18586 10968 ims APPLE 'PEONES 2003 03/13/20 22:16:53 2:04 192 Onmtgonpho no APPLE 'PEONES 2004 03/13/20 22:16:55 2:02 7268 6904 ims APPLE 'PEONES 2005 03/13/20 22:16:55 2:03 0 Onmtgonpho no APPLE 'PEONES 2006 03/13/20 22:16:56 2:02 6796 7004 ims APPLE !PEONES 2007 03/13/20 22:18:58 1:09 0 Onmtgonpho no APPLE IPEOI88 2008 03/13/20 22:19:00 1:07 8992 6178 ims APPLE 'PHONES 2009 03/13/20 22:20:06 5:12 192 Onmtgonpho no APPLE 'PHONES 2010 03/13/20 22:20:07 3:30 7136 6846 ims APPLE 'PHONES 2011 03/13/20 22:20:07 5:12 0 Onmtgonpho no APPLE 'PHONES 2012 03/13/20 22:20:08 3:30 6738 6872 ims APPLE 'PHONES 2013 03/13/20 22:23:40 1:38 6242 6670 ims APPLE 'PHONES 2014 03/13/20 22:23:42 1:37 6670 5978 ims APPLE 'PHONES 2015 03/13/20 22:25:19 2:37 0 Onmtgonpho ne APPLE 'PHONES 2016 03/13/20 22:25:21 2:35 6676 5999 ims APPLE 'PHONES 2017 03/13/20 22:27:55 2:07 192 Onmtgonpho ne APPLE 'PHONES 2018 03/13/20 22:27:56 2:06 6386 7516 ims APPLE 'PHONES 2019 03/13/20 22:27:56 2:07 0 Onmtgonpho ne APPLE 'PHONES 2020 03/13/20 22:27:58 2:05 7408 6122 ims APPLE 'PHONES 2021 03/13/20 22:30:03 0:05 0 Onmtgonpho ne APPLE 'PHONES 2022 03/13/20 22:30:19 16:13 0 0 nxtgonpho ne APPLE !PHONES 2023 03/13/20 22:30:22 12:57 7408 6122 ims APPLE !PHONES 2024 03/13/20 22:43:19 0:12 640 372 ims APPLE !PHONES 2025 03/13/20 22:46:31 24:52 192 Onxtgonpho ne APPLE !PHONES 2026 03/13/20 22:46:32 24:52 0 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 83 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171003 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343061

MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Sim Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn DMZ ISIS! MANS Dn 2027 03/13/20 22:46:32 1:30 6244 6670 ims APPLE 2028 03/13/20 22:46:33 1:30 6670 5980 ims APPLE 2029 03/13/20 22:46:52 11:25 9869 7850 ims 2030 03/13/20 22:48:02 23:21 7320 6790 ims APPLE 2031 03/13/20 22:48:03 23:21 6790 7056 ims APPLE 2032 03/13/20 22:58:17 20:53 12027 6926 ims 2033 03/13/20 23:11:24 1:05 0 Onmtgonpho ne APPLE 2034 03/13/20 23:12:28 3:14 192 Onmtgonpho ne APPLE 2035 03/13/20 23:12:29 3:14 0 Onmtgonpho ne APPLE 2036 03/13/20 23:14:33 0:07 0 0 ims 2037 03/13/20 23:15:43 12:51 0 Onmtgonpho ne APPLE 2038 03/13/20 23:15:47 5:59 9909 6354 ims 2039 03/13/20 23:19:10 60:00 0 0 ims 2040 03/13/20 23:21:46 60:00 15283 8910 ims 2041 03/13/20 23:28:33 1:36 192 Onmtgonpho no APPLE 2042 03/13/20 23:28:35 1:35 0 Onmtgonpho no APPLE 2043 03/13/20 23:30:10 1:48 0 Onmtgonpho no APPLE 2044 03/13/20 23:31:58 31:47 192 Onmtgonpho no APPLE 2045 03/13/20 23:31:59 31:47 0 Onmtgonpho no APPLE 2046 03/14/20 00:03:45 8:26 192 Onmtgonpho no APPLE 2047 03/14/20 00:03:46 8:26 0 Onmtgonpho no APPLE 2048 03/14/20 00:12:12 3:18 192 Onmtgonpho ne APPLE 2049 03/14/20 00:12:13 3:18 0 Onmtgonpho ne APPLE 2050 03/14/20 00:15:31 0:59 0 Onmtgonpho ne APPLE 2051 03/14/20 00:16:29 4:05 192 Onmtgonpho ne APPLE IPECNEB !PEONES !PEONES !PEONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00171004 The information contained here is for use by authorized persons only and is not for general distribution. Page 84 EFTA01343062

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. de. AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn L62 IMSI MAKE MODEL 2052 03/14/20 00:16:30 4:05 0 0 nxtgonpho no APPLE !PEONES 2053 03/14/20 00:19:10 60:00 0 0 ims 2054 03/14/20 00:20:35 0:40 0 0 nxtgonpho no APPLE !PEONES 2055 03/14/20 00:21:14 15:25 192 0 nxtgonpho no APPLE !PEONES 2056 03/14/20 00:21:15 15:25 0 0 nxtgonpho no APPLE !PEONES 2057 03/14/20 00:21:46 60:00 6816 2648 ims 2058 03/14/20 00:36:39 12:26 192 0 nxtgonpho no APPLE !PEONES 2059 03/14/20 00:36:40 12:26 0 0 nxtgonpho no APPLE !PEONES 2060 03/14/20 00:49:06 1:08 0 0 nxtgonpho no APPLE !PEONES 2061 03/14/20 00:50:14 12:34 192 0 nxtgonpho no APPLE !PEONES 2062 03/14/20 00:50:14 12:35 0 0 nxtgonpho no APPLE !PEONES 2063 03/14/20 01:02:48 1:18 192 0 nxtgonpho no APPLE !PEONES 2064 03/14/20 01:02:50 1:17 0 0 nxtgonpho no APPLE 'PHONES 2065 03/14/20 01:04:06 36:37 192 0 nxtgonpho no APPLE 'PHONES 2066 03/14/20 01:04:07 36:37 0 0 nxtgenpho ne APPLE 'PHONES 2067 03/14/20 01:19:10 60:00 0 0 ims 2068 03/14/20 01:21:46 60:00 7156 2880 ims 2069 03/14/20 01:40:44 34:01 0 0 nxtgonpho ne APPLE 'PHONES 2070 03/14/20 02:14:44 2:09 192 0 nxtgonpho ne APPLE 'PHONES 2071 03/14/20 02:14:46 2:08 0 0 nxtgonpho ne APPLE !PHONES 2072 03/14/20 02:16:54 15:31 0 0 nxtgonpho ne APPLE !PHONES 2073 03/14/20 02:19:10 60:00 0 0 ims 2074 03/14/20 02:21:46 60:00 16096 4716 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 85 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171005 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343063

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn MMEI IM9I MAKE MODEL 2075 03/14/20 02:32:24 2:32 192 Onmtgonpho ne APPLE !PHONES 2076 03/14/20 02:32:25 2:32 0 0 nxtgonpho ne APPLE !PHONES 2077 03/14/20 02:34:56 6:04 192 0 nxtgonpho ne APPLE !PHONES 2078 03/14/20 02:34:57 6:04 0 0 nxtgonpho ne APPLE !PHONES 2079 03/14/20 02:41:01 11:31 0 0 nxtgonpho ne APPLE !PHONES 2080 03/14/20 02:52:32 2:14 192 Onmtgonpho ne APPLE !PHONES 2081 03/14/20 02:52:33 2:14 0 Onmtgonpho ne APPLE !PHONES 2082 03/14/20 02:54:47 28:35 0 0 nxtgonpho ne APPLE !PHONES 2083 03/14/20 03:19:10 0:01 0 0 ims 2084 03/14/20 03:21:46 60:00 6940 3740 ims 2085 03/14/20 03:23:21 8:26 192 Onmtgonpho no APPLE !PHONES 2086 03/14/20 03:23:22 8:27 0 0 nxtgonpho no APPLE !PHONES 2087 03/14/20 03:31:49 1:43 0 0 nxtgonpho ne APPLE !PHONES 2088 03/14/20 03:33:31 2:10 192 Onmtgonpho ne APPLE !PHONES 2089 03/14/20 03:33:32 2:10 0 Onmtgonpho ne APPLE !PHONES 2090 03/14/20 03:35:42 60:00 0 0 nxtgonpho ne APPLE !PHONES 2091 03/14/20 04:21:46 60:00 11904 4612 ims 2092 03/14/20 04:35:42 60:00 0 0 nxtgenpho no APPLE !PHONES 2093 03/14/20 05:21:46 60:00 6924 2648 ims 2094 03/14/20 05:35:42 60:00 0 0 nxtgonpho ne APPLE !PHONES 2095 03/14/20 06:21:46 60:00 10068 3144 ims 2096 03/14/20 06:35:42 60:00 0 0 nxtgonpho ne APPLE !PHONES 2097 03/14/20 07:21:46 60:00 8388 2896 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 86 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171006 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343064

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. ce. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 INN= Conn. Originating AT Tame Number (OTC) Bytes Up Bytes Apn IMMIX INSI NARA Dn NODAL 2098 03/14/20 07:35:42 0:01 0 Onmtgonpho ne APPLE !PHONES 2099 03/14/20 07:35:45 60:00 0 0 nxtgenpho ne APPLE !PHONES 2100 03/14/20 08:21:46 60:00 11580 4112 ims 2101 03/14/20 08:35:45 60:00 0 0 nxtgenpho ne APPLE !PHONES 2102 03/14/20 09:21:46 60:00 16496 5124 ims 2103 03/14/20 09:35:45 60:00 0 0 nxtgenpho ne APPLE !PHONES 2104 03/14/20 10:21:46 60:00 8496 2896 ims 2105 03/14/20 10:35:45 60:01 0 Onmtgonpho ne APPLE !PHONES 2106 03/14/20 11:21:46 60:00 6924 2756 ims 2107 03/14/20 11:35:47 60:00 0 0 nxtgenpho ne APPLE !PHONES 2108 03/14/20 12:21:46 21:19 3408 1324 ims 2109 03/14/20 12:35:47 2:40 0 Onmtgonpho ne APPLE !PHONES 2110 03/14/20 12:38:26 0:27 192 0 nxtgenpho ne APPLE !PHONES 2111 03/14/20 12:38:27 0:27 0 0 nxtgenpho ne APPLE !PHONES 2112 03/14/20 12:38:54 1:51 0 0 nxtgenpho ne APPLE !PHONES 2113 03/14/20 12:39:01 1:58 8327 7901 ims APPLE !PHONES 2114 03/14/20 12:40:45 1:14 0 Onmtgonpho ne APPLE !PHONES 2115 03/14/20 12:40:59 0:33 5864 2431 ims APPLE !PHONES 2116 03/14/20 12:40:59 0:33 5800 2431 ims APPLE !PHONES 2117 03/14/20 12:41:32 5:59 32741 23233 ims APPLE !PHONES 2118 03/14/20 12:41:58 2:04 192 Onmtgonpho ne APPLE !PHONES 2119 03/14/20 12:41:59 2:04 0 0 nxtgenpho ne APPLE !PHONES 2120 03/14/20 12:43:33 0:29 8162 8180 ims APPLE !PHONES 2121 03/14/20 12:43:34 0:29 6872 7898 ims APPLE !PHONES 2122 03/14/20 12:44:04 1:27 0 0 nxtgenpho ne APPLE !PHONES 2123 03/14/20 12:44:07 1:24 8138 8664 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171007 The information contained here is for use by authorized persons only and is not for general distribution. Page 87 EFTA01343065

PRI020 MOBILITY 41110 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm ..,--fs.s 4*-6 AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Tim: Data Usage For: Item Conn. Date 06/17/2020 Conn. Tame (OTC) Originating Number ET Bytos Up Bytes Apn Dn MAKE MODEL 2124 03/14/20 12:45:31 1:59 0 Onstgenpho no APPLE 'PHONES 2125 03/14/20 12:45:36 0:34 756 0 Las APPLE 'PHONES 2126 03/14/20 12:46:10 0:27 172 0 Las APPLE 'PHONES 2127 03/14/20 12:46:10 0:27 0 0 Las APPLE 'PHONES 2128 03/14/20 12:46:37 60:00 8917 6504 Las APPLE 'PHONES 2129 03/14/20 12:47:29 2:04 192 Onxtgonpho no APPLE 'PHONES 2130 03/14/20 12:47:30 2:03 6224 6666 Las APPLE 'PHONES 2131 03/14/20 12:47:30 2:04 0 0 nxtgonpho no APPLE 'PHONES 2132 03/14/20 12:47:32 2:02 6666 5960 Las APPLE 'PHONES 2133 03/14/20 12:49:34 0:35 0 0 nxtgonpho no APPLE 'PHONES 2134 03/14/20 12:49:38 27:19 15352 14059 Las 2135 03/14/20 12:50:08 8:34 192 0 nxtgonpho no APPLE 'PHONES 2136 03/14/20 12:50:09 8:34 0 0 nxtgonpho no APPLE 'PHONES 2137 03/14/20 12:58:43 55:56 0 0 nxtgonpho no APPLE 'PHONES 2138 03/14/20 13:28:54 0:01 0 0 Las 2139 03/14/20 13:46:37 13:30 0 0 Las APPLE 'PHONES 2140 03/14/20 13:54:38 2:03 192 Onmtgonpho no APPLE 'PHONES 2141 03/14/20 13:54:39 2:03 0 0 nxtgonpho no APPLE 'PHONES 2142 03/14/20 13:54:45 9:09 8607 6380 Las 2143 03/14/20 13:56:42 0:58 0 0 nxtgonpho no APPLE 'PHONES 2144 03/14/20 13:57:39 16:49 192 0 nxtgonpho no APPLE 'PHONES 2145 03/14/20 13:57:40 16:49 0 0 nxtgonpho no APPLE 'PHONES 2146 03/14/20 14:00:06 14:22 6366 6792 Las APPLE 'PHONES 2147 03/14/20 14:00:07 14:22 6684 6102 Las APPLE 'PHONES 2148 03/14/20 14:03:54 23:55 14461 10712 Las 2149 03/14/20 14:14:29 12:50 0 Onmtgonpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 88 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171008 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343066

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. ce. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytom Apn flax IMSI DBMS Da MODEL 2150 03/14/20 14:27:18 1:57 192 Onstgonpho ne APPLE 'PEONES 2151 03/14/20 14:27:19 1:57 0 0 nactgonpho ne APPLE 'PEONES 2152 03/14/20 14:27:48 1:27 6262 6672 isms APPLE 'PEONES 2153 03/14/20 14:27:49 1:27 6672 5998 isms APPLE 'PHONES 2154 03/14/20 14:29:16 31:24 0 Onactgonpho ne APPLE 'PHONES 2155 03/14/20 14:29:18 10:23 8170 6962 isms APPLE 'PHONES 2156 03/14/20 14:39:41 60:00 3532 1340 isms APPLE 'PHONES 2157 03/14/20 15:00:39 0:35 192 Onactgonpho ne APPLE 'PHONES 2158 03/14/20 15:00:41 0:34 0 0 nxtgenpho ne APPLE 'PHONES 2159 03/14/20 15:01:15 0:44 0 0 nactgonpho ne APPLE 'PHONES 2160 03/14/20 15:01:20 0:39 8898 7086 isms APPLE 'PHONES 2161 03/14/20 15:01:59 0:59 192 Onactgonpho ne APPLE 'PHONES 2162 03/14/20 15:01:59 0:59 7134 6746 isms APPLE 'PHONES 2163 03/14/20 15:02:00 0:59 0 Onxtgonpho ne APPLE 'PHONES 2164 03/14/20 15:02:01 0:58 6746 6870 isms APPLE 'PHONES 2165 03/14/20 15:02:59 2:41 0 Onxtgonpho ne APPLE 'PHONES 2166 03/14/20 15:03:01 0:18 1690 6443 isms APPLE 'PHONES 2167 03/14/20 15:03:19 60:00 33670 22735 isms APPLE 'PHONES 2168 03/14/20 15:05:39 20:24 192 Onxtgonpho no APPLE 'PHONES 2169 03/14/20 15:05:40 20:24 0 0 nxtgonpho no APPLE 'PHONES 2170 03/14/20 15:26:04 4:38 0 0 nmtgonpho no APPLE !PHONES 2171 03/14/20 15:30:41 2:26 192 0 nmtgonpho no APPLE !PHONES 2172 03/14/20 15:30:43 2:25 0 0 nmtgonpho no APPLE !PHONES 2173 03/14/20 15:33:07 10:00 192 0 nmtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 89 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171009 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343067

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. ,1/4 \;wis AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn DMZ lent MAKE MODEL 2174 03/14/20 15:33:08 14:57 0 0 nactgonpho no APPLE 'PHONES 2175 03/14/20 15:39:23 0:22 0 30887 ims APPLE 'PHONES 2176 03/14/20 15:39:41 60:00 0 0 ims APPLE 'PHONES 2177 03/14/20 15:48:05 53:21 192 0 nactgonpho no APPLE 'PHONES 2178 03/14/20 15:48:06 53:21 0 0 nactgonpho no APPLE 'PHONES 2179 03/14/20 16:03:19 60:00 8512 3988 ims APPLE 'PHONES 2180 03/14/20 16:39:41 60:00 0 0 ims APPLE 'PHONES 2181 03/14/20 16:41:27 64:11 192 0 nactgonpho no APPLE 'PHONES 2182 03/14/20 16:41:28 60:00 0 0 nmtgonpho no APPLE 'PHONES 2183 03/14/20 17:03:19 60:00 7064 2880 ims APPLE 'PHONES 2184 03/14/20 17:39:41 60:00 0 0 ims APPLE 'PHONES 2185 03/14/20 17:41:28 4:11 0 0 nmtgonpho no APPLE 'PHONES 2186 03/14/20 17:45:39 40:01 192 0 nmtgonpho no APPLE 'PHONES 2187 03/14/20 17:45:40 40:01 0 0 nmtgonpho no APPLE 'PHONES 2188 03/14/20 18:03:19 60:00 7064 2772 ims APPLE 'PHONES 2189 03/14/20 18:25:41 2:43 0 0 nmtgonpho no APPLE 'PHONES 2190 03/14/20 18:28:23 8:21 192 0 nmtgonpho no APPLE 'PHONES 2191 03/14/20 18:28:24 8:21 0 0 nmtgonpho no APPLE 'PHONES 2192 03/14/20 18:36:45 1:40 0 0 nmtgonpho no APPLE 'PHONES 2193 03/14/20 18:38:24 108:33 192 0 nmtgonpho no APPLE 'PHONES 2194 03/14/20 18:38:25 60:00 0 0 nmtgonpho no APPLE 'PHONES 2195 03/14/20 18:39:41 2:22 0 0 ims APPLE 'PHONES 2196 03/14/20 19:03:19 60:00 17008 6092 ims APPLE 'PHONES 2197 03/14/20 19:38:25 48:33 0 0 nactgonpho no APPLE 'PHONES 2198 03/14/20 20:03:19 60:00 44644 28772 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 90 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171010 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343068

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. cee AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ZT Bytes Up Bytes Apn Dn ZIOLI INSI MAKE MODEL 2199 03/14/20 20:26:58 9:01 0 Onactgonpho no APPLE 'PHONES 2200 03/14/20 20:35:58 2:04 192 Onactgonpho no APPLE 'PHONES 2201 03/14/20 20:35:59 2:04 0 0 nxtgonpho no APPLE 'PHONES 2202 03/14/20 20:38:03 6:44 0 0 nxtgonpho no APPLE 'PHONES 2203 03/14/20 20:44:46 9:04 192 0 nxtgonpho no APPLE 'PHONES 2204 03/14/20 20:44:47 9:04 0 0 nxtgonpho no APPLE 'PHONES 2205 03/14/20 20:53:51 0:52 0 0 nxtgonpho no APPLE 'PHONES 2206 03/14/20 20:54:42 2:17 192 Onactgonpho no APPLE 'PHONES 2207 03/14/20 20:54:43 2:17 0 Onactgonpho no APPLE 'PHONES 2208 03/14/20 20:56:02 0:05 4279 12317 ims APPLE 'PHONES 2209 03/14/20 20:56:08 0:05 2482 11716 ims APPLE 'PHONES 2210 03/14/20 20:56:15 0:08 4618 14384 ims APPLE 'PHONES 2211 03/14/20 20:56:41 0:04 3092 10606 ims APPLE 'PHONES 2212 03/14/20 20:57:00 0:55 0 Onactgonpho no APPLE 'PHONES 2213 03/14/20 20:57:55 16:22 192 0 nxtgonpho no APPLE 'PHONES 2214 03/14/20 20:57:56 16:23 0 0 nxtgonpho no APPLE 'PHONES 2215 03/14/20 21:03:19 39:39 3532 3952 ims APPLE 'PHONES 2216 03/14/20 21:14:18 163:28 192 Onmtgonpho no APPLE 'PHONES 2217 03/14/20 21:14:19 60:00 0 0 nxtgenpho no APPLE 'PHONES 2218 03/14/20 21:38:59 22:35 7232 6866 ims APPLE 'PHONES 2219 03/14/20 21:39:00 22:35 6798 6968 ims APPLE 'PHONES 2220 03/14/20 21:58:06 3:29 8874 10570 ims 2221 03/14/20 22:01:34 3:23 7356 6800 ims APPLE 'PHONES 2222 03/14/20 22:01:35 3:23 6800 7004 ims APPLE 'PHONES 2223 03/14/20 22:04:21 0:37 4618 4712 ims 2224 03/14/20 22:04:56 13:03 7474 6796 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171011 The information contained here is for use by authorized persons only and is not for general distribution. Page 91 EFTA01343069

pm. MOBILITY 4Illo AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:88:88pm ...1/47:fis `"s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Siam Conn. Time (UTC) Originating Number BT Bytes Up Bytes Apn Dn EMI IMSI MARE MODEL 2225 03/14/20 22:04:57 13:03 6796 7210 ims APPLE 'PHONES 2226 03/14/20 22:08:30 0:39 5686 4904 ims 2227 03/14/20 22:11:41 8:46 6261 6676 ims APPLE 'PHONES 2228 03/14/20 22:11:43 8:45 6676 5997 ims APPLE 'PHONES 2229 03/14/20 22:14:19 60:00 0 0 nxtgonpho no APPLE 'PHONES 2230 03/14/20 22:18:29 4:24 10009 10506 ims 2231 03/14/20 22:20:27 31:59 6226 6672 ims APPLE 'PHONES 2232 03/14/20 22:20:27 32:00 6672 6070 ims APPLE 'PHONES 2233 03/14/20 22:22:53 32:36 24446 33790 ims 2234 03/14/20 22:52:25 65:21 6371 6672 ims APPLE 'PHONES 2235 03/14/20 22:52:26 60:00 6672 6107 ims APPLE 'PHONES 2236 03/14/20 22:55:29 60:00 32305 24638 ims 2237 03/14/20 23:14:19 43:28 0 Onxtgonpho no APPLE 'PHONES 2238 03/14/20 23:33:09 0:09 0 7031 ims 2239 03/14/20 23:52:26 5:21 0 0 ims APPLE 'PHONES 2240 03/14/20 23:55:29 35:09 4964 1804 ims 2241 03/14/20 23:57:47 0:34 0 0 nxtgonpho no APPLE 'PHONES 2242 03/14/20 23:58:20 8:13 192 0 nxtgonpho no APPLE 'PHONES 2243 03/14/20 23:58:21 8:13 0 0 nxtgonpho no APPLE 'PHONES 2244 03/15/20 00:06:35 4:30 0 0 nxtgonpho no APPLE 'PHONES 2245 03/15/20 00:11:04 34:40 192 0 nxtgenpho no APPLE 'PHONES 2246 03/15/20 00:11:05 34:40 0 0 nxtgenpho no APPLE 'PHONES 2247 03/15/20 00:28:17 17:27 6264 6676 ims APPLE 'PHONES 2248 03/15/20 00:28:18 17:27 6676 6108 ims APPLE 'PHONES 2249 03/15/20 00:30:39 10:18 9704 6134 ims 2250 03/15/20 00:40:57 60:00 22558 16428 ims 2251 03/15/20 00:45:44 1:24 192 Onxtgonpho no APPLE 'PHONES 2252 03/15/20 00:45:45 1:24 0 0 nxtgenpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171012 The information contained here is for use by authorized persons only and is not for general distribution. Page 92 EFTA01343070

