MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 1/44% AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 MI= Conn. Time (UTC) Originating Number ET Bytos Up Bytes Dn Apn EMBI MAXIS MOBIL 3957 03/27/20 23:02:53 60:00 10408 3376 ims -1 3958 03/27/20 23:49:11 16:25 0 0 ims -1 3959 03/28/20 00:02:53 60:00 21632 6868 ims -1 3960 03/28/20 01:02:53 60:00 10068 3176 ims -1 3961 03/28/20 02:02:53 60:00 6924 2804 ims -1 3962 03/28/20 03:02:53 60:00 6816 2680 ims -1 3963 03/28/20 04:02:53 60:00 11904 4160 ims -1 3964 03/28/20 05:02:53 60:00 10332 4288 ims -1 3965 03/28/20 06:02:53 60:00 9960 3176 ims -1 3966 03/28/20 07:02:53 60:00 6924 2804 ims -1 3967 03/28/20 08:02:53 60:00 10068 3176 ims -1 3968 03/28/20 09:02:53 60:00 6908 2680 ims -1 3969 03/28/20 10:02:53 60:00 13632 5844 ims -1 3970 03/28/20 11:02:53 60:00 8620 3052 ims -1 3971 03/28/20 12:02:53 60:00 8496 3036 ims -1 3972 03/28/20 13:02:53 60:00 8604 3144 ims -1 3973 03/28/20 14:02:53 60:00 13028 4408 ims -1 3974 03/28/20 15:02:53 60:00 10176 3392 ims -1 3975 03/28/20 16:02:53 60:00 13584 4924 ims -1 3976 03/28/20 17:02:53 60:00 9960 3284 ims -1 3977 03/28/20 18:02:53 60:00 14940 4872 ims -1 3978 03/28/20 19:02:53 60:00 6924 2680 ims -1 3979 03/28/20 20:02:53 60:00 8388 2928 ims -1 3980 03/28/20 21:02:53 60:00 10332 4412 ims -1 3981 03/28/20 22:02:53 60:00 13988 4872 ims -1 3982 03/28/20 23:02:53 60:00 10284 3532 ims -1 3983 03/29/20 00:02:53 60:00 6924 2572 ims -1 3984 03/29/20 01:02:53 60:00 13290 7713 ims -1 3985 03/29/20 02:02:53 60:00 11904 4592 ims -1 3986 03/29/20 03:02:53 60:00 8604 2928 ims -1 3987 03/29/20 04:02:53 60:00 6924 2680 ims -1 3988 03/29/20 05:02:53 60:00 8496 2928 ims -1 3989 03/29/20 06:02:53 60:00 6816 2680 ims -1 3990 03/29/20 07:02:53 60:00 19920 6620 ims -1 3991 03/29/20 08:02:53 60:00 8388 2820 ims -1 3992 03/29/20 09:02:53 60:00 6924 2896 ims -1 AT&T Proprietary The AT&T network constantly communicates with internet enabled de when they are powered on. These communications will show as data usag- customer records but do not necessarily indicate a customer initiated a transaction. Page 164 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171084 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343142

MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 ISM= Conn. Originating ET Time Number (UTC) Bytes Up Bytes Dn E1721 T1@I UWE 10JUL 3993 03/29/20 10:02:53 60:00 8496 3144 ims -1 3994 03/29/20 11:02:53 60:00 16992 6356 ims -1 3995 03/29/20 12:02:53 60:00 6816 2680 ims -1 3996 03/29/20 13:02:53 60:00 8496 2928 ims -1 3997 03/29/20 14:02:53 60:00 6924 2788 ims -1 3998 03/29/20 15:02:53 60:00 11580 4268 ims -1 3999 03/29/20 16:02:53 60:00 13924 4892 ims -1 4000 03/29/20 17:02:53 60:00 6816 2788 ims -1 4001 03/29/20 18:02:53 60:00 8496 3036 ims -1 4002 03/29/20 19:02:53 51:30 13260 3672 ims -1 4003 03/29/20 19:49:05 60:00 21488 9904 ims -1 4004 03/29/20 20:49:05 60:00 10300 3176 ims -1 4005 03/29/20 21:49:05 60:00 10176 3376 ims -1 4006 03/29/20 22:49:05 60:00 0 0 ims -1 4007 03/29/20 22:51:54 60:00 25444 10932 ims -1 4008 03/29/20 23:49:05 60:00 0 0 ims -1 4009 03/29/20 23:51:54 60:00 8604 3036 ims -1 4010 03/30/20 00:49:05 60:00 0 0 ims -1 4011 03/30/20 00:51:54 60:00 8620 3788 ims -1 4012 03/30/20 01:49:05 44:23 0 0 ims -1 4013 03/30/20 01:51:54 60:00 9960 3376 ims -1 4014 03/30/20 02:51:54 60:00 13368 4532 ims -1 4015 03/30/20 03:51:54 60:00 12352 5772 ims -1 4016 03/30/20 04:51:54 60:00 8836 3160 ims -1 4017 03/30/20 05:51:54 60:00 10408 3316 ims -1 4018 03/30/20 06:51:54 60:00 7032 3144 ims -1 4019 03/30/20 07:51:54 60:00 13368 5284 ims -1 4020 03/30/20 08:51:54 60:00 10332 4412 ims -1 4021 03/30/20 09:51:54 60:00 10068 3176 ims -1 4022 03/30/20 10:51:54 60:00 8388 2928 ims -1 4023 03/30/20 11:51:54 60:00 8604 2928 ims -1 4024 03/30/20 12:51:54 60:00 10564 5020 ims -1 4025 03/30/20 13:51:54 60:00 8388 2820 ims -1 4026 03/30/20 14:51:54 60:00 11904 4428 ims -1 4027 03/30/20 15:51:54 30:01 3408 1340 ims -1 4028 03/30/20 16:22:01 25:48 14212 7007 ims -1 IIODBL AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 165 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171085 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343143

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. 45, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Dn Apn flat INS! NAPS MOMS. 4029 03/30/20 16:46:13 34:04 16845 25082 ims -1 4030 03/30/20 17:12:33 12:33 12041 8604 ims -1 4031 03/30/20 17:20:17 21:57 12080 6640 ims -1 4032 03/30/20 17:25:06 33:45 12986 11660 ims -1 4033 03/30/20 17:42:14 35:24 8473 9288 ims -1 4034 03/30/20 17:58:51 19:50 29297 21296 ims -1 4035 03/30/20 18:17:38 60:00 21830 13216 ims -1 4036 03/30/20 19:17:38 60:00 8712 3896 ims -1 4037 03/30/20 20:17:38 60:00 8388 2896 ims -1 4038 03/30/20 21:17:38 60:00 10160 3252 ims -1 4039 03/30/20 22:17:38 60:00 15264 5056 ims -1 4040 03/30/20 23:17:38 60:00 26472 11676 ims -1 4041 03/30/20 23:55:25 0:19 0 2746 ims -1 4042 03/31/20 00:17:38 60:00 8728 3128 ims -1 4043 03/31/20 01:17:38 60:00 3408 1432 ims -1 4044 03/31/20 01:25:37 60:00 23874 10212 ims -1 4045 03/31/20 02:17:38 60:00 0 0 ims -1 4046 03/31/20 02:25:37 60:00 9944 3144 ims -1 4047 03/31/20 03:17:38 60:00 0 0 ims -1 4048 03/31/20 03:25:37 60:00 10176 3144 ims -1 4049 03/31/20 04:17:38 60:00 0 0 ims -1 4050 03/31/20 04:25:37 60:00 11580 4220 ims -1 4051 03/31/20 05:17:38 7:49 0 0 ims -1 4052 03/31/20 05:25:37 60:00 10548 4380 ims -1 4053 03/31/20 06:25:37 60:00 8496 3004 ims -1 4054 03/31/20 07:25:37 60:00 6816 2648 ims -1 4055 03/31/20 08:25:37 60:00 13476 4468 ims -1 4056 03/31/20 09:25:37 60:00 8604 3004 ims -1 4057 03/31/20 10:25:37 60:00 10408 3392 ims -1 4058 03/31/20 11:25:37 60:00 12028 5272 ims -1 4059 03/31/20 12:25:37 60:00 13476 4468 ims -1 4060 03/31/20 13:25:37 60:00 10068 3376 ims -1 4061 03/31/20 14:25:37 20:28 3764 1448 ims -1 4062 03/31/20 15:53:12 60:00 18557 9445 ims -1 4063 03/31/20 16:53:12 12:04 0 0 ims -1 4064 03/31/20 17:01:34 60:00 36523 22430 ims -1 AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 166 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171086 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343144

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. cro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Dn Apn =sr IIISI INOZIL MOWS. 4065 03/31/20 17:28:05 0:01 0 1163 ims -1 4066 03/31/20 17:28:11 4:47 516565 1094626 ims -1 4067 03/31/20 18:01:34 60:00 5088 1572 ims -1 4068 03/31/20 18:34:47 60:00 21708 10015 ims -1 4069 03/31/20 19:01:34 60:00 0 0 ims -1 4070 03/31/20 19:34:47 60:00 9944 3284 ims -1 4071 03/31/20 20:01:34 60:00 0 0 ims -1 4072 03/31/20 20:34:47 60:00 10176 3392 ims -1 4073 03/31/20 21:01:34 60:00 0 0 ims -1 4074 03/31/20 21:34:47 60:00 8620 3788 ims -1 4075 03/31/20 22:01:34 17:03 0 0 ims -1 4076 03/31/20 22:34:47 60:00 18580 6228 ims -1 4077 03/31/20 23:34:47 60:00 8496 3144 ims -1 4078 04/01/20 00:34:47 60:00 8604 3160 ims -1 4079 04/01/20 01:34:47 60:00 12012 4608 ims -1 4080 04/01/20 02:34:47 60:00 6924 2788 ims -1 4081 04/01/20 03:34:47 60:00 8712 3284 ims -1 4082 04/01/20 04:34:47 60:00 11904 4500 ims -1 4083 04/01/20 05:34:47 60:00 10116 4144 ims -1 4084 04/01/20 06:34:47 60:00 8820 3144 ims -1 4085 04/01/20 07:34:47 60:00 8388 3036 ims -1 4086 04/01/20 08:34:47 60:00 8388 2820 ims -1 4087 04/01/20 09:34:47 60:00 11904 4716 ims -1 4088 04/01/20 10:34:47 60:00 7048 3680 ims -1 4089 04/01/20 11:34:47 60:00 10332 4128 ims -1 4090 04/01/20 12:34:47 60:00 8728 3160 ims -1 4091 04/01/20 13:34:47 60:00 10564 4484 ims -1 4092 04/01/20 14:34:47 60:00 7156 2804 ims -1 4093 04/01/20 15:34:47 60:00 10084 4176 ims -1 4094 04/01/20 16:09:53 60:00 44265 25658 ims -1 4095 04/01/20 16:34:47 60:00 0 0 ims -1 4096 04/01/20 16:49:32 0:19 3439 14876 ims -1 4097 04/01/20 16:49:59 44:46 9122409 5951191 ims -1 4098 04/01/20 17:09:53 60:00 11148 4800 ims -1 4099 04/01/20 17:34:47 60:00 0 0 isms -1 4100 04/01/20 18:09:53 60:00 8728 3160 ims -1 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 167 customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171087 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343145

MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. 1/4-4 .evi AT&T Run Data: Run Tina: Data Usage For: Item Conn. Date 06/17/2020 NM= Conn. Originating ET Time Number (OTC) Bytes Up Bytes Dn Apn INS! !OJOS MOWS. 4101 04/01/20 18:34:47 60:00 0 0 ims -1 4102 04/01/20 19:09:53 60:00 8728 3160 ims -1 4103 04/01/20 19:34:47 34:13 0 0 ims -1 4104 04/01/20 20:09:53 60:00 10348 5020 ims -1 4105 04/01/20 21:09:53 60:00 24612 13268 ims -1 4106 04/01/20 21:53:57 0:28 2176 14903 ims -1 4107 04/01/20 22:09:53 60:00 22420 10184 ims -1 4108 04/01/20 22:49:39 57:35 11972374 8027714 ims -1 4109 04/01/20 23:09:53 60:00 16216 9776 ims -1 4110 04/01/20 23:47:14 4:10 686613 925183 ims -1 4111 04/02/20 00:09:53 60:00 6816 2788 ims -1 4112 04/02/20 01:09:53 60:00 7156 2912 ims -1 4113 04/02/20 02:09:53 60:00 13864 7304 ims -1 4114 04/02/20 03:09:53 60:00 8264 2804 ims -1 4115 04/02/20 04:09:53 60:00 7048 2804 ims -1 4116 04/02/20 05:09:53 60:00 13584 4640 ims -1 4117 04/02/20 06:09:53 60:00 6924 2680 ims -1 4118 04/02/20 07:09:53 60:00 10456 4304 ims -1 4119 04/02/20 08:09:53 60:00 10332 4020 ims -1 4120 04/02/20 09:09:53 60:00 6816 2680 ims -1 4121 04/02/20 10:09:53 60:00 6816 2572 ims -1 4122 04/02/20 11:09:53 60:00 7032 2804 ims -1 4123 04/02/20 12:09:53 60:00 13848 5736 ims -1 4124 04/02/20 13:09:53 60:00 7032 2928 ims -1 4125 04/02/20 14:09:53 60:00 10300 3300 ims -1 4126 04/02/20 15:09:53 60:00 8496 3036 ims -1 4127 04/02/20 16:09:53 60:00 8480 2928 ims -1 4128 04/02/20 17:09:53 14:58 4980 1588 ims -1 4129 04/02/20 17:27:13 60:00 17057 9338 ims -1 4130 04/02/20 18:27:13 60:00 8512 3712 ims -1 4131 04/02/20 19:27:13 60:00 8496 3160 ims -1 4132 04/02/20 20:27:13 60:00 8712 3144 ims -1 4133 04/02/20 21:27:13 60:00 8604 3176 ims -1 4134 04/02/20 22:27:13 54:40 12012 4536 ims -1 4135 04/02/20 23:22:57 60:00 18568 9660 ims -1 4136 04/03/20 00:22:57 60:00 8944 3176 ims -1 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 168 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171088 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343146

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ce• AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn DM IMSI ISMS MODEL 4137 04/03/20 01:22:57 60:00 6924 2696 ims 4138 04/03/20 02:22:57 60:00 8388 2928 ims 4139 04/03/20 03:22:57 60:00 15760 5908 ims 4140 04/03/20 04:22:57 60:00 8836 3052 ims 4141 04/03/20 05:22:57 37:29 10392 6580 ims 4142 04/03/20 12:23:15 60:00 16857 9144 ims 4143 04/03/20 12:23:54 0:50 192 0 nxtgenpho ne APPLR IPROS8 4144 04/03/20 12:23:55 0:50 0 0 nxtgenpho ne APPLR IPROS8 4145 04/03/20 12:24:36 0:10 1305 5631 nxtgenpho ne 4146 04/03/20 12:24:44 2:11 192 Onmtgonpho ne APPLE !PHONES 4147 04/03/20 12:24:45 2:11 0 Onmtgonpho ne APPLE !PHONES 4148 04/03/20 12:25:44 11:35 3225 5417 nxtgenpho ne 4149 04/03/20 12:26:56 17:20 0 Onxtgonpho ne APPLE !PHONES 4150 04/03/20 12:44:15 2:00 192 Onxtgonpho ne APPLE !PHONES 4151 04/03/20 12:44:16 2:00 0 0 nxtgenpho ne APPLE !PHONES 4152 04/03/20 12:46:15 2:26 192 Onmtgonpho ne APPLE !PHONES 4153 04/03/20 12:46:16 2:26 0 Onmtgonpho no APPLE !PHONES 4154 04/03/20 12:48:42 5:46 192 0 nxtgonpho no APPLE !PHONES 4155 04/03/20 12:48:43 5:46 0 0 nxtgenpho ne APPLE !PHONES 4156 04/03/20 12:54:29 14:38 192 0 nxtgenpho ne APPLE !PHONES 4157 04/03/20 12:54:29 14:39 0 0 nxtgenpho ne APPLE !PHONES 4158 04/03/20 13:09:08 27:17 192 0 nxtgenpho ne APPLE !PHONES 4159 04/03/20 13:09:09 27:17 0 0 nxtgenpho ne APPLE !PHONES 4160 04/03/20 13:23:15 60:00 10068 3268 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 169 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00171089 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343147

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. ceo• ‘•-.0# AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (uzz) Bytes Up Bytes Apn ENE! INSI MAKE Dn MODEL 4161 04/03/20 13:36:26 0:41 0 0nxtgonpho ne APPLE !PHONES 4162 04/03/20 13:37:07 0:44 0 0 nxtgenpho ne APPLE !PHONES 4163 04/03/20 13:37:50 14:43 192 0 nxtgenpho ne APPLE !PHONES 4164 04/03/20 13:37:51 14:43 0 0 nxtgenpho ne APPLE !PHONES 4165 04/03/20 13:52:34 0:55 0 0 nxtgenpho ne APPLE !PHONES 4166 04/03/20 13:53:28 2:10 192 0 nxtgenpho ne APPLE !PHONES 4167 04/03/20 13:53:29 2:10 0 0 nxtgenpho ne APPLE !PHONES 4168 04/03/20 13:55:39 30:41 0 0 nxtgenpho ne APPLE !PHONES 4169 04/03/20 14:23:15 12:20 11140 6868 ism 4170 04/03/20 14:24:18 0:12 0 4598 ism 4171 04/03/20 14:26:19 63:58 192 0nxtgonpho ne APPLE !PHONES 4172 04/03/20 14:26:20 60:00 0 0 nxtgenpho ne APPLE !PHONES 4173 04/03/20 14:37:17 3:50 0 0 ism 4174 04/03/20 14:37:41 52:36 6352 6754 ism APPLE !PHONES 4175 04/03/20 14:37:42 52:36 6686 6088 ism APPLE !PHONES 4176 04/03/20 14:41:07 60:00 21261 12240 ism 4177 04/03/20 15:26:20 3:58 0 0 nxtgenpho ne APPLE !PHONES 4178 04/03/20 15:30:18 10:00 192 0 nxtgenpho ne APPLE !PHONES 4179 04/03/20 15:30:19 56:58 0 0 nxtgenpho ne APPLE !PHONES 4180 04/03/20 15:41:07 60:00 10036 3160 ism 4181 04/03/20 16:27:17 31:12 192 0 nxtgenpho ne APPLE !PHONES 4182 04/03/20 16:27:18 31:12 0 0 nxtgenpho ne APPLE !PHONES 4183 04/03/20 16:41:07 2:30 0 0 ism 4184 04/03/20 16:43:15 15:14 6337 6734 ism APPLE !PHONES 4185 04/03/20 16:43:16 15:14 6666 6073 ism APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 170 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171090 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343148

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC/ Bytes Up Bytes Apn L@I INSI MAKE Dn MODEL 4186 04/03/20 16:43:37 60:00 18576 9466 ims 4187 04/03/20 16:58:30 16:57 0 Onxtgonpho ne APPLE 'PHONES 4188 04/03/20 17:15:26 20:55 192 0 nxtgenpho ne APPLE 'PHONES 4189 04/03/20 17:15:27 20:55 0 0 nxtgenpho ne APPLE 'PHONES 4190 04/03/20 17:36:22 2:07 0 0 nxtgenpho ne APPLE 'PHONES 4191 04/03/20 17:38:28 43:32 192 0 nxtgenpho ne APPLE 'PHONES 4192 04/03/20 17:38:29 43:33 0 0 nxtgenpho ne APPLE 'PHONES 4193 04/03/20 17:43:37 60:00 8604 3036 ims 4194 04/03/20 18:22:02 1:30 0 0 nxtgenpho ne APPLE 'PHONES 4195 04/03/20 18:23:31 33:11 192 Onxtgonpho ne APPLE 'PHONES 4196 04/03/20 18:23:32 33:11 0 0 nxtgenpho ne APPLE 'PHONES 4197 04/03/20 18:43:37 60:00 10036 3408 ims 4198 04/03/20 18:56:43 8:45 0 0 nxtgenpho ne APPLE 'PHONES 4199 04/03/20 19:05:28 15:03 192 0 nxtgenpho ne APPLE 'PHONES 4200 04/03/20 19:05:29 15:03 0 0 nxtgenpho ne APPLE 'PHONES 4201 04/03/20 19:20:32 1:07 0 0 nxtgenpho ne APPLE 'PHONES 4202 04/03/20 19:21:39 27:43 192 0 nxtgenpho ne APPLE 'PHONES 4203 04/03/20 19:21:40 27:43 0 0 nxtgenpho ne APPLE 'PHONES 4204 04/03/20 19:43:37 60:00 41164 21628 ims 4205 04/03/20 19:49:23 19:28 192 0 nxtgenpho ne APPLE 'PHONES 4206 04/03/20 19:49:24 19:28 0 0 nxtgenpho ne APPLE 'PHONES 4207 04/03/20 20:07:29 0:30 53214 52202 ims 4208 04/03/20 20:08:10 1:00 159700 98815 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 171 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171091 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343149

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:30:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Op Bytes Apn Dn flat INS! late 4209 04/03/20 20:08:52 1:54 0 0 nxtgonpho ne APPLE 4210 04/03/20 20:10:45 8:21 192 0 nxtgonpho no APPLE 4211 04/03/20 20:10:46 8:21 0 0 nxtgonpho no APPLE 4212 04/03/20 20:19:07 21:45 0 0 nxtgonpho no APPLE 4213 04/03/20 20:40:51 2:26 192 0 nxtgonpho no APPLE 4214 04/03/20 20:40:53 2:25 0 0 nxtgonpho no APPLE 4215 04/03/20 20:43:18 0:05 0 0 nxtgonpho ne APPLE 4216 04/03/20 20:43:37 60:00 10380 4128 ims 4217 04/03/20 20:44:43 4:25 0 0 nxtgonpho ne APPLE 4218 04/03/20 20:49:08 35:47 192 0 nxtgonpho ne APPLE 4219 04/03/20 20:49:09 35:47 0 0 nxtgonpho ne APPLE 4220 04/03/20 21:24:55 8:10 192 0 nxtgonpho ne APPLE 4221 04/03/20 21:24:56 8:10 0 0 nxtgonpho ne APPLE 4222 04/03/20 21:33:06 7:16 0 0 nxtgonpho ne APPLE 4223 04/03/20 21:40:22 21:44 192 0 nxtgonpho ne APPLE 4224 04/03/20 21:40:22 21:46 0 0 nxtgonpho ne APPLE 4225 04/03/20 21:43:37 60:00 13568 4784 ims 4226 04/03/20 22:02:07 0:34 0 0 nxtgonpho no APPLE 4227 04/03/20 22:02:40 1:45 192 0 nxtgonpho no APPLE 4228 04/03/20 22:02:42 1:44 0 0 nxtgonpho no APPLE 4229 04/03/20 22:04:26 60:00 0 0 nxtgonpho ne APPLE 4230 04/03/20 22:43:37 60:00 8388 3036 ims AT&T Proprietary MODZI. !PEONES !PEONES !PEONES !PEONES !PEONES !PEONES !PEONES IMMO 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 172 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171092 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343150