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 1/44% AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Oa= Conn. Time (OTC) Originating Number ST Bytes Up Bytes Apn flat IMSI MAKS Dn MODEL 2253 03/15/20 00:47:09 21:54 192 0 nxtgonpho no APPIZ IPEOMEB 2254 03/15/20 00:47:10 21:54 0 0 nxtgonpho no APPIZ 'PROMS 2255 03/15/20 01:09:04 0:59 0 0 nxtgonpho no APPIZ 'PROMS 2256 03/15/20 01:10:02 58:23 192 0 nxtgenphe no APPIZ 'PROMS 2257 03/15/20 01:10:03 58:23 0 0 nxtgonpho no APPIZ 'PROMS 2258 03/15/20 01:40:57 60:00 10176 3252 ims 2259 03/15/20 02:08:26 6:18 0 0 nxtgonpho ne APPLE IPHCME8 2260 03/15/20 02:14:44 2:17 192 0 nxtgonpho no APPLE 'PEONES 2261 03/15/20 02:14:45 2:17 0 0 nxtgonpho no APPLE 'PHONES 2262 03/15/20 02:17:02 6:28 0 0 nxtgonpho no APPLE 'PHONES 2263 03/15/20 02:23:29 80:00 192 0 nxtgonphe ne APPLE 'PHONES 2264 03/15/20 02:23:30 60:00 0 0 nxtgonphe ne APPLE !PHONES 2265 03/15/20 02:40:57 60:00 7016 2540 ims 2266 03/15/20 03:23:30 60:00 0 0 nxtgonphe ne APPLE !PHONES 2267 03/15/20 03:40:57 60:00 6800 2756 ims 2268 03/15/20 04:23:30 60:00 0 0 nxtgonphe ne APPLE !PHONES 2269 03/15/20 04:40:57 60:00 16652 5952 ims 2270 03/15/20 05:23:30 60:00 0 0 nxtgonphe ne APPLE !PHONES 2271 03/15/20 05:40:57 60:00 3624 1448 ims 2272 03/15/20 06:18:55 60:00 19980 10414 ims 2273 03/15/20 06:23:30 0:02 0 0 nxtgonpho no APPLE 'PHONES 2274 03/15/20 06:40:57 60:00 0 0 ims 2275 03/15/20 07:18:55 60:00 6816 3004 ims 2276 03/15/20 07:40:57 60:00 0 0 ims 2277 03/15/20 08:18:55 60:00 8496 3144 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 93 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171013 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343071

2278 03/15/20 08:40:57 2279 03/15/20 09:18:55 2280 03/15/20 09:37:51 2281 03/15/20 09:37:52 2282 03/15/20 09:40:57 2283 03/15/20 09:48:56 2284 03/15/20 10:05:07 2285 03/15/20 10:09:42 2286 03/15/20 10:48:56 2287 03/15/20 10:51:42 2288 03/15/20 10:51:43 2289 03/15/20 10:52:25 2290 03/15/20 11:05:07 2291 03/15/20 11:09:42 2292 03/15/20 11:19:54 2293 03/15/20 11:19:55 2294 03/15/20 11:34:33 2295 03/15/20 12:05:07 2296 03/15/20 12:09:42 2297 03/15/20 12:19:39 2298 03/15/20 12:19:40 2299 03/15/20 12:20:43 2300 03/15/20 12:21:18 2301 03/15/20 12:21:19 2302 03/15/20 12:21:20 111.020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Emma: Data Usage For: 06/17/2020 Item Conn. Conn. Originating EE Bytes Bytes Apn flat IMBI MAKE MODEL Date Time mane Up Dn (OTC/ 60:00 0 0 ims 50:48 7172 2944 ims 11:04 192 Onmtgonpho APPLE 'PHONES ne 11:04 0 Onmtgonpho APPLE 'PHONES ne 24:11 0 0 ims 60:00 0 Onmtgonpho APPLE 'PHONES ne 60:00 0 0 ims 60:00 18781 9775 isms 2:47 0 Onmtgonpho APPLE 'PHONES ne 0:42 192 Onmtgonpho APPLE 'PHONES ne 0:42 0 0 nxtgonpho APPLE 'PHONES ne 27:29 0 0 nxtgonpho APPLE 'PHONES no 60:00 0 0 isms 60:00 8480 2896 isms 14:38 192 Onmtgonpho APPLE 'PHONES ne 14:38 0 0 nxtgenpho APPLE 'PHONES ne 45:07 0 0 nxtgonpho APPLE 'PHONES ne 17:00 0 0 ims 10:37 3580 1852 ims 1:03 192 Onmtgonpho APPLE 'PHONES ne 1:03 0 0 nxtgenpho APPLE 'PHONES ne 0:36 0 0 nxtgonpho APPLE !PHONES ne 7:53 192 0 nxtgonpho APPLE !PHONES no 7:52 6229 6670 ims APPLE !PHONES 7:52 0 Onmtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171014 The information contained here is for use by authorized persons only and is not for general distribution. Page 94 EFTA01343072

MOBILITY 111.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Tame: Data Usage For: Item Conn. Date 06/17/2020 Si= Conn. Time (UTC) Originating KT Bytes Up Bytes Apn Dn 1101 late MODEL 2303 03/15/20 12:21:21 7:51 6670 6073 ims APPLE !PEONES 2304 03/15/20 12:22:07 14:05 10288 6713 ims 2305 03/15/20 12:29:12 2:10 0 Onstgenpho no APPLE !PEONES 2306 03/15/20 12:31:20 10:33 10716 12922 ims 2307 03/15/20 12:31:21 2:04 192 Onxtgonpho no APPLE !PEONES 2308 03/15/20 12:31:22 2:05 0 0 nxtgonpho no APPLE !PEONES 2309 03/15/20 12:33:26 1:09 0 0 nxtgonpho no APPLE !PEONES 2310 03/15/20 12:34:34 8:20 192 0 nxtgonpho ne APPLE 'PHONES 2311 03/15/20 12:34:35 8:20 0 0 nxtgonpho ne APPLE 'PHONES 2312 03/15/20 12:36:10 6:44 6246 6666 ims APPLE 'PHONES 2313 03/15/20 12:36:11 6:44 6666 5982 ims APPLE 'PHONES 2314 03/15/20 12:42:55 42:16 0 Onxtgonpho no APPLE 'PHONES 2315 03/15/20 12:42:57 42:14 9358 8200 ims APPLE 'PHONES 2316 03/15/20 13:25:11 14:44 0 Onxtgonpho ne APPLE 'PHONES 2317 03/15/20 13:25:13 1:31 6646 5899 isms APPLE 'PHONES 2318 03/15/20 13:26:44 0:21 11780 13060 isms APPLE 'PHONES 2319 03/15/20 13:35:22 10:29 1491 132 isms 2320 03/15/20 13:39:54 8:21 192 Onxtgonpho ne APPLE 'PHONES 2321 03/15/20 13:39:55 8:21 0 0 nxtgonpho ne APPLE 'PHONES 2322 03/15/20 13:40:00 8:15 8434 9028 ims APPLE 'PHONES 2323 03/15/20 13:40:01 8:15 8968 8170 ims APPLE 'PHONES 2324 03/15/20 13:46:03 60:00 16716 9893 ims 2325 03/15/20 13:48:16 4:58 0 Onxtgonpho ne APPLE 'PHONES 2326 03/15/20 13:53:13 2:14 192 0 nxtgonpho ne APPLE 'PHONES 2327 03/15/20 13:53:15 2:14 0 0 nxtgonpho ne APPLE 'PHONES 2328 03/15/20 13:55:29 43:50 0 0 nxtgonpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 95 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171015 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343073

111.020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e t. AT&T Run Data: Run Tama: Data Usage For: Item Conn. Data 06/17/2020 Conn. Originating AT Time Number (OTC) Bytes Up Bytes Apn L@3 IMSI MAKE Dn MODEL 2329 03/15/20 14:37:06 1:42 6666 5959 ims APPLE 'PEONES 2330 03/15/20 14:38:48 60:00 12476 4360 ims APPLE 'PEONES 2331 03/15/20 14:39:18 21:07 192 Onstgonpho ne APPLE 'PEONES 2332 03/15/20 14:39:19 21:07 0 0 nxtgenpho ne APPLE 'PEONES 2333 03/15/20 14:46:03 60:00 0 0 ims 2334 03/15/20 15:00:26 22:52 0 0 nxtgenpho ne APPLE 'PEONES 2335 03/15/20 15:23:17 20:00 192 0 nxtgenpho ne APPLE 'PEONES 2336 03/15/20 15:23:18 21:30 0 0 nxtgenpho ne APPLE 'PEONES 2337 03/15/20 15:38:48 60:00 22664 10248 ims APPLE 'PHONES 2338 03/15/20 15:44:48 1:01 0 Onstgonpho ne APPLE 'PHONES 2339 03/15/20 15:45:48 1:32 192 0 nxtgenpho ne APPLE 'PHONES 2340 03/15/20 15:45:49 1:32 0 0 nxtgenpho ne APPLE 'PHONES 2341 03/15/20 15:46:02 0:14 0 6648 ims APPLE 'PHONES 2342 03/15/20 15:46:03 60:00 0 0 ims 2343 03/15/20 15:47:21 59:34 0 Onstgonpho ne APPLE 'PHONES 2344 03/15/20 16:38:48 36:33 3872 1572 ims APPLE 'PHONES 2345 03/15/20 16:46:03 24:31 0 0 ims 2346 03/15/20 16:46:54 172:16 192 Onstgonpho ne APPLE !PHONES 2347 03/15/20 16:46:55 60:00 0 0 nstgonpho no APPLE !PHONES 2348 03/15/20 17:10:33 0:10 440 144 ims APPLE 'PHONES 2349 03/15/20 17:10:34 0:10 144 0 ims APPLE 'PHONES 2350 03/15/20 17:10:46 22:56 7340 6794 ims APPLE 'PHONES 2351 03/15/20 17:10:46 22:57 6794 7076 ims APPLE 'PHONES 2352 03/15/20 17:15:21 18:56 8373 6012 ims 2353 03/15/20 17:33:42 125:28 13506 17240 ims APPLE !PHONES 2354 03/15/20 17:33:43 60:00 12048 10594 ims APPLE !PHONES 2355 03/15/20 17:34:18 10:22 0 0 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 96 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171016 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343074

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 1/4e. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Tame (UTC) Originating ET Number Bytes up Bytes Apn nizx IMSI MIMS on MODEL 2356 03/15/20 17:46:55 60:00 0 0 nxtgenpho ne APPLE 'PHONES 2357 03/15/20 18:33:43 60:00 5192 2648 ims APPLE 'PHONES 2358 03/15/20 18:46:55 52:16 0 0 nxtgenpho ne APPLE 'PHONES 2359 03/15/20 19:28:15 60:00 16707 8924 ims 2360 03/15/20 19:33:43 5:28 0 0 ims APPLE 'PHONES 2361 03/15/20 19:39:11 18:26 0 0 nxtgenpho ne APPLE 'PHONES 2362 03/15/20 19:57:36 2:09 192 0 nxtgenpho ne APPLE 'PHONES 2363 03/15/20 19:57:37 2:10 0 0 nxtgenpho ne APPLE 'PHONES 2364 03/15/20 19:59:47 14:14 0 0 nxtgenpho ne APPLE 'PHONES 2365 03/15/20 20:14:00 68:02 192 0 nxtgenphe ne APPLE 'PHONES 2366 03/15/20 20:14:01 60:00 0 0 nxtgenpho ne APPLE 'PHONES 2367 03/15/20 20:28:15 0:34 0 0 ims 2368 03/15/20 20:28:49 60:00 0 0 ims 2369 03/15/20 20:32:18 60:00 19964 9565 ims 2370 03/15/20 21:14:01 8:02 0 0 nxtgenpho ne APPLE 'PHONES 2371 03/15/20 21:22:03 6:02 0 0 nxtgenpho ne APPLE 'PHONES 2372 03/15/20 21:28:04 2:05 192 0 nxtgenphe ne APPLE 'PHONES 2373 03/15/20 21:28:06 2:04 0 0 nxtgenpho ne APPLE 'PHONES 2374 03/15/20 21:28:49 60:00 0 0 isms 2375 03/15/20 21:30:10 18:17 0 0 nxtgenpho ne APPLE 'PHONES 2376 03/15/20 21:32:18 60:00 7032 2680 isms 2377 03/15/20 21:48:27 42:37 192 0 nxtgenphe ne APPLE 'PHONES 2378 03/15/20 21:48:28 42:37 0 0 nxtgenpho ne APPLE 'PHONES 2379 03/15/20 22:28:49 60:00 0 0 isms AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171017 The information contained here is for use by authorized persons only and is not for general distribution. Page 97 EFTA01343075

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time MC/ Originating Mtivehn ET Bytes Up Bytes Apn Dn 73OLI INSI MAKE MODEL 2380 03/15/20 22:31:0 2:50 0 0 nxtgonpho ne APPLE 'PHONES 2381 03/15/20 22:32:1 60:00 8604 3052 isms 2382 03/15/20 22:33:5 8:19 192 0 nxtgonpho ne APPLE 'PHONES 2383 03/15/20 22:33:5 8:19 0 0 nxtgonpho ne APPLE 'PHONES 2384 03/15/20 22:42:1 60:00 0 0 nxtgonpho ne APPLE 'PHONES 2385 03/15/20 23:28:4 60:00 0 0 isms 2386 03/15/20 23:32:1 60:00 6924 2788 isms 2387 03/15/20 23:42:1 11:41 0 0 nxtgonpho ne APPLE 'PHONES 2388 03/15/20 23:53:5 0:37 192 0 nxtgonpho ne APPLE 'PHONES 2389 03/15/20 23:53:59 1 0:37 0 0 nxtgonpho ne APPLE 'PHONES 2390 03/15/20 23:54:34 2:37 288 0 nxtgonpho ne APPLE 'PHONES 2391 03/15/20 23:54:3 2:37 0 0 nxtgonpho ne APPLE 'PHONES 2392 03/15/20 23:57:1 1:22 0 0 nxtgonpho ne APPLE 'PHONES 2393 03/15/20 23:58:3 7:13 192 0 nxtgonpho ne APPLE 'PHONES 2394 03/15/20 23:58:3s 7:13 0 0 nxtgonpho ne APPLE 'PHONES 2395 03/16/20 00:05:4 2:43 192 0 nxtgonpho ne APPLE 'PHONES 2396 03/16/20 00:05:4 2:43 0 0 nxtgonpho ne APPLE 'PHONES 2397 03/16/20 00:08:2 1:58 0 0 nxtgenpho ne APPLE 'PHONES 2398 03/16/20 00:10:2 2:04 192 0 nxtgenpho ne APPLE 'PHONES 2399 03/16/20 00:10:2 2:03 0 0 nxtgenpho ne APPLE 'PHONES 2400 03/16/20 00:12:34 4:09 0 0 nxtgonpho ne APPLE 'PHONES 2401 03/16/20 00:16:4C 3:53 192 0 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 98 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171018 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343076

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:57:52pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Dato: Run Tine: Data Usage for: Item Conn. Data 06/17/2020 Si= Conn. Originating Tiara (UTC) Elf Bytes Up Bytes Apn on DELI IMSI MS= MODEL 2402 03/16/20 00:16:41 3:53 0 0 nxtgonpho no APPLE IPSOMEB 2403 03/16/20 00:20:33 4:14 192 0 nxtgenpho no APPLE IDIOMS 2404 03/16/20 00:20:34 4:14 0 0 nxtgenpho no APPLE 'PROMO 2405 03/16/20 00:24:47 2:05 192 0 nxtgenpho no APPLE IDIOMS 2406 03/16/20 00:24:48 2:05 0 0 nxtgenpho no APPLE 'PROMO 2407 03/16/20 00:26:53 9:29 0 0 nxtgonpho no APPLE 'PROMO 2408 03/16/20 00:28:49 0:01 0 0 ims 2409 03/16/20 00:32:18 13:27 5088 2084 ims 2410 03/16/20 00:36:22 3:12 0 Onstgonpho no APPLE IDIOMS 2411 03/16/20 00:39:34 16:30 192 0 nxtgenpho no APPLE 'PHONES 2412 03/16/20 00:39:35 16:30 0 0 nxtgonpho no APPLE !PHONES 2413 03/16/20 00:51:49 3:35 13841 10953 ims 2414 03/16/20 00:55:27 25:51 20087 13330 ims 2415 03/16/20 00:56:05 3:43 0 Onstgonpho no APPLE !PHONES 2416 03/16/20 00:59:47 8:32 192 0 ructgonpho no APPLE !PHONES 2417 03/16/20 00:59:49 8:31 0 0 nxtgonpho no APPLE !PHONES 2418 03/16/20 01:08:20 3:17 0 0 nxtgonpho no APPLE !PHONES 2419 03/16/20 01:11:36 2:09 192 0 nxtgonpho no APPLE !PHONES 2420 03/16/20 01:11:37 2:09 0 0 nxtgonpho no APPLE !PHONES 2421 03/16/20 01:13:46 10:15 0 0 nxtgonpho no APPLE !PHONES 2422 03/16/20 01:22:33 60:00 19156 9476 ims 2423 03/16/20 01:24:01 19:07 192 Onstgonpho no APPLE !PHONES 2424 03/16/20 01:24:02 19:07 0 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 99 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171019 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343077

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:33:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ‘•-. 0° AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn DIET INSI MAKE MODEL 2425 03/16/20 01:43:09 22:23 0 0 nxtgonpho no APPLE 'PHONES 2426 03/16/20 02:05:31 2:05 192 0 nstgempho no APPLE 'PHONES 2427 03/16/20 02:05:33 2:04 0 0 nxtgonpho no APPLE 'PHONES 2428 03/16/20 02:07:37 1:08 0 0 nxtgonpho no APPLE 'PHONES 2429 03/16/20 02:08:44 2:04 192 0 nstgempho no APPLE 'PHONES 2430 03/16/20 02:08:45 2:04 0 0 nxtgonpho ne APPLE 'PHONES 2431 03/16/20 02:10:49 47:51 0 0 nxtgonpho ne APPLE 'PHONES 2432 03/16/20 02:22:33 60:00 8496 3036 ims 2433 03/16/20 02:58:39 11:57 192 °asty:mph* no APPLE 'PHONES 2434 03/16/20 02:58:40 11:57 0 0 astympho ne APPLE 'PHONES 2435 03/16/20 03:10:37 3:19 0 0 nxtgonpho no APPLE 'PHONES 2436 03/16/20 03:13:56 19:28 192 0 nstgempho no APPLE 'PHONES 2437 03/16/20 03:13:57 19:28 0 0 astympho ne APPLE 'PHONES 2438 03/16/20 03:22:33 60:00 7048 2804 ims 2439 03/16/20 03:33:25 11:15 0 0 nstgempho no APPLE 'PHONES 2440 03/16/20 03:44:39 5:34 192 0 astympho no APPLE 'PHONES 2441 03/16/20 03:44:40 5:34 0 0 nxtgenpho no APPLE 'PHONES 2442 03/16/20 03:50:14 2:57 0 0 nxtgonpho no APPLE 'PHONES 2443 03/16/20 03:53:10 93:54 192 0 nxtgonpho no APPLE 'PHONES 2444 03/16/20 03:53:11 60:00 0 0 nxtgonpho no APPLE 'PHONES 2445 03/16/20 04:22:33 60:00 8388 2928 ims 2446 03/16/20 04:53:11 33:54 0 0 nxtgonpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 100 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171020 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343078

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e • 1/4-00 AT&T Run Date: Run Timm: Data Usage For: Item Conn. Date 2447 03/16/20 2448 03/16/20 2449 03/16/20 2450 03/16/20 2451 03/16/20 2452 03/16/20 2453 03/16/20 2454 03/16/20 2455 03/16/20 2456 03/16/20 2457 03/16/20 2458 03/16/20 2459 03/16/20 2460 03/16/20 2461 03/16/20 2462 03/16/20 2463 03/16/20 2464 03/16/20 2465 03/16/20 2466 03/16/20 2467 03/16/20 2468 03/16/20 2469 03/16/20 2470 03/16/20 06/17/2020 Conn. Originating ET Bytes Bytes AP^ EMI INSI MAKE MODEL Time Number Up Dn (OTC) 05:22:33 60:00 11580 4160 ims 05:27:04 129:59 192 0nmtgonpho no APPLE 'PHONES 05:27:05 60:00 0 0 nwtgonpho ne APPLE 'PHONES 06:22:33 60:00 10624 4396 ims 06:27:05 60:00 0 0 ructgonpho ne APPLE 'PHONES 07:22:33 60:00 8388 2928 ims 07:27:05 9:59 0 0 nwtgonpho no APPLE 'PHONES 07:37:04 240:01 192 0 nwtgonpho ne APPLE 'PHONES 07:37:05 60:00 0 0 nwtgonpho ne APPLE 'PHONES 08:22:33 60:00 8388 3036 ims 08:37:05 60:00 0 0 nwtgonpho no APPLE 'PHONES 09:22:33 60:00 8388 2928 ims 09:37:05 60:00 0 0 ructgonpho ne APPLE 'PHONES 10:22:33 60:00 10564 4252 ims 10:37:05 60:00 0 0 ructgonpho ne APPLE 'PHONES 11:22:33 60:00 11796 4536 ims 11:37:05 0:01 0 0 ructgonpho no APPLE 'PHONES 11:37:14 61:22 192 0 ructgonpho no APPLE 'PHONES 11:37:15 60:00 0 0 ructgonpho no APPLE 'PHONES 12:22:33 60:00 8388 2928 ims 12:37:15 1:22 0 0 nwtgonpho no APPLE 'PHONES 12:38:37 11:24 0 0 nwtgonpho no APPLE 'PHONES 12:50:01 47:24 192 0 nwtgonpho no APPLE 'PHONES 12:50:02 47:24 0 0 nwtgonpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 101 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171021 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343079

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. cro AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn ffiI IMSI MAR MODEL 2471 03/16/20 13:22:33 60:00 8496 2928 ims 2472 03/16/20 13:37:26 12:23 0 Onmtgonpho ne APPLE 'PROMO 2473 03/16/20 13:49:48 2:05 192 0 nxtgenpho ne APPLE 'PROMO 2474 03/16/20 13:49:49 2:05 0 0 nxtgenpho ne APPLE 'PROMO 2475 03/16/20 13:51:54 7:21 0 0 nxtgenpho ne APPLE 'PROMO 2476 03/16/20 13:59:14 6:36 192 0 nxtgenpho ne APPLE 'PROMO 2477 03/16/20 13:59:15 6:36 0 0 nxtgenpho ne APPLE IPHOME8 2478 03/16/20 14:05:51 1:15 0 0 nxtgonpho no APPLE 'PHONES 2479 03/16/20 14:07:05 3:27 192 0 nxtgonpho no APPLE 'PHONES 2480 03/16/20 14:07:06 3:27 0 0 nxtgenpho ne APPLE 'PHONES 2481 03/16/20 14:10:33 2:06 0 0 nxtgonpho ne APPLE 'PHONES 2482 03/16/20 14:12:38 8:31 192 Onxtgonpho ne APPLE 'PHONES 2483 03/16/20 14:12:39 8:31 0 Onxtgonpho no APPLE 'PHONES 2484 03/16/20 14:21:10 4:53 0 0 nxtgenpho no APPLE 'PHONES 2485 03/16/20 14:22:33 60:00 8388 2928 ims 2486 03/16/20 14:26:02 20:41 192 0 nxtgonpho ne APPLE 'PHONES 2487 03/16/20 14:26:03 20:41 0 0 nxtgonpho no APPLE 'PHONES 2488 03/16/20 14:46:44 0:40 0 0 nxtgonpho no APPLE 'PHONES 2489 03/16/20 14:47:23 8:22 192 0 nxtgonpho no APPLE 'PHONES 2490 03/16/20 14:47:25 8:21 0 0 nxtgonpho no APPLE 'PHONES 2491 03/16/20 14:55:46 0:38 0 0 nxtgonpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 102 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171022 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343080

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn =RI IMSI MAKE MODEL 2492 03/16/20 14:56:23 14:42 192 0 nxtgonpho ne APPLE 'PHONES 2493 03/16/20 14:56:24 14:42 0 0 nxtgonpho ne APPLE 'PHONES 2494 03/16/20 15:11:06 60:00 0 0 nxtgonpho ne APPLE 'PHONES 2495 03/16/20 15:22:33 60:00 15156 4872 isms 2496 03/16/20 16:11:06 18:59 0 0 nxtgonpho ne APPLE 'PHONES 2497 03/16/20 16:22:33 60:00 6940 2804 isms 2498 03/16/20 16:30:04 8:21 192 0 nxtgonpho ne APPLE 'PHONES 2499 03/16/20 16:30:05 8:21 0 0 nxtgonpho ne APPLE 'PHONES 2500 03/16/20 16:38:26 2:54 0 0 nxtgonpho ne APPLE 'PHONES 2501 03/16/20 16:41:20 2:03 192 0 nxtgonpho ne APPLE 'PHONES 2502 03/16/20 16:41:21 2:03 0 0 nxtgonpho ne APPLE 'PHONES 2503 03/16/20 16:43:24 10:32 0 0 nxtgonpho ne APPLE 'PHONES 2504 03/16/20 16:53:55 2:15 192 0 nxtgonpho ne APPLE 'PHONES 2505 03/16/20 16:53:56 2:15 0 0 nxtgonpho ne APPLE 'PHONES 2506 03/16/20 16:56:11 1:06 0 0 nxtgonpho ne APPLE 'PHONES 2507 03/16/20 16:57:16 4:52 192 0 nxtgonpho ne APPLE 'PHONES 2508 03/16/20 16:57:17 4:52 0 0 nxtgonpho ne APPLE 'PHONES 2509 03/16/20 17:02:09 0:33 0 0 nxtgonpho ne APPLE 'PHONES 2510 03/16/20 17:02:41 14:45 192 0 nxtgonpho ne APPLE 'PHONES 2511 03/16/20 17:02:42 14:45 0 0 nxtgonpho ne APPLE 'PHONES 2512 03/16/20 17:17:27 0:50 0 0 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 103 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171023 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343081

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:30:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn DMZ INSI HAKE 2513 03/16/20 17:18:16 53:17 192 0nmtgonpho no APPLE 2514 03/16/20 17:18:17 53:17 0 0nmtgonpho no APPLE 2515 03/16/20 17:22:33 60:00 12120 4660 ims 2516 03/16/20 18:11:34 2:55 0 0nmtgonpho no APPLE 2517 03/16/20 18:14:28 1:08 192 0nmtgonpho no APPLE 2518 03/16/20 18:14:29 1:08 0 0nmtgonpho no APPLE 2519 03/16/20 18:15:37 7:10 0 0nmtgonpho no APPLE 2520 03/16/20 18:22:33 60:00 8388 3712 ims 2521 03/16/20 18:22:46 204:00 192 0nmtgonpho no APPLE 2522 03/16/20 18:22:47 60:00 0 0nmtgonpho no APPLE 2523 03/16/20 19:22:33 60:00 15172 5888 ims 2524 03/16/20 19:22:47 60:00 0 0nmtgonpho no APPLE 2525 03/16/20 20:22:33 60:00 10068 3408 ims 2526 03/16/20 20:22:47 60:00 0 0nmtgonpho no APPLE 2527 03/16/20 21:22:33 39:47 13568 5136 ims 2528 03/16/20 21:22:47 24:00 0 0nmtgonpho no APPLE 2529 03/16/20 21:46:47 0:06 0 0nmtgonpho no APPLE 2530 03/16/20 21:47:15 40:04 192 0nmtgonpho no APPLE 2531 03/16/20 21:47:16 40:04 0 0nmtgonpho no APPLE 2532 03/16/20 22:09:00 18:19 7689 12910 ims APPLE 2533 03/16/20 22:09:01 18:19 12842 7533 ims APPLE 2534 03/16/20 22:09:17 0:01 0 0 ims 2535 03/16/20 22:10:19 23:51 10036 6592 ims 2536 03/16/20 22:27:20 0:35 0 0nmtgonpho no APPLE MODEL 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 104 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171024 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343082

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. cm. ‘•...a° AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn MAX INSI MAKE MODEL 2537 03/16/20 22:27:55 40:08 192 0nxtgonpho ne APPLE !PHONES 2538 03/16/20 22:27:56 40:08 0 0 nxtgenpho ne APPLE !PHONES 2539 03/16/20 22:31:07 36:56 7604 10041 ims APPLE !PHONES 2540 03/16/20 22:31:08 36:56 9952 7340 ims APPLE !PHONES 2541 03/16/20 23:08:04 0:41 0 0nxtgonpho ne APPLE !PHONES 2542 03/16/20 23:08:06 0:39 8822 7071 ims APPLE !PHONES 2543 03/16/20 23:08:44 8:33 192 0 nxtgenpho ne APPLE !PHONES 2544 03/16/20 23:08:45 8:32 7158 6748 ims APPLE !PHONES 2545 03/16/20 23:08:45 8:33 0 0 nxtgenpho ne APPLE !PHONES 2546 03/16/20 23:08:46 8:32 6748 6894 ims APPLE !PHONES 2547 03/16/20 23:17:18 0:49 0 0 nxtgenpho ne APPLE !PHONES 2548 03/16/20 23:17:20 0:47 12596 13562 ims APPLE !PHONES 2549 03/16/20 23:18:07 53:36 288 0 nxtgenpho ne APPLE !PHONES 2550 03/16/20 23:18:08 53:35 9000 11994 ims APPLE !PHONES 2551 03/16/20 23:18:08 53:36 0 0 nxtgenpho ne APPLE !PHONES 2552 03/16/20 23:18:09 53:35 11866 8736 ims APPLE !PHONES 2553 03/17/20 00:11:44 22:41 0 0 nxtgenpho ne APPLE !PHONES 2554 03/17/20 00:11:55 60:00 19480 9443 ims 2555 03/17/20 00:34:24 2:03 192 0 nxtgenpho ne APPLE !PHONES 2556 03/17/20 00:34:25 2:03 0 0 nxtgenpho ne APPLE !PHONES 2557 03/17/20 00:36:28 10:12 0 0 nxtgenpho ne APPLE !PHONES 2558 03/17/20 00:46:39 2:10 192 0 nxtgenpho ne APPLE !PHONES 2559 03/17/20 00:46:41 2:09 0 0 nxtgenpho ne APPLE !PHONES 2560 03/17/20 00:48:50 28:49 0 0 nxtgenpho ne APPLE !PHONES 2561 03/17/20 01:11:55 60:00 8388 2928 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 105 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171025 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343083

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. k..74 AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn DOLT IMSI MAKE MODEL 2562 03/17/20 01:17:39 27:32 192 0nstgonpho no APPLE 'PHONES 2563 03/17/20 01:17:40 27:32 0 0nstgonpho no APPLE 'PHONES 2564 03/17/20 01:45:12 1:07 0 0nstgonpho ne APPLE 'PHONES 2565 03/17/20 01:46:18 8:35 192 0nstgonpho no APPLE 'PHONES 2566 03/17/20 01:46:19 8:35 0 0nstgonpho no APPLE 'PHONES 2567 03/17/20 01:54:54 8:15 0 0nstgonpho no APPLE 'PHONES 2568 03/17/20 02:03:08 6:37 192 0nstgonpho no APPLE 'PHONES 2569 03/17/20 02:03:09 6:37 0 0nstgonpho no APPLE 'PHONES 2570 03/17/20 02:09:46 4:54 0 0nstgonpho no APPLE 'PHONES 2571 03/17/20 02:11:55 60:00 9928 3376 ims 2572 03/17/20 02:14:40 2:03 192 0nstgonpho ne APPLE 'PHONES 2573 03/17/20 02:14:41 2:03 0 0nstgonpho no APPLE 'PHONES 2574 03/17/20 02:16:44 0:34 0 0nstgonpho no APPLE 'PHONES 2575 03/17/20 02:17:17 2:18 192 0nstgonpho ne APPLE 'PHONES 2576 03/17/20 02:17:18 2:18 0 0nstgonpho ne APPLE 'PHONES 2577 03/17/20 02:19:35 3:07 192 0nstgonpho ne APPLE 'PHONES 2578 03/17/20 02:19:37 3:06 0 0nstgonpho ne APPLE 'PHONES 2579 03/17/20 02:22:43 9:31 0 0nstgonpho ne APPLE 'PHONES 2580 03/17/20 02:32:14 3:31 0 0nstgonpho no APPLE 'PHONES 2581 03/17/20 02:35:44 8:26 192 0nstgonpho no APPLE 'PHONES 2582 03/17/20 02:35:45 8:26 0 0nstgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 106 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171026 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343084

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro ‘•-. 0. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Dunbar ET Bytes Up Bytes Apn Dn LESS IMBI MAKE MODEL 2583 03/17/20 02:44:11 4:18 0 0 nxtgonpho ne APPLE !PHONES 2584 03/17/20 02:48:29 0:44 0 0 nxtgonpho ne APPLE !PHONES 2585 03/17/20 02:49:13 34:19 192 0 nxtgonpho ne APPLE !PHONES 2586 03/17/20 02:49:14 34:19 0 0 nxtgonpho ne APPLE !PHONES 2587 03/17/20 03:11:55 15:38 3424 1340 ims 2588 03/17/20 03:23:33 17:56 0 0 nxtgonpho ne APPLE !PHONES 2589 03/17/20 03:28:08 0:26 6930 4178 ims APPLE !PHONES 2590 03/17/20 03:28:34 60:00 17131 11098 ims APPLE !PHONES 2591 03/17/20 03:41:28 27:16 192 0nxtgonpho ne APPLE !PHONES 2592 03/17/20 03:41:29 27:16 0 0 nxtgonpho ne APPLE !PHONES 2593 03/17/20 04:08:45 9:13 0 0 nxtgonpho ne APPLE !PHONES 2594 03/17/20 04:17:58 8:29 192 0 nxtgonpho ne APPLE !PHONES 2595 03/17/20 04:17:59 8:29 0 0 nxtgonpho ne APPLE !PHONES 2596 03/17/20 04:26:28 23:45 0 0 nxtgonpho ne APPLE !PHONES 2597 03/17/20 04:28:34 24:06 5072 1572 ims APPLE !PHONES 2598 03/17/20 04:50:12 55:06 192 0 nxtgonpho ne APPLE !PHONES 2599 03/17/20 04:50:13 60:00 0 0 nxtgonpho ne APPLE !PHONES 2600 03/17/20 04:54:18 60:00 15007 8738 ims 2601 03/17/20 05:50:13 60:00 0 0 nxtgonpho ne APPLE !PHONES 2602 03/17/20 05:54:18 3:03 0 0 ims 2603 03/17/20 06:05:16 1:38 0 0 ims 2604 03/17/20 06:09:29 14:57 8629 6424 ims 2605 03/17/20 06:35:42 11:59 8189 6016 ims 2606 03/17/20 06:50:13 60:00 0 0 nxtgonpho ne APPLE !PHONES 2607 03/17/20 06:53:34 11:08 8249 6072 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 107 customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171027 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343085

MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Tine: Data Usage For: Item Conn. Date 06/17/2020 MS= Conn. Tame (UTC) Originating Number ET Bytos Up Bytes Apn Dn MINT MPS 2608 03/17/20 07:06:33 1:38 0 0 ims 2609 03/17/20 07:10:15 11:07 9759 6207 ims 2610 03/17/20 07:26:34 0:07 0 0 ims 2611 03/17/20 07:31:09 3:34 8189 6046 ims 2612 03/17/20 07:42:29 60:00 15005 8986 ims 2613 03/17/20 07:50:13 60:00 0 Onxtgonphe ne APPLE 2614 03/17/20 08:42:29 60:00 6924 2680 ims 2615 03/17/20 08:50:13 0:02 0 0 nxtgonphe ne APPLE 2616 03/17/20 09:42:29 9:49 0 0 ims 2617 03/17/20 09:56:08 60:00 16577 9082 ims 2618 03/17/20 10:56:08 53:28 8496 2928 ims 2619 03/17/20 11:52:58 20:02 8351 6051 ims 2620 03/17/20 12:19:55 20:03 8361 5998 ims 2621 03/17/20 12:30:21 0:05 0 Onxtgonphe ne APPLE 2622 03/17/20 12:31:17 0:06 0 0 nxtgonphe ne APPLE 2623 03/17/20 12:31:29 60:00 0 0 nxtgonphe no APPLE 2624 03/17/20 12:42:30 13:58 9768 6196 ims 2625 03/17/20 13:03:49 59:58 19046 9302 ims 2626 03/17/20 13:31:29 60:00 0 0 nxtgonpho no APPLE 2627 03/17/20 14:14:13 60:00 19300 9472 ims 2628 03/17/20 14:31:29 11:04 0 0 nxtgonphe ne APPLE 2629 03/17/20 14:42:33 30:03 192 0 nxtgonphe ne APPLE 2630 03/17/20 14:42:34 30:03 0 0 nxtgonphe ne APPLE 2631 03/17/20 15:12:37 0:33 0 0 nxtgonphe ne APPLE 2632 03/17/20 15:13:09 2:14 192 0 nxtgonphe ne APPLE 2633 03/17/20 15:13:11 2:13 0 0 nxtgonphe ne APPLE 2634 03/17/20 15:14:13 60:00 8744 5976 ims AT&T Proprietary -fly. 'PEONES 'PEONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 108 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171028 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343086

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. e s, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn EMU IMSI NXEE Dn MODEL 2635 03/17/20 15:15:24 0:35 0 0 nxtgonpho no APPLE 'PHONES 2636 03/17/20 15:15:58 2:03 192 0 nxtgenpho no APPLE 'PHONES 2637 03/17/20 15:15:59 2:03 0 0 nxtgenpho no APPLE 'PHONES 2638 03/17/20 15:18:02 1:55 0 0 nxtgenpho no APPLE 'PHONES 2639 03/17/20 15:19:56 2:09 192 0 nxtgonpho no APPLE 'PHONES 2640 03/17/20 15:19:58 2:08 0 0 nxtgonpho no APPLE 'PHONES 2641 03/17/20 15:22:06 60:00 0 0 nxtgenpho no APPLE 'PHONES 2642 03/17/20 16:14:13 6:00 0 0 ims 2643 03/17/20 16:20:14 60:00 21092 10632 ims 2644 03/17/20 16:22:06 3:35 0 0 nxtgenpho ne APPLE 'PHONES 2645 03/17/20 16:25:40 20:42 192 0 nxtgonpho ne APPLE 'PHONES 2646 03/17/20 16:25:41 20:42 0 0 nxtgonpho ne APPLE 'PHONES 2647 03/17/20 16:46:23 4:40 0 0 nxtgonpho ne APPLE 'PHONES 2648 03/17/20 16:51:02 2:06 192 0 nxtgonpho ne APPLE 'PHONES 2649 03/17/20 16:51:04 2:05 0 0 nxtgonpho ne APPLE 'PHONES 2650 03/17/20 16:53:09 2:58 0 0 nxtgonpho ne APPLE 'PHONES 2651 03/17/20 16:56:06 31:00 192 0 nxtgonpho ne APPLE 'PHONES 2652 03/17/20 16:56:07 31:00 0 0 nxtgonpho ne APPLE 'PHONES 2653 03/17/20 17:20:14 60:00 9944 3408 ims 2654 03/17/20 17:27:07 51:24 0 0 nxtgenpho no APPLE 'PHONES 2655 03/17/20 18:18:30 155:32 192 0 nxtgenpho no APPLE 'PHONES 2656 03/17/20 18:18:31 60:00 0 0 nxtgenpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 109 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171029 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343087

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 1/4-so AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating Time (OTC/ ET Bytes Up Bytes Apn Dn DOLT IMEI MAKE MODEL 2657 03/17/20 18:20:14 60:00 11516 4300 ims 2658 03/17/20 19:18:31 60:00 0 0 nxtgonpho ne APPLE 'PHONES 2659 03/17/20 19:20:14 55:38 12244 4408 ims 2660 03/17/20 20:15:28 38:34 7306 6810 ims APPLE 'PHONES 2661 03/17/20 20:15:28 38:35 6742 6954 ims APPLE 'PHONES 2662 03/17/20 20:15:51 60:00 20945 14596 ims 2663 03/17/20 20:18:31 35:32 0 0 nxtgonpho ne APPLE 'PHONES 2664 03/17/20 20:54:03 60:00 0 0 nxtgonpho ne APPLE 'PHONES 2665 03/17/20 21:15:51 60:00 8604 3052 ims 2666 03/17/20 21:54:03 4:43 0 0 nxtgonpho ne APPLE 'PHONES 2667 03/17/20 21:58:45 8:40 192 0 nxtgonpho ne APPLE 'PHONES 2668 03/17/20 21:58:46 8:40 0 0 nxtgonpho ne APPLE 'PHONES 2669 03/17/20 22:07:26 31:55 0 0 nxtgonpho ne APPLE 'PHONES 2670 03/17/20 22:15:51 60:00 10268 3424 ims 2671 03/17/20 22:39:20 2:10 192 0nxtgonpho ne APPLE 'PHONES 2672 03/17/20 22:39:21 2:10 0 0 nxtgonpho ne APPLE 'PHONES 2673 03/17/20 22:41:31 1:10 0 0 nxtgonpho ne APPLE 'PHONES 2674 03/17/20 22:42:41 68:13 192 0 nxtgonpho ne APPLE 'PHONES 2675 03/17/20 22:42:42 60:00 0 0 nxtgonpho ne APPLE 'PHONES 2676 03/17/20 23:15:51 60:00 11844 3624 ims 2677 03/17/20 23:42:42 8:13 0 0 nxtgonpho ne APPLE 'PHONES 2678 03/17/20 23:50:54 18:33 192 0nxtgonpho ne APPLE 'PHONES 2679 03/17/20 23:50:55 18:33 0 0 nxtgonpho ne APPLE 'PHONES 2680 03/18/20 00:09:28 8:46 0 0 nxtgonpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 110 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171030 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343088

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:30:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. e s, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Sidi= Conn. TIM* (OTC) Originating Number ET Bytos Up Bytes Apn Dn INKS INSI MAKE MODEL 2681 03/18/20 00:15:51 60:00 13804 6628 ism 2682 03/18/20 00:18:14 10:53 192 Onmtgonpho no APPLE 'PHONES 2683 03/18/20 00:18:14 10:54 0 0 nxtgenpho no APPLE 'PHONES 2684 03/18/20 00:29:08 56:10 0 0 nxtgenpho no APPLE 'PHONES 2685 03/18/20 01:15:51 60:00 10036 3176 ism 2686 03/18/20 01:25:18 21:55 192 0 nxtgenpho no APPLE 'PHONES 2687 03/18/20 01:25:19 21:55 0 0 nxtgenpho no APPLE 'PHONES 2688 03/16/20 01:47:13 19:14 192 0 nxtgenpho no APPLE 'PHONES 2689 03/18/20 01:47:14 19:14 0 0 nxtgenpho no APPLE 'PHONES 2690 03/18/20 02:06:28 60:00 0 0 nxtgenpho no APPLE 'PHONES 2691 03/18/20 02:15:51 60:00 10252 3300 ism 2692 03/18/20 03:06:28 6:23 0 0 nxtgenpho ne APPLE 'PHONES 2693 03/18/20 03:12:50 28:42 192 0 nxtgenpho ne APPLE 'PHONES 2694 03/18/20 03:12:51 28:42 0 0 nxtgenpho ne APPLE 'PHONES 2695 03/18/20 03:15:51 60:00 10380 4252 ims 2696 03/18/20 03:41:33 15:21 0 0 nxtgenpho ne APPLE 'PHONES 2697 03/18/20 03:56:54 0:05 0 0 nxtgenpho ne APPLE 'PHONES 2698 03/18/20 04:15:51 60:00 6848 2896 ims 2699 03/18/20 05:15:51 60:00 12028 4536 ims 2700 03/18/20 06:15:51 60:00 10272 4236 ims 2701 03/18/20 07:15:51 60:00 6956 2912 ims 2702 03/18/20 08:15:51 60:00 6956 2788 ims 2703 03/18/20 09:15:51 60:00 8496 3160 ims 2704 03/18/20 10:15:51 60:00 8604 3160 ims 2705 03/18/20 11:15:51 31:46 15236 6264 ims 2706 03/18/20 11:47:31 5:19 0 Onactgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 111 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171031 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343089

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. c o . AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Sidi= Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn 73OLI INS! MAR Mori. 2707 03/18/20 11:52:50 60:00 0 0 nmtgonpho no APPLE 'PEONES 2708 03/18/20 11:52:52 60:00 14426 11616 ims APPLE 'PEONES 2709 03/18/20 12:52:50 60:00 0 0 nmtgonpho no APPLE 'PEONES 2710 03/18/20 12:52:52 60:00 5408 2756 ims APPLE !PHONES 2711 03/18/20 13:52:50 36:19 0 0 nmtgonpho no APPLE !PHONES 2712 03/18/20 13:52:52 26:54 2596 1324 ims APPLE !PHONES 2713 03/18/20 14:19:46 3:57 3316 1324 ims APPLE !PHONES 2714 03/18/20 14:23:43 4:05 3952 1448 ims APPLE !PHONES 2715 03/18/20 14:27:48 60:00 8012 2772 ims APPLE !PHONES 2716 03/18/20 14:29:08 2:23 192 Onmtgonpho no APPLE !PHONES 2717 03/18/20 14:29:09 2:23 0 0 nmtgonpho no APPLE !PHONES 2718 03/18/20 14:31:31 3:00 192 0 nmtgonpho ne APPLE !PHONES 2719 03/18/20 14:31:33 2:59 0 0 nmtgonpho ne APPLE !PHONES 2720 03/18/20 14:34:31 52:23 0 0 nmtgonpho no APPLE !PHONES 2721 03/18/20 15:02:33 60:00 18492 9824 ims 2722 03/18/20 15:26:53 2:31 192 0 nmtgonpho no APPLE !PHONES 2723 03/16/20 15:26:54 2:31 0 0 nmtgonpho no APPLE !PHONES 2724 03/18/20 15:27:48 4:43 0 0 ims APPLE !PHONES 2725 03/18/20 15:29:25 43:06 0 0 nmtgonpho no APPLE !PHONES 2726 03/18/20 15:32:31 60:00 22853 16088 ims 2727 03/18/20 16:02:33 55:23 0 0 ims 2728 03/16/20 16:12:31 1:13 192 0 nmtgonpho no APPLE !PHONES 2729 03/18/20 16:12:32 1:13 0 0 nmtgonpho no APPLE !PHONES 2730 03/18/20 16:13:44 2:04 192 0 nmtgonpho no APPLE !PHONES 2731 03/18/20 16:13:46 2:03 0 0 nmtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 112 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171032 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343090