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro AT&T Run Date: Run Tina: Data Usage For: Item Conn. Data 06/17/2020 Conn. Time (OTC) Originating Number AI Bytes Up Bytes Apn Dn EMBI IMSI MOWS MODEL 4231 04/03/20 23:04:26 60:00 0 0 nxtgenpho no APPLE IPROME8 4232 04/03/20 23:43:37 60:00 9928 3176 ims 4233 04/04/20 00:04:26 28:17 0 0 nxtgenpho ne APPLE IPE06E8 4234 04/04/20 00:32:43 60:00 0 0 nxtgenpho ne APPLE 'PEONES 4235 04/04/20 00:43:37 60:00 13352 4624 ism 4236 04/04/20 01:32:43 60:00 0 0 nxtgenpho ne APPLE 'PHONES 4237 04/04/20 01:43:37 60:00 10252 3300 Las 4238 04/04/20 02:32:43 60:00 0 0 nxtgenpho ne APPLE 'PHONES 4239 04/04/20 02:43:37 60:00 15988 5032 Las 4240 04/04/20 03:32:43 60:00 0 0 nxtgenpho ne APPLE 'PHONES 4241 04/04/20 03:43:37 60:00 8388 2928 ism 4242 04/04/20 04:32:43 0:01 0 0 nxtgenpho ne APPLE 'PHONES 4243 04/04/20 04:32:46 60:00 0 0 nxtgenpho ne APPLE 'PHONES 4244 04/04/20 04:43:37 60:00 11580 3548 ism 4245 04/04/20 05:32:46 60:00 0 0 nxtgenpho ne APPLE 'PHONES 4246 04/04/20 05:43:37 60:00 11812 4484 ism 4247 04/04/20 06:32:46 60:00 0 0 nxtgenpho no APPLE !PHONES 4248 04/04/20 06:43:37 60:00 6956 2680 ism 4249 04/04/20 07:32:46 60:00 0 0 nxtgenpho no APPLE IPHONE8 4250 04/04/20 07:43:37 60:00 13444 4676 isms 4251 04/04/20 08:32:46 0:01 0 0 nxtgenpho ne APPLE 'PHONES 4252 04/04/20 08:32:50 60:00 0 0 nxtgenpho ne APPLE 'PHONES 4253 04/04/20 08:43:37 60:00 13244 4640 ism 4254 04/04/20 09:32:50 60:00 0 0 nxtgenpho ne APPLE !PHONES 4255 04/04/20 09:43:37 60:00 10252 3284 ism AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 173 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00171093 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343151

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro AT&T Run Date: Run Time: Data Usage Per: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (UTC) Bytes Up Bytes Apn Dn =MI IMBI MAKE MODEL 4256 04/04/20 10:32:50 60:00 0 0 nxtgenpho ne APPLE 'PHONES 4257 04/04/20 10:43:37 60:00 8388 3036 ims 4258 04/04/20 11:32:50 12:22 0 Onxtgonpho ne APPLE 'PHONES 4259 04/04/20 11:43:37 60:00 13584 5680 ims 4260 04/04/20 11:45:11 65:36 192 Onxtgonpho ne APPLE 'PHONES 4261 04/04/20 11:45:12 60:00 0 0 nxtgenpho ne APPLE 'PHONES 4262 04/04/20 12:43:37 39:34 4964 1588 ims 4263 04/04/20 12:45:12 5:36 0 0 nxtgenpho ne APPLE !PHONES 4264 04/04/20 12:50:48 2:53 0 0 nxtgenpho ne APPLE !PHONES 4265 04/04/20 12:53:40 58:19 192 0 nxtgenpho ne APPLE 'PHONES 4266 04/04/20 12:53:41 58:19 0 0 nxtgenpho ne APPLE !PHONES 4267 04/04/20 13:19:41 32:18 6298 8144 ims APPLE 'PHONES 4268 04/04/20 13:19:42 32:18 8076 6142 ims APPLE 'PHONES 4269 04/04/20 13:23:11 60:00 18342 9433 ims 4270 04/04/20 13:52:00 0:06 0 0 nxtgenpho ne APPLE !PHONES 4271 04/04/20 13:52:17 60:00 0 0 nxtgenpho ne APPLE 'PHONES 4272 04/04/20 14:23:11 60:00 10068 3144 ims 4273 04/04/20 14:52:17 60:00 0 0 nxtgenpho ne APPLE !PHONES 4274 04/04/20 15:23:11 60:00 9960 3252 ims 4275 04/04/20 15:52:17 27:29 0 0 nxtgenpho ne APPLE !PHONES 4276 04/04/20 16:19:45 2:41 192 0 nxtgenpho ne APPLE 'PHONES 4277 04/04/20 16:19:47 2:40 0 0 nxtgenpho ne APPLE !PHONES 4278 04/04/20 16:22:27 0:52 0 0 nxtgenpho ne APPLE !PHONES 4279 04/04/20 16:23:11 60:00 13260 4592 ims AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 174 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171094 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343152

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ear. ‘•- .s. AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating Time Number (OTC) ET Bytes Up Bytes Apn Dn ffiI INSI MAKE MODEL 4280 04/04/20 16:23:18 0:23 192 0 nxtgonpho no APPLE 'PHONES 4281 04/04/20 16:23:20 0:22 0 0 nxtgonpho no APPLE 'PHONES 4282 04/04/20 16:23:42 24:09 0 0 nxtgonpho no APPLE 'PHONES 4283 04/04/20 16:47:50 2:25 192 0 nxtgonpho no APPLE 'PHONES 4284 04/04/20 16:47:52 2:24 0 0 nxtgonpho ne APPLE 'PHONES 4285 04/04/20 16:50:15 4:58 192 0 nxtgonpho ne APPLE 'PHONES 4286 04/04/20 16:50:16 4:58 0 0 nxtgonpho ne APPLE 'PHONES 4287 04/04/20 16:55:14 0:05 0 0 nxtgonpho ne APPLE 'PHONES 4288 04/04/20 16:55:45 7:33 0 0 nxtgonpho ne APPLE 'PHONES 4289 04/04/20 17:03:17 2:07 192 0 nxtgonpho ne APPLE 'PHONES 4290 04/04/20 17:03:19 2:06 0 0 nxtgonpho ne APPLE 'PHONES 4291 04/04/20 17:05:25 5:57 0 0 nxtgonpho no APPLE 'PHONES 4292 04/04/20 17:11:21 2:19 192 0 nxtgonpho no APPLE 'PHONES 4293 04/04/20 17:11:22 2:19 0 0 nxtgonpho no APPLE 'PHONES 4294 04/04/20 17:13:41 0:05 0 0 nxtgonpho ne APPLE 'PHONES 4295 04/04/20 17:14:37 7:18 192 0 nxtgonpho ne APPLE 'PHONES 4296 04/04/20 17:14:38 7:18 0 0 nxtgonpho ne APPLE 'PHONES 4297 04/04/20 17:21:56 8:23 192 0 nxtgonpho ne APPLE 'PHONES 4298 04/04/20 17:21:57 8:23 0 0 nxtgonpho ne APPLE 'PHONES 4299 04/04/20 17:23:11 60:00 10856 4488 ims 4300 04/04/20 17:30:20 1:32 0 0 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 175 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171095 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343153

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. cre AT&T Run Date: Run Timm: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Nuclear ET Bytes Up Bytes Apn Dn MBE! IM9I NAM MODEL 4301 04/04/20 17:31:53 3:22 0 0 nxtgonpho no APPLE 'PHONES 4302 04/04/20 17:35:14 2:05 192 0 nxtgonpho no APPLE 'PHONES 4303 04/04/20 17:35:15 2:05 0 0 nxtgenpho no APPLE 'PHONES 4304 04/04/20 17:37:20 21:09 0 0 nxtgenpho no APPLE 'PHONES 4305 04/04/20 17:58:29 2:21 192 0 nxtgonpho no APPLE 'PHONES 4306 04/04/20 17:58:30 2:21 0 0 nxtgonpho no APPLE 'PHONES 4307 04/04/20 18:00:50 6:43 192 0 nxtgonpho no APPLE 'PHONES 4308 04/04/20 18:00:52 6:42 0 0 nxtgonpho no APPLE 'PHONES 4309 04/04/20 18:07:34 60:00 0 0 nxtgonpho no APPLE 'PHONES 4310 04/04/20 18:23:11 60:00 8512 3004 ims 4311 04/04/20 19:07:34 60:00 0 0 nxtgonpho no APPLE 'PHONES 4312 04/04/20 19:23:11 60:00 12120 4452 ims 4313 04/04/20 20:07:34 32:48 0 0 nxtgonpho no APPLE 'PHONES 4314 04/04/20 20:23:11 60:00 0 0 ims 4315 04/04/20 20:40:22 14:45 192 0 nxtgonpho no APPLE 'PHONES 4316 04/04/20 20:40:23 14:45 0 0 nxtgonpho no APPLE 'PHONES 4317 04/04/20 20:47:50 60:00 15113 8893 ims 4318 04/04/20 20:55:08 5:50 0 0 nxtgonpho no APPLE 'PHONES 4319 04/04/20 21:00:57 23:10 192 0 nxtgonpho no APPLE 'PHONES 4320 04/04/20 21:00:58 23:10 0 0 nxtgonpho no APPLE 'PHONES 4321 04/04/20 21:23:11 60:00 0 0 ims 4322 04/04/20 21:24:08 5:55 0 0 nxtgonpho no APPLE 'PHONES 4323 04/04/20 21:30:02 3:38 192 0 nxtgenpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 176 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171096 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343154

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 45, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 IS= Conn. Time (UTC) Originating Nusher ET Bytes Up Bytes Apn Dn MAX INSI MAR NOBEL 4324 04/04/20 21:30:03 3:38 0 0 nxtgonphe no APPLE 'PEONES 4325 04/04/20 21:33:41 22:58 192 0 nxtgenphe no APPLE !PHONES 4326 04/04/20 21:33:42 22:58 0 0 nxtgonphe no APPLE !PHONES 4327 04/04/20 21:47:50 60:00 10176 3408 ims 4328 04/04/20 21:56:40 1:21 0 0 nxtgonphe ne APPLE !PHONES 4329 04/04/20 21:58:00 2:04 192 0 nxtgonphe ne APPLE !PHONES 4330 04/04/20 21:58:02 2:03 0 0 nxtgonphe ne APPLE !PHONES 4331 04/04/20 22:00:05 32:56 0 0 nxtgonphe ne APPLE !PHONES 4332 04/04/20 22:23:11 60:00 0 0 ims 4333 04/04/20 22:33:01 50:49 192 0 nxtgonphe no APPLE !PHONES 4334 04/04/20 22:33:02 50:49 0 0 nxtgonphe no APPLE !PHONES 4335 04/04/20 22:47:50 60:00 6924 3020 ims 4336 04/04/20 23:23:11 59:45 0 0 ims 4337 04/04/20 23:23:51 7:23 192 0 nxtgonpho no APPLE !PHONES 4338 04/04/20 23:23:52 7:23 0 0 nxtgonpho no APPLE !PHONES 4339 04/04/20 23:31:15 60:00 0 0 nxtgonpho no APPLE !PHONES 4340 04/04/20 23:47:50 60:00 10160 3176 ims 4341 04/05/20 00:31:15 60:00 0 0 nxtgonpho no APPLE !PHONES 4342 04/05/20 00:47:50 60:00 8496 2928 ims 4343 04/05/20 01:31:15 10:13 0 0 nxtgonpho no APPLE !PHONES 4344 04/05/20 01:41:28 39:59 0 0 nxtgonpho no APPLE !PHONES 4345 04/05/20 01:47:50 60:00 11672 4412 ims 4346 04/05/20 02:21:26 76:32 192 0 nxtgonpho no APPLE !PHONES 4347 04/05/20 02:21:27 60:00 0 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 177 customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171097 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343155

MOBILITY P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. k..70 .0 AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Numbor ET Bytes Up Bytes Apn DOLT INSI MAKE Dn MODEL 4348 04/05/20 02:47:50 60:00 6924 2696 isms 4349 04/05/20 03:21:27 16:32 0 Onxtgonpho ne APPLE 'PHONES 4350 04/05/20 03:37:59 176:19 192 Onxtgonpho ne APPLE 'PHONES 4351 04/05/20 03:38:00 60:00 0 Onxtgonpho ne APPLE 'PHONES 4352 04/05/20 03:47:50 60:00 13924 4856 isms 4353 04/05/20 04:38:00 60:00 0 Onxtgonpho ne APPLE 'PHONES 4354 04/05/20 04:47:50 60:00 8496 3036 isms 4355 04/05/20 05:38:00 56:19 0 Onxtgonpho ne APPLE 'PHONES 4356 04/05/20 05:47:50 60:00 6816 2788 isms 4357 04/05/20 06:47:50 60:00 11796 4536 isms 4358 04/05/20 07:47:50 12:50 4980 1588 isms 4359 04/05/20 08:08:28 60:00 18067 9628 isms 4360 04/05/20 09:08:28 60:00 8388 3020 isms 4361 04/05/20 09:18:59 54:33 0 Onxtgonpho ne APPLE 'PHONES 4362 04/05/20 10:08:28 60:00 8388 3020 isms 4363 04/05/20 10:13:31 68:53 192 Onxtgonpho ne APPLE 'PHONES 4364 04/05/20 10:13:32 60:00 0 Onxtgonpho ne APPLE 'PHONES 4365 04/05/20 11:08:28 60:00 11888 4376 isms 4366 04/05/20 11:13:32 8:53 0 Onxtgonpho ne APPLE 'PHONES 4367 04/05/20 11:22:25 22:37 192 Onxtgonpho ne APPLE 'PHONES 4368 04/05/20 11:22:26 22:37 0 Onxtgonpho ne APPLE 'PHONES 4369 04/05/20 11:45:03 21:34 0 Onxtgonpho ne APPLE 'PHONES 4370 04/05/20 12:06:36 60:29 192 Onxtgonpho ne APPLE 'PHONES 4371 04/05/20 12:06:37 60:00 0 Onxtgonpho ne APPLE 'PHONES 4372 04/05/20 12:08:28 32:45 5088 1588 isms 4373 04/05/20 12:40:12 26:53 6352 6666 isms APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 178 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171098 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343156

PRIO2O MOBILITY 0 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm 1/4C . 1 04 "# AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run pato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Aprt Dn DMZ INSI MAKE MODEL 4374 04/05/20 12:40:13 26:53 6666 6088 ims APPLE 'PHONES 4375 04/05/20 12:43:45 60:00 15273 8758 ims 4376 04/05/20 13:06:37 0:29 0 0nxtgonphe ne APPLE 'PHONES 4377 04/05/20 13:07:05 8:12 192 0 nxtgonphe ne APPLE 'PHONES 4378 04/05/20 13:07:06 8:12 0 0 nxtgonphe ne APPLE 'PHONES 4379 04/05/20 13:15:18 0:56 0 0 nxtgonphe ne APPLE 'PHONES 4380 04/05/20 13:16:13 2:17 192 0 nxtgonphe ne APPLE 'PHONES 4381 04/05/20 13:16:14 2:17 0 0 nxtgonpho ne APPLE 'PHONES 4382 04/05/20 13:18:31 12:27 192 0 nxtgonphe ne APPLE 'PHONES 4383 04/05/20 13:18:32 12:27 0 0 nxtgonphe ne APPLE 'PHONES 4384 04/05/20 13:30:59 2:36 0 0 nxtgonphe ne APPLE 'PHONES 4385 04/05/20 13:33:34 8:26 192 0nxtgonphe ne APPLE 'PHONES 4386 04/05/20 13:33:36 8:25 0 0 nxtgonphe ne APPLE 'PHONES 4387 04/05/20 13:42:01 15:56 0 0 nxtgonphe ne APPLE 'PHONES 4388 04/05/20 13:43:45 60:00 8604 3160 isms 4389 04/05/20 13:57:56 2:04 192 0 nxtgonphe ne APPLE 'PHONES 4390 04/05/20 13:57:57 2:04 0 0 nxtgonphe ne APPLE 'PHONES 4391 04/05/20 14:00:01 1:59 0 0 nxtgonphe ne APPLE 'PHONES 4392 04/05/20 14:01:59 2:05 192 0 nxtgonphe ne APPLE 'PHONES 4393 04/05/20 14:02:01 2:04 0 0 nxtgonphe ne APPLE 'PHONES 4394 04/05/20 14:04:05 16:42 0 0 nxtgonphe ne APPLE 'PHONES 4395 04/05/20 14:20:46 2:04 192 0 nxtgonphe ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 179 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNI_ 00171099 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343157

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn DMZ IMSI MAKE MODEL 4396 04/05/20 14:20:47 2:04 0 0 nxtgonpho no APPLE 'PHONES 4397 04/05/20 14:22:51 8:27 0 0 nxtgonpho no APPLE 'PHONES 4398 04/05/20 14:31:17 2:04 192 0 nxtgonpho no APPLE 'PHONES 4399 04/05/20 14:31:18 2:04 0 0 nxtgonpho no APPLE 'PHONES 4400 04/05/20 14:33:22 2:09 0 0 nxtgonpho no APPLE 'PHONES 4401 04/05/20 14:35:30 2:05 192 0 nxtgonpho no APPLE 'PHONES 4402 04/05/20 14:35:32 2:04 0 0 nxtgonpho no APPLE 'PHONES 4403 04/05/20 14:37:36 0:34 0 0 nxtgonpho ne APPLE 'PHONES 4404 04/05/20 14:38:10 2:04 192 0 nxtgonpho ne APPLE 'PHONES 4405 04/05/20 14:38:11 2:04 0 0 nxtgonpho ne APPLE 'PHONES 4406 04/05/20 14:40:15 3:13 0 0 nxtgonpho no APPLE 'PHONES 4407 04/05/20 14:43:27 2:18 192 0 nxtgonpho no APPLE 'PHONES 4408 04/05/20 14:43:28 2:18 0 0 nxtgonpho no APPLE 'PHONES 4409 04/05/20 14:43:45 60:00 6956 2696 ims 4410 04/05/20 14:45:46 6:03 192 0 nxtgonpho no APPLE 'PHONES 4411 04/05/20 14:45:47 6:03 0 0 nxtgonpho no APPLE 'PHONES 4412 04/05/20 14:51:50 0:36 0 0 nxtgonpho no APPLE 'PHONES 4413 04/05/20 14:52:25 2:04 192 0 nxtgonpho ne APPLE 'PHONES 4414 04/05/20 14:52:26 2:04 0 0 nxtgonpho ne APPLE 'PHONES 4415 04/05/20 14:54:30 0:37 0 0 nxtgonpho ne APPLE 'PHONES 4416 04/05/20 14:55:06 2:04 192 0 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 180 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171100 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343158

..020 MOBILITY 41.10 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm ktres "ses -s. AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC/ Bytes Up Bytes Apn Dn DMZ INS! MAKE MODEL 4417 04/05/20 14:55:07 2:04 0 0 nxtgenpho no APPLE 'PHONES 4418 04/05/20 14:57:11 0:37 0 0 nxtgenpho no APPLE 'PHONES 4419 04/05/20 14:57:47 34:03 192 0 nxtgenpho no APPLE 'PHONES 4420 04/05/20 14:57:48 34:03 0 0 nxtgenpho no APPLE 'PHONES 4421 04/05/20 15:31:50 10:00 192 0 nxtgenpho no APPLE 'PHONES 4422 04/05/20 15:31:51 27:42 0 0 nxtgenpho ne APPLE 'PHONES 4423 04/05/20 15:43:45 60:00 8496 2928 ims 4424 04/05/20 15:59:32 2:04 192 0 nxtgonpho ne APPLE 'PHONES 4425 04/05/20 15:59:33 2:04 0 0 nxtgonpho ne APPLE 'PHONES 4426 04/05/20 16:01:37 0:35 0 0 nxtgonpho ne APPLE 'PHONES 4427 04/05/20 16:02:11 2:18 192 0 nxtgonpho ne APPLE 'PHONES 4428 04/05/20 16:02:12 2:18 0 0 nxtgonpho ne APPLE 'PHONES 4429 04/05/20 16:04:30 12:46 192 0 nxtgonpho ne APPLE 'PHONES 4430 04/05/20 16:04:31 12:46 0 0 nxtgonpho ne APPLE 'PHONES 4431 04/05/20 16:17:16 2:04 192 0 nxtgonpho ne APPLE 'PHONES 4432 04/05/20 16:17:18 2:03 0 0 nxtgonpho ne APPLE 'PHONES 4433 04/05/20 16:19:21 2:23 0 0 nxtgonpho ne APPLE 'PHONES 4434 04/05/20 16:21:43 8:44 192 0 nxtgonpho ne APPLE 'PHONES 4435 04/05/20 16:21:44 8:44 0 0 nxtgonpho ne APPLE 'PHONES 4436 04/05/20 16:30:28 27:49 192 0 nxtgonpho ne APPLE 'PHONES 4437 04/05/20 16:30:29 27:49 0 0 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 181 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171101 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343159

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro 1/4•-si. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn L@1 IICiI MAKE MODEL 4438 04/05/20 16:43:45 60:00 11920 4376 ims 4439 04/05/20 16:58:18 8:22 192 Onmtgenpho ne APPLE 'PHONES 4440 04/05/20 16:58:19 8:22 0 0 nxtgenpho ne APPLE 'PHONES 4441 04/05/20 17:06:41 0:36 0 0 nxtgenpho ne APPLE 'PHONES 4442 04/05/20 17:07:16 2:05 192 0 nxtgenpho ne APPLE 'PHONES 4443 04/05/20 17:07:18 2:04 0 0 nxtgenpho ne APPLE 'PHONES 4444 04/05/20 17:09:22 1:06 0 0 nxtgenpho ne APPLE 'PHONES 4445 04/05/20 17:10:27 2:17 192 Onxtgenpho ne APPLE 'PHONES 4446 04/05/20 17:10:28 2:17 0 0 nxtgenpho ne APPLE 'PHONES 4447 04/05/20 17:12:44 6:03 192 0 nxtgenpho ne APPLE 'PHONES 4448 04/05/20 17:12:45 6:04 0 0 nxtgenpho ne APPLE 'PHONES 4449 04/05/20 17:18:49 0:36 0 0 nxtgenpho ne APPLE 'PHONES 4450 04/05/20 17:19:24 8:21 192 0 nxtgenpho ne APPLE 'PHONES 4451 04/05/20 17:19:25 8:21 0 Onxtgenpho ne APPLE 'PHONES 4452 04/05/20 17:27:46 19:00 0 0 nxtgenpho ne APPLE 'PHONES 4453 04/05/20 17:43:45 34:11 6924 2840 ims 4454 04/05/20 17:46:46 2:26 0 0 nxtgenpho ne APPLE 'PHONES 4455 04/05/20 17:49:11 8:24 192 0 nxtgenpho ne APPLE 'PHONES 4456 04/05/20 17:49:12 8:24 0 0 nxtgenpho ne APPLE 'PHONES 4457 04/05/20 17:57:36 60:00 0 0 nxtgenpho ne APPLE 'PHONES 4458 04/05/20 18:24:57 8:44 8816 6178 ims APPLE 'PHONES 4459 04/05/20 18:33:41 0:01 0 0 ims APPLE 'PHONES 4460 04/05/20 18:33:50 60:00 16765 9014 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 182 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171102 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343160

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ‘•.. .a# AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn INKS INSI MAKE MODEL 4461 04/05/20 18:57:36 60:00 0 0 nxtgenpho ne APPLE !PHONES 4462 04/05/20 19:33:50 60:00 10144 3284 ims 4463 04/05/20 19:57:36 60:00 0 0 nxtgenpho ne APPLE !PHONES 4464 04/05/20 20:33:50 34:45 5072 1572 ims 4465 04/05/20 20:57:36 54:28 0 0 nxtgenpho no APPLE !PHONES 4466 04/05/20 21:08:36 42:23 9268 7288 ims APPLE !PHONES 4467 04/05/20 21:50:59 60:00 11920 4220 ims APPLE !PHONES 4468 04/05/20 21:52:03 2:04 192 Ormtgonpho no APPLE !PHONES 4469 04/05/20 21:52:04 2:04 0 0 nxtgenpho no APPLE !PHONES 4470 04/05/20 21:54:08 56:14 0 0 nxtgenpho no APPLE !PHONES 4471 04/05/20 22:50:22 8:53 192 0 nxtgenpho no APPLE !PHONES 4472 04/05/20 22:50:23 8:53 0 0 nxtgenpho no APPLE !PHONES 4473 04/05/20 22:50:59 60:00 8728 3020 ims APPLE !PHONES 4474 04/05/20 22:59:15 6:04 192 0 nxtgenpho no APPLE !PHONES 4475 04/05/20 22:59:17 6:03 0 0 nxtgenpho no APPLE !PHONES 4476 04/05/20 23:05:20 26:11 0 0 nxtgenphe no APPLE !PHONES 4477 04/05/20 23:31:30 2:05 192 0 nxtgenphe no APPLE !PHONES 4478 04/05/20 23:31:31 2:05 0 0 nxtgenphe no APPLE !PHONES 4479 04/05/20 23:33:36 6:40 0 0 nxtgenphe no APPLE !PHONES 4480 04/05/20 23:40:15 2:04 192 0 nxtgenphe no APPLE !PHONES 4481 04/05/20 23:40:16 2:05 0 0 nxtgenpho no APPLE !PHONES 4482 04/05/20 23:42:21 14:38 0 0 nxtgenpho no APPLE !PHONES 4483 04/05/20 23:50:59 60:00 8496 2896 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 183 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171103 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343161

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 45, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 lib km Conn. Timm (OTC) Originating Number ET Bytos Up Bytes Apn Dn MAX INSI MAKE MODEL 4484 04/05/20 23:56:58 2:46 192 Onstgenpho ne APPLE !PHONES 4485 04/05/20 23:56:59 2:46 0 0 nxtgonpho ne APPLE !PHONES 4486 04/05/20 23:59:44 14:30 192 0 nxtgonpho ne APPLE !PHONES 4487 04/05/20 23:59:45 14:30 0 0 nxtgonpho no APPLE !PHONES 4488 04/06/20 00:14:15 14:15 0 0 nxtgonpho no APPLE !PHONES 4489 04/06/20 00:28:29 1:16 192 0 nxtgonpho no APPLE !PHONES 4490 04/06/20 00:28:30 1:16 0 0 nxtgonpho ne APPLE !PHONES 4491 04/06/20 00:29:46 0:49 0 0 nxtgonpho ne APPLE !PHONES 4492 04/06/20 00:30:34 2:04 192 0 nxtgonpho ne APPLE !PHONES 4493 04/06/20 00:30:35 2:04 0 0 nxtgonpho no APPLE !PHONES 4494 04/06/20 00:32:39 0:36 0 0 nxtgonpho no APPLE !PHONES 4495 04/06/20 00:33:14 8:27 192 0 nxtgonpho no APPLE !PHONES 4496 04/06/20 00:33:15 8:27 0 0 nxtgonpho no APPLE !PHONES 4497 04/06/20 00:41:42 1:42 0 0 nxtgonpho no APPLE !PHONES 4498 04/06/20 00:43:23 2:05 192 0 nxtgonpho ne APPLE !PHONES 4499 04/06/20 00:43:24 2:05 0 0 nxtgenpho ne APPLE !PHONES 4500 04/06/20 00:45:29 1:25 0 0 nxtgonpho no APPLE !PHONES 4501 04/06/20 00:46:53 2:04 192 0 nxtgenpho no APPLE !PHONES 4502 04/06/20 00:46:54 2:04 0 0 nxtgenpho ne APPLE !PHONES 4503 04/06/20 00:48:58 2:12 0 0 nxtgonpho ne APPLE !PHONES 4504 04/06/20 00:50:59 60:00 6956 2648 ism APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 184 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171104 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343162

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Data: Run Time: Data Usage For: 06/17/2020 Item Conn. Conn. Date Time (OTC) 4505 04/06/20 00:51:09 3:35 192 0 nxtgenpho ne 4506 04/06/20 00:51:10 3:35 0 0 nxtgenpho ne 4507 04/06/20 00:54:45 5:15 0 0 nxtgenpho ne 4508 04/06/20 00:59:59 8:19 192 0 nxtgenpho ne 4509 04/06/20 01:00:01 8:18 0 0 nxtgenpho ne 4510 04/06/20 01:08:19 39:00 0 0 nxtgenpho ne 4511 04/06/20 01:47:18 9:03 192 0 nxtgenpho ne 4512 04/06/20 01:47:20 9:02 0 0 nxtgenpho ne 4513 04/06/20 01:50:59 60:00 15420 5828 ims 4514 04/06/20 01:56:22 3:04 0 0 nxtgenpho ne 4515 04/06/20 01:59:25 3:08 192 0 nxtgenpho ne 4516 04/06/20 01:59:26 3:08 0 0 nxtgenpho ne 4517 04/06/20 02:02:33 2:54 192 0 nxtgenpho ne 4518 04/06/20 02:02:34 2:54 0 0 nxtgenpho ne 4519 04/06/20 02:05:28 23:22 0 0 nxtgenpho ne 4520 04/06/20 02:28:49 14:16 192 0 nxtgenpho ne 4521 04/06/20 02:28:50 14:16 0 0 nxtgenpho ne 4522 04/06/20 02:43:06 2:07 0 0 nxtgenpho ne 4523 04/06/20 02:45:12 6:13 192 0 nxtgenpho ne 4524 04/06/20 02:45:13 6:13 0 0 nxtgenpho ne 4525 04/06/20 02:50:59 60:00 8388 2896 ims Originating Number BT Bytes Bytes Apn TERI IMSI MAKS MODEL Up On APPLE !PEONES APPLE !PEONES APPLE !PEONES APPLE !PEONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 185 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171105 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343163

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. 1/4e. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Sim Conn. Originating CT Time Number (OTC) Bytes Up Bytes Apn Dn nom IMBI MAIM MODEL 4526 04/06/20 02:51:26 25:12 0 0 nxtgenpho ne APPLE !PEONES 4527 04/06/20 03:16:37 1:30 192 0 nxtgenpho ne APPLE !PEONES 4528 04/06/20 03:16:38 1:30 0 0 nxtgenpho ne APPLE !PEONES 4529 04/06/20 03:18:08 1:14 0 0 nxtgenpho ne APPLE !PEONES 4530 04/06/20 03:19:21 2:10 192 0 nxtgenpho ne APPLE !PEONES 4531 04/06/20 03:19:22 2:10 0 0 nxtgenpho ne APPLE !PEONES 4532 04/06/20 03:21:32 26:22 0 0 nxtgenpho ne APPLE !PEONES 4533 04/06/20 03:49:54 12:26 192 0 nxtgenpho ne APPLE !PHONES 4534 04/06/20 03:49:55 12:27 0 0 nxtgenpho ne APPLE 'PHONES 4535 04/06/20 03:50:59 56:49 13136 4872 ims APPLE 'PHONES 4536 04/06/20 04:02:22 8:42 0 0 nxtgenpho ne APPLE !PHONES 4537 04/06/20 04:11:03 2:04 192 0 nxtgenpho ne APPLE !PHONES 4538 04/06/20 04:11:04 2:04 0 0 nxtgenpho ne APPLE !PHONES 4539 04/06/20 04:13:08 6:05 0 0 nxtgenpho ne APPLE !PHONES 4540 04/06/20 04:19:12 2:04 192 0 nxtgenpho ne APPLE !PHONES 4541 04/06/20 04:19:13 2:04 0 0 nxtgenpho ne APPLE !PHONES 4542 04/06/20 04:21:17 0:59 0 0 nxtgenpho ne APPLE !PHONES 4543 04/06/20 04:22:15 2:05 192 0 nxtgenpho ne APPLE !PHONES 4544 04/06/20 04:22:16 2:05 0 0 nxtgenpho ne APPLE !PHONES 4545 04/06/20 04:24:21 0:32 0 0 nxtgenpho ne APPLE !PHONES 4546 04/06/20 04:24:52 2:04 192 0 nxtgenpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 186 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171106 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343164

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:38:58pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e s, `•-. .s# AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 lib km Conn. Originating ET Time Numbor (OTC) Bytes Up Bytes Apn Dn DC INSI MAKE MODEL 4547 04/06/20 04:24:53 2:04 0 0 nxtgonpho ne APPLE 'PHONES 4548 04/06/20 04:26:57 10:37 0 0 nxtgonpho ne APPLE 'PHONES 4549 04/06/20 04:37:33 9:34 192 0 nxtgonpho ne APPLE 'PHONES 4550 04/06/20 04:37:35 9:33 0 0 nxtgonpho ne APPLE 'PHONES 4551 04/06/20 04:47:08 2:44 192 0 nxtgonpho ne APPLE 'PHONES 4552 04/06/20 04:47:09 2:43 7048 6456 isms APPLE 'PHONES 4553 04/06/20 04:47:09 2:45 0 0 nxtgonpho ne APPLE 'PHONES 4554 04/06/20 04:47:10 2:44 6456 6784 isms APPLE 'PHONES 4555 04/06/20 04:49:28 60:00 16637 9036 isms 4556 04/06/20 04:49:53 0:49 0 0 nxtgonpho ne APPLE 'PHONES 4557 04/06/20 04:50:42 240:02 192 0nxtgonpho ne APPLE 'PHONES 4558 04/06/20 04:50:43 60:00 0 0 nxtgonpho ne APPLE 'PHONES 4559 04/06/20 05:49:28 60:00 8388 2928 isms 4560 04/06/20 05:50:43 60:00 0 0 nxtgonpho ne APPLE 'PHONES 4561 04/06/20 06:49:28 60:00 8496 3036 isms 4562 04/06/20 06:50:43 60:00 0 0 nxtgonpho ne APPLE 'PHONES 4563 04/06/20 07:49:28 60:00 15048 4872 isms 4564 04/06/20 07:50:43 60:00 0 0 nxtgonpho no APPLE 'PHONES 4565 04/06/20 08:49:28 60:00 6940 3680 isms 4566 04/06/20 08:50:43 0:02 0 0 nxtgonpho ne APPLE 'PHONES 4567 04/06/20 08:50:45 1:58 192 0 nxtgonpho ne APPLE 'PHONES 4568 04/06/20 08:50:46 1:58 0 0 nxtgonpho ne APPLE 'PHONES 4569 04/06/20 08:52:44 1:23 0 0 nxtgonpho ne APPLE 'PHONES 4570 04/06/20 08:54:06 21:13 192 0 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 187 customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171107 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343165

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ‘ft.al. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 MI= Conn. Time (OTC) Originating Number BT Bytes Up Bytes Apn Dn L@3 IMSI MAKE MODEL 4571 04/06/20 08:54:07 21:13 0 0 nxtgonphe ne APPLE !PHONES 4572 04/06/20 09:15:20 0:39 0 0 nxtgonphe ne APPLE 'PHONES 4573 04/06/20 09:15:58 27:10 192 0 nxtgonpho ne APPLE 'PHONES 4574 04/06/20 09:15:59 27:10 0 0 nxtgonphe ne APPLE 'PHONES 4575 04/06/20 09:43:09 1:40 0 0 nxtgonphe ne APPLE 'PHONES 4576 04/06/20 09:44:48 2:18 192 0nxtgonphe ne APPLE !PHONES 4577 04/06/20 09:44:50 2:17 0 0 nxtgonphe no APPLE !PHONES 4578 04/06/20 09:47:06 6:44 192 0 nxtgonphe no APPLE 'PHONES 4579 04/06/20 09:47:07 6:44 0 0 nxtgonphe no APPLE 'PHONES 4580 04/06/20 09:49:28 60:00 13368 4676 ims 4581 04/06/20 09:53:51 44:00 192 0 nxtgonphe ne APPLE 'PHONES 4582 04/06/20 09:53:52 44:00 0 0 nxtgonphe ne APPLE 'PHONES 4583 04/06/20 10:37:52 0:42 0 0 nxtgonphe ne APPLE 'PHONES 4584 04/06/20 10:38:33 29:40 192 0 nxtgonphe ne APPLE 'PHONES 4585 04/06/20 10:38:34 29:41 0 0 nxtgonphe ne APPLE 'PHONES 4586 04/06/20 10:49:28 60:00 13584 4516 ims 4587 04/06/20 11:08:14 0:35 0 0 nxtgonphe ne APPLE 'PHONES 4588 04/06/20 11:08:48 14:53 192 0 nxtgonphe no APPLE 'PHONES 4589 04/06/20 11:08:49 14:53 0 0 nxtgonpho no APPLE 'PHONES 4590 04/06/20 11:23:42 1:37 0 0 nxtgonpho no APPLE 'PHONES 4591 04/06/20 11:25:18 27:35 192 0 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 188 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171108 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343166

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro ••-. 0° AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 IS= Conn. Time (OTC) Originating Numbor ET Bytes Up Bytes Apn Dn EMI INSI MAKE MODEL 4592 04/06/20 11:25:19 27:35 0 0 nmtgonpho ne APPLE 'PHONES 4593 04/06/20 11:49:28 60:00 8620 3052 Las 4594 04/06/20 11:52:53 2:04 192 0 nmtgonpho ne APPLE 'PHONES 4595 04/06/20 11:52:54 2:04 0 0 nmtgonpho ne APPLE 'PHONES 4596 04/06/20 11:54:58 0:36 0 0 nmtgonpho ne APPLE 'PHONES 4597 04/06/20 11:55:34 20:57 192 0 nmtgonpho no APPLE 'PHONES 4598 04/06/20 11:55:35 20:57 0 0 nmtgonpho no APPLE 'PHONES 4599 04/06/20 12:16:32 0:48 0 0 nmtgonpho no APPLE 'PHONES 4600 04/06/20 12:17:19 20:57 192 0 nmtgonpho no APPLE 'PHONES 4601 04/06/20 12:17:20 20:57 0 0 nmtgonpho ne APPLE 'PHONES 4602 04/06/20 12:38:17 17:13 0 0 nmtgonpho ne APPLE 'PHONES 4603 04/06/20 12:49:28 60:00 8372 2928 ims 4604 04/06/20 12:55:29 2:04 192 0 nmtgonpho ne APPLE 'PHONES 4605 04/06/20 12:55:31 2:03 0 0 nmtgonpho ne APPLE 'PHONES 4606 04/06/20 12:57:34 4:36 0 0 nmtgonpho ne APPLE 'PHONES 4607 04/06/20 13:02:09 2:05 192 0 nmtgonpho ne APPLE 'PHONES 4608 04/06/20 13:02:10 2:05 0 0 nmtgonpho no APPLE 'PHONES 4609 04/06/20 13:04:15 6:34 0 0 nmtgonpho no APPLE 'PHONES 4610 04/06/20 13:10:49 26:43 0 0 nmtgonpho no APPLE 'PHONES 4611 04/06/20 13:37:31 8:58 192 0 nmtgonpho no APPLE 'PHONES 4612 04/06/20 13:37:32 8:58 0 0 nmtgonpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 189 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171109 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343167

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e s, AT&T Run pato: Run Time: Data Usage For: 06/17/2020 MI= Item Conn. Date Conn. Time (OTC/ 4613 04/06/20 13:46:30 4614 04/06/20 13:46:31 4615 04/06/20 13:49:28 4616 04/06/20 13:59:38 4617 04/06/20 14:18:18 4618 04/06/20 14:18:19 4619 04/06/20 14:49:28 4620 04/06/20 15:00:57 4621 04/06/20 15:06:58 4622 04/06/20 15:07:00 4623 04/06/20 15:12:32 4624 04/06/20 15:13:22 4625 04/06/20 15:13:23 4626 04/06/20 15:15:26 4627 04/06/20 15:21:35 4628 04/06/20 15:21:36 4629 04/06/20 15:29:49 4630 04/06/20 15:33:21 4631 04/06/20 15:33:22 4632 04/06/20 15:35:26 4633 04/06/20 15:42:32 Originating Be Bytes Bytes Apn 7:1012 INS! NAPS MOD= Up Dn 13:07 192 0 nxtgenpho APPLE 'PEONES ne 13:07 0 0 nxtgenpho APPLE 'PEONES ne 60:00 10068 3176 ims 18:41 0 Onstgenpho APPLE 'PEONES ne 42:38 288 0 nxtgenpho APPLE 'PEONES ne 42:38 0 0 nxtgenpho APPLE 'PEONES ne 60:00 17440 6372 ims 6:02 0 0 nxtgenpho APPLE !PHONES no 5:33 192 0 nxtgenpho APPLE !PHONES ne 5:32 0 0 nxtgenpho APPLE !PHONES ne 0:51 0 0 nxtgenpho APPLE !PHONES ne 2:03 192 0 nxtgenpho APPLE !PHONES ne 2:03 0 0 nxtgenpho APPLE !PHONES ne 6:09 0 0 nxtgenpho APPLE !PHONES ne 8:13 192 0 nxtgenpho APPLE !PHONES ne 8:14 0 0 nxtgenpho APPLE !PHONES ne 3:33 0 0 nxtgenpho APPLE !PHONES ne 2:04 192 0 nxtgenpho APPLE !PHONES no 2:04 0 0 nxtgenpho APPLE !PHONES no 7:07 0 0 nxtgenpho APPLE !PHONES no 2:10 192 0 nxtgenpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 190 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171110 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343168

MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. tra lso AT&T Run Date: Run Tine: Data Usage For: Item Conn. Date 06/17/2020 IS= Conn. Time (OTC/ Originating Number BT Bytes Up Bytes Apn 06 MBE! INSI MAKE MODEL 4634 04/06/20 15:42:33 2:10 0 Onxtgenpho ne APPLE 'PHONES 4635 04/06/20 15:44:43 1:56 0 0 nxtgenpho ne APPLE 'PHONES 4636 04/06/20 15:46:38 33:20 192 0 nxtgenpho ne APPLE 'PHONES 4637 04/06/20 15:46:39 33:20 0 0 nxtgenpho ne APPLE 'PHONES 4638 04/06/20 15:49:28 60:00 6924 2804 ims 4639 04/06/20 16:19:59 16:41 192 0 nxtgenphe ne APPLE 'PHONES 4640 04/06/20 16:20:00 16:41 0 0 nxtgenpho ne APPLE 'PHONES 4641 04/06/20 16:36:41 12:04 192 0 nxtgenpho ne APPLE 'PHONES 4642 04/06/20 16:36:42 12:04 0 0 nxtgenpho ne APPLE 'PHONES 4643 04/06/20 16:48:46 60:00 0 0 nxtgenphe ne APPLE 'PHONES 4644 04/06/20 16:49:28 60:00 7264 2928 ims 4645 04/06/20 17:48:46 50:14 0 0 nxtgenphe ne APPLE 'PHONES 4646 04/06/20 17:49:28 60:00 11796 4268 ims 4647 04/06/20 18:38:59 2:26 192 0 nxtgenphe ne APPLE 'PHONES 4648 04/06/20 18:39:00 2:26 0 0 nxtgenphe ne APPLE 'PHONES 4649 04/06/20 18:41:26 2:48 192 0 nxtgenphe ne APPLE 'PHONES 4650 04/06/20 18:41:27 2:48 0 0 nxtgenphe ne APPLE 'PHONES 4651 04/06/20 18:44:14 2:21 192 0 nxtgenpho ne APPLE 'PHONES 4652 04/06/20 18:44:16 2:20 0 0 nxtgenpho ne APPLE 'PHONES 4653 04/06/20 18:46:35 33:05 192 0 nxtgenpho ne APPLE 'PHONES 4654 04/06/20 18:46:36 33:05 0 0 nxtgenpho ne APPLE 'PHONES 4655 04/06/20 18:49:28 60:00 8820 3268 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 191 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171111 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343169

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Time: Data Usage For: 06/17/2020 SS= Item Conn. Date Conn. Time (OTC/ 4656 04/06/20 19:19:41 4657 04/06/20 19:49:28 4658 04/06/20 20:15:30 4659 04/06/20 20:15:31 4660 04/06/20 20:24:24 4661 04/06/20 20:24:25 4662 04/06/20 20:30:46 4663 04/06/20 20:49:28 4664 04/06/20 21:07:51 4665 04/06/20 21:08:48 4666 04/06/20 21:13:37 4667 04/06/20 21:13:38 4668 04/06/20 21:14:41 4669 04/06/20 21:14:42 4670 04/06/20 21:15:01 4671 04/06/20 21:15:02 4672 04/06/20 21:32:47 4673 04/06/20 21:37:14 4674 04/06/20 21:41:07 4675 04/06/20 21:41:08 4676 04/06/20 21:43:46 4677 04/06/20 21:52:20 4678 04/06/20 21:52:21 4679 04/06/20 22:02:10 Originating Number ET Bytos Bytes Apn EMBI IMSI MAKE MODEL Up Dn 55:50 0 0 nactgenpho APPLE IPEOMTA ne 60:00 12120 4784 isms 8:54 192 0 nactgonpho APPLE IPEOMTA ne 8:54 0 0 nactgonpho APPLE IPEOMTA ne 6:21 192 0 nactgonpho APPLE !PEONES ne 6:21 0 0 nactgonpho APPLE 'PAMPA ne 42:51 0 0 nactgonpho APPLE 'PHONES ne 25:15 23832 16740 ims 0:28 1749 10097 ims 5:55 1425959 510796 ims 23:36 192 Onmtgonpho APPLE 'PHONES ne 23:36 0 0 nmtgonpho APPLE 'PHONES ne 22:32 17908 14555 ims APPLE 'PHONES 22:32 14142 17664 ims APPLE 'PHONES 12:05 1705278 2630230 ims APPLE 'PHONES 12:05 2630230 1705278 ims APPLE 'PHONES 39:04 20650 12963 ims 3:54 0 0 nxtgenpho APPLE 'PHONES ne 2:38 192 0 nactgonpho APPLE 'PHONES ne 2:38 0 0 nxtgenpho APPLE 'PHONES ne 8:35 0 0 nmtgonpho APPLE 'PHONES no 9:49 192 0 nxtgonpho APPLE 'PHONES no 9:49 0 0 nxtgonpho APPLE 'PHONES no 9:40 192 0 nxtgonpho APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 192 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171112 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343170