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e s, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Numbor ET Bytes Up Bytes Apn Dn DEM IMSI MAPS MODEL 2732 03/18/20 16:15:49 43:56 0 Onxtgonpho ne APPLE 'PEONES 2733 03/18/20 16:32:31 60:00 5072 1696 ims 2734 03/18/20 16:57:55 60:00 19408 10910 ims 2735 03/18/20 16:59:44 8:18 192 Onxtgonpho ne APPLE 'PEONES 2736 03/18/20 16:59:45 8:18 0 0 nxtgenphe ne APPLE 'PEONES 2737 03/18/20 17:08:03 49:11 0 0 nxtgenphe ne APPLE !PHONES 2738 03/18/20 17:32:31 29:42 0 0 ims 2739 03/18/20 17:57:13 6:34 192 0 nxtgenphe no APPLE 'PHONES 2740 03/18/20 17:57:14 6:34 0 0 nxtgenphe no APPLE 'PHONES 2741 03/18/20 17:57:55 4:18 0 0 ims 2742 03/18/20 18:02:11 1:36 6264 6820 ims APPLE 'PHONES 2743 03/18/20 18:02:13 1:35 6676 6000 ims APPLE 'PHONES 2744 03/18/20 18:03:04 60:00 18853 10233 ims 2745 03/18/20 18:03:48 3:10 0 0 nxtgenphe no APPLE 'PHONES 2746 03/18/20 18:06:57 9:07 192 0 nxtgenphe no APPLE 'PHONES 2747 03/18/20 18:06:59 9:06 0 0 nxtgenpho no APPLE 'PHONES 2748 03/16/20 18:16:05 2:18 0 0 ructgenpho no APPLE IPHONE8 2749 03/18/20 18:18:22 8:15 192 0 nxtgenphe no APPLE 'PHONES 2750 03/18/20 18:18:23 8:15 0 0 nxtgenphe no APPLE 'PHONES 2751 03/18/20 18:26:38 1:07 0 0 nxtgenphe ne APPLE IPHONE8 2752 03/18/20 18:27:44 2:03 192 0 nxtgenphe ne APPLE IPHONE8 2753 03/18/20 18:27:45 2:03 0 0 nxtgenphe ne APPLE IPHONE8 2754 03/18/20 18:29:48 21:07 0 0 nxtgenphe ne APPLE IPHONE8 2755 03/18/20 18:50:54 8:34 192 0 nxtgenphe ne APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 113 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171033 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343091

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:33:53pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ce• AT&T Run pato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn 73MLI INS' MAKE MODEL 2756 03/18/20 18:50:55 8:34 0 0 nxtgonpho no APPLE 'PHONES 2757 03/18/20 18:59:29 39:33 0 0 nxtgonpho no APPLE 'PHONES 2758 03/18/20 19:03:04 58:01 8048 3588 Las 2759 03/18/20 19:39:01 14:50 192 0 nxtgonpho no APPLE 'PHONES 2760 03/18/20 19:39:02 14:50 0 0 nxtgonpho no APPLE 'PHONES 2761 03/18/20 19:53:52 5:18 0 0 nxtgonpho no APPLE 'PHONES 2762 03/18/20 19:59:09 8:18 192 0 nxtgonpho no APPLE 'PHONES 2763 03/18/20 19:59:10 8:18 0 0 nxtgonpho no APPLE 'PHONES 2764 03/18/20 20:00:39 1:21 7096 6816 Las APPLE 'PHONES 2765 03/18/20 20:00:40 1:21 6748 6832 Las APPLE 'PHONES 2766 03/18/20 20:01:05 2:01 8095 5982 Las 2767 03/18/20 20:01:59 5:28 6334 6666 Las APPLE 'PHONES 2768 03/18/20 20:02:01 5:27 6666 6070 ism APPLE 'PHONES 2769 03/18/20 20:03:06 20:56 11686 8040 ism 2770 03/18/20 20:07:28 0:05 0 0 nxtgonpho no APPLE 'PHONES 2771 03/18/20 20:07:44 39:49 0 0 nxtgonpho no APPLE 'PHONES 2772 03/16/20 20:18:47 28:46 6666 5980 ism APPLE 'PHONES 2773 03/18/20 20:47:32 4:12 192 0 nxtgonpho no APPLE 'PHONES 2774 03/18/20 20:47:33 4:12 0 0 nxtgonpho no APPLE 'PHONES 2775 03/18/20 20:51:44 13:13 192 0 nxtgonpho ne APPLE 'PHONES 2776 03/18/20 20:51:45 13:13 0 0 nxtgonpho ne APPLE 'PHONES 2777 03/18/20 20:52:00 12:57 6336 6988 Las APPLE 'PHONES 2778 03/18/20 20:52:01 12:57 6864 6072 Las APPLE 'PHONES 2779 03/18/20 21:04:58 60:00 0 0 nxtgonpho no APPLE 'PHONES 2780 03/18/20 21:39:56 0:01 0 0 ism 2781 03/18/20 21:46:22 50:48 25152 16800 Las APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 114 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00171034 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343092

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ‘•.. .e# AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn EBBE IM9I MAKE MODEL 2782 03/18/20 22:04:58 60:00 0 0 nxtgenpho no APPLE !PHONES 2783 03/18/20 22:37:10 60:00 15448 5088 ims APPLE !PHONES 2784 03/18/20 23:04:58 40:02 0 Onmtgonpho no APPLE !PHONES 2785 03/18/20 23:37:10 30:08 5072 1572 ims APPLE !PHONES 2786 03/18/20 23:44:59 19:47 192 Onmtgonpho no APPLE !PHONES 2787 03/18/20 23:45:00 19:47 0 0 nxtgonpho no APPLE !PHONES 2788 03/19/20 00:04:47 1:21 0 0 nxtgonpho no APPLE !PHONES 2789 03/19/20 00:06:07 8:21 192 0 nxtgonpho no APPLE !PHONES 2790 03/19/20 00:06:08 8:21 0 0 nxtgonpho no APPLE !PHONES 2791 03/19/20 00:06:19 8:09 7226 6814 ims APPLE !PHONES 2792 03/19/20 00:06:20 8:09 6746 6962 ims APPLE !PHONES 2793 03/19/20 00:07:18 15:11 9894 8570 ims 2794 03/19/20 00:14:29 6:44 0 Onmtgonpho no APPLE !PHONES 2795 03/19/20 00:21:12 8:04 192 0 nxtgonpho no APPLE !PHONES 2796 03/19/20 00:21:13 8:04 0 0 nxtgonpho no APPLE !PHONES 2797 03/19/20 00:22:27 1:34 6263 6744 ims APPLE !PHONES 2798 03/19/20 00:22:29 1:33 6676 5999 ims APPLE !PHONES 2799 03/19/20 00:24:02 17:34 8528 6160 ims APPLE !PHONES 2800 03/19/20 00:29:17 2:55 0 0 nxtgonpho no APPLE !PHONES 2801 03/19/20 00:32:12 6:23 192 0 nxtgonpho no APPLE !PHONES 2802 03/19/20 00:32:13 6:23 0 0 nxtgonpho no APPLE !PHONES 2803 03/19/20 00:38:36 3:08 0 0 nxtgonpho no APPLE !PHONES 2804 03/19/20 00:41:43 2:03 192 0 nxtgonpho no APPLE !PHONES 2805 03/19/20 00:41:44 2:02 6225 6672 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 115 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171035 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343093

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. dro ••-•ss AT&T Run Date: Run Tine: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Tame Number (OTC) Bytos Up Bytes Apn Dn DMZ INSI HAKE MODEL 2806 03/19/20 00:41:44 2:03 0 0 nmtgonphe no APPLE 'PHONES 2807 03/19/20 00:41:45 2:02 6672 5961 ims APPLE 'PHONES 2808 03/19/20 00:43:47 3:06 0 0 nmtgonphe no APPLE 'PHONES 2809 03/19/20 00:43:49 1:05 6692 6000 ims APPLE 'PHONES 2810 03/19/20 00:44:54 0:20 3872 1572 ims APPLE 'PHONES 2811 03/19/20 00:45:14 1:39 2644 1324 ims APPLE 'PHONES 2812 03/19/20 00:46:52 19:04 192 0nmtgonpho no APPLE 'PHONES 2813 03/19/20 00:46:53 19:04 0 0 nmtgonphe no APPLE 'PHONES 2814 03/19/20 00:46:54 19:02 6351 6674 ims APPLE 'PHONES 2815 03/19/20 00:46:55 19:02 6674 6087 ims APPLE 'PHONES 2816 03/19/20 00:47:12 60:00 20306 9690 ims 2817 03/19/20 01:05:57 7:41 0 0nmtgonpho no APPLE 'PHONES 2818 03/19/20 01:13:37 2:15 192 0 nmtgonpho no APPLE 'PHONES 2819 03/19/20 01:13:38 2:15 0 0 nmtgonpho no APPLE 'PHONES 2820 03/19/20 01:15:53 2:58 0 0 nmtgonpho no APPLE 'PHONES 2821 03/19/20 01:18:50 2:14 192 0 nmtgonpho no APPLE 'PHONES 2822 03/19/20 01:18:51 2:14 0 0 nmtgonpho no APPLE 'PHONES 2823 03/19/20 01:21:05 0:47 0 0 nmtgonphe no APPLE 'PHONES 2824 03/19/20 01:21:51 8:14 192 0 nmtgonphe no APPLE 'PHONES 2825 03/19/20 01:21:52 8:14 0 0 nmtgonphe no APPLE 'PHONES 2826 03/19/20 01:30:06 5:35 0 0 nmtgonphe no APPLE 'PHONES 2827 03/19/20 01:35:40 14:38 192 0 nmtgonphe no APPLE 'PHONES 2828 03/19/20 01:35:41 14:38 0 0 nmtgonphe no APPLE 'PHONES 2829 03/19/20 01:47:12 60:00 7064 2880 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 116 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171036 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343094

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. c r. ‘*-00 AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. T11011 lint/ Originating Number ET Bytes Up Bytes Apn Dn 73@I IM9I MAKE MODEL 2830 03/19/20 01:50:19 2:48 0 0 nmtgonpho ne APPLE !PHONES 2831 03/19/20 01:53:06 2:10 192 0 nmtgonpho ne APPLE !PHONES 2832 03/19/20 01:53:07 2:10 0 0 nmtgonpho ne APPLE !PHONES 2833 03/19/20 01:55:17 3:05 0 0 nmtgonpho ne APPLE !PHONES 2834 03/19/20 01:58:21 2:05 192 0 nmtgonpho ne APPLE !PHONES 2835 03/19/20 01:58:23 2:04 0 0 nmtgonpho ne APPLE !PHONES 2836 03/19/20 02:00:27 4:49 0 0 nmtgonpho ne APPLE !PHONES 2837 03/19/20 02:05:15 18:26 192 0 nmtgonpho ne APPLE !PHONES 2838 03/19/20 02:05:16 18:26 0 0 nmtgonpho ne APPLE !PHONES 2839 03/19/20 02:23:41 7:51 192 0 nmtgonpho ne APPLE !PHONES 2840 03/19/20 02:23:42 7:51 0 0 nmtgonpho no APPLE !PHONES 2841 03/19/20 02:31:33 8:23 192 0 nmtgonpho no APPLE !PHONES 2842 03/19/20 02:31:34 8:23 0 0 nmtgonpho no APPLE !PHONES 2843 03/19/20 02:39:56 6:12 192 0 nmtgonpho no APPLE !PHONES 2844 03/19/20 02:39:57 6:12 0 0 nmtgonpho ne APPLE !PHONES 2845 03/19/20 02:46:09 12:23 0 0 nmtgonpho ne APPLE !PHONES 2846 03/19/20 02:47:12 60:00 8388 2896 ims 2847 03/19/20 02:58:31 2:11 192 0 nmtgonpho ne APPLE !PHONES 2848 03/19/20 02:58:32 2:11 0 0 nmtgonpho ne APPLE !PHONES 2849 03/19/20 03:00:43 0:34 0 0 nmtgonpho ne APPLE !PHONES 2850 03/19/20 03:01:16 40:00 192 0 nmtgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 117 customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171037 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343095

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. dro AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Sidi= Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn IMBI IBBI MAKZ MODEL 2851 03/19/20 03:01:17 52:53 0 0 nxtgenpho ne APPLE 'PEONES 2852 03/19/20 03:47:12 60:00 11596 4004 ims 2853 03/19/20 03:54:10 2:09 192 0 nxtgenpho ne APPLE 'PEONES 2854 03/19/20 03:54:11 2:09 0 0 nxtgenpho ne APPLE !PHONES 2855 03/19/20 03:56:20 0:34 0 0 nxtgenpho ne APPLE 'PHONES 2856 03/19/20 03:56:53 8:33 192 0 nxtgenpho ne APPLE 'PHONES 2857 03/19/20 03:56:54 8:33 0 0 nxtgenpho ne APPLE 'PHONES 2858 03/19/20 04:05:26 8:32 192 0 nxtgenpho ne APPLE 'PHONES 2859 03/19/20 04:05:28 8:31 0 0 nxtgenpho ne APPLE 'PHONES 2860 03/19/20 04:13:59 19:14 0 0 nxtgenpho ne APPLE 'PHONES 2861 03/19/20 04:33:12 14:52 192 0 nxtgenpho ne APPLE 'PHONES 2862 03/19/20 04:33:13 14:52 0 0 nxtgenpho ne APPLE 'PHONES 2863 03/19/20 04:47:12 60:00 8604 3112 ims 2864 03/19/20 04:48:05 1:29 0 0 nxtgenpho ne APPLE !PHONES 2865 03/19/20 04:49:34 21:18 192 0 nxtgenpho ne APPLE !PHONES 2866 03/19/20 04:49:34 21:19 0 0 nxtgenpho ne APPLE !PHONES 2867 03/19/20 05:10:52 27:29 192 0 nxtgenpho ne APPLE !PHONES 2868 03/19/20 05:10:53 27:29 0 0 nxtgenpho ne APPLE !PHONES 2869 03/19/20 05:38:22 0:34 0 0 nxtgenpho ne APPLE !PHONES 2870 03/19/20 05:38:55 72:10 192 0 nxtgenpho ne APPLE !PHONES 2871 03/19/20 05:38:56 60:00 0 0 nxtgenpho ne APPLE !PHONES 2872 03/19/20 05:47:12 36:19 6848 2932 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 118 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171038 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343096

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ce. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn L@I IISI MDME MODEL 2873 03/19/20 06:24:17 26:48 6246 6666 ims APPLE 'PEONES 2874 03/19/20 06:24:18 26:48 6666 5982 ims APPLE 'PEONES 2875 03/19/20 06:38:56 12:10 0 0 ructgonpho ne APPLE 'PEONES 2876 03/19/20 06:51:06 0:51 0 0 ructgonpho ne APPLE 'PEONES 2877 03/19/20 06:51:56 21:18 192 0 ructgonpho no APPLE 'PEONES 2878 03/19/20 06:51:57 21:18 0 0 ructgonpho no APPLE 'PEONES 2879 03/19/20 06:56:36 60:00 16703 9200 ims 2880 03/19/20 07:13:15 8:39 192 0 ructgonpho ne APPLE 'PHONES 2881 03/19/20 07:13:16 8:39 0 0 nxtgonpho ne APPLE !PHONES 2882 03/19/20 07:21:55 46:41 192 0 nxtgonpho ne APPLE !PHONES 2883 03/19/20 07:21:56 46:41 0 0 nxtgonpho no APPLE !PHONES 2884 03/19/20 07:56:36 60:00 6972 2664 ims 2885 03/19/20 08:08:36 21:07 192 0 'mtg.:mph* no APPLE !PHONES 2886 03/19/20 08:08:37 21:07 0 0 nxtgonpho ne APPLE !PHONES 2887 03/19/20 08:29:44 0:36 0 0 nxtgonpho ne APPLE !PHONES 2888 03/19/20 08:30:19 40:22 192 0 nxtgonpho ne APPLE !PHONES 2889 03/19/20 08:30:20 40:22 0 0 nxtgonpho no APPLE !PHONES 2890 03/19/20 08:56:36 60:00 10236 3360 ims 2891 03/19/20 09:10:42 14:55 192 0 nxtgonpho ne APPLE !PHONES 2892 03/19/20 09:10:43 14:55 0 0 nxtgonpho no APPLE !PHONES 2893 03/19/20 09:25:37 33:55 192 0 ructgonpho no APPLE !PHONES 2894 03/19/20 09:25:38 33:55 0 0 ructgonpho no APPLE !PHONES 2895 03/19/20 09:56:36 60:00 9928 3252 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 119 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171039 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343097

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cee AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (UTC) Bytos Up Bytes Apn Dn ENE! INSI MAKE MODEL 2896 03/19/20 09:59:33 0:38 0 0 nxtgenpho ne APPLE 'PHONES 2897 03/19/20 10:00:10 2:49 192 0 nxtgenpho ne APPLE 'PHONES 2898 03/19/20 10:00:11 2:49 0 0 nxtgenpho ne APPLE 'PHONES 2899 03/19/20 10:03:00 0:33 0 0 nxtgenpho ne APPLE 'PHONES 2900 03/19/20 10:03:32 28:46 192 0 nxtgenpho ne APPLE 'PHONES 2901 03/19/20 10:03:33 28:46 0 0 nxtgenpho ne APPLE 'PHONES 2902 03/19/20 10:32:19 55:25 0 0 nxtgenpho ne APPLE 'PHONES 2903 03/19/20 10:56:36 60:00 8264 2772 ims 2904 03/19/20 11:27:43 31:53 192 0 nxtgenpho ne APPLE 'PHONES 2905 03/19/20 11:27:44 31:53 0 0 nxtgenpho ne APPLE 'PHONES 2906 03/19/20 11:56:36 60:00 13568 4752 ims 2907 03/19/20 11:59:37 11:37 192 0 nxtgenpho ne APPLE 'PHONES 2908 03/19/20 11:59:38 11:37 0 0 nxtgenpho ne APPLE 'PHONES 2909 03/19/20 12:11:15 8:01 0 0 nxtgenpho ne APPLE 'PHONES 2910 03/19/20 12:19:15 15:40 192 0 nxtgenpho ne APPLE 'PHONES 2911 03/19/20 12:19:16 15:40 0 0 nxtgenpho ne APPLE 'PHONES 2912 03/19/20 12:34:55 60:00 0 0 nxtgenpho ne APPLE 'PHONES 2913 03/19/20 12:47:26 60:00 18813 9516 ims 2914 03/19/20 12:56:36 60:00 0 0 ims 2915 03/19/20 13:34:55 60:00 0 0 nxtgenpho ne APPLE 'PHONES 2916 03/19/20 13:47:26 60:00 8372 3036 ims 2917 03/19/20 13:56:36 60:00 0 0 ims 2918 03/19/20 14:34:55 32:28 0 0 nxtgenpho ne APPLE 'PHONES 2919 03/19/20 14:47:26 60:00 4748 2248 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 120 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171040 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343098

pu020 MOBILITY 41111, AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm trs `s -a. AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Tine: Data Usage For: Item Conn. Date 06/17/2020 SS= Conn. Originating Time Number (OTC) ET Bytes Up Bytes Apn Dn flat IMSI MAKE MODEL 2920 03/19/20 14:56:36 4:16 0 0 ims 2921 03/19/20 15:00:52 60:00 19541 11190 ims 2922 03/19/20 15:07:22 2:06 192 Onxtgonpho ne APPLE 'PHONES 2923 03/19/20 15:07:23 2:06 0 Onxtgonpho ne APPLE 'PHONES 2924 03/19/20 15:09:29 2:19 0 Onxtgonpho ne APPLE 'PHONES 2925 03/19/20 15:11:48 2:02 192 Onxtgonpho ne APPLE 'PHONES 2926 03/19/20 15:11:49 2:03 0 Onxtgonpho ne APPLE 'PHONES 2927 03/19/20 15:13:52 1:14 0 0 nxtgonpho ne APPLE 'PHONES 2928 03/19/20 15:15:05 1:56 192 0 nxtgonpho ne APPLE 'PHONES 2929 03/19/20 15:15:06 1:56 0 0 nxtgonpho ne APPLE 'PHONES 2930 03/19/20 15:17:02 4:44 0 0 nxtgonpho ne APPLE 'PHONES 2931 03/19/20 15:21:45 20:00 192 0 nxtgonpho ne APPLE 'PHONES 2932 03/19/20 15:21:46 35:07 0 0 nxtgonpho ne APPLE 'PHONES 2933 03/19/20 15:47:26 60:00 0 0 ims 2934 03/19/20 15:56:53 0:34 0 Onxtgonpho ne APPLE 'PHONES 2935 03/19/20 15:57:27 38:59 192 0 nxtgonpho ne APPLE 'PHONES 2936 03/19/20 15:57:27 39:00 0 0 nxtgonpho ne APPLE 'PHONES 2937 03/19/20 16:00:52 60:00 15244 12636 isms 2938 03/19/20 16:29:56 0:40 1857 0 isms 2939 03/19/20 16:36:27 12:41 0 Onxtgonpho ne APPLE 'PHONES 2940 03/19/20 16:47:26 23:01 0 0 ims 2941 03/19/20 16:49:07 2:21 192 Onxtgonpho ne APPLE 'PHONES 2942 03/19/20 16:49:09 2:20 0 0 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 121 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171041 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343099

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. cro AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn EMU IMSI MAKE MODEL 2943 03/19/20 16:51:29 0:42 0 0 nxtgenpho ne APPLE 'PEONES 2944 03/19/20 16:52:10 2:41 192 Onxtgonpho ne APPLE 'PEONES 2945 03/19/20 16:52:11 2:41 0 0 nxtgenpho ne APPLE 'PEONES 2946 03/19/20 16:54:52 2:22 192 0 nxtgonpho ne APPLE 'PEONES 2947 03/19/20 16:54:53 2:22 0 0 nxtgenpho ne APPLE 'PEONES 2948 03/19/20 16:57:15 41:17 0 Onxtgonpho ne APPLE 'PEONES 2949 03/19/20 17:00:52 14:42 4840 2680 ims 2950 03/19/20 17:10:27 43:09 15853 12072 ims 2951 03/19/20 17:38:32 17:57 192 Onxtgonpho ne APPLE 'PHONES 2952 03/19/20 17:38:33 17:57 0 Onxtgonpho ne APPLE IPHONE8 2953 03/19/20 17:53:12 3:17 7220 6844 ims APPLE 'PHONES 2954 03/19/20 17:53:13 3:17 6736 6956 ims APPLE 'PHONES 2955 03/19/20 17:53:36 60:00 11309 6742 ims 2956 03/19/20 17:56:30 8:45 0 Onxtgonpho ne APPLE 'PHONES 2957 03/19/20 18:05:14 2:18 192 0 nxtgonpho ne APPLE 'PHONES 2958 03/19/20 18:05:16 2:17 0 0 nxtgonpho ne APPLE 'PHONES 2959 03/19/20 18:07:11 0:21 6244 6674 ims APPLE 'PHONES 2960 03/19/20 18:07:12 0:21 6674 5980 ims APPLE 'PHONES 2961 03/19/20 18:07:33 1:34 0 0 nxtgenpho ne APPLE 'PHONES 2962 03/19/20 18:07:34 0:01 0 0 ims APPLE 'PHONES 2963 03/19/20 18:07:42 0:40 6672 5964 isms APPLE 'PHONES 2964 03/19/20 18:08:22 60:00 13768 4700 isms APPLE 'PHONES 2965 03/19/20 18:09:06 5:51 192 Onxtgonpho ne APPLE 'PHONES 2966 03/19/20 18:09:07 5:51 0 Onxtgonpho ne APPLE 'PHONES 2967 03/19/20 18:14:58 0:32 0 0 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 122 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171042 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343100

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cto AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn SUSI INSI NA= MODEL 2968 03/19/20 18:15:29 81:06 192 Onxtgonpho ne APPLE IPHONE8 2969 03/19/20 18:15:30 60:00 0 0 nxtgenpho ne APPLE !PHONES 2970 03/19/20 18:53:36 54:41 0 0 ims 2971 03/19/20 19:08:22 45:19 13716 7424 ims APPLE !PHONES 2972 03/19/20 19:15:30 21:06 0 0 nxtgenpho ne APPLE !PHONES 2973 03/19/20 19:26:32 0:19 0 520 ims APPLE !PHONES 2974 03/19/20 19:36:36 5:02 0 0 nxtgenpho ne APPLE !PHONES 2975 03/19/20 19:41:37 2:10 192 0 nxtgenpho ne APPLE !PHONES 2976 03/19/20 19:41:38 2:10 0 0 nxtgenpho ne APPLE !PHONES 2977 03/19/20 19:43:48 2:12 0 0 nxtgenpho ne APPLE !PHONES 2978 03/19/20 19:45:59 2:09 192 0 nxtgenpho ne APPLE !PHONES 2979 03/19/20 19:46:00 2:09 0 0 nxtgenpho ne APPLE !PHONES 2980 03/19/20 19:48:09 40:37 0 0 nxtgenpho ne APPLE !PHONES 2981 03/19/20 19:48:16 0:01 0 0 ims APPLE !PHONES 2982 03/19/20 19:48:30 0:04 48 0 ims APPLE !PHONES 2983 03/19/20 19:54:35 60:00 26556 11232 ims 2984 03/19/20 20:28:45 8:30 192 Onxtgonpho ne APPLE !PHONES 2985 03/19/20 20:28:46 8:30 0 0 nxtgenpho ne APPLE !PHONES 2986 03/19/20 20:37:16 6:10 0 0 nxtgenpho ne APPLE !PHONES 2987 03/19/20 20:43:26 8:26 192 0 nxtgenpho ne APPLE !PHONES 2988 03/19/20 20:43:27 8:26 0 0 nxtgonpho no APPLE !PHONES 2989 03/19/20 20:51:53 39:04 0 0 nxtgonpho no APPLE !PHONES 2990 03/19/20 20:54:35 47:17 3424 1340 ims 2991 03/19/20 21:30:57 61:25 192 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 123 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171043 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343101