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cee AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Mg= Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn L@1 IMSI MAKE MODEL 4680 04/06/20 22:02:11 9:40 0 0 nmtgonpho no APPLE 'PHONES 4681 04/06/20 22:11:51 1:08 0 0 nmtgonpho no APPLE 'PHONES 4682 04/06/20 22:11:55 60:00 49293 32806 ims 4683 04/06/20 22:12:58 2:04 192 0 nmtgonpho no APPLE 'PHONES 4684 04/06/20 22:13:00 2:03 0 0 nmtgonpho no APPLE 'PHONES 4685 04/06/20 22:15:03 6:57 0 0 nmtgonpho no APPLE 'PHONES 4686 04/06/20 22:21:59 2:07 192 0 nmtgonpho no APPLE 'PHONES 4687 04/06/20 22:22:00 2:07 0 0 nmtgonpho no APPLE 'PHONES 4688 04/06/20 22:24:07 0:05 0 0 nmtgonpho no APPLE 'PHONES 4689 04/06/20 22:26:25 5:05 192 0 nmtgonpho no APPLE 'PHONES 4690 04/06/20 22:26:27 5:04 0 0 nmtgonpho ne APPLE 'PHONES 4691 04/06/20 22:31:30 6:03 192 0 nmtgonpho ne APPLE 'PHONES 4692 04/06/20 22:31:31 6:03 0 0 nmtgonpho ne APPLE 'PHONES 4693 04/06/20 22:37:34 60:00 0 0 nmtgonpho ne APPLE 'PHONES 4694 04/06/20 22:56:05 0:01 0 0 ims 4695 04/06/20 22:56:45 0:27 1950 16876 ims 4696 04/06/20 22:57:30 0:38 2441 2326 ims 4697 04/06/20 23:11:55 60:00 34864 21112 ims 4698 04/06/20 23:18:04 0:31 12104 22462 ims 4699 04/06/20 23:28:04 0:27 1565 9674 ims 4700 04/06/20 23:37:34 4:26 0 Onmtgonpho no APPLE 'PHONES 4701 04/06/20 23:41:59 2:03 192 0 nmtgonpho no APPLE 'PHONES 4702 04/06/20 23:42:00 2:03 0 0 nmtgonpho no APPLE 'PHONES 4703 04/06/20 23:44:03 6:00 0 0 nmtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 193 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171113 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343171

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. ‘•-. 0° AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 MS= Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn L@I INSI MARS MODEL 4704 04/06/20 23:50:02 3:37 288 Onxtgonpho no APPLE 'PHONES 4705 04/06/20 23:50:04 3:36 0 0 nxtgonpho no APPLE 'PHONES 4706 04/06/20 23:53:40 12:00 192 0 nxtgonpho no APPLE 'PHONES 4707 04/06/20 23:53:40 12:01 0 0 nxtgonpho no APPLE 'PHONES 4708 04/07/20 00:05:41 4:12 0 0 nxtgonpho no APPLE 'PHONES 4709 04/07/20 00:09:52 2:04 192 0 nxtgenpho ne APPLE 'PHONES 4710 04/07/20 00:09:53 2:04 0 0 nxtgenpho ne APPLE 'PHONES 4711 04/07/20 00:11:55 60:00 27688 15432 ims 4712 04/07/20 00:11:57 8:45 0 0 nxtgenpho ne APPLE 'PHONES 4713 04/07/20 00:15:21 0:22 0 0 ims 4714 04/07/20 00:20:41 3:16 192 0 nxtgenpho ne APPLE 'PHONES 4715 04/07/20 00:20:42 3:16 0 0 nxtgenpho ne APPLE 'PHONES 4716 04/07/20 00:23:57 7:20 192 0 nxtgenpho ne APPLE 'PHONES 4717 04/07/20 00:23:58 7:20 0 0 nxtgenpho ne APPLE 'PHONES 4718 04/07/20 00:31:01 19:06 3827046 2845143 ims 4719 04/07/20 00:31:18 9:51 0 0 nxtgonpho no APPLE 'PHONES 4720 04/07/20 00:41:08 45:54 192 0 nxtgonpho no APPLE 'PHONES 4721 04/07/20 00:41:09 45:54 0 0 nxtgonpho no APPLE 'PHONES 4722 04/07/20 01:11:55 60:00 7204 4680 ims 4723 04/07/20 01:27:03 16:02 0 0 nxtgenpho ne APPLE 'PHONES 4724 04/07/20 01:43:04 2:15 192 0 nxtgenpho ne APPLE 'PHONES 4725 04/07/20 01:43:05 2:16 0 0 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 194 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171114 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343172

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. cro AT&T Run Date: Run Time: Data Usage For: 06/17/2020 MI= Item Conn. Date Conn. Time (OTC) 4726 04/07/20 01:45:20 4727 04/07/20 01:52:26 4728 04/07/20 01:52:27 4729 04/07/20 01:54:36 4730 04/07/20 01:55:08 4731 04/07/20 01:55:09 4732 04/07/20 01:57:12 4733 04/07/20 02:00:57 4734 04/07/20 02:00:58 4735 04/07/20 02:09:23 4736 04/07/20 02:11:10 4737 04/07/20 02:11:11 4738 04/07/20 02:11:55 4739 04/07/20 02:20:26 4740 04/07/20 03:02:19 4741 04/07/20 03:02:20 4742 04/07/20 03:04:26 4743 04/07/20 03:11:55 4744 04/07/20 03:15:42 4745 04/07/20 03:15:42 4746 04/07/20 03:27:57 Originating Number AT Bytes Bytes Apn DMZ IMSI MAKE MODEL Up Dn 7:07 0 0 nxtgenpho APPLE !PHONES ne 2:09 192 0 nxtgonpho APPLE !PHONES ne 2:09 0 0 nxtgonpho APPLE !PHONES ne 0:33 0 0 nxtgonphe APPLE !PHONES ne 2:03 192 0 nxtgonphe APPLE !PHONES ne 2:03 0 0 nxtgonphe APPLE !PHONES ne 3:46 0 0 nxtgonphe APPLE !PHONES ne 8:25 192 0 nxtgonphe APPLE !PHONES ne 8:25 0 0 nxtgonphe APPLE !PHONES ne 1:48 0 0 nxtgenphe APPLE !PHONES ne 9:15 192 0 nxtgonphe APPLE !PHONES ne 9:15 0 0 nxtgonphe APPLE !PHONES ne 60:00 8496 2928 ims 41:54 0 0 nxtgenphe APPLE !PHONES ne 2:06 192 0 nxtgonphe APPLE !PHONES ne 2:06 0 0 nxtgenphe APPLE !PHONES ne 11:16 0 0 nxtgonphe APPLE !PHONES ne 58:22 16460 9500 ims 12:14 192 0 nxtgenphe APPLE !PHONES ne 12:15 0 0 nxtgenphe APPLE !PHONES ne 10:00 192 0 nxtgenphe APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 195 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171115 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343173

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. „so AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Tame (OTC) Originating Number ET Bytos Up Bytes Apn Dn TMEI INSI MAR MODEL 4747 04/07/20 03:27:58 60:00 0 Onactgonpho no APPIZ 'PROEM 4748 04/07/20 03:39:43 35:30 15340 8152 isms 4749 04/07/20 04:10:16 25:55 7232 6866 isms APPIZ 'PROEM 4750 04/07/20 04:10:17 25:55 6798 7076 isms APPIZ 'PROEM 4751 04/07/20 04:25:53 60:00 8737 6350 isms 4752 04/07/20 04:27:58 60:00 0 Onactgonpho no APPIZ 'PROEM 4753 04/07/20 04:36:06 60:00 24696 14261 ims 4754 04/07/20 05:25:53 4:10 0 0 ims 4755 04/07/20 05:27:58 60:00 0 Onactgonpho ne APPIZ 'PROEM 4756 04/07/20 05:30:03 60:00 15001 8802 ims 4757 04/07/20 05:36:06 60:00 0 0 ims 4758 04/07/20 06:27:58 17:38 0 Onactgonpho ne APPIZ 'PROEM 4759 04/07/20 06:30:03 60:00 8388 3036 ims 4760 04/07/20 06:36:06 60:00 0 0 ims 4761 04/07/20 06:45:35 240:02 192 Onactgonpho ne APPLE 'PHONES 4762 04/07/20 06:45:36 60:00 0 0 nxtgonpho ne APPLE 'PHONES 4763 04/07/20 07:30:03 60:00 8388 2928 ims 4764 04/07/20 07:36:06 60:00 0 0 ims 4765 04/07/20 07:45:36 60:00 0 0 nxtgonpho ne APPLE 'PHONES 4766 04/07/20 08:30:03 60:00 6924 2912 ims 4767 04/07/20 08:36:06 53:11 0 0 ims 4768 04/07/20 08:45:36 60:00 0 0 nxtgonpho no APPLE 'PHONES 4769 04/07/20 09:30:03 60:00 8604 3052 ims 4770 04/07/20 09:45:36 60:00 0 Onactgonpho no APPLE !PHONES 4771 04/07/20 10:30:03 60:00 15312 5752 ims 4772 04/07/20 10:45:36 0:02 0 0 nxtgonpho no APPLE !PHONES 4773 04/07/20 10:45:39 123:35 192 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 196 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171116 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343174

..020 MOBILITY 4Illo AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm ktes `-a. AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Tame: Data Usage For: Item Conn. Date 06/17/2020 Sim Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn EBBS IMSI MAKE MODEL 4774 04/07/20 10:45:40 60:00 0 Onmtgonphe ne APPLE !PHONES 4775 04/07/20 11:30:03 32:17 4980 1696 ims 4776 04/07/20 11:45:40 60:00 0 0 nmtgonphe ne APPLE !PHONES 4777 04/07/20 12:01:57 60:00 0 0 ims 4778 04/07/20 12:02:20 60:00 17933 10006 ims 4779 04/07/20 12:45:40 3:35 0 Onmtgonphe ne APPLE !PHONES 4780 04/07/20 12:49:15 6:50 0 0 nmtgonphe ne APPLE !PHONES 4781 04/07/20 12:56:04 15:29 192 0 nmtgonphe ne APPLE !PHONES 4782 04/07/20 12:56:05 15:29 0 0 nmtgonphe ne APPLE !PHONES 4783 04/07/20 13:01:57 37:07 0 0 ims 4784 04/07/20 13:02:20 36:11 8248 4160 ims 4785 04/07/20 13:11:34 4:46 0 Onmtgonphe ne APPLE !PHONES 4786 04/07/20 13:16:19 21:35 192 0 nmtgonphe ne APPLE !PHONES 4787 04/07/20 13:16:20 21:36 0 0 nmtgonphe ne APPLE !PHONES 4788 04/07/20 13:37:55 56:30 0 0 nmtgonphe ne APPLE !PHONES 4789 04/07/20 13:39:05 55:37 18325 11487 ims 4790 04/07/20 13:41:18 14:30 11530 6588 ims APPLE !PHONES 4791 04/07/20 13:55:48 5:22 3500 1324 ims APPLE !PHONES 4792 04/07/20 13:55:48 5:22 2688 1324 ims APPLE !PHONES 4793 04/07/20 14:01:14 32:20 10000 7462 ims APPLE !PHONES 4794 04/07/20 14:33:34 10:31 3640 1448 ims APPLE !PHONES 4795 04/07/20 14:34:25 50:47 192 Onmtgonphe ne APPLE !PHONES 4796 04/07/20 14:34:26 50:47 0 0 nmtgonphe ne APPLE !PHONES 4797 04/07/20 14:34:41 50:31 15084 17479 ims APPLE !PHONES 4798 04/07/20 14:34:42 50:31 17108 14820 ims APPLE !PHONES 4799 04/07/20 14:35:10 49:00 6345718 9090635 ims APPLE !PHONES 4800 04/07/20 14:35:11 49:00 9090077 6345718 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 197 customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171117 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343175

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro ‘sel. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 MI= Conn. Originating ET Tine Number (OTC/ Bytes Up Bytes Apn DOLT INSI MAKE Dn MODEL 4801 04/07/20 15:25:14 6:35 0 Onxtgonpho ne APPLE !PHONES 4802 04/07/20 15:25:16 0:38 8144 6212 Las APPLE !PHONES 4803 04/07/20 15:25:54 60:00 14000 4932 Las APPLE !PHONES 4804 04/07/20 15:31:48 8:15 192 Onxtgonpho ne APPLE !PHONES 4805 04/07/20 15:31:49 8:16 0 Onxtgonpho ne APPLE !PHONES 4806 04/07/20 15:40:04 7:32 0 Onxtgonpho ne APPLE !PHONES 4807 04/07/20 15:47:36 3:56 192 Onxtgonpho ne APPLE !PHONES 4808 04/07/20 15:47:37 3:56 0 Onxtgonpho ne APPLE !PHONES 4809 04/07/20 15:51:33 60:00 0 Onxtgonpho ne APPLE !PHONES 4810 04/07/20 16:25:54 46:30 16116 10480 Las APPLE !PHONES 4811 04/07/20 16:51:33 2:27 0 Onxtgonpho ne APPLE !PHONES 4812 04/07/20 16:54:00 2:03 192 Onxtgonpho ne APPLE !PHONES 4813 04/07/20 16:54:01 2:03 0 Onxtgonpho ne APPLE !PHONES 4814 04/07/20 16:56:04 17:38 0 Onxtgonpho ne APPLE !PHONES 4815 04/07/20 17:02:56 0:30 2502 14856 Las APPLE !PHONES 4816 04/07/20 17:12:24 1:18 328 372 Las APPLE !PHONES 4817 04/07/20 17:13:41 8:30 192 Onxtgonpho ne APPLE 'PHONES 4818 04/07/20 17:13:42 8:30 0 Onxtgonpho ne APPLE 'PHONES 4819 04/07/20 17:13:43 10:43 8209 6216 Las 4820 04/07/20 17:18:59 3:12 7136 6746 Las APPLE 'PHONES 4821 04/07/20 17:19:01 3:11 6746 6872 Las APPLE 'PHONES 4822 04/07/20 17:22:12 21:13 192 Onxtgonpho ne APPLE 'PHONES 4823 04/07/20 17:22:13 21:12 7214 6900 Las APPLE 'PHONES 4824 04/07/20 17:22:13 21:14 0 Onxtgonpho ne APPLE 'PHONES 4825 04/07/20 17:22:14 21:13 6792 6950 Las APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 198 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171118 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343176

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ‘4% ,1/4..77,4 00 AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Numbor ET Bytes Up Bytes Apn Dn ENE! INSI MAKE MODEL 4826 04/07/20 17:43:26 45:37 0 Onxtgonpho ne APPLE !PHONES 4827 04/07/20 17:43:34 37:01 13367 7676 ims APPLE !PHONES 4828 04/07/20 18:20:35 0:23 30740 1324 ims APPLE !PHONES 4829 04/07/20 18:20:35 0:23 2704 1324 ims APPLE !PHONES 4830 04/07/20 18:20:58 60:00 10380 4080 ims APPLE !PHONES 4831 04/07/20 18:29:02 2:03 192 Onxtgonpho ne APPLE !PHONES 4832 04/07/20 18:29:03 2:03 0 0 nxtgenpho ne APPLE !PHONES 4833 04/07/20 18:31:06 0:59 0 0 nxtgenpho ne APPLE !PHONES 4834 04/07/20 18:32:04 2:05 192 0 nxtgenpho ne APPLE !PHONES 4835 04/07/20 18:32:05 2:05 0 0 nxtgenpho ne APPLE !PHONES 4836 04/07/20 18:34:10 52:08 0 0 nxtgenpho ne APPLE !PHONES 4837 04/07/20 19:20:58 45:52 7064 2880 ims APPLE !PHONES 4838 04/07/20 19:26:17 2:03 192 Onxtgonpho ne APPLE !PHONES 4839 04/07/20 19:26:18 2:03 0 0 nxtgenpho ne APPLE !PHONES 4840 04/07/20 19:28:21 14:08 0 0 nxtgenpho ne APPLE !PHONES 4841 04/07/20 19:42:28 2:04 192 0 nxtgenpho ne APPLE !PHONES 4842 04/07/20 19:42:29 2:04 0 0 nxtgenpho ne APPLE !PHONES 4843 04/07/20 19:44:33 21:02 0 0 nxtgenpho ne APPLE !PHONES 4844 04/07/20 20:05:34 2:03 192 0 nxtgenpho ne APPLE !PHONES 4845 04/07/20 20:05:35 2:03 0 0 nxtgenpho ne APPLE !PHONES 4846 04/07/20 20:06:49 0:48 7264 6992 ims APPLE !PHONES 4847 04/07/20 20:06:50 0:48 6740 7000 ims APPLE !PHONES 4848 04/07/20 20:07:06 55:54 14013 10990 ims 4849 04/07/20 20:07:38 60:00 0 0 nxtgenpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 199 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171119 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343177

pu020 MOBILITY `""s° idlli AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm •-as. AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ‘-'74444ssel UTZ. Run Data: Run Tina: Data Usage For: Item Conn. Date 06/17/2020 MI= Conn. Time (OTC) Originating Number ET Bytos Up Bytes Apn Dn Tl@I INSI NAAS MODEL 4850 04/07/20 20:10:47 0:48 8152 6944 ims APPLE !PHONES 4851 04/07/20 20:11:35 51:24 7296 2772 ims APPLE !PHONES 4852 04/07/20 21:03:00 0:00 0 0 ims APPLE !PHONES 4853 04/07/20 21:03:08 60:00 22855 14615 ims 4854 04/07/20 21:07:38 44:18 0 0 nxtgenpho ne APPLE !PHONES 4855 04/07/20 21:51:56 4:22 192 0 nxtgenpho ne APPLE !PHONES 4856 04/07/20 21:51:57 4:22 0 0 nxtgenpho ne APPLE !PHONES 4857 04/07/20 21:56:19 4:13 0 0 nxtgenpho ne APPLE !PHONES 4858 04/07/20 22:00:31 2:03 192 0 nxtgenpho ne APPLE !PHONES 4859 04/07/20 22:00:32 2:03 0 0 nxtgenpho ne APPLE !PHONES 4860 04/07/20 22:02:35 9:28 0 0 nxtgenpho ne APPLE !PHONES 4861 04/07/20 22:03:08 60:00 22776 15016 ims 4862 04/07/20 22:12:02 2:04 192 0 nxtgenpho ne APPLE !PHONES 4863 04/07/20 22:12:03 2:04 0 0 nxtgenpho ne APPLE !PHONES 4864 04/07/20 22:14:07 19:48 0 0 nxtgenpho ne APPLE !PHONES 4865 04/07/20 22:24:33 0:33 5274 33524 ims 4866 04/07/20 22:33:55 2:28 192 0 nxtgenpho no APPLE !PHONES 4867 04/07/20 22:33:56 2:28 0 0 nxtgonpho no APPLE !PHONES 4868 04/07/20 22:36:24 60:00 0 0 nxtgonpho no APPLE !PHONES 4869 04/07/20 22:39:24 60:00 18166 10174 ims 4870 04/07/20 23:03:08 60:00 0 0 ims 4871 04/07/20 23:36:24 8:55 0 0 nxtgenpho ne APPLE !PHONES 4872 04/07/20 23:39:24 60:00 10068 3144 ims 4873 04/07/20 23:45:18 2:03 192 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 200 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171120 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343178

pm. MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cr. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 MI= Conn. Time (OTC) Originating Number Br Bytes Up Bytes Apn Dn L@1 IMSI MAKE MODEL 4874 04/07/20 23:45:19 2:03 0 0 nxtgenpho ne APPLE 'PEONES 4875 04/07/20 23:47:22 3:54 0 0 nxtgenpho ne APPLE 'PEONES 4876 04/07/20 23:51:15 2:03 192 0 nxtgenpho ne APPLE 'PEONES 4877 04/07/20 23:51:16 2:04 0 0 nxtgenpho ne APPLE 'PEONES 4878 04/07/20 23:53:20 9:20 0 0 nxtgenpho ne APPLE 'PHONES 4879 04/08/20 00:02:39 9:08 192 0 nxtgenpho ne APPLE 'PHONES 4880 04/08/20 00:02:40 9:08 0 0 nxtgenpho ne APPLE 'PHONES 4881 04/08/20 00:03:08 60:00 0 0 ims 4882 04/08/20 00:11:48 60:00 0 0 nxtgenpho ne APPLE 'PHONES 4883 04/08/20 00:39:24 12:41 0 0 ims APPLE 'PHONES 4884 04/08/20 00:52:05 0:52 2820 1324 ims APPLE 'PHONES 4885 04/08/20 00:52:05 0:52 2688 1324 ims APPLE 'PHONES 4886 04/08/20 00:53:01 1:21 6672 5904 ims APPLE 'PHONES 4887 04/08/20 00:54:26 1:27 6672 5963 ims APPLE 'PHONES 4888 04/08/20 00:55:53 36:35 20352 8940 ims APPLE 'PHONES 4889 04/08/20 01:03:08 60:00 0 0 ims 4890 04/08/20 01:11:48 18:16 0 Onstgonpho ne APPLE 'PHONES 4891 04/08/20 01:30:03 2:26 192 0 nxtgenpho ne APPLE 'PHONES 4892 04/08/20 01:30:04 2:26 0 0 nxtgenpho ne APPLE IPHONE8 4893 04/08/20 01:32:30 10:52 0 0 nxtgenpho no APPLE 'PHONES 4894 04/08/20 01:32:34 0:17 7270 3849 ims APPLE 'PHONES 4895 04/08/20 01:32:51 1:12 8240 5296 ims APPLE 'PHONES 4896 04/08/20 01:34:03 8:08 2860 1432 ims APPLE 'PHONES 4897 04/08/20 01:42:11 0:35 5072 1680 ims APPLE 'PHONES 4898 04/08/20 01:42:46 0:17 3484 2324 ims APPLE 'PHONES 4899 04/08/20 01:43:03 60:00 12028 4220 ims APPLE 'PHONES 4900 04/08/20 01:43:21 6:30 192 Onstgonpho no APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 201 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171121 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343179

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. 45, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn L@I IISI SASE MOM 4901 04/08/20 01:43:22 6:30 0 0 nxtgonpho no APPLE 'PEONES 4902 04/08/20 01:49:52 60:00 0 0 nxtgonpho no APPLE 'PEONES 4903 04/08/20 02:03:08 35:59 0 0 ims 4904 04/08/20 02:43:03 60:00 7064 2756 ims APPLE !PHONES 4905 04/08/20 02:49:52 60:00 0 0 nxtgonpho no APPLE IPHONE8 4906 04/08/20 03:43:03 60:00 8480 3020 ims APPLE !PHONES 4907 04/08/20 03:49:52 60:00 0 0 nxtgonpho no APPLE !PHONES 4908 04/08/20 04:43:03 60:00 8604 3128 isms APPLE !PHONES 4909 04/08/20 04:49:52 60:00 0 0 nxtgonpho no APPLE !PHONES 4910 04/08/20 05:43:03 60:00 9928 3144 ims APPLE !PHONES 4911 04/08/20 05:49:52 0:01 0 0 nxtgonpho no APPLE !PHONES 4912 04/08/20 05:49:56 60:00 0 0 nxtgonpho no APPLE !PHONES 4913 04/08/20 06:43:03 60:00 10256 4364 ims APPLE !PHONES 4914 04/08/20 06:49:56 60:00 0 0 nxtgonpho no APPLE !PHONES 4915 04/08/20 07:43:03 60:00 10272 4080 ims APPLE !PHONES 4916 04/08/20 07:49:56 60:00 0 0 nxtgenpho no APPLE !PHONES 4917 04/08/20 08:43:03 60:00 6848 2648 ims APPLE !PHONES 4918 04/08/20 08:49:56 60:00 0 0 nxtgenpho no APPLE !PHONES 4919 04/08/20 09:43:03 60:00 6848 2756 ims APPLE !PHONES 4920 04/08/20 09:49:56 0:00 0 0 nxtgonpho no APPLE !PHONES 4921 04/08/20 09:49:58 60:00 0 0 nxtgonpho no APPLE !PHONES 4922 04/08/20 10:43:03 60:00 8496 3128 ims APPLE !PHONES 4923 04/08/20 10:49:58 60:00 0 0 nxtgonpho no APPLE !PHONES 4924 04/08/20 11:43:03 60:00 16852 6076 ims APPLE !PHONES 4925 04/08/20 11:49:58 39:44 0 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 202 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171122 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343180

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. dro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Numbor ET Bytes Up Bytes Apn LBSI IMSI MAKS Dn MODEL 4926 04/08/20 12:29:43 58:16 0 0 nxtgonpho ne APPLE 'PHONES 4927 04/08/20 12:43:03 48:33 9912 3888 isms APPLE 'PHONES 4928 04/08/20 13:20:59 36:55 13827 10907 isms 4929 04/08/20 13:31:36 44:51 20550 12782 isms 4930 04/08/20 13:57:54 39:18 15283 11088 isms 4931 04/08/20 14:16:27 19:57 10035 6461 isms 4932 04/08/20 14:37:12 2:49 11278 6408 isms APPLE 'PHONES 4933 04/08/20 14:38:10 60:00 0 0 nxtgenpho ne APPLE 'PHONES 4934 04/08/20 14:40:01 1:06 3536 1448 isms APPLE 'PHONES 4935 04/08/20 14:40:01 1:06 3404 1448 isms APPLE 'PHONES 4936 04/08/20 14:41:07 60:00 13676 4592 isms APPLE 'PHONES 4937 04/08/20 15:38:10 0:15 0 0 nxtgonpho ne APPLE 'PHONES 4938 04/08/20 15:41:07 39:31 3408 1432 isms APPLE 'PHONES 4939 04/08/20 15:56:05 2:10 192 Onxtgonpho ne APPLE 'PHONES 4940 04/08/20 15:56:06 2:10 0 0 nxtgonpho ne APPLE 'PHONES 4941 04/08/20 15:58:16 16:34 0 0 nxtgonpho ne APPLE 'PHONES 4942 04/08/20 16:14:49 8:15 192 0 nxtgonpho ne APPLE 'PHONES 4943 04/08/20 16:14:50 8:15 0 0 nxtgonpho ne APPLE 'PHONES 4944 04/08/20 16:22:45 60:00 18464 9488 isms 4945 04/08/20 16:23:05 15:54 0 0 nxtgonpho ne APPLE 'PHONES 4946 04/08/20 16:38:58 2:10 192 0 nxtgonpho ne APPLE 'PHONES 4947 04/08/20 16:38:59 2:10 0 0 nxtgonpho ne APPLE 'PHONES 4948 04/08/20 16:41:09 1:44 0 0 nxtgonpho ne APPLE 'PHONES 4949 04/08/20 16:42:52 0:42 192 0 nxtgonpho ne APPLE 'PHONES 4950 04/08/20 16:42:53 0:42 0 0 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 203 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171123 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343181

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:36:56pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro ‘•- .al. AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 IS= Conn. Originating Time Numbor (OTC) ET Bytes Up Bytes Apn Dn DMZ INEI MAKE MODEL 4951 04/08/20 16:43:35 1:06 0 0nmtgonpho ne APPLE 'PHONES 4952 04/08/20 16:44:41 2:03 192 0nmtgonpho ne APPLE 'PHONES 4953 04/08/20 16:44:42 2:03 0 0nmtgonpho ne APPLE 'PHONES 4954 04/08/20 16:46:45 23:13 0 0nmtgonpho ne APPLE 'PHONES 4955 04/08/20 17:09:57 9:19 192 0nmtgonpho ne APPLE 'PHONES 4956 04/08/20 17:09:58 9:19 0 0nmtgonpho ne APPLE 'PHONES 4957 04/08/20 17:19:17 11:18 0 0nmtgonpho ne APPLE 'PHONES 4958 04/08/20 17:22:45 1:12 0 0 ims APPLE 'PHONES 4959 04/08/20 17:23:56 2:15 4000 1464 ims APPLE 'PHONES 4960 04/08/20 17:23:57 2:14 3936 1464 ims APPLE 'PHONES 4961 04/08/20 17:26:11 59:38 8852 3144 ims APPLE 'PHONES 4962 04/08/20 17:30:34 2:36 192 0nmtgonpho ne APPLE 'PHONES 4963 04/08/20 17:30:35 2:36 0 0nmtgonpho ne APPLE 'PHONES 4964 04/08/20 17:33:11 22:30 0 0nmtgonpho ne APPLE 'PHONES 4965 04/08/20 17:55:41 2:03 192 0nmtgonpho ne APPLE 'PHONES 4966 04/08/20 17:55:42 2:03 0 0nmtgonpho ne APPLE 'PHONES 4967 04/08/20 17:57:45 2:17 0 0nmtgonpho ne APPLE 'PHONES 4968 04/08/20 18:00:01 1:14 192 0nmtgonpho ne APPLE 'PHONES 4969 04/08/20 18:00:02 1:14 0 0nmtgonpho ne APPLE 'PHONES 4970 04/08/20 18:01:16 6:09 0 0nmtgonpho ne APPLE 'PHONES 4971 04/08/20 18:07:24 8:17 192 0nmtgonpho ne APPLE 'PHONES 4972 04/08/20 18:07:25 8:17 0 0nmtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 204 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171124 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343182

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Tine: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Mtienhas. ET Bytes Up Bytes Apn Dn DOLT IM9I MAKE MODEL 4973 04/08/20 18:15:42 5:36 0 0 nntgonpho no APPLE 'PHONES 4974 04/08/20 18:21:17 2:10 192 0 nntgonpho no APPLE 'PHONES 4975 04/08/20 18:21:18 2:11 0 0 nntgonpho no APPLE 'PHONES 4976 04/08/20 18:21:19 2:08 7136 6814 ins APPLE 'PHONES 4977 04/08/20 18:21:20 2:09 6746 6872 ins APPLE 'PHONES 4978 04/08/20 18:23:29 14:17 0 0 nntgonpho no APPLE 'PHONES 4979 04/08/20 18:23:30 14:16 6676 6000 ins APPLE 'PHONES 4980 04/08/20 18:37:45 2:11 192 0 nntgonpho no APPLE 'PHONES 4981 04/08/20 18:37:46 2:10 6246 6674 ins APPLE 'PHONES 4982 04/08/20 18:37:46 2:11 0 0nntgonpho no APPLE 'PHONES 4983 04/08/20 18:37:48 2:09 6674 5982 ins APPLE 'PHONES 4984 04/08/20 18:39:57 7:06 0 0 nntgonpho no APPLE 'PHONES 4985 04/08/20 18:39:59 7:04 8478 8108 ins APPLE 'PHONES 4986 04/08/20 18:47:03 1:04 0 0 nntgonpho ne APPLE 'PHONES 4987 04/08/20 18:48:06 47:06 192 0 nntgonpho ne APPLE 'PHONES 4988 04/08/20 18:48:07 47:06 0 0 nntgonpho ne APPLE 'PHONES 4989 04/08/20 18:48:12 47:00 7500 10382 ins APPLE 'PHONES 4990 04/08/20 18:48:13 47:00 10382 7344 ins APPLE 'PHONES 4991 04/08/20 19:35:13 4:52 0 0nntgonpho no APPLE 'PHONES 4992 04/08/20 19:35:16 4:49 9386 6194 ins APPLE 'PHONES 4993 04/08/20 19:40:04 2:03 192 0 nntgonpho no APPLE 'PHONES 4994 04/08/20 19:40:05 2:03 0 0 nntgonpho no APPLE 'PHONES 4995 04/08/20 19:40:20 1:47 6228 6672 ins APPLE 'PHONES 4996 04/08/20 19:40:21 1:47 6672 5964 ins APPLE 'PHONES 4997 04/08/20 19:42:08 18:18 0 0 nntgonpho no APPLE 'PHONES 4998 04/08/20 19:42:10 14:47 6666 5982 ins APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 205 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171125 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343183

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:37:57pm .1/47:i ""s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC/ Originating Number ET Bytes Up Bytes Apn Dn 4999 04/08/20 19:57:05 60:00 36371 17916 ims 5000 04/08/20 19:59:48 18:29 1212540 3937406 ims 5001 04/08/20 20:00:25 14:37 192 0nmtgonpho ne 5002 04/08/20 20:00:26 14:37 0 0 nmtgonpho ne 5003 04/08/20 20:15:03 1:07 0 0 nmtgonpho ne 5004 04/08/20 20:16:09 8:07 192 0 nmtgonpho ne 5005 04/08/20 20:16:10 8:07 0 0 nxtgenpho ne 5006 04/08/20 20:24:17 60:00 0 0 nxtgenpho ne 5007 04/08/20 20:57:05 60:00 8356 3004 ims 5008 04/08/20 21:24:17 34:57 0 0 nmtgonpho ne 5009 04/08/20 21:57:05 60:00 9928 3252 ims 5010 04/08/20 21:59:14 9:19 192 0 nmtgonpho ne 5011 04/08/20 21:59:15 9:20 0 0 nmtgonpho ne 5012 04/08/20 22:08:35 31:30 0 0 nmtgonpho ne 5013 04/08/20 22:40:04 8:16 192 0 nmtgonpho ne 5014 04/08/20 22:40:06 8:15 0 0 nmtgonpho ne 5015 04/08/20 22:48:21 5:35 0 0 nmtgonpho ne 5016 04/08/20 22:53:55 7:12 192 0 nmtgonpho ne 5017 04/08/20 22:53:57 7:11 0 0 nmtgonpho ne 5018 04/08/20 22:57:05 60:00 12136 4344 ims 5019 04/08/20 23:01:08 1:34 0 0 nmtgonpho ne 5020 04/08/20 23:02:41 8:21 192 0 nmtgonpho ne 5021 04/08/20 23:02:42 8:21 0 0 ructgenpho ne MAKE MODEL APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 206 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171126 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343184

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:36:56pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ceo. ‘•- .s. AT&T Run Date: Run Tine: Data Usage For: Item Conn. Date 5022 04/08/20 5023 04/08/20 5024 04/09/20 5025 04/09/20 5026 04/09/20 5027 04/09/20 5028 04/09/20 5029 04/09/20 5030 04/09/20 5031 04/09/20 5032 04/09/20 5033 04/09/20 5034 04/09/20 5035 04/09/20 5036 04/09/20 5037 04/09/20 5038 04/09/20 5039 04/09/20 5040 04/09/20 5041 04/09/20 5042 04/09/20 5043 04/09/20 5044 04/09/20 5045 04/09/20 06/17/2020 Conn. Originating ET Bytes Bytes Apn ENE! INSI MAKE MODEL Ti.. Number Up Dn (OTC) 23:11:03 59:55 0 0 ructgenpho no APPLE 'PHONES 23:57:05 60:00 8604 3020 ism 00:10:58 32:47 192 0 ructgenpho no APPLE 'PHONES 00:10:58 32:48 0 0 ructgenpho no APPLE 'PHONES 00:43:46 49:30 0 0 nxtgenpho no APPLE 'PHONES 00:57:05 60:00 13676 4768 ims 01:33:15 3:23 192 0 nxtgenpho no APPLE 'PHONES 01:33:16 3:23 0 0 nxtgonpho no APPLE 'PHONES 01:36:40 1:09 0 0 nxtgenpho no APPLE 'PHONES 01:37:48 2:03 192 0 nxtgenphe no APPLE 'PHONES 01:37:49 2:03 0 0 nxtgenphe no APPLE 'PHONES 01:39:02 0:49 6244 6686 ims APPLE !PHONES 01:39:03 0:49 6686 5980 ims APPLE !PHONES 01:39:52 2:54 0 0 nxtgonpho no APPLE !PHONES 01:39:54 0:15 6692 6000 ims APPLE !PHONES 01:40:09 0:33 3640 1340 ims APPLE !PHONES 01:40:42 0:39 2628 1340 ims APPLE !PHONES 01:41:21 60:00 10164 3896 ims APPLE !PHONES 01:42:45 2:04 192 Onactgonpho ne APPLE !PHONES 01:42:46 2:04 0 0 nxtgenphe ne APPLE 'PHONES 01:44:50 3:24 0 0 nxtgonpho no APPLE !PHONES 01:48:14 19:41 192 0 nxtgenphe no APPLE 'PHONES 01:48:15 19:41 0 0 nxtgenphe no APPLE 'PHONES 01:57:05 54:47 0 0 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 207 customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171127 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343185

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ‘sel. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 IAA= Conn. Time (UTC) Originating Number ET Bytos Up Bytes Apn L@I IMSI MARE Dn MODEL 5046 04/09/20 02:07:55 1:52 192 0 nxtgenpho no APPLE 'PHONES 5047 04/09/20 02:07:56 1:52 0 0 nxtgonpho no APPLE 'PHONES 5048 04/09/20 02:09:48 24:10 192 0 nxtgonpho no APPLE 'PHONES 5049 04/09/20 02:09:49 24:10 0 0 nxtgonpho no APPLE 'PHONES 5050 04/09/20 02:33:59 58:16 0 0 nxtgonpho no APPLE 'PHONES 5051 04/09/20 02:41:21 60:00 216 0 ims APPLE 'PHONES 5052 04/09/20 02:51:52 60:00 21281 10462 ims 5053 04/09/20 03:41:21 60:00 0 0 ims APPLE 'PHONES 5054 04/09/20 03:51:52 60:00 8496 3036 ims 5055 04/09/20 04:41:21 60:00 0 0 ims APPLE 'PHONES 5056 04/09/20 04:51:52 29:42 4980 1588 ims 5057 04/09/20 05:41:21 60:00 0 0 ims APPLE 'PHONES 5058 04/09/20 06:41:21 1:14 0 0 ims APPLE 'PHONES 5059 04/09/20 12:39:38 1:16 0 Onmtgonpho no APPLE 'PHONES 5060 04/09/20 12:39:50 1:04 8226 8704 ims APPLE 'PHONES 5061 04/09/20 12:40:54 4:31 192 0 nxtgonpho no APPLE 'PHONES 5062 04/09/20 12:40:55 4:31 0 0 nxtgonpho no APPLE 'PHONES 5063 04/09/20 12:42:27 2:58 6225 6646 ims APPLE 'PHONES 5064 04/09/20 12:42:29 2:57 6646 5961 ims APPLE 'PHONES 5065 04/09/20 12:45:26 60:00 0 Onxtgonpho ne APPLE 'PHONES 5066 04/09/20 12:45:31 60:00 13308 10592 ims APPLE 'PHONES 5067 04/09/20 13:45:26 33:02 0 0 nxtgonpho ne APPLE 'PHONES 5068 04/09/20 13:45:31 32:57 2596 1324 ims APPLE 'PHONES 5069 04/09/20 14:18:27 3:29 192 0 nxtgonpho ne APPLE 'PHONES 5070 04/09/20 14:18:28 3:29 0 0 nxtgonpho ne APPLE 'PHONES 5071 04/09/20 14:18:31 3:25 7232 6798 ims APPLE 'PHONES 5072 04/09/20 14:18:32 3:25 6798 6968 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 208 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171128 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343186

MOBILITY pm. AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. h•-.4 AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytos Up Bytes Apn Dn IMSI MUM MODEL 5073 04/09/20 14:21:57 2:17 0 0 nxtgenpho ne APPLE 'PEONES 5074 04/09/20 14:22:01 2:13 6664 5977 ims APPLE 'PEONES 5075 04/09/20 14:24:13 2:05 192 Onxtgonpho ne APPLE 'PEONES 5076 04/09/20 14:24:14 2:05 0 0 nxtgenpho ne APPLE IPEONE8 5077 04/09/20 14:24:16 2:02 7202 6744 ims APPLE 'PHONES 5078 04/09/20 14:24:17 2:02 6744 6850 ims APPLE 'PHONES 5079 04/09/20 14:26:19 5:03 0 0 nxtgenpho ne APPLE 'PHONES 5080 04/09/20 14:26:23 4:59 10870 9856 ims APPLE 'PHONES 5081 04/09/20 14:31:22 9:11 192 Onxtgonpho ne APPLE 'PHONES 5082 04/09/20 14:31:23 9:11 0 0 nxtgonpho ne APPLE 'PHONES 5083 04/09/20 14:31:25 9:08 13898 16793 ims APPLE 'PHONES 5084 04/09/20 14:31:26 9:08 15888 13634 ims APPLE 'PHONES 5085 04/09/20 14:31:39 7:54 1168181 1273192 ims APPLE 'PHONES 5086 04/09/20 14:31:40 7:54 1273192 1168181 ims APPLE 'PHONES 5087 04/09/20 14:40:34 2:03 192 Onxtgonpho no APPLE 'PHONES 5088 04/09/20 14:40:35 2:03 0 0 nxtgonpho no APPLE !PHONES 5089 04/09/20 14:40:43 1:54 6264 6672 ims APPLE !PHONES 5090 04/09/20 14:40:44 1:54 6672 6000 ims APPLE !PHONES 5091 04/09/20 14:42:38 5:51 0 Onxtgonpho no APPLE !PHONES 5092 04/09/20 14:42:42 5:47 8354 7864 ims APPLE !PHONES 5093 04/09/20 14:48:28 2:12 192 Onxtgonpho no APPLE !PHONES 5094 04/09/20 14:48:29 2:12 0 0 nxtgonpho ne APPLE IPHONE8 5095 04/09/20 14:49:33 1:07 7156 6748 ims APPLE 'PHONES 5096 04/09/20 14:49:34 1:07 6748 6892 ims APPLE 'PHONES 5097 04/09/20 14:50:41 2:16 0 Onxtgonpho ne APPLE 'PHONES 5098 04/09/20 14:50:56 2:01 48 0 ims APPLE 'PHONES 5099 04/09/20 14:52:57 13:49 192 0 nxtgonpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 209 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171129 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343187

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn LEI IMSI MAKS MODEL 5100 04/09/20 14:52:58 13:49 0 Onstgonpho ne APPLE 'PHONES 5101 04/09/20 14:53:03 13:43 6312 6682 ism APPLE 'PHONES 5102 04/09/20 14:53:04 13:43 6682 5960 ism APPLE 'PHONES 5103 04/09/20 15:06:47 7:06 0 Onstgonpho ne APPLE 'PHONES 5104 04/09/20 15:08:15 5:38 8934 7979 ism APPLE 'PHONES 5105 04/09/20 15:13:52 16:13 192 Onstgonpho ne APPLE 'PHONES 5106 04/09/20 15:13:53 16:13 0 0 nstgonpho ne APPLE 'PHONES 5107 04/09/20 15:14:14 15:51 7238 7452 ism APPLE 'PHONES 5108 04/09/20 15:14:15 15:51 7452 6974 ism APPLE 'PHONES 5109 04/09/20 15:30:06 8:54 192 Onstgonpho ne APPLE 'PHONES 5110 04/09/20 15:30:07 8:53 6243 6686 ism APPLE 'PHONES 5111 04/09/20 15:30:07 8:54 0 0 nxtgenpho ne APPLE 'PHONES 5112 04/09/20 15:30:08 8:53 6686 5979 ism APPLE 'PHONES 5113 04/09/20 15:39:00 6:19 192 Onstgonpho ne APPLE 'PHONES 5114 04/09/20 15:39:01 6:19 0 Onstgonpho ne APPLE !PHONES 5115 04/09/20 15:39:04 6:15 6262 6672 ism APPLE IPHONE8 5116 04/09/20 15:39:05 6:15 6672 5998 ism APPLE 'PHONES 5117 04/09/20 15:45:20 0:06 0 Onstgonpho ne APPLE 'PHONES 5118 04/09/20 15:45:53 8:04 0 0 nxtgenpho ne APPLE 'PHONES 5119 04/09/20 15:47:28 6:29 10998 8256 ism APPLE 'PHONES 5120 04/09/20 15:53:56 24:15 192 Onstgonpho ne APPLE 'PHONES 5121 04/09/20 15:53:57 24:15 0 0 nstgonpho ne APPLE 'PHONES 5122 04/09/20 15:53:59 24:12 6262 6780 ism APPLE 'PHONES 5123 04/09/20 15:54:00 24:12 6780 5998 ism APPLE 'PHONES 5124 04/09/20 16:18:12 0:38 0 Onstgonpho ne APPLE !PHONES 5125 04/09/20 16:18:15 0:35 6688 5998 ism APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 210 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171130 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343188

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. 1/4-.rns AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 IAA= Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn TERI IMSI MAKE MODEL 5126 04/09/20 16:18:49 8:32 192 Onstgonpho ne APPLE 'PEONES 5127 04/09/20 16:18:51 8:31 0 0 nxtgenpho ne APPLE 'PEONES 5128 04/09/20 16:18:53 8:28 6244 6666 ims APPLE 'PEONES 5129 04/09/20 16:18:54 8:28 6666 5980 ims APPLE 'PHONES 5130 04/09/20 16:27:22 22:13 0 Onstgonpho ne APPLE 'PHONES 5131 04/09/20 16:28:43 20:52 8168 6944 ims APPLE 'PHONES 5132 04/09/20 16:49:34 2:34 192 Onstgonpho ne APPLE 'PHONES 5133 04/09/20 16:49:35 2:34 0 0 nxtgenpho ne APPLE 'PHONES 5134 04/09/20 16:52:09 10:01 192 0 nxtgenpho ne APPLE 'PHONES 5135 04/09/20 16:52:10 10:00 7138 6746 ims APPLE 'PHONES 5136 04/09/20 16:52:10 10:02 0 Onstgonpho ne APPLE 'PHONES 5137 04/09/20 16:52:11 10:01 6746 6874 ims APPLE 'PHONES 5138 04/09/20 17:02:11 2:54 0 0 nxtgenpho ne APPLE 'PHONES 5139 04/09/20 17:02:15 2:50 8958 7944 ims APPLE 'PHONES 5140 04/09/20 17:05:04 8:33 192 0 nxtgenpho ne APPLE 'PHONES 5141 04/09/20 17:05:05 8:34 0 0 nxtgenpho ne APPLE !PHONES 5142 04/09/20 17:05:07 8:30 6224 6688 ims APPLE IPHONE8 5143 04/09/20 17:05:08 8:31 6688 5960 ims APPLE 'PHONES 5144 04/09/20 17:13:38 0:46 0 Onstgonpho ne APPLE 'PHONES 5145 04/09/20 17:13:43 0:41 8390 8080 ims APPLE 'PHONES 5146 04/09/20 17:14:23 21:05 192 0 nxtgenpho ne APPLE !PHONES 5147 04/09/20 17:14:24 21:06 0 0 nxtgenpho ne APPLE !PHONES 5148 04/09/20 17:16:36 18:52 6262 18824 ims APPLE 'PHONES 5149 04/09/20 17:16:37 18:53 6692 5998 ims APPLE 'PHONES 5150 04/09/20 17:35:30 54:43 0 Onstgonpho ne APPLE !PHONES 5151 04/09/20 17:47:03 43:10 9282 7304 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 211 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171131 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343189