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. de o AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating CT Time Number (OTC) Bytes Up Bytes Apn Dn MINT TWIT la= MODEL. 2992 03/19/20 21:30:58 60:00 0 0 nactgonpho ne APPLE 'PEONES 2993 03/19/20 21:51:45 40:37 8164 6868 imn APPLE 'PEONES 2994 03/19/20 21:51:46 40:37 6868 8008 imn APPLE 'PEONES 2995 03/19/20 21:52:05 9:49 10815 8812 imn 2996 03/19/20 22:01:54 30:28 9700 10530 imn APPLE 'PEONES 2997 03/19/20 22:01:55 30:28 10530 9436 imn APPLE 'PEONES 2998 03/19/20 22:30:58 1:25 0 Onactgonpho ne APPLE 'PEONES 2999 03/19/20 22:32:23 1:26 0 0 nactgonpho ne APPLE 'PEONES 3000 03/19/20 22:33:48 8:41 192 0 nactgonpho ne APPLE 'PEONES 3001 03/19/20 22:33:49 8:41 0 0 nactgonpho ne APPLE 'PHONES 3002 03/19/20 22:36:21 60:00 21342 12618 imn 3003 03/19/20 22:42:30 0:05 0 0 nmtgonpho no APPLE !PHONES 3004 03/19/20 22:42:59 37:24 192 0 nmtgonpho no APPLE !PHONES 3005 03/19/20 22:43:00 37:24 0 0 nmtgonpho no APPLE !PHONES 3006 03/19/20 23:20:24 8:28 0 0 nottgonpho no APPLE 'PHONED 3007 03/19/20 23:28:52 43:12 192 Onmtgonpho ne APPLE IPEOME8 3008 03/19/20 23:28:53 43:12 0 0 nactgonpho ne APPLE IPBONE8 3009 03/19/20 23:36:21 60:00 8496 3020 imn 3010 03/20/20 00:12:05 17:27 0 0 nottgonpho ne APPLE IPBONE8 3011 03/20/20 00:29:32 11:20 192 0 nottgonpho ne APPLE 'PHONED 3012 03/20/20 00:29:33 11:20 0 0 nottgonpho ne APPLE 'PHONED 3013 03/20/20 00:36:21 60:00 8728 3128 imn 3014 03/20/20 00:40:53 4:32 0 0 nactgonpho ne APPLE 'PHONED 3015 03/20/20 00:45:24 2:11 192 0 nactgonpho ne APPLE 'PHONED AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 124 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SONYGAt 00171044 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343102

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn INKS IMSI MAKE MODEL 3016 03/20/20 00:45:25 2:11 0 0nxtgonpho no APPLE !PHONES 3017 03/20/20 00:47:36 0:39 0 0 nxtgonpho no APPLE 'PHONES 3018 03/20/20 00:48:15 8:45 192 0 nxtgonpho no APPLE 'PHONES 3019 03/20/20 00:48:16 8:45 0 0 nxtgonpho no APPLE 'PHONES 3020 03/20/20 00:57:01 1:40 0 0 nxtgonpho ne APPLE 'PHONES 3021 03/20/20 00:58:40 2:03 192 0 nxtgonpho no APPLE 'PHONES 3022 03/20/20 00:58:41 2:03 0 0 nxtgenpho no APPLE 'PHONES 3023 03/20/20 01:00:44 14:40 0 0 nxtgonpho no APPLE 'PHONES 3024 03/20/20 01:15:24 14:56 192 0 nxtgonpho no APPLE 'PHONES 3025 03/20/20 01:15:24 14:57 0 0 nxtgonpho no APPLE 'PHONES 3026 03/20/20 01:30:21 1:11 0 0 nxtgonpho ne APPLE !PHONES 3027 03/20/20 01:31:31 39:34 192 0 nxtgonpho ne APPLE 'PHONES 3028 03/20/20 01:31:32 39:34 0 0 nxtgonpho ne APPLE 'PHONES 3029 03/20/20 01:36:21 24:43 3424 1432 ims 3030 03/20/20 02:01:02 10:03 7228 6804 ims APPLE !PHONES 3031 03/20/20 02:01:03 10:03 6736 6964 ims APPLE !PHONES 3032 03/20/20 02:02:44 60:00 15057 8834 ims 3033 03/20/20 02:11:05 2:11 192 0nxtgonpho ne APPLE !PHONES 3034 03/20/20 02:11:06 2:11 0 0 nxtgonpho ne APPLE !PHONES 3035 03/20/20 02:13:17 10:19 0 0 nxtgonpho ne APPLE 'PHONES 3036 03/20/20 02:23:35 8:16 192 0 nxtgonpho no APPLE !PHONES 3037 03/20/20 02:23:36 8:16 0 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 125 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171045 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343103

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (UTC) Bytes Up Bytes Apn Dn TIE' IMSI MAKE MODEL 3038 03/20/20 02:31:52 39:29 0 Onmtgonpho ne APPLE 'PEONES 3039 03/20/20 03:02:44 60:00 8388 3004 ims 3040 03/20/20 03:11:21 30:00 192 Onmtgonpho ne APPLE 'PEONES 3041 03/20/20 03:11:22 35:10 0 0 nxtgonpho no APPLE 'PEONES 3042 03/20/20 03:46:32 2:09 192 0 nxtgonpho no APPLE 'PEONES 3043 03/20/20 03:46:33 2:09 0 0 nxtgonpho no APPLE 'PEONES 3044 03/20/20 03:48:42 1:14 0 0 nxtgonpho no APPLE IPHCME8 3045 03/20/20 03:49:55 21:12 192 0 nxtgonpho no APPLE 'PHONES 3046 03/20/20 03:49:56 21:12 0 0 nxtgonpho ne APPLE 'PHONES 3047 03/20/20 04:02:44 60:00 8388 3020 ims 3048 03/20/20 04:11:08 50:01 0 0 nxtgonpho no APPLE 'PHONES 3049 03/20/20 05:01:08 28:52 192 0 nxtgenpho no APPLE 'PHONES 3050 03/20/20 05:01:09 28:52 0 0 nxtgenpho no APPLE 'PHONES 3051 03/20/20 05:02:44 60:00 10036 3176 ims 3052 03/20/20 05:30:02 21:58 0 0 nxtgonpho ne APPLE 'PHONES 3053 03/20/20 05:51:59 14:46 192 0 nxtgonpho ne APPLE 'PHONES 3054 03/20/20 05:52:00 14:46 0 0 nxtgonpho ne APPLE 'PHONES 3055 03/20/20 06:02:44 60:00 16992 6140 ims 3056 03/20/20 06:06:46 60:00 0 0 nxtgonpho ne APPLE !PHONES 3057 03/20/20 07:02:44 60:00 7064 2788 ims 3058 03/20/20 07:06:46 8:54 0 0 nxtgenpho ne APPLE 'PHONES 3059 03/20/20 07:15:39 2:04 192 0 nxtgonpho ne APPLE !PHONES 3060 03/20/20 07:15:41 2:03 0 0 nxtgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 126 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171046 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343104

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm tras ""s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Conn. Date Time (OTC) 3061 03/20/20 07:17:44 3062 03/20/20 07:20:49 3063 03/20/20 07:20:50 3064 03/20/20 07:24:11 3065 03/20/20 07:24:12 3066 03/20/20 07:58:20 3067 03/20/20 08:02:44 3068 03/20/20 08:53:00 3069 03/20/20 08:53:01 3070 03/20/20 09:02:44 3071 03/20/20 09:08:30 3072 03/20/20 09:08:31 3073 03/20/20 09:17:06 3074 03/20/20 09:17:58 3075 03/20/20 09:17:59 3076 03/20/20 09:27:11 3077 03/20/20 09:27:12 3078 03/20/20 10:02:44 3079 03/20/20 10:27:12 3080 03/20/20 11:02:44 3081 03/20/20 11:27:12 3082 03/20/20 12:02:44 3083 03/20/20 12:09:48 Originating ET Bytes Bytes Apn MEI II I MARE MODEL Up Dn 3:06 0 0 nxtgenpho APPLE 'PHONES ne 3:21 192 0 nxtgenpho APPLE 'PHONES ne 3:21 0 0 nxtgenpho APPLE 'PHONES ne 34:08 192 0 nxtgenpho APPLE 'PHONES ne 34:08 0 0 nxtgenpho APPLE 'PHONES ne 54:41 0 0 nxtgenpho APPLE !PHONES ne 60:00 8388 2928 ims 15:29 192 0 nxtgenpho APPLE 'PHONES ne 15:29 0 0 nxtgenpho APPLE 'PHONES ne 60:00 7172 2912 ims 8:35 192 0 nxtgenpho APPLE 'PHONES ne 8:35 0 0 nxtgenpho APPLE !PHONES ne 0:53 0 0 nxtgenpho APPLE !PHONES ne 9:12 192 Onxtgonpho APPLE 'PHONES ne 9:12 0 0 nxtgenpho APPLE !PHONES ne 162:37 192 0 nxtgenpho APPLE 'PHONES ne 60:00 0 0 nxtgenpho APPLE !PHONES ne 60:00 10256 4236 ims 60:00 0 0 nxtgenpho APPLE 'PHONES ne 60:00 15016 4924 ims 42:37 0 0 nxtgenpho APPLE 'PHONES ne 60:00 6956 2896 ims 9:26 192 0 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 127 customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171C47 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343105

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e s, ‘•- .a° AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 IAN= Conn. Originating ET Time Number (UTC) Bytes Up Bytes Apn Dn DMZ INSI MAKE MODEL 3084 03/20/20 12:09:50 9:25 0 0nactgonpho ne APPLE 'PHONES 3085 03/20/20 12:19:14 6:07 192 0nactgonpho ne APPLE 'PHONES 3086 03/20/20 12:19:15 6:07 0 0nactgonpho ne APPLE 'PHONES 3087 03/20/20 12:25:22 0:05 0 0nactgonpho ne APPLE 'PHONES 3088 03/20/20 12:25:38 40:55 0 0nactgonpho ne APPLE 'PHONES 3089 03/20/20 13:02:44 60:00 11580 4252 ims 3090 03/20/20 13:06:32 2:04 192 0nxtgonpho no APPLE 'PHONES 3091 03/20/20 13:06:34 2:03 0 0nxtgonpho no APPLE 'PHONES 3092 03/20/20 13:08:37 42:12 0 0nxtgonpho no APPLE 'PHONES 3093 03/20/20 13:50:48 2:21 192 0nxtgonpho no APPLE 'PHONES 3094 03/20/20 13:50:50 2:20 0 0nxtgonpho no APPLE 'PHONES 3095 03/20/20 13:53:10 21:26 0 0nxtgonpho no APPLE 'PHONES 3096 03/20/20 14:02:44 60:00 9784 3300 ism 3097 03/20/20 14:14:36 8:05 192 0nxtgonpho no APPLE 'PHONES 3098 03/20/20 14:14:37 8:05 0 0nxtgonpho no APPLE 'PHONES 3099 03/20/20 14:22:42 5:08 0 0nxtgonpho no APPLE 'PHONES 3100 03/20/20 14:27:49 18:33 192 0nmtgonpho no APPLE 'PHONES 3101 03/20/20 14:27:50 18:33 0 0nmtgonpho no APPLE 'PHONES 3102 03/20/20 14:46:23 5:23 0 0nmtgonpho no APPLE 'PHONES 3103 03/20/20 14:51:45 15:28 192 0nmtgonpho no APPLE 'PHONES 3104 03/20/20 14:51:46 15:28 0 0nmtgonpho no APPLE 'PHONES 3105 03/20/20 15:02:44 60:00 8668 4176 imp AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 128 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171048 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343106

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro ••- .a° AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 dal= Conn. Originating ET Time Number luTC) Bytes Up Bytes Apn Dn MINT TItOT MAKE MODEL 3106 03/20/20 15:07:13 20:57 192 Onmtgonpho no APPLE !PHONES 3107 03/20/20 15:07:14 20:58 0 0 nxtgonpho no APPLE !PHONES 3108 03/20/20 15:28:12 9:32 0 0 nxtgonpho no APPLE !PHONES 3109 03/20/20 15:37:44 14:50 192 0 nxtgonpho no APPLE !PHONES 3110 03/20/20 15:37:45 14:50 0 0 nxtgonpho ne APPLE !PHONES 3111 03/20/20 15:52:36 11:36 0 0 nxtgonpho ne APPLE !PHONES 3112 03/20/20 16:02:44 60:00 18056 6404 ims 3113 03/20/20 16:04:11 2:04 192 0 nxtgonpho ne APPLE !PHONES 3114 03/20/20 16:04:12 2:04 0 0 nxtgonpho ne APPLE !PHONES 3115 03/20/20 16:06:16 0:34 0 0 nxtgonpho ne APPLE !PHONES 3116 03/20/20 16:06:49 8:17 192 Onxtgonpho ne APPLE !PHONES 3117 03/20/20 16:06:50 8:17 0 0 nxtgonpho no APPLE !PHONES 3118 03/20/20 16:15:07 7:04 0 0 nxtgonpho no APPLE !PHONES 3119 03/20/20 16:22:10 27:08 192 0 nxtgonpho ne APPLE !PHONES 3120 03/20/20 16:22:11 27:08 0 0 nxtgonpho ne APPLE !PHONES 3121 03/20/20 16:49:19 5:38 0 0 nxtgonpho ne APPLE !PHONES 3122 03/20/20 16:54:56 14:56 192 0 nxtgonpho ne APPLE !PHONES 3123 03/20/20 16:54:57 14:56 0 0 nxtgonpho ne APPLE !PHONES 3124 03/20/20 17:02:44 60:00 8744 4680 ims 3125 03/20/20 17:09:53 0:47 0 0 nxtgonpho ne APPLE !PHONES 3126 03/20/20 17:10:39 8:26 192 0 nxtgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 129 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171049 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343107

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e • 1/4-00 AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Tame Number (UTC) Bytes Up Bytes Apn flax INSI MAKE Dn MODEL 3127 03/20/20 17:10:40 8:26 0 0 nxtgenpho ne APPLE 'PHONES 3128 03/20/20 17:19:06 3:40 0 0 nxtgenpho ne APPLE 'PHONES 3129 03/20/20 17:22:46 15:11 192 0 nxtgenpho ne APPLE 'PHONES 3130 03/20/20 17:22:47 15:11 0 0 nxtgonpho ne APPLE 'PHONES 3131 03/20/20 17:37:57 2:23 192 0 nxtgonpho ne APPLE 'PHONES 3132 03/20/20 17:37:58 2:23 0 0 nxtgonpho ne APPLE 'PHONES 3133 03/20/20 17:40:21 6:09 192 0 nxtgonpho ne APPLE 'PHONES 3134 03/20/20 17:40:22 6:09 0 0 nxtgonpho ne APPLE 'PHONES 3135 03/20/20 17:46:31 1:00 0 0 nxtgonpho ne APPLE 'PHONES 3136 03/20/20 17:47:30 8:23 192 0 nxtgenpho ne APPLE 'PHONES 3137 03/20/20 17:47:31 8:23 0 0 nxtgenpho ne APPLE 'PHONES 3138 03/20/20 17:55:54 44:08 0 0 nxtgonpho ne APPLE 'PHONES 3139 03/20/20 18:02:44 60:00 8156 3712 ims 3140 03/20/20 18:40:02 2:04 192 0 nxtgenpho ne APPLE 'PHONES 3141 03/20/20 18:40:03 2:04 0 0 nxtgenpho ne APPLE 'PHONES 3142 03/20/20 18:42:07 55:32 0 0 nxtgonpho ne APPLE 'PHONES 3143 03/20/20 19:02:44 60:00 16436 5228 ims 3144 03/20/20 19:37:38 8:36 192 0 nxtgenpho ne APPLE 'PHONES 3145 03/20/20 19:37:40 8:36 0 0 nxtgenpho ne APPLE 'PHONES 3146 03/20/20 19:46:15 6:04 192 0 nxtgenpho ne APPLE 'PHONES 3147 03/20/20 19:46:16 6:04 0 0 nxtgenpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 130 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171050 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343108

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ‘•- .a° AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn INKS IMSI NAM MODEL 3148 03/20/20 19:52:20 9:41 0 0 nxtgenpho ne APPLE 'PHONES 3149 03/20/20 20:02:00 2:03 192 0 nxtgenpho ne APPLE 'PHONES 3150 03/20/20 20:02:01 2:03 0 0 nxtgenpho ne APPLE 'PHONES 3151 03/20/20 20:02:44 60:00 5072 1588 ims 3152 03/20/20 20:04:04 57:34 0 0 nxtgenpho ne APPLE 'PHONES 3153 03/20/20 20:36:24 1:34 7802 6302 ims APPLE 'PHONES 3154 03/20/20 20:37:58 60:00 13672 5576 ims APPLE 'PHONES 3155 03/20/20 21:01:37 13:48 192 Onmtgonpho ne APPLE 'PHONES 3156 03/20/20 21:01:38 13:48 0 0 nxtgenpho ne APPLE 'PHONES 3157 03/20/20 21:02:44 60:00 0 0 ims 3158 03/20/20 21:15:26 2:04 0 0 nxtgenpho ne APPLE 'PHONES 3159 03/20/20 21:17:30 2:10 192 0 nxtgenpho ne APPLE 'PHONES 3160 03/20/20 21:17:31 2:10 0 0 nxtgenpho ne APPLE 'PHONES 3161 03/20/20 21:19:41 0:05 0 0 nxtgenpho ne APPLE 'PHONES 3162 03/20/20 21:20:02 60:00 0 0 nxtgenpho ne APPLE 'PHONES 3163 03/20/20 21:37:58 60:00 8728 3020 ims APPLE 'PHONES 3164 03/20/20 22:02:44 60:00 0 0 ims 3165 03/20/20 22:20:02 60:00 0 0 nxtgenpho ne APPLE 'PHONES 3166 03/20/20 22:37:58 60:00 13768 4824 ims APPLE 'PHONES 3167 03/20/20 23:02:44 60:00 0 0 ims 3168 03/20/20 23:20:02 29:13 0 0 nxtgenpho ne APPLE 'PHONES 3169 03/20/20 23:37:58 60:00 8604 3128 ims APPLE 'PHONES 3170 03/20/20 23:49:14 7:42 192 Onmtgonpho ne APPLE 'PHONES 3171 03/20/20 23:49:15 7:42 0 0 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 131 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171051 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343109

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ‘sel. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (UTC) Bytes Up Bytes Apn Dn IMMIX INS! MAKE MODEL 3172 03/20/20 23:56:57 22:40 0 0 nmtgonpho ne APPLE !PHONES 3173 03/21/20 00:02:44 24:06 0 0 ims 3174 03/21/20 00:19:36 2:11 192 0 nmtgonpho ne APPLE !PHONES 3175 03/21/20 00:19:38 2:10 0 0 nmtgonpho ne APPLE !PHONES 3176 03/21/20 00:21:48 60:00 0 0 nmtgonpho ne APPLE !PHONES 3177 03/21/20 00:37:58 60:00 10036 3268 Las APPLE !PHONES 3178 03/21/20 01:21:48 36:26 0 0 nmtgonpho ne APPLE !PHONES 3179 03/21/20 01:37:58 60:00 13568 4752 Las APPLE !PHONES 3180 03/21/20 01:58:13 13:55 192 0 nmtgonpho ne APPLE !PHONES 3181 03/21/20 01:58:14 13:55 0 0 nmtgonpho ne APPLE !PHONES 3182 03/21/20 02:12:08 1:21 192 0 nmtgonpho ne APPLE !PHONES 3183 03/21/20 02:12:09 1:21 0 0 nmtgonpho ne APPLE !PHONES 3184 03/21/20 02:13:30 11:29 0 0 nmtgonpho no APPLE !PHONES 3185 03/21/20 02:24:59 4:09 0 0 nmtgonpho no APPLE !PHONES 3186 03/21/20 02:29:07 47:53 192 0 nmtgonpho no APPLE !PHONES 3187 03/21/20 02:29:08 47:53 0 0 nmtgonpho no APPLE !PHONES 3188 03/21/20 02:37:58 16:32 5072 1572 Las APPLE !PHONES 3189 03/21/20 02:54:03 22:57 6228 6736 Las APPLE !PHONES 3190 03/21/20 02:54:04 22:57 6668 6072 Las APPLE !PHONES 3191 03/21/20 02:54:30 60:00 16504 9140 Las 3192 03/21/20 03:17:01 20:00 192 Onmtgonpho ne APPLE !PHONES 3193 03/21/20 03:17:02 31:06 0 0 nmtgonpho ne APPLE !PHONES 3194 03/21/20 03:48:08 8:34 0 0 nmtgonpho ne APPLE !PHONES 3195 03/21/20 03:54:30 60:00 10036 3392 Las AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 132 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171052 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343110

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Si= Conn. Time (OTC) Originating Numbor ET Bytes Up Bytes Apn Dn MEI IMSI MAKE MODEL 3196 03/21/20 03:56:41 97:16 192 Onmtgonpho no APPLE !PHONES 3197 03/21/20 03:56:42 60:00 0 0 nxtgenpho ne APPLE IPHOME8 3198 03/21/20 04:54:30 60:00 9928 3268 Less 3199 03/21/20 04:56:42 37:16 0 0 nxtgonpho ne APPLE !PHONES 3200 03/21/20 05:33:58 0:06 0 0 nxtgonpho ne APPLE 'PHONES 3201 03/21/20 05:49:12 3:35 192 0 nxtgonpho ne APPLE 'PHONES 3202 03/21/20 05:49:13 3:35 0 0 nxtgenpho no APPLE 'PHONES 3203 03/21/20 05:52:48 4:43 0 0 nxtgonpho no APPLE 'PHONES 3204 03/21/20 05:54:30 60:00 8496 3128 Less 3205 03/21/20 05:57:30 13:55 192 0 nxtgonpho no APPLE 'PHONES 3206 03/21/20 05:57:31 13:55 0 0 nxtgonpho no APPLE 'PHONES 3207 03/21/20 06:11:26 24:31 0 0 nxtgonpho no APPLE !PHONES 3208 03/21/20 06:35:56 8:15 192 0 nxtgonpho no APPLE !PHONES 3209 03/21/20 06:35:57 8:15 0 0 nxtgonpho no APPLE !PHONES 3210 03/21/20 06:44:12 14:22 192 0 nxtgonpho no APPLE 'PHONES 3211 03/21/20 06:44:13 14:22 0 0 nxtgonpho no APPLE 'PHONES 3212 03/21/20 06:54:30 60:00 10828 4484 Less 3213 03/21/20 06:58:35 4:51 0 0 nxtgonpho no APPLE 'PHONES 3214 03/21/20 07:03:26 4:01 0 0 nxtgenpho no APPLE 'PHONES 3215 03/21/20 07:07:26 9:27 192 0 nxtgonpho no APPLE 'PHONES 3216 03/21/20 07:07:27 9:27 0 0 nxtgonpho no APPLE 'PHONES 3217 03/21/20 07:16:54 1:37 0 0 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 133 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171053 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343111