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 45, ‘•- . is AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET T11011 Number luTC) Bytes Up Bytes Apn Dn INEZ INS! MAKE MODEL 5152 04/09/20 18:30:12 21:10 192 0nmtgonpho ne APPLE 'PHONES 5153 04/09/20 18:30:13 21:10 0 0 nmtgonpho ne APPLE 'PHONES 5154 04/09/20 18:30:16 21:06 6440 8812 ims APPLE 'PHONES 5155 04/09/20 18:30:16 21:07 8812 6176 ims APPLE 'PHONES 5156 04/09/20 18:51:23 0:28 0 0 nmtgonpho ne APPLE 'PHONES 5157 04/09/20 18:51:50 2:09 192 0 nmtgonpho ne APPLE 'PHONES 5158 04/09/20 18:51:51 2:09 0 0 nmtgonpho ne APPLE 'PHONES 5159 04/09/20 18:54:00 7:49 0 0 nmtgonpho ne APPLE 'PHONES 5160 04/09/20 18:54:02 7:47 6674 5982 ims APPLE 'PHONES 5161 04/09/20 19:01:49 8:25 192 0 nmtgonpho ne APPLE 'PHONES 5162 04/09/20 19:01:50 8:25 0 0 nmtgonpho ne APPLE 'PHONES 5163 04/09/20 19:05:35 4:39 6226 6672 ims APPLE 'PHONES 5164 04/09/20 19:05:36 4:39 6672 5962 ims APPLE 'PHONES 5165 04/09/20 19:10:15 11:12 0 0 nmtgonpho ne APPLE 'PHONES 5166 04/09/20 19:13:55 7:32 6686 5980 ims APPLE 'PHONES 5167 04/09/20 19:21:26 31:08 192 0 nmtgonpho no APPLE 'PHONES 5168 04/09/20 19:21:27 31:08 0 0 nmtgonpho no APPLE 'PHONES 5169 04/09/20 19:22:05 30:29 31967 81232 ims APPLE 'PHONES 5170 04/09/20 19:22:06 30:29 46600 36287 ims APPLE 'PHONES 5171 04/09/20 19:29:26 0:17 208 0 ims APPLE 'PHONES 5172 04/09/20 19:29:27 0:16 0 208 ims APPLE 'PHONES 5173 04/09/20 19:29:54 0:26 0 0 ims APPLE 'PHONES 5174 04/09/20 19:37:26 0:27 8044 5083 ims APPLE 'PHONES 5175 04/09/20 19:37:27 0:27 4623 8044 ims APPLE 'PHONES 5176 04/09/20 19:48:21 0:03 0 0 ims APPLE 'PHONES 5177 04/09/20 19:52:35 0:52 0 0nmtgonpho no APPLE 'PHONES 5178 04/09/20 19:52:39 0:48 7416 6104 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 212 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171132 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343190

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 45, AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 Conn. Originating ST Time Number (UTC) Bytes Up Bytes Apn INKS IMSI MAKE Dn MODEL 5179 04/09/20 19:53:26 19:00 192 Onxtgonpho ne APPLE 'PHONES 5180 04/09/20 19:53:27 19:00 0 Onxtgonpho ne APPLE 'PHONES 5181 04/09/20 19:53:30 18:56 6243 6670 ims APPLE 'PHONES 5182 04/09/20 19:53:31 18:56 6670 5979 ims APPLE 'PHONES 5183 04/09/20 20:12:27 8:57 0 Onxtgonpho ne APPLE 'PHONES 5184 04/09/20 20:12:31 8:53 13288 10292 ims APPLE 'PHONES 5185 04/09/20 20:21:23 15:14 192 Onxtgonpho ne APPLE 'PHONES 5186 04/09/20 20:21:24 15:14 0 Onxtgonpho ne APPLE 'PHONES 5187 04/09/20 20:21:26 15:11 6262 25616 ims APPLE 'PHONES 5188 04/09/20 20:21:27 15:11 6784 5998 ims APPLE 'PHONES 5189 04/09/20 20:36:38 0:39 0 Onxtgonpho ne APPLE 'PHONES 5190 04/09/20 20:36:42 0:35 6692 5998 ims APPLE 'PHONES 5191 04/09/20 20:37:17 15:46 192 Onxtgonpho ne APPLE 'PHONES 5192 04/09/20 20:37:18 15:46 0 0 nxtgonpho ne APPLE 'PHONES 5193 04/09/20 20:37:20 15:43 17838 19124 ims APPLE 'PHONES 5194 04/09/20 20:37:21 15:43 18424 17574 ims APPLE 'PHONES 5195 04/09/20 20:39:13 0:27 12546 5521 ims APPLE 'PHONES 5196 04/09/20 20:39:14 0:27 5521 12546 ims APPLE 'PHONES 5197 04/09/20 20:53:04 5:24 0 Onxtgonpho ne APPLE 'PHONES 5198 04/09/20 20:53:08 5:20 8152 6920 ims APPLE 'PHONES 5199 04/09/20 20:58:27 59:43 192 Onxtgonpho ne APPLE 'PHONES 5200 04/09/20 20:58:28 59:43 0 0 nxtgonpho ne APPLE 'PHONES 5201 04/09/20 20:58:30 59:40 23490 33074 ims APPLE 'PHONES 5202 04/09/20 20:58:31 59:40 29420 23138 ims APPLE 'PHONES 5203 04/09/20 21:03:35 22:19 5259603 4388034 ims APPLE 'PHONES 5204 04/09/20 21:03:36 22:19 4388034 5259603 ims APPLE 'PHONES 5205 04/09/20 21:29:43 28:03 4870778 3178523 ims APPLE 'PHONES 5206 04/09/20 21:29:44 28:02 3178523 4870778 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 213 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171133 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343191

MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating AT Time Number (UTC) Bytes Up Bytes Apn EMBI IMSI MAKE Dn 5207 04/09/20 21:58:11 19:57 0 Onactgonpho ne APPLE 5208 04/09/20 21:58:14 19:54 6682 5961 ims APPLE 5209 04/09/20 22:18:07 14:26 192 Onxtgonpho ne APPLE 5210 04/09/20 22:18:08 14:26 0 0 nactgonpho ne APPLE 5211 04/09/20 22:18:11 14:22 6225 6668 ims APPLE 5212 04/09/20 22:18:12 14:22 6668 5961 ims APPLE 5213 04/09/20 22:32:34 0:37 0 0 nxtgenpho ne APPLE 5214 04/09/20 22:33:11 14:33 192 0 nactgonpho ne APPLE 5215 04/09/20 22:33:12 14:33 0 0 nactgonpho ne APPLE 5216 04/09/20 22:33:17 14:27 14436 17820 ims APPLE 5217 04/09/20 22:33:18 14:27 16610 14172 ims APPLE 5218 04/09/20 22:33:53 13:26 1717807 2636672 ims APPLE 5219 04/09/20 22:33:54 13:26 2636672 1717807 ims APPLE 5220 04/09/20 22:47:45 1:23 0 0 nxtgenpho ne APPLE 5221 04/09/20 22:47:49 1:19 6690 5980 ims APPLE 5222 04/09/20 22:49:07 4:55 192 Onxtgonpho ne APPLE 5223 04/09/20 22:49:08 4:55 0 0 nxtgenpho ne APPLE 5224 04/09/20 22:49:10 4:52 12820 13228 ims APPLE 5225 04/09/20 22:49:11 4:52 13228 12556 ims APPLE 5226 04/09/20 22:49:23 4:10 613278 833749 ims APPLE 5227 04/09/20 22:49:24 4:10 832938 613278 ims APPLE 5228 04/09/20 22:54:02 18:15 192 Onxtgonpho ne APPLE 5229 04/09/20 22:54:03 18:16 0 0 nictgonpho ne APPLE 5230 04/09/20 22:54:31 17:46 7136 49428 ims APPLE 5231 04/09/20 22:54:32 17:47 6756 6872 ims APPLE 5232 04/09/20 23:12:19 22:57 0 0 nxtgenpho ne APPLE 5233 04/09/20 23:14:25 20:51 21192 21367 ims APPLE MODEL 'PROMO 'PROMO 'PROMO !PHONES IPHONE8 IPHONE8 IPHONE8 !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 214 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171134 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343192

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 1/4ro AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Conn. Date Time (UTC) 5234 04/09/20 23:32:08 5235 04/09/20 23:33:28 5236 04/09/20 23:35:15 5237 04/09/20 23:35:16 5238 04/09/20 23:35:18 5239 04/09/20 23:35:19 5240 04/09/20 23:37:19 5241 04/09/20 23:37:23 5242 04/09/20 23:38:02 5243 04/09/20 23:38:03 5244 04/09/20 23:38:05 5245 04/09/20 23:38:06 5246 04/10/20 00:24:34 5247 04/10/20 00:24:35 5248 04/10/20 00:30:31 5249 04/10/20 00:30:34 5250 04/10/20 00:31:09 5251 04/10/20 00:31:10 5252 04/10/20 00:31:12 5253 04/10/20 00:31:13 5254 04/10/20 01:31:10 5255 04/10/20 01:31:13 5256 04/10/20 02:14:24 5257 04/10/20 02:14:25 5258 04/10/20 02:14:46 5259 04/10/20 02:14:47 5260 04/10/20 02:35:27 Originating Number ET Bytes Bytes Apn L@I IMSI MAKS MODEL Up Dn 0:33 51730 63016 isms APPLE 'PEONES 0:26 44687 70034 isms APPLE 'PEONES 2:03 192 Onatgonpho APPLE 'PEONES ne 2:03 0 0 nxtgonpho APPLE 'PEONES ne 2:00 7214 6788 isms APPLE 'PEONES 2:00 6788 6950 isms APPLE 'PEONES 0:44 0 Onatgonpho APPLE 'PEONES ne 0:40 6672 5964 isms APPLE 'PHONES 52:28 192 0 nxtgonpho APPLE 'PHONES ne 52:28 0 0 nxtgenpho APPLE 'PHONES no 52:25 14044 15264 Les APPLE !PHONES 52:25 15264 13780 Les APPLE !PHONES 2:04 436591 350281 Les APPLE !PHONES 2:04 350002 436591 isms APPLE !PHONES 0:38 0 Onatgonpho APPLE !PHONES ne 0:35 3394 2180 isms APPLE !PHONES 103:15 192 Onatgonpho APPLE !PHONES ne 60:00 0 0 nxtgonpho APPLE !PHONES ne 103:12 12072 15268 isms APPLE !PHONES 60:00 12060 10484 isms APPLE !PHONES 43:15 0 Onatgonpho APPLE !PHONES ne 43:12 2596 1324 isms APPLE !PHONES 21:02 192 0 nxtgonpho APPLE !PHONES ne 21:02 0 0 ructgonpho APPLE !PHONES no 20:40 6264 6676 imp APPLE !PHONES 20:40 6676 6000 imp APPLE !PHONES 60:00 192 Onatgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 215 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171135 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343193

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e s, AT&T Run Date: Run Tame: Data Usage For: Item Conn. Date 06/17/2020 Conn. Tame (UTC) Originating Number ET Bytes Up Bytes Apn Dn DMZ INSI HAKE MODEL 5261 04/10/20 02:35:28 60:00 8816 12226 ims APPLE 'PHONES 5262 04/10/20 02:35:28 60:00 0 0 nxtgonpho no APPLE 'PHONES 5263 04/10/20 02:35:29 60:00 12226 8660 ims APPLE 'PHONES 5264 04/10/20 03:35:28 186:43 17299 25710 ims APPLE 'PHONES 5265 04/10/20 03:35:28 60:00 0 0 nxtgonpho ne APPLE 'PHONES 5266 04/10/20 03:35:29 60:00 21406 15711 ims APPLE 'PHONES 5267 04/10/20 04:35:28 60:00 0 0 nxtgonpho ne APPLE 'PHONES 5268 04/10/20 04:35:29 60:00 4304 1696 ims APPLE 'PHONES 5269 04/10/20 05:22:42 60:00 16977 10370 ims 5270 04/10/20 05:35:28 60:00 0 0 nxtgonpho ne APPLE 'PHONES 5271 04/10/20 05:35:29 60:00 0 0 ims APPLE 'PHONES 5272 04/10/20 06:22:42 60:00 8388 2896 ims 5273 04/10/20 06:35:28 0:01 0 0 nxtgonpho ne APPLE 'PHONES 5274 04/10/20 06:35:29 6:43 0 0 ims APPLE 'PHONES 5275 04/10/20 06:42:11 100:51 192 0 nxtgonpho ne APPLE 'PHONES 5276 04/10/20 06:42:12 60:00 0 0 nxtgonpho ne APPLE 'PHONES 5277 04/10/20 07:22:42 60:00 8372 2912 ims 5278 04/10/20 07:42:12 40:51 0 0 nxtgonpho ne APPLE 'PHONES 5279 04/10/20 08:22:42 60:00 0 0 ims 5280 04/10/20 08:23:03 0:34 0 0 nxtgonpho ne APPLE 'PHONES 5281 04/10/20 08:23:36 1:53 192 0 nxtgonpho ne APPLE 'PHONES 5282 04/10/20 08:23:37 1:53 0 0 nxtgonpho ne APPLE 'PHONES 5283 04/10/20 08:25:30 0:52 0 0 nxtgonpho ne APPLE 'PHONES 5284 04/10/20 08:26:21 0:55 192 0 nxtgonpho ne APPLE 'PHONES 5285 04/10/20 08:26:22 0:55 0 0 nxtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 216 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNI_ 00171136 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343194

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ce. ‘•- .a. ° AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (67C) Bytes Up Bytes Apn Dn EBBE INSI MAKE MODEL 5286 04/10/20 08:27:17 0:05 0 Onxtgonpho ne APPLE !PHONES 5287 04/10/20 08:27:35 3:10 0 Onxtgonpho ne APPLE !PHONES 5288 04/10/20 08:30:44 2:59 192 0 nxtgonpho ne APPLE !PHONES 5289 04/10/20 08:30:45 2:59 0 0 nxtgonpho ne APPLE !PHONES 5290 04/10/20 08:30:51 34:02 17797 12158 ism 5291 04/10/20 08:33:44 2:28 0 0 nxtgonpho ne APPLE !PHONES 5292 04/10/20 08:36:11 5:00 192 0 nxtgonpho no APPLE !PHONES 5293 04/10/20 08:36:13 4:59 0 0 nxtgonpho no APPLE 'PHONES 5294 04/10/20 08:41:12 9:22 0 0 nxtgonpho no APPLE !PHONES 5295 04/10/20 08:50:34 2:10 192 0 nxtgonpho no APPLE !PHONES 5296 04/10/20 08:50:35 2:10 0 0 nxtgonpho no APPLE !PHONES 5297 04/10/20 08:52:45 1:15 0 0 nxtgonpho no APPLE !PHONES 5298 04/10/20 08:53:59 2:56 192 0 nxtgonpho no APPLE !PHONES 5299 04/10/20 08:54:00 2:57 0 0 nxtgonpho no APPLE !PHONES 5300 04/10/20 08:56:56 0:06 0 0 nxtgonpho no APPLE !PHONES 5301 04/10/20 08:58:02 3:39 192 0 nxtgonpho no APPLE !PHONES 5302 04/10/20 08:58:04 3:38 0 0 nxtgonpho no APPLE !PHONES 5303 04/10/20 09:01:42 0:54 0 0 nxtgonpho no APPLE !PHONES 5304 04/10/20 09:02:35 2:08 192 0 nxtgonpho no APPLE !PHONES 5305 04/10/20 09:02:36 2:08 0 0 nxtgonpho no APPLE !PHONES 5306 04/10/20 09:04:43 0:06 0 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 217 customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171137 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343195

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn MKT IMSI NAPS MODEL 5307 04/10/20 09:22:42 60:00 0 0 ims 5308 04/10/20 10:22:42 60:00 0 0 ims 5309 04/10/20 11:22:42 44:03 0 0 ims 5310 04/10/20 11:30:56 8:35 192 Onxtgonpho ne APPLE 'PROMO 5311 04/10/20 11:30:57 8:34 6264 6668 ims APPLE !PHONES 5312 04/10/20 11:30:57 8:35 0 Onxtgonpho ne APPLE IPHONE8 5313 04/10/20 11:30:58 8:34 6668 6000 ims APPLE IPHONE8 5314 04/10/20 11:39:32 1:48 0 Onxtgonpho ne APPLE !PHONES 5315 04/10/20 11:39:34 1:46 8594 6070 ims APPLE !PHONES 5316 04/10/20 11:41:19 14:42 192 Onactgonpho ne APPLE !PHONES 5317 04/10/20 11:41:20 14:41 6228 6670 ims APPLE !PHONES 5318 04/10/20 11:41:20 14:42 0 Onxtgonpho ne APPLE !PHONES 5319 04/10/20 11:41:21 14:41 6670 5964 ims APPLE !PHONES 5320 04/10/20 11:56:02 0:44 0 Onxtgonpho ne APPLE !PHONES 5321 04/10/20 11:56:05 0:41 11394 10004 ims APPLE !PHONES 5322 04/10/20 11:56:45 13:02 192 Onactgonpho ne APPLE !PHONES 5323 04/10/20 11:56:46 13:01 6304 6734 ims APPLE !PHONES 5324 04/10/20 11:56:46 13:02 0 Onmtgonpho no APPLE !PHONES 5325 04/10/20 11:56:47 13:01 6734 6040 ims APPLE !PHONES 5326 04/10/20 12:09:21 55:07 16157 8192 ims 5327 04/10/20 12:09:48 1:39 0 Onmtgonpho no APPLE !PHONES 5328 04/10/20 12:11:26 24:08 192 0 nxtgonpho ne APPLE !PHONES 5329 04/10/20 12:11:27 24:08 0 0 nxtgonpho ne APPLE !PHONES 5330 04/10/20 12:35:35 10:15 0 0 nxtgonpho ne APPLE !PHONES 5331 04/10/20 12:45:49 2:05 192 0 nxtgonpho ne APPLE !PHONES 5332 04/10/20 12:45:50 2:05 0 0 nxtgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 218 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171138 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343196

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ‘•-. 1. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 "MI= Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn DOLT INSI MAKE MODEL 5333 04/10/20 12:47:55 0:54 0 0 nxtgenpho ne APPLE 'PHONES 5334 04/10/20 12:48:48 1:40 192 0 nxtgenpho ne APPLE 'PHONES 5335 04/10/20 12:48:49 1:40 0 0 nxtgenpho ne APPLE 'PHONES 5336 04/10/20 12:50:29 1:10 0 Onxtgonpho ne APPLE 'PHONES 5337 04/10/20 12:51:38 2:19 192 Onxtgonpho no APPLE 'PHONES 5338 04/10/20 12:51:40 2:18 0 0 nxtgonpho ne APPLE 'PHONES 5339 04/10/20 12:53:58 12:56 192 0 nxtgenpho ne APPLE 'PHONES 5340 04/10/20 12:53:59 12:56 0 0 nxtgenpho ne APPLE 'PHONES 5341 04/10/20 12:59:18 7:36 6245 6644 ims APPLE 'PHONES 5342 04/10/20 12:59:19 7:36 6644 6089 ims APPLE 'PHONES 5343 04/10/20 13:04:28 60:00 9924 6494 ims 5344 04/10/20 13:06:55 4:52 0 0 nxtgenpho ne APPLE 'PHONES 5345 04/10/20 13:11:46 2:03 192 0 nxtgenpho ne APPLE 'PHONES 5346 04/10/20 13:11:47 2:03 0 0 nxtgenpho ne APPLE 'PHONES 5347 04/10/20 13:12:42 60:00 19744 9906 ims 5348 04/10/20 13:13:50 3:31 0 0 nxtgenpho ne APPLE 'PHONES 5349 04/10/20 13:17:20 4:03 192 0 nxtgenpho ne APPLE 'PHONES 5350 04/10/20 13:17:22 4:03 0 0 nxtgenpho ne APPLE 'PHONES 5351 04/10/20 13:21:25 1:11 0 0 nxtgenpho ne APPLE !PHONES 5352 04/10/20 13:22:35 2:31 192 0 nxtgenpho ne APPLE 'PHONES 5353 04/10/20 13:22:36 2:31 0 0 nxtgenpho ne APPLE 'PHONES 5354 04/10/20 13:25:07 5:25 0 0 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 219 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171139 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343197

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cre AT&T Run Data: Run Time: Data usage For: Item Conn. Date 06/17/2020 IS= Conn. Time (OTC) Originating Number ET Bytes up Bytes Apn flax IMSI MAKE nn MODEL 5355 04/10/20 13:30:31 0:24 192 0 nxtgenpho ne APPLE 'PEONES 5356 04/10/20 13:30:32 0:24 0 0 nxtgenpho ne APPLE 'PEONES 5357 04/10/20 13:30:56 3:56 0 0 nxtgenpho ne APPLE 'PEONES 5358 04/10/20 13:34:51 1:06 192 0 nxtgenpho ne APPLE 'PEONES 5359 04/10/20 13:34:53 1:05 0 0 nxtgenpho ne APPLE 'PHONES 5360 04/10/20 13:35:58 8:44 0 0 nxtgenpho ne APPLE 'PHONES 5361 04/10/20 13:44:41 3:44 192 0 nxtgenpho ne APPLE 'PHONES 5362 04/10/20 13:44:42 3:44 0 0 nxtgenpho ne APPLE 'PHONES 5363 04/10/20 13:48:26 7:00 0 0 nxtgenpho ne APPLE 'PHONES 5364 04/10/20 13:55:26 0:37 192 0 nxtgenpho ne APPLE 'PHONES 5365 04/10/20 13:55:27 0:37 0 0 nxtgenpho ne APPLE 'PHONES 5366 04/10/20 13:56:04 5:57 0 0 nxtgenpho ne APPLE 'PHONES 5367 04/10/20 14:02:00 2:03 192 0 nxtgenpho ne APPLE 'PHONES 5368 04/10/20 14:02:01 2:03 0 0 nxtgenpho ne APPLE 'PHONES 5369 04/10/20 14:04:04 6:37 0 0 nxtgenpho ne APPLE 'PHONES 5370 04/10/20 14:04:28 9:37 0 0 ims 5371 04/10/20 14:10:40 1:21 192 Onxtgenpho ne APPLE IPHONE8 5372 04/10/20 14:10:41 1:21 0 0 nxtgenpho ne APPLE IPHONE8 5373 04/10/20 14:12:03 10:13 0 0 nxtgenpho ne APPLE IPHONE8 5374 04/10/20 14:12:42 21:53 0 0 ims 5375 04/10/20 14:14:05 0:00 0 0 ims APPLE IPHONE8 5376 04/10/20 14:14:20 8:00 24235 15112 ims APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 220 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171140 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343198

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:68:58pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro ‘•-is° AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating CT Time Number (UTC) Bytes Up Bytes Apn DMZ IMSI HAKE Dn MODEL 5377 04/10/20 14:22:16 12:14 0 0 nxtgonpho ne APPLE 'PHONES 5378 04/10/20 14:22:20 12:10 2876 1448 ims APPLE 'PHONES 5379 04/10/20 14:22:20 12:10 2812 1448 ims APPLE 'PHONES 5380 04/10/20 14:34:29 13:24 192 0nxtgonpho ne APPLE 'PHONES 5381 04/10/20 14:34:30 13:24 0 0 nxtgonpho ne APPLE 'PHONES 5382 04/10/20 14:34:34 13:18 7524 7212 ims APPLE 'PHONES 5383 04/10/20 14:34:35 13:18 7212 7260 ims APPLE 'PHONES 5384 04/10/20 14:48:09 52:40 0 0nxtgonpho ne APPLE 'PHONES 5385 04/10/20 14:48:11 45:16 9278 7412 ims APPLE 'PHONES 5386 04/10/20 15:33:30 7:19 6666 5962 ims APPLE 'PHONES 5387 04/10/20 15:40:48 16:22 192 0 nxtgonpho ne APPLE 'PHONES 5388 04/10/20 15:40:49 16:21 6262 6672 ims APPLE 'PHONES 5389 04/10/20 15:40:49 16:22 0 0 nxtgonpho no APPLE 'PHONES 5390 04/10/20 15:40:50 16:21 6672 5998 ims APPLE 'PHONES 5391 04/10/20 15:56:05 1:07 22574 12240 ims 5392 04/10/20 15:57:41 2:03 192 0 nxtgonpho no APPLE 'PHONES 5393 04/10/20 15:57:42 2:02 8124 6870 ims APPLE 'PHONES 5394 04/10/20 15:57:42 2:03 0 0 nxtgonpho ne APPLE 'PHONES 5395 04/10/20 15:57:44 2:01 6870 7860 isms APPLE 'PHONES 5396 04/10/20 15:58:24 60:00 16737 9198 isms 5397 04/10/20 15:59:45 36:21 0 0 nxtgonpho ne APPLE 'PHONES 5398 04/10/20 16:36:05 8:30 192 0 nxtgonpho ne APPLE 'PHONES 5399 04/10/20 16:36:07 8:29 0 0 nxtgonpho ne APPLE 'PHONES 5400 04/10/20 16:44:36 40:31 0 0 nxtgonpho no APPLE 'PHONES 5401 04/10/20 16:58:24 60:00 8388 2912 ims 5402 04/10/20 17:25:06 4:50 192 0 nxtgonpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 221 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171141 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343199