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ce. AT&T Run Data: Run Time: Data Usage For: 06/17/2020 Item Conn. Conn. Date Time (OTC) 3218 03/21/20 07:18:31 3219 03/21/20 07:18:32 3220 03/21/20 07:54:30 3221 03/21/20 08:15:42 3222 03/21/20 08:46:35 3223 03/21/20 08:54:30 3224 03/21/20 08:54:36 3225 03/21/20 08:54:37 3226 03/21/20 08:57:48 3227 03/21/20 09:25:47 3228 03/21/20 09:25:48 3229 03/21/20 09:29:01 3230 03/21/20 09:50:01 3231 03/21/20 09:52:52 3232 03/21/20 09:54:30 3233 03/21/20 09:54:31 3234 03/21/20 10:02:28 3235 03/21/20 10:02:29 3236 03/21/20 10:03:42 3237 03/21/20 10:07:31 3238 03/21/20 10:54:30 3239 03/21/20 11:07:31 Originating Number AT Bytes Bytes Apn DEBI IMSI MAKE MODEL Up Dn 57:10 192 0 nxtgonpho no APPLE 'PHONES 57:10 0 0 nxtgonpho no APPLE 'PHONES 60:00 12244 4860 isms 30:53 0 0 nxtgonpho no APPLE 'PHONES 8:02 0 0 nxtgonpho no APPLE 'PHONES 60:00 7172 3128 ims 3:11 192 0 nxtgonpho no APPLE 'PHONES 3:11 0 0 nxtgonpho no APPLE 'PHONES 28:00 0 0 nxtgonpho no APPLE 'PHONES 3:13 192 Onxtgonpho no APPLE 'PHONES 3:13 0 0 nxtgonpho no APPLE !PHONES 21:00 0 0 nxtgenpho no APPLE 'PHONES 2:51 0 0 nxtgonpho no APPLE 'PHONES 0:06 0 0 nxtgonpho no APPLE 'PHONES 60:00 13908 4996 ims 7:58 0 0 nxtgonpho no APPLE 'PHONES 1:13 192 Onxtgonpho no APPLE 'PHONES 1:13 0 0 nxtgonpho no APPLE !PHONES 3:48 0 0 nxtgonpho no APPLE 'PHONES 60:00 0 0 nxtgenpho no APPLE 'PHONES 60:00 10036 3392 ims 2:38 0 0 nxtgenpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 134 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171054 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343112

..020 MOBILITY alb AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm ...1/47.1• 4's AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Tim (OTC) Originating Number ET Bytes Up Bytes Apn Dn L@Z IMSI MAKE MODEL 3240 03/21/20 11:10:09 1:25 0 0 nxtgonpho no APPLE 'PHONES 3241 03/21/20 11:11:33 2:44 192 0 nxtgenpho no APPLE 'PHONES 3242 03/21/20 11:11:34 2:44 0 0 nxtgenpho no APPLE 'PHONES 3243 03/21/20 11:14:18 19:09 0 0 nxtgonpho no APPLE 'PHONES 3244 03/21/20 11:33:28 14:25 0 0 nxtgonpho ne APPLE 'PHONES 3245 03/21/20 11:47:53 26:28 0 0 nxtgenpho ne APPLE 'PHONES 3246 03/21/20 11:54:30 60:00 8728 3052 isms 3247 03/21/20 12:14:21 10:50 0 0 nxtgenpho ne APPLE 'PHONES 3248 03/21/20 12:25:11 16:19 0 0 nxtgenpho ne APPLE 'PHONES 3249 03/21/20 12:41:30 0:44 192 0 nxtgenpho ne APPLE 'PHONES 3250 03/21/20 12:41:31 0:44 0 0 nxtgenpho ne APPLE 'PHONES 3251 03/21/20 12:42:15 29:50 0 0 nxtgenpho ne APPLE 'PHONES 3252 03/21/20 12:54:30 60:00 12028 4640 isms 3253 03/21/20 13:12:04 2:03 192 0 nxtgenpho ne APPLE 'PHONES 3254 03/21/20 13:12:05 2:03 0 0 nxtgenpho ne APPLE 'PHONES 3255 03/21/20 13:14:08 60:00 0 0 nxtgenpho ne APPLE 'PHONES 3256 03/21/20 13:54:30 60:00 8496 3036 isms 3257 03/21/20 14:14:08 14:56 0 0 nxtgonpho no APPLE 'PHONES 3258 03/21/20 14:29:03 2:04 192 0 nxtgonpho no APPLE 'PHONES 3259 03/21/20 14:29:04 2:04 0 0 nxtgonpho ne APPLE 'PHONES 3260 03/21/20 14:31:08 60:00 0 0 nxtgenpho ne APPLE 'PHONES 3261 03/21/20 14:54:30 60:00 8728 3160 isms AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 135 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171055 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343113

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro `•- . is AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Sidi= Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn EBBS IM9I MAKE MODEL 3262 03/21/20 15:31:08 53:21 0 Onmtgonpho ne APPLE !PHONES 3263 03/21/20 15:54:30 60:00 15496 5476 ims 3264 03/21/20 16:24:29 6:53 0 0 nxtgenpho ne APPLE !PHONES 3265 03/21/20 16:31:22 34:11 0 0 nxtgenpho ne APPLE !PHONES 3266 03/21/20 16:54:30 60:00 7188 2804 ims 3267 03/21/20 17:05:32 12:47 192 Onmtgonpho no APPLE !PHONES 3268 03/21/20 17:05:33 12:47 0 0 nxtgonpho no APPLE !PHONES 3269 03/21/20 17:18:20 58:17 0 0 nxtgonpho no APPLE !PHONES 3270 03/21/20 17:54:30 60:00 10252 3408 ims 3271 03/21/20 18:22:28 42:10 192 0 nxtgonpho ne APPLE !PHONES 3272 03/21/20 18:22:29 42:10 0 0 nxtgonpho ne APPLE !PHONES 3273 03/21/20 18:54:30 60:00 11796 4484 ims 3274 03/21/20 19:04:38 4:18 192 0 nxtgonpho ne APPLE !PHONES 3275 03/21/20 19:04:40 4:17 0 0 nxtgonpho ne APPLE !PHONES 3276 03/21/20 19:08:57 60:00 0 0 nxtgenpho no APPLE !PHONES 3277 03/21/20 19:54:30 60:00 8496 3144 ims 3278 03/21/20 20:08:57 16:46 0 0 nxtgenpho no APPLE !PHONES 3279 03/21/20 20:25:42 37:54 192 0 nxtgenpho no APPLE !PHONES 3280 03/21/20 20:25:43 37:54 0 0 nxtgenpho no APPLE !PHONES 3281 03/21/20 20:54:30 60:00 13460 4624 ims 3282 03/21/20 21:03:37 60:00 0 0 nxtgonpho no APPLE !PHONES 3283 03/21/20 21:54:30 60:00 10252 3300 ims 3284 03/21/20 22:03:37 60:00 0 0 nxtgonpho no APPLE !PHONES 3285 03/21/20 22:54:30 46:10 3440 1464 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 136 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171056 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343114

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. dro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn EMI II I MAKE MODEL 3286 03/21/20 23:03:37 17:19 0 0 nxtgonpho ne APPLE 'PHONES 3287 03/21/20 23:20:55 2:03 192 0 nxtgonpho ne APPLE 'PHONES 3288 03/21/20 23:20:56 2:03 0 0 nxtgonpho ne APPLE 'PHONES 3289 03/21/20 23:22:59 60:00 0 0 nxtgonpho ne APPLE 'PHONES 3290 03/21/20 23:40:40 3:35 6668 5859 imp APPLE 'PHONES 3291 03/21/20 23:40:40 3:35 6604 5859 imp APPLE 'PHONES 3292 03/21/20 23:44:15 60:00 13892 4716 imp APPLE 'PHONES 3293 03/22/20 00:22:59 7:07 0 0 nxtgonpho ne APPLE 'PHONES 3294 03/22/20 00:30:05 2:03 192 0 nxtgonpho ne APPLE 'PHONES 3295 03/22/20 00:30:06 2:03 0 0 nxtgonpho ne APPLE 'PHONES 3296 03/22/20 00:32:09 18:47 0 0 nxtgonpho ne APPLE 'PHONES 3297 03/22/20 00:44:15 60:00 6848 2788 imp APPLE 'PHONES 3298 03/22/20 00:50:55 8:14 192 0nxtgonpho ne APPLE 'PHONES 3299 03/22/20 00:50:56 8:14 0 0 nxtgonpho ne APPLE 'PHONES 3300 03/22/20 00:59:10 1:16 0 0 nxtgonpho ne APPLE 'PHONES 3301 03/22/20 01:00:25 0:57 192 0 nxtgonpho ne APPLE 'PHONES 3302 03/22/20 01:00:26 0:57 0 0 nxtgonpho ne APPLE 'PHONES 3303 03/22/20 01:01:23 4:58 0 0 nxtgonpho ne APPLE 'PHONES 3304 03/22/20 01:06:20 13:22 192 0 nxtgonpho ne APPLE 'PHONES 3305 03/22/20 01:06:21 13:22 0 0 nxtgonpho ne APPLE 'PHONES 3306 03/22/20 01:19:43 2:02 0 0 nxtgonpho ne APPLE 'PHONES 3307 03/22/20 01:21:44 2:11 192 0 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 137 customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171057 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343115

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. c o . ‘•- .a# AT&T Run pato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 MS= Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn MERE IM9I MAKE MODEL 3308 03/22/20 01:21:45 2:11 0 Onmtgonpho ne APPLE !PHONES 3309 03/22/20 01:23:56 0:44 0 0 nxtgenpho ne APPLE !PHONES 3310 03/22/20 01:24:39 2:04 192 0 nxtgenpho ne APPLE !PHONES 3311 03/22/20 01:24:41 2:03 0 0 nxtgenpho ne APPLE !PHONES 3312 03/22/20 01:26:44 0:35 0 0 nxtgenpho ne APPLE !PHONES 3313 03/22/20 01:27:19 2:03 192 0 nxtgenpho ne APPLE !PHONES 3314 03/22/20 01:27:20 2:03 0 0 nxtgenpho no APPLE !PHONES 3315 03/22/20 01:29:23 60:00 0 0 nxtgonpho no APPLE !PHONES 3316 03/22/20 01:44:15 32:14 5180 1804 Las APPLE !PHONES 3317 03/22/20 02:11:05 60:00 11882 8628 Las APPLE !PHONES 3318 03/22/20 02:29:23 60:00 0 0 nxtgonpho no APPLE !PHONES 3319 03/22/20 03:11:05 47:00 2596 1324 Las APPLE !PHONES 3320 03/22/20 03:29:23 60:00 0 0 nxtgenpho ne APPLE !PHONES 3321 03/22/20 03:58:05 60:00 11888 4220 Las APPLE !PHONES 3322 03/22/20 04:29:23 60:00 0 0 nxtgenpho ne APPLE !PHONES 3323 03/22/20 04:58:05 60:00 8712 3020 Las APPLE !PHONES 3324 03/22/20 05:29:23 0:01 0 0 nxtgenpho ne APPLE !PHONES 3325 03/22/20 05:29:27 60:00 0 0 nxtgenpho ne APPLE !PHONES 3326 03/22/20 05:58:05 60:00 6956 2648 Las APPLE !PHONES 3327 03/22/20 06:29:27 60:00 0 0 nxtgonpho no APPLE !PHONES 3328 03/22/20 06:58:05 60:00 13228 4520 Las APPLE !PHONES 3329 03/22/20 07:29:27 60:00 0 0 nxtgonpho no APPLE !PHONES 3330 03/22/20 07:58:05 60:00 8496 3004 Las APPLE !PHONES 3331 03/22/20 08:29:27 60:00 0 0 nxtgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 138 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171058 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343116

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e to AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating CT Time Number (UTC) Bytos Up Bytes Apn Dn L@I IIS! MAKS MODEL 3332 03/22/20 08:58:05 60:00 10488 4312 ism APPLE !PEONES 3333 03/22/20 09:29:27 0:01 0 Onxtgonpho ne APPLE !PEONES 3334 03/22/20 09:29:31 60:00 0 0 mactgonpho no APPLE !PEONES 3335 03/22/20 09:58:05 60:00 6956 2880 ism APPLE 'PHONES 3336 03/22/20 10:29:31 60:00 0 0 nxtgonpho ne APPLE IPHONE8 3337 03/22/20 10:58:05 60:00 6848 2540 ism APPLE IPHONE8 3338 03/22/20 11:29:31 60:00 0 0 nxtgonpho ne APPLE 'PHONES 3339 03/22/20 11:58:05 60:00 13696 5472 ism APPLE 'PHONES 3340 03/22/20 12:29:31 2:36 0 Onmtgonpho no APPLE 'PHONES 3341 03/22/20 12:32:07 41:03 0 Onactgonpho no APPLE 'PHONES 3342 03/22/20 12:58:05 60:00 8388 3004 ism APPLE 'PHONES 3343 03/22/20 13:13:09 2:21 192 Onxtgonpho ne APPLE 'PHONES 3344 03/22/20 13:13:11 2:20 0 0 nxtgonpho ne APPLE 'PHONES 3345 03/22/20 13:15:31 6:03 192 Onxtgonpho ne APPLE 'PHONES 3346 03/22/20 13:15:32 6:03 0 0 nxtgonpho no APPLE 'PHONES 3347 03/22/20 13:21:35 32:01 0 Onactgonpho no APPLE 'PHONES 3348 03/22/20 13:53:36 0:03 0 Onactgonpho no APPLE !PHONES 3349 03/22/20 13:53:39 58:11 0 Onactgonpho no APPLE !PHONES 3350 03/22/20 13:58:05 60:00 10036 3176 ism APPLE !PHONES 3351 03/22/20 14:54:13 60:00 0 Onactgonpho no APPLE !PHONES 3352 03/22/20 14:58:05 60:00 9912 3020 ism APPLE !PHONES 3353 03/22/20 15:54:13 60:00 0 Onmtgonpho ne APPLE !PHONES 3354 03/22/20 15:58:05 60:00 13352 4576 ism APPLE !PHONES 3355 03/22/20 16:54:13 60:00 0 Onxtgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 139 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171059 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343117

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e s, ‘•-is• AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time MC/ Originating Number ET Bytes Up Bytes Apn Dn IN= II I MAKE MODEL 3356 03/22/20 16:58:05 60:00 6956 2756 ims APPLE 'PHONES 3357 03/22/20 17:54:13 39:58 0 Onxtgonpho ne APPLE !PHONES 3358 03/22/20 17:58:05 60:00 11812 4720 ims APPLE !PHONES 3359 03/22/20 18:34:10 0:42 192 Onxtgonpho ne APPLE !PHONES 3360 03/22/20 18:34:11 0:42 0 0 nxtgenpho ne APPLE 'PHONES 3361 03/22/20 18:34:53 3:14 0 0 nxtgenpho ne APPLE !PHONES 3362 03/22/20 18:38:06 23:03 192 0 nxtgenpho ne APPLE 'PHONES 3363 03/22/20 18:38:07 23:04 0 0 nxtgenpho ne APPLE 'PHONES 3364 03/22/20 18:58:05 60:00 15020 4716 ims APPLE !PHONES 3365 03/22/20 19:01:11 1:37 0 0 nxtgenpho ne APPLE 'PHONES 3366 03/22/20 19:02:47 12:30 192 0 nxtgenpho ne APPLE !PHONES 3367 03/22/20 19:02:48 12:30 0 0 nxtgenpho ne APPLE 'PHONES 3368 03/22/20 19:15:18 44:20 0 0 nxtgenpho ne APPLE !PHONES 3369 03/22/20 19:58:05 60:00 10036 3144 ims APPLE !PHONES 3370 03/22/20 19:59:37 2:10 192 Onxtgonpho ne APPLE !PHONES 3371 03/22/20 19:59:39 2:09 0 0 nxtgenpho ne APPLE 'PHONES 3372 03/22/20 20:01:48 9:18 0 0 nxtgenpho ne APPLE !PHONES 3373 03/22/20 20:11:05 1:23 192 0 nxtgenpho ne APPLE !PHONES 3374 03/22/20 20:11:06 1:23 0 0 nxtgenpho ne APPLE 'PHONES 3375 03/22/20 20:12:28 9:21 192 0 nxtgenpho ne APPLE 'PHONES 3376 03/22/20 20:12:29 9:21 0 0 nxtgenpho ne APPLE 'PHONES 3377 03/22/20 20:21:49 6:09 192 0 nxtgenpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 140 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171060 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343118

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cee AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn EBB! IASI MAKE MODEL 3378 03/22/20 20:21:50 6:09 0 0 nxtgonpho no APPLE 'PHONES 3379 03/22/20 20:27:59 17:03 0 0 nxtgonpho no APPLE 'PHONES 3380 03/22/20 20:45:01 7:26 192 0 nxtgenpho no APPLE 'PHONES 3381 03/22/20 20:45:02 7:27 0 0 nxtgonpho no APPLE 'PHONES 3382 03/22/20 20:52:29 14:32 0 0 nxtgonpho no APPLE 'PHONES 3383 03/22/20 20:58:05 18:40 14120 3456 ims APPLE 'PHONES 3384 03/22/20 21:07:00 9:46 192 0 nxtgonpho no APPLE 'PHONES 3385 03/22/20 21:07:01 9:46 0 0 nxtgonpho no APPLE 'PHONES 3386 03/22/20 21:16:47 11:17 0 0 nxtgonpho no APPLE 'PHONES 3387 03/22/20 21:16:50 0:03 0 0 ims APPLE 'PHONES 3388 03/22/20 21:16:59 60:00 21488 9906 ims 3389 03/22/20 21:28:03 4:51 192 0 nxtgonpho ne APPLE 'PHONES 3390 03/22/20 21:28:05 4:50 0 0 nxtgenpho no APPLE 'PHONES 3391 03/22/20 21:32:55 3:36 0 0 nxtgonpho no APPLE 'PHONES 3392 03/22/20 21:36:31 2:03 192 0 nxtgonpho no APPLE 'PHONES 3393 03/22/20 21:36:32 2:03 0 0 nxtgonpho ne APPLE 'PHONES 3394 03/22/20 21:38:35 60:00 0 0 nxtgonpho ne APPLE 'PHONES 3395 03/22/20 22:16:59 60:00 6848 2772 ims 3396 03/22/20 22:38:35 60:00 0 0 nxtgenpho no APPLE 'PHONES 3397 03/22/20 23:16:59 60:00 7064 2664 ims 3398 03/22/20 23:38:35 48:53 0 0 nxtgenpho no APPLE 'PHONES 3399 03/23/20 00:16:59 60:00 7388 2928 ims 3400 03/23/20 00:27:27 2:17 192 Onxtgonpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 141 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171061 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343119

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro ‘•- .a# AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 MS= Conn. T1100 (OTC) Originating Number ET Bytes Up Bytes Apn DOLT INSI MAKE Dn MODEL 3401 03/23/20 00:27:29 2:16 0 Onmtgonpho ne APPLE !PHONES 3402 03/23/20 00:29:45 6:04 192 0 nxtgenpho ne APPLE !PHONES 3403 03/23/20 00:29:46 6:04 0 0 nxtgenpho ne APPLE !PHONES 3404 03/23/20 00:35:50 2:09 0 0 nxtgenpho ne APPLE !PHONES 3405 03/23/20 00:37:58 2:04 192 0 nxtgenpho ne APPLE !PHONES 3406 03/23/20 00:38:00 2:04 0 0 nxtgenpho ne APPLE !PHONES 3407 03/23/20 00:40:03 0:50 0 0 nxtgenpho ne APPLE !PHONES 3408 03/23/20 00:40:52 2:03 192 0 nxtgenpho ne APPLE !PHONES 3409 03/23/20 00:40:53 2:03 0 0 nxtgenpho ne APPLE !PHONES 3410 03/23/20 00:42:56 28:33 0 0 nxtgenpho ne APPLE !PHONES 3411 03/23/20 01:11:28 2:03 192 0 nxtgenpho ne APPLE !PHONES 3412 03/23/20 01:11:29 2:03 0 0 nxtgenpho ne APPLE !PHONES 3413 03/23/20 01:13:32 9:15 0 0 nxtgenpho ne APPLE !PHONES 3414 03/23/20 01:16:59 60:00 7280 2912 ims 3415 03/23/20 01:22:47 9:04 192 0 nxtgenpho ne APPLE !PHONES 3416 03/23/20 01:22:48 9:04 0 0 nxtgenpho ne APPLE !PHONES 3417 03/23/20 01:31:52 13:32 0 0 nxtgenpho ne APPLE !PHONES 3418 03/23/20 01:45:23 2:04 192 0 nxtgenpho ne APPLE !PHONES 3419 03/23/20 01:45:24 2:04 0 0 nxtgenpho ne APPLE !PHONES 3420 03/23/20 01:47:28 47:29 0 0 nxtgenpho ne APPLE !PHONES 3421 03/23/20 01:56:45 0:00 0 0 ims APPLE !PHONES 3422 03/23/20 01:56:56 60:00 18301 9608 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 142 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171062 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343120

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 MS= Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn MOLT INS! NAPS *Mel. 3423 03/23/20 02:16:59 60:00 0 0 ims 3424 03/23/20 02:34:56 2:04 192 0 ructgonpho no APPLE 'PEONES 3425 03/23/20 02:34:57 2:04 0 0 nottgonpho no APPLE 'PEONES 3426 03/23/20 02:37:01 7:01 0 0 nottgonpho no APPLE !PHONES 3427 03/23/20 02:44:01 2:03 192 0 nottgonpho no APPLE !PHONES 3428 03/23/20 02:44:02 2:03 0 0 ructgonpho no APPLE !PHONES 3429 03/23/20 02:46:05 60:00 0 0 ructgonpho no APPLE !PHONES 3430 03/23/20 02:56:56 60:00 8496 3500 ims 3431 03/23/20 03:16:59 60:00 0 0 ims 3432 03/23/20 03:46:05 17:46 0 0 ructgonpho no APPLE !PHONES 3433 03/23/20 03:56:56 60:00 21140 10312 ims 3434 03/23/20 04:01:14 0:23 0 1749 ims 3435 03/23/20 04:03:50 20:27 192 0 ructgonpho no APPLE !PHONES 3436 03/23/20 04:03:51 20:27 0 0 ructgonpho no APPLE !PHONES 3437 03/23/20 04:16:59 60:00 0 0 ims 3438 03/23/20 04:24:18 3:45 0 0 nottgonpho no APPLE !PHONES 3439 03/23/20 04:28:03 8:33 192 0 nottgonpho no APPLE IPHONE8 3440 03/23/20 04:28:04 8:33 0 0 nottgonpho no APPLE IPHONE8 3441 03/23/20 04:36:37 0:05 0 0 ructgonpho no APPLE IPHONE8 3442 03/23/20 04:36:56 60:00 0 0 ructgonpho no APPLE IPHONE8 3443 03/23/20 04:56:56 60:00 8512 3036 ims 3444 03/23/20 05:16:59 25:30 0 0 ims 3445 03/23/20 05:36:56 60:00 0 0 ructgonpho no APPLE IPHONE8 3446 03/23/20 05:56:56 60:00 10380 4144 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 143 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGAt 00171063 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343121

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 1/4e. ‘•e# AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Si= Conn. Timo (OTC) Originating Nomber ET Bytos Up Bytes Apn Dn MAX IASI NAM MODEL 3447 03/23/20 06:36:56 60:00 0 0 nxtgenpho no APPLE !PHONES 3448 03/23/20 06:56:56 60:00 10380 4036 ims 3449 03/23/20 07:36:56 60:00 0 0 nxtgenpho no APPLE !PHONES 3450 03/23/20 07:56:56 60:00 6848 2880 ims 3451 03/23/20 08:36:56 0:01 0 0 nxtgenpho no APPLE !PHONES 3452 03/23/20 08:36:58 60:00 0 0 nxtgenpho ne APPLE !PHONES 3453 03/23/20 08:56:56 60:00 11812 4376 ims 3454 03/23/20 09:36:58 60:00 0 0 nxtgenpho no APPLE !PHONES 3455 03/23/20 09:56:56 60:00 7064 2912 ims 3456 03/23/20 10:36:58 60:00 0 0 nxtgenpho no APPLE !PHONES 3457 03/23/20 10:56:56 60:00 6848 2788 ims 3458 03/23/20 11:36:58 60:00 0 0 nxtgenpho no APPLE !PHONES 3459 03/23/20 11:56:56 60:00 15344 5732 ims 3460 03/23/20 12:36:58 0:01 0 0 nxtgenpho ne APPLE !PHONES 3461 03/23/20 12:37:01 60:00 0 0 nxtgenpho ne APPLE !PHONES 3462 03/23/20 12:56:56 60:00 6848 2788 ims 3463 03/23/20 13:37:01 60:00 0 0 nxtgenpho ne APPLE !PHONES 3464 03/23/20 13:56:56 42:04 4964 1588 ims 3465 03/23/20 14:22:56 1:03 6852 6179 ims APPLE !PHONES 3466 03/23/20 14:23:59 15:01 5180 1712 ims APPLE !PHONES 3467 03/23/20 14:37:01 60:00 0 0 nxtgenpho ne APPLE !PHONES 3468 03/23/20 14:39:00 15:49 6674 5980 ims APPLE !PHONES 3469 03/23/20 14:54:49 46:05 8404 3988 ims APPLE !PHONES 3470 03/23/20 15:37:01 60:00 0 0 nxtgenpho ne APPLE !PHONES 3471 03/23/20 15:40:54 60:00 11840 8718 ims APPLE !PHONES 3472 03/23/20 16:37:01 0:01 0 0 nxtgenpho ne APPLE !PHONES 3473 03/23/20 16:40:54 4:01 0 0 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 144 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171064 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343122

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e s, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Si= Conn. Time (DTC) Originating Number ET Bytes Up Bytes Apn Dn EMBI INSI MAKE MODEL 3474 03/23/20 16:44:55 55:42 8852 3468 ims APPLE !PHONES 3475 03/23/20 17:28:56 7:41 0 Onmtgonphe ne APPLE !PHONES 3476 03/23/20 17:36:37 60:00 0 0 nmtgonphe ne APPLE !PHONES 3477 03/23/20 17:36:42 5:20 8156 6944 ims APPLE !PHONES 3478 03/23/20 17:42:02 60:00 13584 4608 ims APPLE !PHONES 3479 03/23/20 18:36:37 19:50 0 Onmtgonphe ne APPLE !PHONES 3480 03/23/20 18:42:02 14:26 124 372 ims APPLE !PHONES 3481 03/23/20 18:56:26 4:33 192 Onmtgonphe ne APPLE !PHONES 3482 03/23/20 18:56:27 4:32 6184 6738 ims APPLE !PHONES 3483 03/23/20 18:56:27 4:33 0 Onmtgonphe ne APPLE !PHONES 3484 03/23/20 18:56:28 4:32 6670 5920 ims APPLE !PHONES 3485 03/23/20 19:01:00 22:42 0 Onmtgonphe ne APPLE !PHONES 3486 03/23/20 19:01:23 1:26 6646 5904 ims APPLE !PHONES 3487 03/23/20 19:02:49 11:48 3532 1432 ims APPLE !PHONES 3488 03/23/20 19:14:37 9:05 9586 6195 ims APPLE !PHONES 3489 03/23/20 19:23:42 2:51 192 Onmtgonphe ne APPLE !PHONES 3490 03/23/20 19:23:43 2:51 0 0 nmtgonphe ne APPLE !PHONES 3491 03/23/20 19:26:34 6:22 0 0 nmtgonphe ne APPLE !PHONES 3492 03/23/20 19:32:55 2:23 192 0 nmtgonphe ne APPLE !PHONES 3493 03/23/20 19:32:56 2:23 0 0 nxtgenpho ne APPLE !PHONES 3494 03/23/20 19:35:19 3:26 0 0 nmtgonpho ne APPLE !PHONES 3495 03/23/20 19:38:44 1:10 192 0 nmtgonpho ne APPLE !PHONES 3496 03/23/20 19:38:45 1:10 0 0 nmtgonpho ne APPLE !PHONES 3497 03/23/20 19:39:55 10:36 0 0 nmtgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 145 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171065 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343123

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:58:68pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytos Up Bytes Apn Dn nizx INSI MAKE 3498 03/23/20 19:50:30 0:23 192 0 nxtgenpho no APPLE 3499 03/23/20 19:50:32 0:22 0 0 nxtgenpho no APPLE 3500 03/23/20 19:50:54 0:58 0 0 nxtgenpho no APPLE 3501 03/23/20 19:51:51 8:53 192 0 nxtgenpho no APPLE 3502 03/23/20 19:51:52 8:54 0 0 nxtgonpho no APPLE 3503 03/23/20 20:00:45 0:06 0 0 nxtgonpho no APPLE 3504 03/23/20 20:01:02 5:27 0 0 nxtgonpho no APPLE 3505 03/23/20 20:04:58 12:20 9917 6442 ims 3506 03/23/20 20:06:28 2:04 192 0 nxtgonpho no APPLE 3507 03/23/20 20:06:29 2:04 0 0 nxtgonpho no APPLE 3508 03/23/20 20:08:33 9:55 0 0 nxtgonpho no APPLE 3509 03/23/20 20:15:42 2:46 6690 5980 ims APPLE 3510 03/23/20 20:18:27 2:04 192 0 nxtgonpho no APPLE 3511 03/23/20 20:18:29 2:03 0 0 nxtgonpho no APPLE 3512 03/23/20 20:20:05 0:26 6246 6666 ims APPLE 3513 03/23/20 20:20:06 0:26 6666 5982 ims APPLE 3514 03/23/20 20:20:32 2:58 0 0 nxtgonpho no APPLE 3515 03/23/20 20:20:38 60:00 18680 11564 ims 3516 03/23/20 20:23:30 21:03 192 0 nxtgonpho no APPLE 3517 03/23/20 20:23:31 21:04 0 0 nxtgonpho no APPLE 3518 03/23/20 20:44:34 60:00 0 0 nxtgonpho no APPLE 3519 03/23/20 21:18:04 27:23 6648 5998 ims APPLE 3520 03/23/20 21:20:38 2:51 0 0 ims 3521 03/23/20 21:44:34 0:53 0 Onxtgonpho no APPLE MODEL 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 146 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171066 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343124

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. cro ‘•- .ai. AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Siam Conn. Tame (OTC) Originating Number ET Bytes Up Bytes Apn Dn flat lent MAKE MODEL 3522 03/23/20 21:45:26 2:04 192 0nxtgonpho no APPLE !PHONES 3523 03/23/20 21:45:27 2:04 0 0 nxtgonpho no APPLE !PHONES 3524 03/23/20 21:47:31 1:36 0 0 nxtgonpho no APPLE !PHONES 3525 03/23/20 21:48:32 0:35 7332 6052 ims APPLE !PHONES 3526 03/23/20 21:49:06 2:17 192 0 nstgenpho no APPLE !PHONES 3527 03/23/20 21:49:08 2:16 0 0 nxtgonpho no APPLE !PHONES 3528 03/23/20 21:51:24 6:04 192 0 nxtgonpho no APPLE !PHONES 3529 03/23/20 21:51:25 6:04 0 0 nxtgonpho no APPLE !PHONES 3530 03/23/20 21:53:02 22:28 11369 6710 ims 3531 03/23/20 21:57:29 3:45 0 0 nxtgonpho no APPLE !PHONES 3532 03/23/20 22:01:13 12:50 192 0 nxtgonpho no APPLE !PHONES 3533 03/23/20 22:01:14 12:51 0 0 nxtgonpho no APPLE !PHONES 3534 03/23/20 22:10:08 3:55 7160 6848 ims APPLE !PHONES 3535 03/23/20 22:10:10 3:55 6740 6896 ims APPLE !PHONES 3536 03/23/20 22:14:05 1:26 0 0 nxtgonpho ne APPLE !PHONES 3537 03/23/20 22:15:30 8:28 192 0 nxtgonpho no APPLE !PHONES 3538 03/23/20 22:15:31 8:28 0 0 nxtgonpho no APPLE !PHONES 3539 03/23/20 22:16:08 7:50 8234 6882 ims APPLE !PHONES 3540 03/23/20 22:16:09 7:50 6882 7970 ims APPLE !PHONES 3541 03/23/20 22:21:24 8:15 13552 7570 ims 3542 03/23/20 22:23:59 13:41 0 0nxtgonpho ne APPLE !PHONES 3543 03/23/20 22:36:39 1:01 7982 6106 ims APPLE !PHONES 3544 03/23/20 22:37:39 4:14 192 0 nxtgonpho no APPLE !PHONES 3545 03/23/20 22:37:41 4:13 0 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 147 customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171067 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343125

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number AI Bytes Up Bytes Apn MDR! IMSI MUM Dn MODEL 3546 03/23/20 22:40:10 1:43 7136 6758 ims APPLE 'PROMO 3547 03/23/20 22:40:11 1:43 6758 6872 ims APPLE 'PROMO 3548 03/23/20 22:41:54 1:34 0 0 nxtgenpho ne APPLE 'PROMO 3549 03/23/20 22:43:27 2:27 192 0 nxtgonpho ne APPLE 'PROMO 3550 03/23/20 22:43:28 2:27 0 0 nxtgenpho no APPLE 'PROMO 3551 03/23/20 22:45:00 0:54 8221 6934 ims APPLE 'PHONES 3552 03/23/20 22:45:01 0:54 6934 7957 ims APPLE 'PHONES 3553 03/23/20 22:45:55 1:30 0 0 nxtgonpho no APPLE 'PHONES 3554 03/23/20 22:46:06 1:19 6346 5812 ims APPLE 'PHONES 3555 03/23/20 22:47:24 0:37 192 Onstgonpho no APPLE 'PHONES 3556 03/23/20 22:47:25 0:37 0 0 nxtgonpho no APPLE 'PHONES 3557 03/23/20 22:48:02 41:42 0 0 nxtgonpho no APPLE 'PHONES 3558 03/23/20 22:48:21 18:31 7402 6103 ims APPLE 'PHONES 3559 03/23/20 23:06:52 60:00 18688 5212 ims APPLE 'PHONES 3560 03/23/20 23:29:43 2:04 192 Onstgonpho ne APPLE 'PHONES 3561 03/23/20 23:29:44 2:04 0 0 nxtgonpho no APPLE 'PHONES 3562 03/23/20 23:31:48 6:59 0 0 nxtgonpho no APPLE 'PHONES 3563 03/23/20 23:38:46 2:03 192 0 nxtgonpho no APPLE !PHONES 3564 03/23/20 23:38:47 2:03 0 0 nxtgonpho no APPLE 'PHONES 3565 03/23/20 23:40:50 4:36 0 0 nxtgonpho no APPLE 'PHONES 3566 03/23/20 23:45:25 2:04 192 0 nxtgonpho no APPLE 'PHONES 3567 03/23/20 23:45:27 2:03 0 0 nxtgonpho no APPLE 'PHONES 3568 03/23/20 23:47:30 5:32 0 0 nxtgonpho no APPLE 'PHONES 3569 03/23/20 23:53:01 8:37 192 0 nxtgonpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 148 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171068 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343126

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ce. ‘ft.ai. AT&T Run Date: Run Time: Data Usage For: Item Conn. Data 06/17/2020 Conn. Time (UTC) Originating Number BT Bytes Up Bytes Apn Dn EMBI IMSI Man MODEL 3570 03/23/20 23:53:02 8:37 0 0 nxtgenpho ne APPLE !PHONES 3571 03/24/20 00:01:39 60:00 0 0 nxtgenpho ne APPLE !PHONES 3572 03/24/20 00:06:52 60:00 30384 14136 ims APPLE !PHONES 3573 03/24/20 00:20:08 0:35 5279 27348 ims APPLE !PHONES 3574 03/24/20 01:01:39 53:19 0 Onxtgonpho ne APPLE !PHONES 3575 03/24/20 01:06:52 49:46 10128 3252 ims APPLE !PHONES 3576 03/24/20 01:46:13 0:00 0 0 ims APPLE !PHONES 3577 03/24/20 01:46:21 8:37 6674 5904 ims APPLE !PHONES 3578 03/24/20 01:54:57 2:03 192 Onxtgonpho ne APPLE !PHONES 3579 03/24/20 01:54:58 2:03 0 0 nxtgenpho ne APPLE !PHONES 3580 03/24/20 01:57:01 1:24 0 0 nxtgenpho ne APPLE !PHONES 3581 03/24/20 01:57:20 1:05 8148 6948 ims APPLE !PHONES 3582 03/24/20 01:58:24 2:10 192 Onxtgonpho ne APPLE !PHONES 3583 03/24/20 01:58:25 2:10 0 Onxtgonpho ne APPLE !PHONES 3584 03/24/20 01:58:36 1:58 6244 6690 ims APPLE !PHONES 3585 03/24/20 01:58:37 1:58 6690 5980 ims APPLE !PHONES 3586 03/24/20 02:00:35 18:49 0 Onxtgonpho ne APPLE !PHONES 3587 03/24/20 02:01:26 12:34 13808 7971 ims 3588 03/24/20 02:05:28 1:09 6674 5980 ims APPLE !PHONES 3589 03/24/20 02:06:37 7:23 5056 1572 ims APPLE !PHONES 3590 03/24/20 02:14:00 0:57 6672 5997 ims APPLE !PHONES 3591 03/24/20 02:14:57 44:43 10484 3408 ims APPLE !PHONES 3592 03/24/20 02:19:23 2:03 192 Onxtgonpho ne APPLE !PHONES 3593 03/24/20 02:19:24 2:03 0 0 nxtgenpho ne APPLE !PHONES 3594 03/24/20 02:21:27 47:19 0 0 nxtgenpho ne APPLE !PHONES 3595 03/24/20 02:54:19 13:51 6676 5998 ims APPLE !PHONES 3596 03/24/20 03:08:10 60:00 15232 5748 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 149 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171069 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343127

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e s, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. T11011 (UTC) Originating Number ET Bytes Up Bytes Apn Dn DMZ IMBI WANE MODEM 3597 03/24/20 03:08:45 2:10 192 Onxtgonpho no APPLE 'PEONES 3598 03/24/20 03:08:46 2:10 0 0 nxtgonpho no APPLE 'PEONES 3599 03/24/20 03:10:56 60:00 0 0 nxtgonpho no APPLE !PEONES 3600 03/24/20 04:01:33 37:51 9266 7304 ims APPLE !PHONES 3601 03/24/20 04:08:10 3:35 0 0 ims APPLE !PHONES 3602 03/24/20 04:10:56 28:28 0 0 nxtgonpho no APPLE !PHONES 3603 03/24/20 04:39:23 130:17 192 0 mmtgonpho no APPLE !PHONES 3604 03/24/20 04:39:24 60:00 0 0 mmtgonpho no APPLE !PHONES 3605 03/24/20 05:39:24 60:00 0 0 nxtgonpho no APPLE 'PHONES 3606 03/24/20 05:50:02 40:18 12957 7433 ims 3607 03/24/20 06:39:24 10:17 0 0 nxtgonpho no APPLE 'PHONES 3608 03/24/20 06:54:54 60:00 18413 10174 ims 3609 03/24/20 07:54:54 60:00 8960 3160 ims 3610 03/24/20 08:54:54 60:00 11532 4316 ims 3611 03/24/20 09:54:54 60:00 8388 2928 ims 3612 03/24/20 10:02:03 127:28 192 Onxtgonpho no APPLE 'PHONES 3613 03/24/20 10:02:04 60:00 0 0 nxtgonpho no APPLE 'PHONES 3614 03/24/20 10:54:54 60:00 15188 5060 ims 3615 03/24/20 11:02:04 60:00 0 0 nxtgonpho no APPLE 'PHONES 3616 03/24/20 11:54:54 60:00 16512 4844 ims 3617 03/24/20 12:02:04 7:28 0 0 nxtgonpho no APPLE 'PHONES 3618 03/24/20 12:09:32 17:15 0 0 nxtgonpho no APPLE !PHONES 3619 03/24/20 12:26:46 2:16 192 0 nxtgonpho no APPLE !PHONES 3620 03/24/20 12:26:48 2:15 0 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 150 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171070 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343128

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e s, AT&T Run Data: Run Tine: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time luTC) Originating ET Bytes Up Bytes Apn Dn EBBE MI= MAKE MODEL 3621 03/24/20 12:29:03 8:08 0 0 nxtgenpho no APPLE 'PHONES 3622 03/24/20 12:37:11 2:05 192 0 nxtgenpho no APPLE 'PHONES 3623 03/24/20 12:37:12 2:05 0 0 nxtgenpho no APPLE 'PHONES 3624 03/24/20 12:39:17 4:35 0 0 nxtgenpho no APPLE 'PHONES 3625 03/24/20 12:43:51 8:56 192 0 nxtgonpho no APPLE 'PHONES 3626 03/24/20 12:43:52 8:56 0 0 nxtgonpho no APPLE 'PHONES 3627 03/24/20 12:52:48 1:51 0 0 nxtgonpho ne APPLE 'PHONES 3628 03/24/20 12:54:38 17:44 192 0 nxtgonpho ne APPLE 'PHONES 3629 03/24/20 12:54:39 17:44 0 0 nxtgonpho ne APPLE 'PHONES 3630 03/24/20 12:54:54 60:00 7388 2928 ins 3631 03/24/20 13:12:23 0:39 0 0 nxtgonpho ne APPLE 'PHONES 3632 03/24/20 13:13:01 2:04 192 0 nxtgonpho no APPLE 'PHONES 3633 03/24/20 13:13:02 2:04 0 0 nxtgenpho no APPLE 'PHONES 3634 03/24/20 13:15:06 1:20 0 0 nxtgonpho no APPLE 'PHONES 3635 03/24/20 13:16:25 4:53 192 0 nxtgonpho ne APPLE 'PHONES 3636 03/24/20 13:16:27 4:52 0 0 nxtgenpho ne APPLE 'PHONES 3637 03/24/20 13:21:19 24:18 0 0 nxtgonpho ne APPLE 'PHONES 3638 03/24/20 13:45:36 2:05 192 0 nxtgonpho ne APPLE 'PHONES 3639 03/24/20 13:45:38 2:04 0 0 nxtgenpho ne APPLE 'PHONES 3640 03/24/20 13:47:42 14:39 0 0 nxtgonpho ne APPLE 'PHONES 3641 03/24/20 13:54:54 11:31 3516 1340 ins AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 151 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171071 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343129

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ce. .1/4-fa AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. TIM* (OTC) Originating Number ET Bytes Up Bytes Apn Dn EBBS INSI MAKE MODEL 3642 03/24/20 14:02:20 2:42 192 0 nxtgenpho no APPLE !PHONES 3643 03/24/20 14:02:21 2:42 0 0 nxtgenpho no APPLE 'PHONES 3644 03/24/20 14:05:03 68:36 192 0 nxtgenpho no APPLE 'PHONES 3645 03/24/20 14:05:04 60:00 0 0 nxtgenpho ne APPLE 'PHONES 3646 03/24/20 14:06:04 8:43 7264 6720 ims APPLE 'PHONES 3647 03/24/20 14:06:05 8:43 6720 7000 Less APPLE 'PHONES 3648 03/24/20 14:06:25 11:13 12288 7988 Less 3649 03/24/20 14:14:47 35:50 7264 6748 Less APPLE 'PHONES 3650 03/24/20 14:14:48 35:50 6748 7000 Less APPLE 'PHONES 3651 03/24/20 14:17:38 33:40 21172 10440 Less 3652 03/24/20 14:50:37 23:02 7248 6746 Less APPLE 'PHONES 3653 03/24/20 14:50:38 23:02 6746 6984 Less APPLE 'PHONES 3654 03/24/20 14:51:18 60:00 17051 9621 Less 3655 03/24/20 15:05:04 8:36 0 Onmtgonpho ne APPLE !PHONES 3656 03/24/20 15:13:40 3:00 0 0 nxtgenpho ne APPLE 'PHONES 3657 03/24/20 15:16:39 2:21 192 0 nxtgenpho ne APPLE 'PHONES 3658 03/24/20 15:16:41 2:20 0 0 nxtgenpho ne APPLE 'PHONES 3659 03/24/20 15:19:01 22:37 0 0 nxtgenpho ne APPLE 'PHONES 3660 03/24/20 15:41:37 2:09 192 0 nxtgenpho ne APPLE 'PHONES 3661 03/24/20 15:41:38 2:09 0 0 nxtgenpho ne APPLE 'PHONES 3662 03/24/20 15:43:48 11:43 0 0 nxtgenpho ne APPLE 'PHONES 3663 03/24/20 15:51:18 29:34 4856 2572 Less 3664 03/24/20 15:55:29 2:04 192 0 nxtgenpho ne APPLE 'PHONES 3665 03/24/20 15:55:31 2:03 0 0 nxtgenpho ne APPLE 'PHONES 3666 03/24/20 15:57:34 23:48 0 0 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 152 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171072 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343130

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ‘•- . 20 AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 St= Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn flat INSI HAKE MODEL 3667 03/24/20 16:13:25 0:07 0 0 imp APPLE 'PHONES 3668 03/24/20 16:14:29 6:53 7398 6106 imp APPLE 'PHONES 3669 03/24/20 16:21:21 8:54 192 Onxtgonpho no APPLE 'PHONES 3670 03/24/20 16:21:23 8:53 0 Onxtgonpho no APPLE 'PHONES 3671 03/24/20 16:23:53 6:22 6244 6674 imp APPLE 'PHONES 3672 03/24/20 16:23:54 6:22 6674 5980 imp APPLE 'PHONES 3673 03/24/20 16:30:16 60:00 0 Onxtgonpho no APPLE 'PHONES 3674 03/24/20 16:30:26 0:59 8150 6962 imp APPLE 'PHONES 3675 03/24/20 16:31:25 6:14 3748 1464 imp APPLE 'PHONES 3676 03/24/20 16:37:39 15:42 7408 6122 imp APPLE 'PHONES 3677 03/24/20 16:53:21 60:00 12244 5252 imp APPLE 'PHONES 3678 03/24/20 17:30:16 41:13 0 Onxtgonpho ne APPLE 'PHONES 3679 03/24/20 17:53:21 60:00 8620 3192 imp APPLE 'PHONES 3680 03/24/20 18:11:28 1:48 192 Onxtgonpho ne APPLE 'PHONES 3681 03/24/20 18:11:29 1:48 0 Onxtgonpho ne APPLE 'PHONES 3682 03/24/20 18:13:17 14:27 192 Onxtgonpho ne APPLE 'PHONES 3683 03/24/20 18:13:18 14:27 0 Onxtgonpho ne APPLE 'PHONES 3684 03/24/20 18:27:45 1:04 0 Onxtgonpho ne APPLE 'PHONES 3685 03/24/20 18:28:48 15:14 192 Onxtgonpho no APPLE 'PHONES 3686 03/24/20 18:28:49 15:14 0 Onxtgonpho no APPLE 'PHONES 3687 03/24/20 18:44:03 0:41 0 Onxtgonpho no APPLE 'PHONES 3688 03/24/20 18:44:43 8:25 192 Onxtgonpho no APPLE 'PHONES 3689 03/24/20 18:44:45 8:24 0 Onxtgonpho ne APPLE 'PHONES 3690 03/24/20 18:53:09 13:16 0 Onxtgonpho ne APPLE 'PHONES 3691 03/24/20 18:53:21 21:37 5104 2068 imp APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 153 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171073 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343131