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 5403 04/10/20 5404 04/10/20 5405 04/10/20 5406 04/10/20 5407 04/10/20 5408 04/10/20 5409 04/10/20 5410 04/10/20 5411 04/10/20 5412 04/10/20 5413 04/10/20 5414 04/10/20 5415 04/10/20 5416 04/10/20 5417 04/10/20 5418 04/10/20 5419 04/10/20 5420 04/10/20 5421 04/10/20 5422 04/10/20 5423 04/10/20 5424 04/10/20 06/17/2020 Conn. Originating ET Bytes Bytes Apn Time Number Up Dn (UTC) 17:25:07 4:50 0 0nmtgonpho ne 17:29:56 1:01 192 0nstgenpho ne 17:29:58 1:00 0 0nstgenpho ne 17:30:58 33:15 192 0nstgenpho ne 17:30:59 33:15 0 0nstgenpho ne 17:58:24 60:00 24756 10268 ims 18:04:14 35:13 0 0nstgenpho no 18:26:14 0:23 0 1682 ims 18:39:26 2:21 192 0nmtgonpho ne 18:39:28 2:20 0 0nstgenpho ne 18:41:47 39:06 192 0nstgenpho ne 18:41:48 39:06 0 0nstgenpho ne 18:58:24 60:00 10268 3408 isms 19:20:54 2:03 0 0nmtgonpho no 19:22:56 8:51 192 0nstgenpho ne 19:22:57 8:51 0 0nstgenpho ne 19:31:48 6:03 192 0nstgenpho no 19:31:49 6:03 0 0nstgenpho no 19:37:52 1:59 0 0nstgenpho no 19:39:50 2:10 192 0nstgenpho no 19:39:51 2:10 0 0nstgenpho no 19:42:01 15:31 0 0nstgenpho no DMZ INSI MAKE MODEL APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 222 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171142 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343200

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e s, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn 731/LI IMSI MAKE MODEL 5425 04/10/20 19:57:31 8:26 192 Onxtgonpho ne APPLE 'PHONES 5426 04/10/20 19:57:32 8:26 0 Onxtgonpho ne APPLE IPHOME8 5427 04/10/20 19:58:24 60:00 18300 6264 ims 5428 04/10/20 20:05:59 11:58 0 Onxtgonpho ne APPLE 'PHONES 5429 04/10/20 20:17:56 8:07 192 Onxtgenpho ne APPLE 'PHONES 5430 04/10/20 20:17:57 8:07 0 Onxtgonpho ne APPLE 'PHONES 5431 04/10/20 20:26:04 40:33 0 Onxtgonpho ne APPLE 'PHONES 5432 04/10/20 20:58:24 60:00 10376 3408 ims 5433 04/10/20 21:06:36 2:10 192 Onxtgonpho ne APPLE 'PHONES 5434 04/10/20 21:06:38 2:09 0 Onxtgenpho ne APPLE 'PHONES 5435 04/10/20 21:08:47 60:00 0 Onxtgenpho ne APPLE 'PHONES 5436 04/10/20 21:58:24 60:00 6956 2680 ims 5437 04/10/20 22:08:47 60:00 0 Onxtgonpho ne APPLE 'PHONES 5438 04/10/20 22:58:24 60:00 10144 3300 ims 5439 04/10/20 23:08:47 4:57 0 Onxtgonpho ne APPLE 'PHONES 5440 04/10/20 23:13:43 102:45 192 Onxtgenpho ne APPLE 'PHONES 5441 04/10/20 23:13:44 60:00 0 Onxtgenpho ne APPLE 'PHONES 5442 04/10/20 23:58:24 60:00 10144 3176 ims 5443 04/11/20 00:13:44 42:45 0 Onxtgonpho ne APPLE 'PHONES 5444 04/11/20 00:56:04 0:24 7215 6860 ims APPLE 'PHONES 5445 04/11/20 00:56:05 0:24 6792 6951 ims APPLE 'PHONES 5446 04/11/20 00:56:29 4:38 0 Onxtgonpho ne APPLE 'PHONES 5447 04/11/20 00:56:31 0:58 6684 6000 ims APPLE 'PHONES 5448 04/11/20 00:57:29 5:13 3640 1432 ims APPLE 'PHONES 5449 04/11/20 00:58:24 2:35 0 0 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 223 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171143 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343201

MOBILITY P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cee AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 Conn. Tam. (OTC) Originating Suitor ET Bytes Up Bytes Apn Dn MDRI IMSI Ma= MODEL 5450 04/11/20 01:01:06 2:58 192 0 nxtgonpho no APPLE IPEOMEB 5451 04/11/20 01:01:07 2:57 15076 15712 ims APPLE 'PEONES 5452 04/11/20 01:01:07 2:58 0 0 nxtgonpho no APPLE 'PEONES 5453 04/11/20 01:01:09 2:56 15712 14812 ims APPLE 'PEONES 5454 04/11/20 01:02:42 60:00 15829 9382 ims 5455 04/11/20 01:04:05 60:00 0 0 nxtgonpho no APPLE 'PEONES 5456 04/11/20 02:02:42 60:00 8388 3036 ims 5457 04/11/20 02:04:05 40:56 0 0 nxtgonpho no APPLE 'PHONES 5458 04/11/20 02:45:00 27:48 192 0 nstgempho no APPLE 'PHONES 5459 04/11/20 02:45:01 27:48 0 0 nxtgonpho no APPLE 'PHONES 5460 04/11/20 03:02:42 60:00 6924 2912 ims 5461 04/11/20 03:12:49 0:42 0 0 nxtgonpho no APPLE !PHONES 5462 04/11/20 03:13:30 20:58 192 °asty:mph* no APPLE 'PHONES 5463 04/11/20 03:13:31 20:58 0 0 nxtgonpho no APPLE !PHONES 5464 04/11/20 03:34:29 54:40 0 0 nxtgonpho no APPLE !PHONES 5465 04/11/20 04:02:42 60:00 7032 2928 ims 5466 04/11/20 04:29:08 13:55 192 0 nxtgonpho no APPLE 'PHONES 5467 04/11/20 04:29:09 13:55 0 0 nxtgonpho no APPLE !PHONES 5468 04/11/20 04:43:04 0:59 0 Onstympho no APPLE !PHONES 5469 04/11/20 04:44:02 22:54 192 0 nxtgonpho no APPLE 'PHONES 5470 04/11/20 04:44:03 22:54 0 0 nxtgonpho no APPLE !PHONES 5471 04/11/20 05:02:42 60:00 11780 4484 ims 5472 04/11/20 05:06:57 0:41 0 0 nxtgonpho no APPLE !PHONES 5473 04/11/20 05:07:37 1:21 192 0 nstympho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 224 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171144 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343202

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Data: Run Tina: Data Usage For: Item Conn. Date 06/17/2020 MS= Conn. Tana (UTC) Originating Number ET Bytes Up Bytes Apn Dn EBB! INSI NAAS MODEL 5474 04/11/20 05:07:38 1:21 0 0 nxtgenpho no APPLE !PHONES 5475 04/11/20 05:08:59 1:22 0 0 nxtgenpho no APPLE !PHONES 5476 04/11/20 05:10:21 60:00 0 0 nxtgenpho no APPLE !PHONES 5477 04/11/20 06:02:42 60:00 12228 4784 ism 5478 04/11/20 06:10:21 60:00 0 0 nxtgenpho ne APPLE !PHONES 5479 04/11/20 07:02:42 60:00 8388 2928 ism 5480 04/11/20 07:10:21 60:00 0 0 nxtgenpho ne APPLE !PHONES 5481 04/11/20 08:02:42 60:00 8264 2804 ism 5482 04/11/20 08:10:21 60:00 0 0 nxtgenpho ne APPLE !PHONES 5483 04/11/20 09:02:42 60:00 13476 4748 ism 5484 04/11/20 09:10:21 0:01 0 0 nxtgenpho no APPLE !PHONES 5485 04/11/20 09:10:24 60:00 0 0 nxtgenpho no APPLE !PHONES 5486 04/11/20 10:02:42 60:00 8496 2928 ism 5487 04/11/20 10:10:24 60:00 0 0 nxtgenpho no APPLE !PHONES 5488 04/11/20 11:02:42 60:00 11796 4536 ism 5489 04/11/20 11:10:24 23:33 0 0 nxtgenpho no APPLE !PHONES 5490 04/11/20 11:33:56 1:41 192 0 nxtgenpho no APPLE !PHONES 5491 04/11/20 11:33:58 1:40 0 0 nxtgenpho no APPLE !PHONES 5492 04/11/20 11:35:38 4:12 0 0 nxtgenpho no APPLE !PHONES 5493 04/11/20 11:39:50 3:00 0 0 nxtgenpho no APPLE !PHONES 5494 04/11/20 11:42:49 2:48 192 0 nxtgenpho ne APPLE !PHONES 5495 04/11/20 11:42:51 2:47 0 0 nxtgenpho ne APPLE !PHONES 5496 04/11/20 11:45:38 60:00 0 0 nxtgenpho ne APPLE !PHONES 5497 04/11/20 12:02:42 1:51 0 0 ism AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 225 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171145 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343203

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:50:60pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ce. AT&T Run Date: Run Time: Data Usage For: 06/17/2020 Item Conn. Conn. Date Time (OTC) 5498 04/11/20 12:11:46 5499 04/11/20 12:16:06 5500 04/11/20 12:43:42 5501 04/11/20 12:45:38 5502 04/11/20 12:55:52 5503 04/11/20 12:55:53 5504 04/11/20 12:57:56 5505 04/11/20 13:16:06 5506 04/11/20 13:43:42 5507 04/11/20 13:57:56 5508 04/11/20 14:16:06 5509 04/11/20 14:43:42 5510 04/11/20 14:46:53 5511 04/11/20 14:46:54 5512 04/11/20 14:48:59 5513 04/11/20 14:56:28 5514 04/11/20 14:56:29 5515 04/11/20 15:02:04 5516 04/11/20 15:16:06 5517 04/11/20 15:19:40 5518 04/11/20 15:19:42 5519 04/11/20 15:22:20 5520 04/11/20 15:43:42 5521 04/11/20 15:56:06 Originating Number ET Bytes Bytes Apn ffiI INSI MAKE MODEL Up Dn 0:01 0 0 ims APPLE 'PHONES 60:00 9926 6400 ims 60:00 16873 9419 ims 10:14 0 Onmtgonpho ne APPLE 'PHONES 2:03 192 0 nxtgonpho ne APPLE 'PHONES 2:03 0 0 nxtgonpho ne APPLE 'PHONES 60:00 0 0 nxtgonpho ne APPLE 'PHONES 60:00 0 0 ims 60:00 8388 2928 ims 48:58 0 0 nxtgonpho ne APPLE 'PHONES 60:00 0 0 ims 60:00 8388 2928 ims 2:04 192 0 nxtgonpho ne APPLE 'PHONES 2:04 0 0 nxtgonpho ne APPLE 'PHONES 7:30 0 0 nxtgonpho ne APPLE 'PHONES 5:35 192 0 nxtgonpho no APPLE 'PHONES 5:35 0 0 nxtgonpho no APPLE 'PHONES 17:37 0 0 nxtgonpho ne APPLE 'PHONES 60:00 0 0 ims 2:39 192 0 nxtgonpho ne APPLE 'PHONES 2:38 0 0 nxtgonpho ne APPLE 'PHONES 33:47 0 0 nxtgonpho ne APPLE 'PHONES 60:00 8496 2928 ims 32:38 192 0 nxtgonpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 226 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171146 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343204

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e • 1/4•••0 AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Tame (OTC) Originating ET Bytes Up Bytes Apn Dn =MI IM9I MAKE MODEL 5522 04/11/20 15:56:07 32:38 0 0 nxtgenpho ne APPLE !PHONES 5523 04/11/20 16:16:06 30:53 0 0 ims 5524 04/11/20 16:28:45 1:02 0 0 nxtgenpho ne APPLE !PHONES 5525 04/11/20 16:29:47 39:09 192 0 nxtgenpho ne APPLE !PHONES 5526 04/11/20 16:29:48 39:09 0 0 nxtgenpho ne APPLE !PHONES 5527 04/11/20 16:43:42 60:00 18068 6356 ims 5528 04/11/20 17:08:57 1:37 0 0 nxtgenpho ne APPLE !PHONES 5529 04/11/20 17:10:34 27:26 192 0 nxtgenpho ne APPLE !PHONES 5530 04/11/20 17:10:35 27:26 0 0 nxtgenpho ne APPLE !PHONES 5531 04/11/20 17:38:01 7:44 0 0 nxtgenpho ne APPLE !PHONES 5532 04/11/20 17:43:42 60:00 6956 2788 ims 5533 04/11/20 17:45:44 41:32 192 0 nxtgenpho ne APPLE !PHONES 5534 04/11/20 17:45:45 41:32 0 0 nxtgenpho ne APPLE !PHONES 5535 04/11/20 18:27:17 16:02 0 0 nxtgenpho ne APPLE !PHONES 5536 04/11/20 18:43:18 2:04 192 0 nxtgenpho ne APPLE !PHONES 5537 04/11/20 18:43:20 2:03 0 0 nxtgenpho ne APPLE !PHONES 5538 04/11/20 18:43:42 60:00 8496 3052 ims 5539 04/11/20 18:45:23 26:19 0 0 nxtgenpho ne APPLE !PHONES 5540 04/11/20 19:11:41 2:10 192 0 nxtgenpho ne APPLE !PHONES 5541 04/11/20 19:11:43 2:10 0 0 nxtgenpho ne APPLE !PHONES 5542 04/11/20 19:13:53 36:13 0 0 nxtgenpho ne APPLE !PHONES 5543 04/11/20 19:43:42 60:00 13352 4516 Las 5544 04/11/20 19:50:05 11:47 192 0 nxtgenpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 227 customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171147 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343205

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cm% •-•rns AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 it= Conn. Originating ET T11011 Number lu7C) Bytos Up Bytes Apn EBBE IMSI MAKE Dn MODEL 5545 04/11/20 19:50:06 11:48 0 Onxtgonpho ne APPLE !PHONES 5546 04/11/20 20:01:53 4:41 192 0 nxtgenpho ne APPLE !PHONES 5547 04/11/20 20:01:54 4:41 0 0 nxtgenpho ne APPLE !PHONES 5548 04/11/20 20:06:35 2:39 0 0 nxtgenpho ne APPLE !PHONES 5549 04/11/20 20:09:13 2:18 192 0 nxtgenpho ne APPLE !PHONES 5550 04/11/20 20:09:15 2:17 0 0 nxtgenpho ne APPLE !PHONES 5551 04/11/20 20:11:32 6:09 192 0 nxtgenpho ne APPLE !PHONES 5552 04/11/20 20:11:33 6:09 0 0 nxtgenpho ne APPLE !PHONES 5553 04/11/20 20:17:42 60:00 0 0 nxtgenpho ne APPLE !PHONES 5554 04/11/20 20:42:49 60:00 18287 9340 ims 5555 04/11/20 20:43:42 60:00 0 0 ims 5556 04/11/20 21:17:42 2:45 0 Onxtgonpho ne APPLE !PHONES 5557 04/11/20 21:20:26 2:04 192 0 nxtgenpho ne APPLE !PHONES 5558 04/11/20 21:20:27 2:04 0 0 nxtgenpho ne APPLE !PHONES 5559 04/11/20 21:22:31 60:00 0 0 nxtgenpho ne APPLE !PHONES 5560 04/11/20 21:42:49 60:00 8712 3252 ims 5561 04/11/20 21:43:42 60:00 0 0 ims 5562 04/11/20 22:22:31 15:13 0 Onxtgonpho ne APPLE !PHONES 5563 04/11/20 22:37:43 83:24 192 0 nxtgenpho ne APPLE !PHONES 5564 04/11/20 22:37:44 60:00 0 0 nxtgenpho no APPLE !PHONES 5565 04/11/20 22:42:49 60:00 6848 2648 Las 5566 04/11/20 22:43:42 60:00 0 0 Las 5567 04/11/20 23:37:44 23:24 0 0 nxtgenpho ne APPLE !PHONES 5568 04/11/20 23:42:49 60:00 10720 4096 Las AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 228 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171148 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343206

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro •-. . so AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn 731ZI II I MAKE Dn MODEL 5569 04/11/20 23:43:42 58:52 0 0 ism 5570 04/12/20 00:01:08 60:00 0 0nstgenpho ne APPLE 'PHONES 5571 04/12/20 00:42:49 60:00 11920 4612 ism 5572 04/12/20 01:01:08 52:41 0 0nstgenpho ne APPLE 'PHONES 5573 04/12/20 01:42:49 60:00 8604 3112 ism 5574 04/12/20 01:58:01 34:14 192 0nstgenpho ne APPLE 'PHONES 5575 04/12/20 01:58:02 34:14 0 0nstgenpho ne APPLE 'PHONES 5576 04/12/20 02:32:16 70:00 192 0nstgenpho ne APPLE 'PHONES 5577 04/12/20 02:32:17 60:00 0 0nstgenpho ne APPLE 'PHONES 5578 04/12/20 02:42:49 60:00 8604 2896 ism 5579 04/12/20 03:32:17 60:00 0 0nstgenpho ne APPLE 'PHONES 5580 04/12/20 03:42:49 60:00 6956 2756 ism 5581 04/12/20 04:32:17 60:00 0 0nstgenpho ne APPLE 'PHONES 5582 04/12/20 04:42:49 60:00 11936 4236 ism 5583 04/12/20 05:32:17 5:52 0 0nstgenpho ne APPLE 'PHONES 5584 04/12/20 05:42:49 60:00 10488 4364 isms 5585 04/12/20 06:42:49 60:00 6848 2648 isms 5586 04/12/20 07:42:49 60:00 10036 3144 ism 5587 04/12/20 08:42:49 60:00 13460 4576 ism 5588 04/12/20 09:42:49 60:00 8372 3036 ism 5589 04/12/20 10:42:49 60:00 8388 2788 ism 5590 04/12/20 11:42:49 60:00 15000 5000 ism 5591 04/12/20 11:42:58 78:11 192 0nstgenpho ne APPLE 'PHONES 5592 04/12/20 11:42:59 60:00 0 0nstgenpho ne APPLE 'PHONES 5593 04/12/20 12:42:49 60:00 13352 4576 ism 5594 04/12/20 12:42:59 18:11 0 0nstgenpho ne APPLE 'PHONES 5595 04/12/20 13:01:10 5:46 0 0nstgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 229 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171149 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343207

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time MC/ Originating Number ET Bytes Up Bytes Apn Dn neer 1162 10JCIL MCOEL 5596 04/12/20 13:06:55 74:35 192 0 nottgonpho ne APPLE !PHONES 5597 04/12/20 13:06:56 60:00 0 0 nottgonpho ne APPLE 'PHONES 5598 04/12/20 13:42:49 60:00 8496 3004 ims 5599 04/12/20 14:06:56 14:35 0 0 nottgonpho ne APPLE 'PHONES 5600 04/12/20 14:21:31 9:25 192 0 nottgonpho no APPLE 'PHONES 5601 04/12/20 14:21:32 9:25 0 0 nottgonpho no APPLE 'PHONES 5602 04/12/20 14:30:57 60:00 0 0 nottgonpho no APPLE 'PHONES 5603 04/12/20 14:42:49 60:00 8388 2896 ism 5604 04/12/20 15:30:57 47:29 0 0 nmtgonpho no APPLE 'PHONES 5605 04/12/20 15:42:49 60:00 8496 3004 ism 5606 04/12/20 16:18:26 0:22 192 0 nottgonpho ne APPLE 'PHONES 5607 04/12/20 16:18:27 0:22 0 0 nottgonpho ne APPLE 'PHONES 5608 04/12/20 16:18:49 4:54 0 0 nottgonpho ne APPLE 'PHONES 5609 04/12/20 16:23:42 2:03 192 0 nottgonpho ne APPLE 'PHONES 5610 04/12/20 16:23:43 2:03 0 0 nactgonpho ne APPLE 'PHONES 5611 04/12/20 16:25:46 23:14 0 0nactgonpho ne APPLE 'PHONES 5612 04/12/20 16:42:49 60:00 12028 4504 ism 5613 04/12/20 16:49:00 24:00 192 0 nactgonpho ne APPLE 'PHONES 5614 04/12/20 16:49:01 24:00 0 0 nottgonpho ne APPLE 'PHONES 5615 04/12/20 17:13:00 71:45 192 0 nottgonpho no APPLE 'PHONES 5616 04/12/20 17:13:01 60:00 0 0 nottgonpho no APPLE 'PHONES 5617 04/12/20 17:42:49 60:00 10396 4096 ism 5618 04/12/20 18:13:01 11:45 0 0 nmtgonpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 230 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171150 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343208

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 MI= Conn. Time (UTC) Originating Number ET Bytos up Bytes Apn nom nen MAPS 0n MODEL 5619 04/12/20 18:24:46 27:09 192 0 nxtgenpho ne APPLE 'PEONES 5620 04/12/20 18:24:47 27:09 0 0 nxtgenpho ne APPLE 'PEONES 5621 04/12/20 18:42:49 60:00 8604 3004 ims 5622 04/12/20 18:51:56 2:16 0 0 nxtgenpho ne APPLE 'PHONES 5623 04/12/20 18:54:11 63:24 192 0 nxtgenpho ne APPLE !PHONES 5624 04/12/20 18:54:12 60:00 0 0 nxtgenpho ne APPLE !PHONES 5625 04/12/20 19:42:49 60:00 8388 3004 ims 5626 04/12/20 19:54:12 3:24 0 0 nxtgenpho ne APPLE !PHONES 5627 04/12/20 19:57:35 6:10 192 0 nxtgenpho ne APPLE !PHONES 5628 04/12/20 19:57:36 6:10 0 0 nxtgenpho ne APPLE !PHONES 5629 04/12/20 20:03:46 38:14 0 0 nxtgenpho ne APPLE !PHONES 5630 04/12/20 20:41:59 8:25 192 0 nxtgenpho ne APPLE !PHONES 5631 04/12/20 20:42:00 8:25 0 0 nxtgenpho ne APPLE !PHONES 5632 04/12/20 20:42:49 35:13 3532 1324 ims 5633 04/12/20 20:50:25 6:41 0 0 nxtgenpho ne APPLE !PHONES 5634 04/12/20 20:57:05 14:27 192 0 nxtgenpho ne APPLE !PHONES 5635 04/12/20 20:57:06 14:27 0 0 nxtgenpho ne APPLE !PHONES 5636 04/12/20 21:11:33 1:25 0 0 nxtgenpho ne APPLE !PHONES 5637 04/12/20 21:12:57 19:03 192 0 nxtgenpho ne APPLE !PHONES 5638 04/12/20 21:12:58 19:03 0 0 nxtgenpho ne APPLE !PHONES 5639 04/12/20 21:13:33 18:27 6182 7136 ims APPLE !PHONES 5640 04/12/20 21:13:34 18:27 7068 5918 ims APPLE !PHONES 5641 04/12/20 21:32:01 0:53 0 Onmtgenpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 231 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171151 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343209