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. TIM* (OTC/ Originating Number BT Bytes Up Bytes Apn Dn DELT IMBI MaKE MODEL 3692 03/24/20 19:06:24 14:58 192 Onxtgonpho ne APPLE 'PEONES 3693 03/24/20 19:06:25 14:58 0 Onxtgonpho ne APPLE 'PEONES 3694 03/24/20 19:10:03 11:19 6228 6732 ims APPLE !PEONES 3695 03/24/20 19:10:04 11:19 6664 5964 ims APPLE !PHONES 3696 03/24/20 19:21:23 6:31 0 Onxtgonpho ne APPLE !PHONES 3697 03/24/20 19:27:53 2:03 192 0 nxtgonpho ne APPLE !PHONES 3698 03/24/20 19:27:54 2:03 0 0 nxtgonpho no APPLE !PHONES 3699 03/24/20 19:29:57 19:58 0 0 nxtgenpho no APPLE !PHONES 3700 03/24/20 19:40:37 9:18 9188 8084 ims APPLE !PHONES 3701 03/24/20 19:49:54 8:17 192 Onxtgonpho ne APPLE !PHONES 3702 03/24/20 19:49:55 8:17 0 0 nxtgonpho ne APPLE !PHONES 3703 03/24/20 19:53:52 4:19 6244 6670 ims APPLE !PHONES 3704 03/24/20 19:53:53 4:19 6670 5980 ims APPLE !PHONES 3705 03/24/20 19:57:07 60:00 20581 10944 ims 3706 03/24/20 19:58:12 2:08 0 0 nxtgenpho ne APPLE !PHONES 3707 03/24/20 20:00:20 0:59 0 0 nxtgonpho ne APPLE !PHONES 3708 03/24/20 20:01:19 20:59 192 0 nxtgonpho no APPLE !PHONES 3709 03/24/20 20:01:20 20:59 0 0 nxtgonpho no APPLE !PHONES 3710 03/24/20 20:22:19 9:12 0 0 nxtgonpho no APPLE !PHONES 3711 03/24/20 20:31:30 2:57 192 0 nxtgonpho no APPLE !PHONES 3712 03/24/20 20:31:31 2:57 0 0 nxtgonpho no APPLE !PHONES 3713 03/24/20 20:34:28 0:05 0 0 nxtgonpho no APPLE !PHONES 3714 03/24/20 20:36:13 35:36 192 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 154 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171074 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343132

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Originating BT Time Number (OTC) Bytes Up Bytes Apn MMAI IMSI MAR On MODEL 3715 03/24/20 20:36:14 35:36 0 Onmtgonpho ne APPLE 'PEONES 3716 03/24/20 20:57:07 50:26 0 0 ims 3717 03/24/20 21:03:22 60:00 14972 9410 ims 3718 03/24/20 21:11:50 60:00 0 Onmtgonpho ne APPLE 'PEONES 3719 03/24/20 21:47:33 1:31 6674 5979 ims APPLE 'PEONES 3720 03/24/20 21:49:04 16:16 3640 1432 ims APPLE 'PEONES 3721 03/24/20 22:03:22 1:58 0 0 ims 3722 03/24/20 22:05:20 18:30 6672 5998 ims APPLE IPEOME8 3723 03/24/20 22:11:50 33:01 0 Onxtgonpho ne APPLE 'PHONES 3724 03/24/20 22:23:50 60:00 15968 4888 ims APPLE 'PHONES 3725 03/24/20 22:44:50 2:16 192 0 nxtgonpho ne APPLE 'PHONES 3726 03/24/20 22:44:51 2:16 0 Onxtgonpho ne APPLE 'PHONES 3727 03/24/20 22:47:07 19:34 0 0 nxtgonpho ne APPLE !PHONES 3728 03/24/20 23:06:40 24:26 192 0 nxtgonpho ne APPLE 'PHONES 3729 03/24/20 23:06:41 24:26 0 0 nxtgonpho ne APPLE !PHONES 3730 03/24/20 23:23:50 60:00 31544 23152 ims APPLE 'PHONES 3731 03/24/20 23:31:07 14:04 0 0 nxtgonpho ne APPLE !PHONES 3732 03/24/20 23:44:21 0:12 15211 33872 ims APPLE 'PHONES 3733 03/24/20 23:44:43 0:34 14704 31615 ims APPLE 'PHONES 3734 03/24/20 23:45:10 2:17 192 Onmtgonpho ne APPLE 'PHONES 3735 03/24/20 23:45:12 2:16 0 0 nxtgonpho ne APPLE 'PHONES 3736 03/24/20 23:47:28 35:37 0 0 nxtgonpho ne APPLE !PHONES 3737 03/25/20 00:23:04 2:10 192 0 nxtgonpho ne APPLE !PHONES 3738 03/25/20 00:23:06 2:09 0 0 nxtgonpho ne APPLE !PHONES 3739 03/25/20 00:23:50 60:00 8496 3036 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 155 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171075 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343133

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. ‘•.. .a# AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn DOLT INSI MAKE MODEL 3740 03/25/20 00:25:15 50:25 0 Onxtgonpho ne APPLE !PHONES 3741 03/25/20 01:15:40 14:26 192 0 nxtgonpho ne APPLE !PHONES 3742 03/25/20 01:15:41 14:26 0 0 nxtgonpho ne APPLE !PHONES 3743 03/25/20 01:23:50 41:29 12904 3780 ims APPLE !PHONES 3744 03/25/20 01:30:07 25:21 0 Onxtgonpho no APPLE !PHONES 3745 03/25/20 01:55:27 2:04 192 0 nxtgonpho no APPLE !PHONES 3746 03/25/20 01:55:28 2:04 0 0 nxtgenpho no APPLE !PHONES 3747 03/25/20 01:57:32 1:59 0 0 nxtgonpho no APPLE !PHONES 3748 03/25/20 01:59:30 8:33 192 0 nxtgonpho no APPLE !PHONES 3749 03/25/20 01:59:32 8:32 0 0 nxtgonpho no APPLE !PHONES 3750 03/25/20 02:00:26 7:37 6243 6742 igloo APPLE !PHONES 3751 03/25/20 02:00:28 7:36 6674 5979 igloo APPLE !PHONES 3752 03/25/20 02:08:04 55:21 0 Onxtgonpho ne APPLE !PHONES 3753 03/25/20 02:09:11 5:58 8830 7985 ism APPLE !PHONES 3754 03/25/20 02:15:09 6:05 3640 1464 ism APPLE !PHONES 3755 03/25/20 02:21:15 42:10 12156 9242 ism APPLE !PHONES 3756 03/25/20 03:03:24 40:00 192 Onxtgonpho ne APPLE !PHONES 3757 03/25/20 03:03:25 60:00 0 0 nxtgenpho ne APPLE !PHONES 3758 03/25/20 03:04:07 16:25 9741 6354 ism 3759 03/25/20 03:17:41 20:00 7337 8822 ism APPLE !PHONES 3760 03/25/20 03:17:42 31:54 11418 8397 ism APPLE !PHONES 3761 03/25/20 03:37:41 11:54 1324 2596 ism APPLE !PHONES 3762 03/25/20 03:48:27 5:50 8437 6426 ism 3763 03/25/20 03:49:35 12:57 7374 6800 ism APPLE !PHONES 3764 03/25/20 03:49:36 12:57 6800 7110 igloo APPLE !PHONES 3765 03/25/20 03:54:17 10:12 9261 6696 igloo 3766 03/25/20 04:02:32 14:03 6370 6676 igloo APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 156 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171076 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343134

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. cat. AT&T Run Date: Run Time: Data usage for: Item conn. Data 06/17/2020 ISM= Conn. Time (OTC) Originating Number ET Bytes up Bytes Apn L@3 IMSI MAKE on MODEL 3767 03/25/20 04:02:33 14:03 6676 6106 ims APPLE 'PEONES 3768 03/25/20 04:03:25 60:00 0 0 nxtgenpho no APPLE 'PEONES 3769 03/25/20 04:07:15 14:19 8261 6177 ims 3770 03/25/20 04:16:34 75:27 9874 12042 ims APPLE IPEOME8 3771 03/25/20 04:16:35 60:00 11934 9610 ims APPLE 'PHONES 3772 03/25/20 05:03:25 28:37 0 0 nxtgenpho ne APPLE 'PHONES 3773 03/25/20 05:16:35 15:27 0 0 ims APPLE 'PHONES 3774 03/25/20 05:32:01 0:23 192 0 nxtgenpho no APPLE 'PHONES 3775 03/25/20 05:32:03 0:22 0 0 nxtgenpho no APPLE 'PHONES 3776 03/25/20 05:32:25 19:15 0 0 nxtgonpho ne APPLE 'PHONES 3777 03/25/20 05:32:29 17:46 6780 5938 ims APPLE 'PHONES 3778 03/25/20 05:50:15 60:00 11920 4500 ims APPLE 'PHONES 3779 03/25/20 05:51:39 2:42 192 Onstgonpho no APPLE 'PHONES 3780 03/25/20 05:51:40 2:42 0 0 nxtgenpho no APPLE 'PHONES 3781 03/25/20 05:54:22 0:34 0 0 nxtgenpho no APPLE 'PHONES 3782 03/25/20 05:54:56 2:04 192 0 nxtgonpho no APPLE 'PHONES 3783 03/25/20 05:54:57 2:04 0 0 nxtgonpho no APPLE 'PHONES 3784 03/25/20 05:57:00 4:19 0 0 nxtgonpho ne APPLE 'PHONES 3785 03/25/20 06:01:18 35:56 192 0 nxtgonpho ne APPLE 'PHONES 3786 03/25/20 06:01:19 35:56 0 0 nxtgonpho ne APPLE 'PHONES 3787 03/25/20 06:37:15 29:02 0 0 nxtgonpho ne APPLE !PHONES 3788 03/25/20 06:50:15 60:00 6956 2912 ims APPLE 'PHONES 3789 03/25/20 07:06:16 2:03 192 0 nxtgonpho ne APPLE 'PHONES 3790 03/25/20 07:06:17 2:03 0 0 nxtgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 157 customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00171077 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343135

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:58:58pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e s, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. T1100 (OTC) Originating Number AT Bytes Up Bytes Apn DMZ IMBI MAR Dn MODEL 3791 03/25/20 07:08:20 24:31 0 0 nactgonphe ne APPLE 'PEONES 3792 03/25/20 07:32:50 7:25 192 0 nactgonphe ne APPLE 'PEONES 3793 03/25/20 07:32:51 7:25 0 0 nactgonphe ne APPLE 'PEONES 3794 03/25/20 07:40:16 3:48 0 0 nactgonphe ne APPLE 'PEONES 3795 03/25/20 07:44:03 14:49 192 0 nactgonphe ne APPLE 'PHONES 3796 03/25/20 07:44:04 14:49 0 0 nactgonphe ne APPLE !PHONES 3797 03/25/20 07:50:15 60:00 8372 2928 isms APPLE !PHONES 3798 03/25/20 07:58:53 60:00 0 0 nactgonphe ne APPLE !PHONES 3799 03/25/20 08:50:15 60:00 8388 3036 isms APPLE !PHONES 3800 03/25/20 08:58:53 42:29 0 0 nottgonphe ne APPLE !PHONES 3801 03/25/20 09:41:21 180:48 192 0 nottgonphe ne APPLE !PHONES 3802 03/25/20 09:41:22 60:00 0 0 nactgonphe ne APPLE !PHONES 3803 03/25/20 09:50:15 60:00 13804 6060 isms APPLE !PHONES 3804 03/25/20 10:41:22 60:00 0 0 nottgonphe ne APPLE !PHONES 3805 03/25/20 10:50:15 60:00 7064 3036 isms APPLE !PHONES 3806 03/25/20 11:41:22 60:00 0 0 nottgonphe ne APPLE !PHONES 3807 03/25/20 11:50:15 60:00 8712 3160 isms APPLE !PHONES 3808 03/25/20 12:41:22 0:48 0 0 nottgonphe ne APPLE !PHONES 3809 03/25/20 12:42:10 3:38 0 0 nottgonphe ne APPLE !PHONES 3810 03/25/20 12:45:48 135:22 192 0 nottgonphe ne APPLE !PHONES 3811 03/25/20 12:45:49 60:00 0 0 nottgonphe ne APPLE !PHONES 3812 03/25/20 12:50:15 60:00 11920 4268 isms APPLE !PHONES 3813 03/25/20 13:45:49 60:00 0 0 nottgonphe ne APPLE !PHONES 3814 03/25/20 13:50:15 37:01 6148 1480 Lms APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 158 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171078 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343136

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 4.45, AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 MS= Conn. MAO (OTC) Originating Number ET Bytes Up Bytes Apn Dn LEST MAKE MODEL 3815 03/25/20 14:25:56 35:14 6334 6648 ims APPLE 'PEONES 3816 03/25/20 14:25:57 35:14 6648 6070 ims APPLE 'PEONES 3817 03/25/20 14:27:16 60:00 23909 10568 ims 3818 03/25/20 14:45:49 15:22 0 0 nxtgonpho no APPLE 'PEONES 3819 03/25/20 15:01:11 40:00 192 0 nxtgonpho no APPLE 'PEONES 3820 03/25/20 15:01:12 60:00 0 0 nxtgonpho no APPLE 'PEONES 3821 03/25/20 15:22:06 20:00 7373 6800 ims APPLE !PEONES 3822 03/25/20 15:22:07 60:00 6800 7109 ims APPLE !PEONES 3823 03/25/20 15:27:16 2:33 0 0 ims 3824 03/25/20 15:29:49 60:00 17160 9341 ims 3825 03/25/20 16:01:12 46:50 0 0 nxtgonpho no APPLE IPHONA8 3826 03/25/20 16:22:07 25:55 0 0 ims APPLE 'PHONES 3827 03/25/20 16:29:49 60:00 9804 3160 ims 3828 03/25/20 16:48:02 60:00 0 0 nxtgonpho no APPLE 'PHONES 3829 03/25/20 17:12:59 60:00 19697 10560 isms 3830 03/25/20 17:29:49 60:00 0 0 ims 3831 03/25/20 17:48:02 20:35 0 0 nxtgonpho no APPLE 'PHONES 3832 03/25/20 18:08:36 3:40 192 0 nxtgonpho no APPLE 'PHONES 3833 03/25/20 18:08:37 3:40 0 0 nxtgonpho no APPLE 'PHONES 3834 03/25/20 18:12:17 9:16 192 0 nxtgonpho no APPLE !PHONES 3835 03/25/20 18:12:18 9:16 0 0 nxtgonpho no APPLE !PHONES 3836 03/25/20 18:12:59 60:00 13168 6992 ims 3837 03/25/20 18:21:34 2:10 0 0 nxtgonpho no APPLE !PHONES 3838 03/25/20 18:23:43 9:06 192 0 nxtgonpho no APPLE !PHONES 3839 03/25/20 18:23:44 9:06 0 0 nxtgonpho no APPLE !PHONES 3840 03/25/20 18:29:49 60:00 0 0 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 159 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171079 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343137

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro ‘•-.a. ° AT&T Run Date: Run Time: Data Usage For: Item Conn. Data 06/17/2020 Conn. Time (OTC/ Originating ST Bytes Op Bytes Apn Dn DOM INSI MAKE MODEL 3841 03/25/20 18:32:50 60:00 0 0 nottgonphe ne APPLE !PHONES 3842 03/25/20 19:12:59 60:00 13368 4764 ims 3843 03/25/20 19:29:49 57:37 0 0 ims 3844 03/25/20 19:32:50 8:17 0 Onmtgonphe ne APPLE !PHONES 3845 03/25/20 19:41:06 2:06 192 Onactgonphe ne APPLE !PHONES 3846 03/25/20 19:41:07 2:06 0 Onmtgonphe ne APPLE !PHONES 3847 03/25/20 19:43:13 1:41 0 0 ructgonphe ne APPLE !PHONES 3848 03/25/20 19:44:53 3:52 192 0 ructganpho ne APPLE !PHONES 3849 03/25/20 19:44:54 3:52 0 0 nxtganpho ne APPLE !PHONES 3850 03/25/20 19:48:46 0:06 0 0 nxtganpho ne APPLE !PHONES 3851 03/25/20 19:49:14 0:06 0 0 nxtganpho ne APPLE !PHONES 3852 03/25/20 19:49:42 2:28 192 0 nxtganpho ne APPLE !PHONES 3853 03/25/20 19:49:43 2:28 0 0 nxtganpho ne APPLE !PHONES 3854 03/25/20 19:52:10 7:46 192 0 ructganpho ne APPLE !PHONES 3855 03/25/20 19:52:11 7:46 0 0 ructganpho ne APPLE !PHONES 3856 03/25/20 19:59:57 9:08 192 0 ructganpho ne APPLE !PHONES 3857 03/25/20 19:59:58 9:08 0 0 ructganpho ne APPLE !PHONES 3858 03/25/20 20:09:06 3:38 192 0 ructganpho ne APPLE !PHONES 3859 03/25/20 20:09:07 3:38 0 0 ructganpho no APPLE !PHONES 3860 03/25/20 20:12:45 22:16 0 0 nxtganpho no APPLE !PHONES 3861 03/25/20 20:12:59 19:28 216 108 ims 3862 03/25/20 20:27:23 60:00 11861 7496 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 160 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171080 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343138

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC/ Originating Number ET Bytes Up Byte. Apn Dn DMZ INS! NAVE MODEL 3863 03/25/20 20:35:00 15:10 192 0 nstgenpho ne APPLE IPACEEB 3864 03/25/20 20:35:01 15:10 0 0 nottgonpho ne APPLE IPACEEB 3865 03/25/20 20:50:11 1:03 0 0 nottgonphe ne APPLE IPACEEB 3866 03/25/20 20:51:13 8:28 192 0 nottgonpho ne APPLE IPACEEB 3867 03/25/20 20:51:14 8:28 0 0 nottgonpho ne APPLE !PHONES 3868 03/25/20 20:59:42 15:47 0 0 nottgonpho ne APPLE !PHONES 3869 03/25/20 21:14:38 0:00 0 0 ism APPLE !PHONES 3870 03/25/20 21:15:28 8:31 192 0 nottgonpho ne APPLE !PHONES 3871 03/25/20 21:15:29 8:31 0 0 nottgonpho ne APPLE !PHONES 3872 03/25/20 21:15:37 21:10 9247 6126 ism 3873 03/25/20 21:24:00 60:00 0 o nactgenpho ne APPLE !PHONES 3874 03/25/20 21:27:23 58:11 0 0 ism 3875 03/25/20 21:40:16 60:00 15518 8368 ism 3876 03/25/20 22:24:00 51:30 0 0 nactgonpho ne APPLE !PHONES 3877 03/25/20 22:25:34 1:12 6676 5998 ism APPLE !PHONES 3878 03/25/20 22:26:46 60:00 11168 4236 ism APPLE !PHONES 3879 03/25/20 22:40:16 60:00 0 0 ism 3880 03/25/20 23:15:29 2:03 192 0 nmtgonpho no APPLE !PHONES 3881 03/25/20 23:15:30 2:03 0 0 nmtgonpho no APPLE !PHONES 3882 03/25/20 23:17:34 60:00 0 0 nmtgonpho no APPLE !PHONES 3883 03/25/20 23:26:46 60:00 7188 2896 ism APPLE !PHONES 3884 03/25/20 23:40:16 60:00 0 0 ism 3885 03/26/20 00:17:34 51:03 0 0 nmtgonpho no APPLE !PHONES 3886 03/26/20 00:26:46 60:00 8836 3052 ism APPLE !PHONES 3887 03/26/20 00:40:16 60:00 0 0 ism AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 161 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171081 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343139

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. k.;:sa ls# AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn EBB! INSI MAKE MODEL 3888 03/26/20 01:08:37 5:55 192 Onactgonpho no APPLE !PHONES 3889 03/26/20 01:08:38 5:55 0 0 nactgonpho no APPLE !PHONES 3890 03/26/20 01:14:33 60:00 0 0 nactgonpho no APPLE !PHONES 3891 03/26/20 01:26:46 60:00 15000 4656 ism APPLE !PHONES 3892 03/26/20 01:40:16 45:16 0 0 ism 3893 03/26/20 02:14:33 52:17 0 Onactgonpho no APPLE !PHONES 3894 03/26/20 02:26:46 60:00 0 0 ism APPLE !PHONES 3895 03/26/20 02:29:23 60:00 15093 8712 ism 3896 03/26/20 03:26:46 60:00 0 0 ism APPLE !PHONES 3897 03/26/20 03:29:23 60:00 7048 2696 ism 3898 03/26/20 04:26:46 60:00 0 0 ism APPLE !PHONES 3899 03/26/20 04:29:23 60:00 6924 2556 ism 3900 03/26/20 05:26:46 58:57 0 0 isms APPLE !PHONES 3901 03/26/20 05:29:23 60:00 9960 3284 isms 3902 03/26/20 06:29:23 60:00 15636 6124 isms 3903 03/26/20 07:29:23 60:00 6924 2680 ism 3904 03/26/20 08:29:23 60:00 8620 3052 ism 3905 03/26/20 09:29:23 60:00 6924 2680 ism 3906 03/26/20 10:29:23 60:00 11904 4268 ism 3907 03/26/20 11:29:23 60:00 8496 3160 ism 3908 03/26/20 12:29:23 60:00 11796 4536 ism 3909 03/26/20 13:29:23 60:00 13476 4732 ism 3910 03/26/20 14:29:23 60:00 8496 3020 ism 3911 03/26/20 15:29:23 60:00 8172 3036 ism 3912 03/26/20 16:29:23 5:29 5088 2496 ism 3913 03/26/20 16:38:56 60:00 20749 9747 ism 3914 03/26/20 17:38:56 60:00 10068 3160 ism 3915 03/26/20 18:38:56 60:00 6924 2680 ism 3916 03/26/20 19:38:56 60:00 10240 4144 ism 3917 03/26/20 20:38:56 60:00 7032 2788 ism 3918 03/26/20 21:38:56 60:00 10548 4396 ism 3919 03/26/20 22:38:56 60:00 8636 3036 ism 3920 03/26/20 23:38:56 60:00 18284 9756 ism AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 162 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171082 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343140

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e s, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Tame (OTC) Originating Number ET Bytes Up Bytes Dn Apn EMMI INS! NAPS -fly. 3921 03/26/20 23:55:40 0:17 0 2381 Las -1 3922 03/27/20 00:38:56 60:00 13584 4840 Las -1 3923 03/27/20 01:38:56 60:00 20328 11224 Las -1 3924 03/27/20 02:21:27 0:06 0 2069 Las -1 3925 03/27/20 02:38:56 60:00 13476 5124 Las -1 3926 03/27/20 03:38:56 60:00 7248 2804 Las -1 3927 03/27/20 04:38:56 60:00 11796 5160 Las -1 3928 03/27/20 05:38:56 60:00 10176 4068 Las -1 3929 03/27/20 06:38:56 60:00 9960 3176 Las -1 3930 03/27/20 07:38:56 60:00 10440 4504 Las -1 3931 03/27/20 08:38:56 60:00 10068 3392 Las -1 3932 03/27/20 09:38:56 60:00 12012 4500 Las -1 3933 03/27/20 10:38:56 60:00 8388 2928 Las -1 3934 03/27/20 11:38:56 60:00 8728 3052 Las -1 3935 03/27/20 12:38:56 26:35 15293 7737 Las -1 3936 03/27/20 13:10:29 60:00 33905 20494 Las -1 3937 03/27/20 14:05:29 0:13 2956 16052 Las -1 3938 03/27/20 14:10:29 60:00 6816 2772 Las -1 3939 03/27/20 15:10:29 60:00 8604 3176 Las -1 3940 03/27/20 16:10:29 60:00 10880 3316 Las -1 3941 03/27/20 17:08:19 23:27 8133 6105 Las -1 3942 03/27/20 17:10:29 0:15 0 0 Las -1 3943 03/27/20 17:27:52 47:51 14832 7978 Las -1 3944 03/27/20 18:11:52 9:52 8647 6516 Las -1 3945 03/27/20 18:17:27 60:00 15331 8752 Las -1 3946 03/27/20 19:17:27 13:38 0 0 Las -1 3947 03/27/20 19:27:33 24:13 8189 6016 Las -1 3948 03/27/20 19:49:11 60:00 10073 6602 Las -1 3949 03/27/20 20:02:53 60:00 62408 29060 Las -1 3950 03/27/20 20:17:34 0:04 0 7574 Las -1 3951 03/27/20 20:49:11 60:00 0 0 Las -1 3952 03/27/20 20:52:35 0:07 0 8835 Las -1 3953 03/27/20 21:02:53 60:00 8836 3252 Las -1 3954 03/27/20 21:49:11 60:00 0 0 Las -1 3955 03/27/20 22:02:53 60:00 6816 2788 Las -1 3956 03/27/20 22:49:11 60:00 0 0 Las -1 AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 163 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171083 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343141