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cr, t,rzsaio AT&T Run Date: Run Tine: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes API Dn INSI MAKE MODEL 5642 04/12/20 21:32:04 0:47 9586 6195 ins APPLE 'PHONES 5643 04/12/20 21:32:51 60:00 8604 3004 ins APPLE 'PHONES 5644 04/12/20 21:32:53 2:03 192 0nmtgonpho ne APPLE 'PHONES 5645 04/12/20 21:32:54 2:04 0 0 nottgonpho ne APPLE 'PHONES 5646 04/12/20 21:34:58 60:00 0 0 nottgonpho ne APPLE 'PHONES 5647 04/12/20 22:16:52 0:01 0 0 ins APPLE 'PHONES 5648 04/12/20 22:17:06 5:31 8205 5997 ins APPLE 'PHONES 5649 04/12/20 22:22:37 30:23 3500 1448 ins APPLE 'PHONES 5650 04/12/20 22:22:37 30:23 3436 1448 ins APPLE 'PHONES 5651 04/12/20 22:32:51 60:00 0 0 ins APPLE 'PHONES 5652 04/12/20 22:34:58 18:02 0 0nmtgonpho ne APPLE 'PHONES 5653 04/12/20 22:53:00 57:48 192 0 nottgonpho ne APPLE 'PHONES 5654 04/12/20 22:53:01 57:47 12190 13292 ins APPLE 'PHONES 5655 04/12/20 22:53:01 57:48 0 0 nottgonpho no APPLE 'PHONES 5656 04/12/20 22:53:02 57:47 13292 12034 ins APPLE 'PHONES 5657 04/12/20 23:32:51 60:00 0 0 ins APPLE 'PHONES 5658 04/12/20 23:50:49 17:41 0 0 nottgonpho no APPLE 'PHONES 5659 04/12/20 23:50:51 17:39 6688 5998 ins APPLE 'PHONES 5660 04/13/20 00:08:29 2:25 192 0 nottgonpho ne APPLE 'PHONES 5661 04/13/20 00:08:30 2:25 0 0 nottgonpho ne APPLE 'PHONES 5662 04/13/20 00:10:55 1:24 0 0 nottgonpho ne APPLE 'PHONES 5663 04/13/20 00:11:18 0:00 0 0 ins APPLE 'PHONES 5664 04/13/20 00:11:26 0:17 4760 6048 ins APPLE 'PHONES 5665 04/13/20 00:11:43 27:42 19592 10964 ins APPLE 'PHONES 5666 04/13/20 00:12:18 2:03 192 0nmtgonpho ne APPLE 'PHONES 5667 04/13/20 00:12:19 2:03 0 0 nottgonpho ne APPLE 'PHONES 5668 04/13/20 00:14:22 26:57 0 0 nottgonpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 232 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171152 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343210

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Numbor (UTC) Bytes Up Bytes Apn DMZ INSI HAKE Dn MODEL 5669 04/13/20 00:32:51 54:28 0 0 ims APPLE 'PHONES 5670 04/13/20 00:39:25 1:54 4152 1324 ims APPLE 'PHONES 5671 04/13/20 00:39:25 1:54 4152 1412 ims APPLE 'PHONES 5672 04/13/20 00:41:19 19:39 192 0nmtgonpho ne APPLE 'PHONES 5673 04/13/20 00:41:20 19:39 0 0nmtgonpho ne APPLE 'PHONES 5674 04/13/20 00:41:20 12:15 7114 6740 ims APPLE 'PHONES 5675 04/13/20 00:41:21 12:15 6740 6850 ims APPLE 'PHONES 5676 04/13/20 00:57:25 3:33 8162 6864 ims APPLE 'PHONES 5677 04/13/20 00:57:26 3:33 6864 7898 ims APPLE 'PHONES 5678 04/13/20 01:00:59 0:05 0 0nmtgonpho ne APPLE 'PHONES 5679 04/13/20 01:01:28 0:05 0 0nmtgonpho ne APPLE 'PHONES 5680 04/13/20 01:01:43 0:06 0 0nmtgonpho ne APPLE 'PHONES 5681 04/13/20 01:03:23 10:40 192 0nmtgonpho no APPLE 'PHONES 5682 04/13/20 01:03:24 10:39 6228 6778 ims APPLE 'PHONES 5683 04/13/20 01:03:24 10:40 0 0nmtgonpho no APPLE 'PHONES 5684 04/13/20 01:03:25 10:39 6670 5964 ims APPLE 'PHONES 5685 04/13/20 01:14:04 4:17 0 0nmtgonpho no APPLE 'PHONES 5686 04/13/20 01:14:08 4:13 9758 7088 ims APPLE 'PHONES 5687 04/13/20 01:18:20 2:10 192 0nmtgonpho ne APPLE 'PHONES 5688 04/13/20 01:18:21 2:09 6094 6444 ims APPLE 'PHONES 5689 04/13/20 01:18:21 2:10 0 0nmtgonpho ne APPLE 'PHONES 5690 04/13/20 01:18:23 2:08 6336 5830 ims APPLE 'PHONES 5691 04/13/20 01:20:31 3:13 0 0nmtgonpho ne APPLE 'PHONES 5692 04/13/20 01:20:33 3:11 8084 6051 ims APPLE 'PHONES 5693 04/13/20 01:23:43 8:21 192 0nmtgonpho ne APPLE 'PHONES 5694 04/13/20 01:23:44 0:00 88 0 ims APPLE 'PHONES 5695 04/13/20 01:23:44 8:21 0 0nmtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 233 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171153 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343211

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 1/4-00 AT&T Run Data: Run Time: Data usage For: Item Conn. Date 06/17/2020 Conn. TIM* (OTC/ Originating Number ET Bytes up Bytes Apn on DMZ DOI HUM MODEL 5696 04/13/20 01:23:45 0:00 0 0 ims APPLE !PEONES 5697 04/13/20 01:23:45 8:19 6244 6670 ims APPLE !PEONES 5698 04/13/20 01:23:46 8:19 6670 6088 ims APPLE !PEONES 5699 04/13/20 01:27:19 0:01 0 0 ims 5700 04/13/20 01:28:22 3:42 6228 6672 ims APPLE !PHONES 5701 04/13/20 01:28:23 3:42 6672 5964 ims APPLE IPHONE8 5702 04/13/20 01:32:05 7:54 0 0 nxtgenpho ne APPLE 'PHONES 5703 04/13/20 01:32:07 4:01 8276 6210 ims APPLE 'PHONES 5704 04/13/20 01:36:08 10:56 4964 1712 ims APPLE 'PHONES 5705 04/13/20 01:39:58 5:51 192 Onatgonpho ne APPLE 'PHONES 5706 04/13/20 01:39:59 5:51 0 0 natgonpho ne APPLE 'PHONES 5707 04/13/20 01:43:26 2:23 6262 6676 ims APPLE 'PHONES 5708 04/13/20 01:43:28 2:22 6676 5998 ims APPLE 'PHONES 5709 04/13/20 01:45:50 60:00 0 0 nxtgenpho ne APPLE 'PHONES 5710 04/13/20 01:45:52 40:00 11524 7572 ims APPLE 'PHONES 5711 04/13/20 02:25:52 29:08 3532 1432 ims APPLE 'PHONES 5712 04/13/20 02:45:50 60:00 0 0 nxtgenpho ne APPLE 'PHONES 5713 04/13/20 02:55:01 57:47 12600 8910 ims APPLE 'PHONES 5714 04/13/20 03:45:50 6:58 0 0 nxtgenpho ne APPLE 'PHONES 5715 04/13/20 03:52:47 8:19 192 0 natgonpho ne APPLE 'PHONES 5716 04/13/20 03:52:48 8:18 6225 6672 ims APPLE 'PHONES 5717 04/13/20 03:52:48 8:19 0 Onatgonpho ne APPLE 'PHONES 5718 04/13/20 03:52:49 8:18 6672 5961 ims APPLE 'PHONES 5719 04/13/20 04:01:07 60:00 0 0 nxtgenpho ne APPLE 'PHONES 5720 04/13/20 04:01:09 60:00 12220 8844 ims APPLE 'PHONES 5721 04/13/20 05:01:07 34:23 0 0 nxtgenpho ne APPLE 'PHONES 5722 04/13/20 05:01:09 34:21 2596 1324 ims APPLE 'PHONES 5723 04/13/20 05:35:29 69:54 192 Onatgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 234 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171154 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343212

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. 45, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn L@I IMSI MAKE MODEL 5724 04/13/20 05:35:30 60:00 0 0 nxtgenpho ne APPLE 'PEONES 5725 04/13/20 05:35:30 63:43 7567 9266 ims APPLE IPEOME8 5726 04/13/20 05:35:31 60:00 9266 7411 ims APPLE 'PROMO 5727 04/13/20 06:14:34 46:58 12933 7833 ims 5728 04/13/20 06:35:30 9:54 0 0 nxtgenpho no APPLE 'PHONED 5729 04/13/20 06:35:31 3:43 0 0 ims APPLE 'PHONED 5730 04/13/20 06:39:08 6:45 0 0 ims 5731 04/13/20 06:45:24 2:55 0 Onstgonpho no APPLE 'PHONED 5732 04/13/20 06:48:18 4:11 192 0 nstgonpho no APPLE 'PHONED 5733 04/13/20 06:48:19 4:10 7214 6792 ims APPLE 'PHONES 5734 04/13/20 06:48:19 4:11 0 Onstgonpho ne APPLE 'PHONES 5735 04/13/20 06:48:20 4:10 6792 6950 ims APPLE 'PHONES 5736 04/13/20 06:52:30 9:19 0 Onstgonpho ne APPLE 'PHONES 5737 04/13/20 06:52:33 9:16 7064 5954 ims APPLE 'PHONES 5738 04/13/20 07:01:32 0:23 4009 1386 ims APPLE 'PHONES 5739 04/13/20 07:01:49 60:00 0 0 nxtgenpho ne APPLE 'PHONES 5740 04/13/20 07:01:55 22:01 10704 7538 ims APPLE 'PHONES 5741 04/13/20 07:01:55 22:01 10532 7538 ims APPLE 'PHONES 5742 04/13/20 07:23:56 60:00 11980 4328 ims APPLE 'PHONES 5743 04/13/20 08:01:49 60:00 0 Onstgonpho no APPLE !PHONES 5744 04/13/20 08:23:56 60:00 6924 2880 ims APPLE 'PHONES 5745 04/13/20 09:01:49 60:00 0 0 nxtgenpho no APPLE 'PHONES 5746 04/13/20 09:23:56 60:00 8572 3020 ims APPLE !PHONES 5747 04/13/20 10:01:49 40:47 0 Onstgonpho ne APPLE !PHONES 5748 04/13/20 10:23:56 60:00 12920 3624 ims APPLE !PHONES 5749 04/13/20 11:01:46 132:27 192 Onstgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 235 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171155 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343213

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. ce. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (uTC) Bytes Up Bytes Apn EBBE II I MAKE Dn MODEL 5750 04/13/20 11:01:47 60:00 0 0 nxtgenpho ne APPLE 'PHONES 5751 04/13/20 11:23:56 60:00 17100 6308 ims APPLE 'PHONES 5752 04/13/20 12:01:47 60:00 0 0 nxtgenpho ne APPLE 'PHONES 5753 04/13/20 12:23:56 60:00 8496 2896 ims APPLE 'PHONES 5754 04/13/20 13:01:47 12:27 0 0 nxtgenpho ne APPLE 'PHONES 5755 04/13/20 13:14:13 32:46 192 0 nxtgenpho ne APPLE 'PHONES 5756 04/13/20 13:14:14 32:46 0 0 nxtgenpho ne APPLE 'PHONES 5757 04/13/20 13:23:56 11:03 0 0 ims APPLE 'PHONES 5758 04/13/20 13:34:40 12:19 7267 6796 ims APPLE 'PHONES 5759 04/13/20 13:34:41 12:19 6796 7111 ims APPLE 'PHONES 5760 04/13/20 13:34:59 49:16 20726 9147 ims 5761 04/13/20 13:47:00 1:55 0 0 nxtgenpho ne APPLE !PHONES 5762 04/13/20 13:48:54 8:54 192 0 nxtgenpho ne APPLE 'PHONES 5763 04/13/20 13:48:55 8:54 0 0 nxtgenpho ne APPLE 'PHONES 5764 04/13/20 13:57:49 4:05 0 0 nxtgenpho ne APPLE !PHONES 5765 04/13/20 14:01:53 48:22 192 0 nxtgenpho ne APPLE 'PHONES 5766 04/13/20 14:01:54 48:22 0 0 nxtgenpho ne APPLE !PHONES 5767 04/13/20 14:23:59 0:41 8373 8940 ims APPLE 'PHONES 5768 04/13/20 14:24:00 0:41 8940 8109 ims APPLE 'PHONES 5769 04/13/20 14:24:14 0:01 0 0 ims 5770 04/13/20 14:24:19 19:44 6519 8958 ism APPLE 'PHONES 5771 04/13/20 14:24:20 19:44 8894 6363 ims APPLE 'PHONES 5772 04/13/20 14:24:39 10:47 9857 6463 ims 5773 04/13/20 14:40:52 9:23 7476 7072 ims APPLE 'PHONES 5774 04/13/20 14:40:53 9:23 7072 7124 ims APPLE 'PHONES 5775 04/13/20 14:43:58 60:00 37349 19946 ims 5776 04/13/20 14:50:16 1:37 0 0 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 236 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171156 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343214

PRI020 MOBILITY 4Illo AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm ttes "--6 AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 ION= Conn. Time (OTC) Originating Number BT Bytes Up Bytes Apn EMI IMSI BAEZ Dn MODEL 5777 04/13/20 14:51:53 11:47 192 Onxtgonpho ne APPLE 'PHONES 5778 04/13/20 14:51:54 11:47 0 0 nxtgenpho ne APPLE 'PHONES 5779 04/13/20 15:03:40 3:51 192 0 nxtgenpho ne APPLE 'PHONES 5780 04/13/20 15:03:41 3:51 0 0 nxtgenpho ne APPLE 'PHONES 5781 04/13/20 15:07:32 2:08 0 0 nxtgenpho ne APPLE 'PHONES 5782 04/13/20 15:09:39 15:40 192 0 nxtgenpho ne APPLE 'PHONES 5783 04/13/20 15:09:40 15:40 0 0 nxtgenpho no APPLE 'PHONES 5784 04/13/20 15:24:03 0:06 0 4245 ims 5785 04/13/20 15:25:20 10:00 192 0 nxtgenpho no APPLE 'PHONES 5786 04/13/20 15:25:21 24:42 0 0 nxtgenpho ne APPLE 'PHONES 5787 04/13/20 15:34:09 60:00 19807 10032 ims 5788 04/13/20 15:43:58 60:00 0 0 ims 5789 04/13/20 15:50:03 24:22 0 0 nxtgenpho ne APPLE 'PHONES 5790 04/13/20 16:14:24 2:09 192 0 nxtgenpho ne APPLE 'PHONES 5791 04/13/20 16:14:25 2:09 0 0 nxtgenpho ne APPLE 'PHONES 5792 04/13/20 16:16:34 27:03 0 0 nxtgenpho ne APPLE 'PHONES 5793 04/13/20 16:34:09 60:00 8620 2912 ims 5794 04/13/20 16:43:36 8:21 192 0 nxtgenpho ne APPLE 'PHONES 5795 04/13/20 16:43:37 8:21 0 0 nxtgenpho ne APPLE 'PHONES 5796 04/13/20 16:43:58 60:00 0 0 ims 5797 04/13/20 16:51:58 2:41 0 0 nxtgenpho ne APPLE 'PHONES 5798 04/13/20 16:54:38 149:51 192 0 nxtgenpho ne APPLE 'PHONES 5799 04/13/20 16:54:39 60:00 0 0 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 237 customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171157 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343215

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm ...1/4-zes ""s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Rumba ET Bytes Up Bytes Apn Dn flat INSI MAKE MODEL 5800 04/13/20 17:34:09 44:31 8496 3004 ism 5801 04/13/20 17:43:58 32:17 0 0 isms 5802 04/13/20 17:54:39 60:00 0 Onstgenpho ne APPLE 'PHONES 5803 04/13/20 18:16:13 68:16 7340 6862 imp APPLE 'PHONES 5804 04/13/20 18:16:14 60:00 6794 7076 imp APPLE 'PHONES 5805 04/13/20 18:18:40 60:00 16889 9374 imp 5806 04/13/20 18:54:39 29:51 0 Onactgonpho ne APPLE 'PHONES 5807 04/13/20 19:16:14 8:16 0 0 imp APPLE 'PHONES 5808 04/13/20 19:18:40 29:32 5304 1696 imp 5809 04/13/20 19:24:30 1:38 0 Onactgonpho ne APPLE 'PHONES 5810 04/13/20 19:26:07 8:33 192 Onactgonpho ne APPLE 'PHONES 5811 04/13/20 19:26:08 8:33 0 Onactgonpho ne APPLE 'PHONES 5812 04/13/20 19:34:41 2:13 0 Onactgonpho ne APPLE 'PHONES 5813 04/13/20 19:36:53 2:03 192 Onactgonpho ne APPLE 'PHONES 5814 04/13/20 19:36:54 2:03 0 Onmtgonpho ne APPLE 'PHONES 5815 04/13/20 19:38:57 0:51 0 Onmtgonpho ne APPLE 'PHONES 5816 04/13/20 19:39:47 8:33 192 Onmtgonpho ne APPLE 'PHONES 5817 04/13/20 19:39:48 8:33 0 Onmtgonpho ne APPLE 'PHONES 5818 04/13/20 19:42:51 5:29 7200 6740 imp APPLE 'PHONES 5819 04/13/20 19:42:52 5:29 6740 6848 imp APPLE 'PHONES 5820 04/13/20 19:48:21 7:02 0 Onmtgonpho ne APPLE 'PHONES 5821 04/13/20 19:48:25 0:01 0 0 imp APPLE 'PHONES 5822 04/13/20 19:50:01 60:00 18557 9854 imp 5823 04/13/20 19:55:22 2:36 192 Onmtgonpho ne APPLE 'PHONES 5824 04/13/20 19:55:23 2:36 0 Onmtgonpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 238 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171158 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343216

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 lad= Conn. Originating ET Tame Number )OTC) Bytes Up Bytes Apn LBSI INSI MAKE Dn MODEL 5825 04/13/20 19:57:58 12:17 192 0 nxtgenphe ne APPLE 'PHONES 5826 04/13/20 19:57:59 12:17 0 0 nxtgenpho ne APPLE !PHONES 5827 04/13/20 20:10:16 3:21 0 0 nxtgenpho ne APPLE !PHONES 5828 04/13/20 20:13:36 28:42 192 0 nxtgenpho ne APPLE !PHONES 5829 04/13/20 20:13:37 28:42 0 0 nxtgenpho ne APPLE !PHONES 5830 04/13/20 20:42:18 2:21 192 0 nxtgenpho ne APPLE !PHONES 5831 04/13/20 20:42:19 2:21 0 0 nxtgenpho ne APPLE !PHONES 5832 04/13/20 20:44:39 6:04 192 0 nxtgenpho ne APPLE !PHONES 5833 04/13/20 20:44:40 6:04 0 0 nxtgenpho ne APPLE !PHONES 5834 04/13/20 20:50:01 12:47 0 0 ism 5835 04/13/20 20:50:44 3:02 0 0 nxtgenpho ne APPLE !PHONES 5836 04/13/20 20:53:45 10:01 192 0 nxtgenpho ne APPLE !PHONES 5837 04/13/20 20:53:46 10:01 0 0 nxtgenpho ne APPLE !PHONES 5838 04/13/20 21:02:31 1:15 7372 8932 ism APPLE !PHONES 5839 04/13/20 21:02:32 1:15 8824 7108 ism APPLE !PHONES 5840 04/13/20 21:02:48 0:01 0 0 ism 5841 04/13/20 21:03:29 11:24 8193 6032 ism 5842 04/13/20 21:03:47 23:08 0 0 nxtgenpho ne APPLE !PHONES 5843 04/13/20 21:24:06 13:03 18729 12748 ism 5844 04/13/20 21:26:55 21:31 192 0 nxtgenpho ne APPLE !PHONES 5845 04/13/20 21:26:56 19:08 6244 6798 ism APPLE !PHONES 5846 04/13/20 21:26:56 21:31 0 0 nxtgenpho ne APPLE !PHONES 5847 04/13/20 21:26:57 19:08 6670 5980 ism APPLE !PHONES 5848 04/13/20 21:45:05 10:24 10801 7698 ism 5849 04/13/20 21:46:03 2:23 6228 6668 ism APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 239 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171159 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343217

pm. MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. ceo. ‘•.. .a° AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Numbor ET Bytes Up Bytes Apn ENE! INSI NAAS Dn MODEL 5850 04/13/20 21:46:05 2:22 6668 5964 ims APPLE !PHONES 5851 04/13/20 21:48:27 6:59 0 Onxtgonpho ne APPLE !PHONES 5852 04/13/20 21:48:28 6:57 6692 5998 ims APPLE !PHONES 5853 04/13/20 21:55:25 0:04 2008 480 ims APPLE !PHONES 5854 04/13/20 21:55:26 130:10 192 Onxtgonpho ne APPLE !PHONES 5855 04/13/20 21:55:27 60:00 0 0 nxtgenpho ne APPLE !PHONES 5856 04/13/20 21:55:28 130:08 7676 67790 ims APPLE !PHONES 5857 04/13/20 21:55:29 60:00 9266 7412 ims APPLE !PHONES 5858 04/13/20 22:28:43 60:00 18659 9587 ims 5859 04/13/20 22:55:27 60:00 0 0 nxtgenpho ne APPLE !PHONES 5860 04/13/20 22:55:29 60:00 0 0 ims APPLE !PHONES 5861 04/13/20 23:28:43 26:49 9912 4300 ims 5862 04/13/20 23:55:27 10:10 0 Onxtgonpho ne APPLE !PHONES 5863 04/13/20 23:55:29 10:08 0 0 ims APPLE !PHONES 5864 04/13/20 23:55:41 60:00 18361 9746 ims 5865 04/14/20 00:05:37 8:19 0 Onxtgonpho ne APPLE !PHONES 5866 04/14/20 00:13:56 53:23 192 0 nxtgenpho ne APPLE !PHONES 5867 04/14/20 00:13:56 53:24 0 0 nxtgenpho ne APPLE !PHONES 5868 04/14/20 00:55:41 60:00 8496 2928 ims 5869 04/14/20 01:07:20 27:20 0 0 nxtgenpho ne APPLE !PHONES 5870 04/14/20 01:34:39 2:33 192 0 nxtgenpho ne APPLE !PHONES 5871 04/14/20 01:34:41 2:32 0 0 nxtgenpho ne APPLE !PHONES 5872 04/14/20 01:37:13 0:06 0 0 nxtgenpho ne APPLE !PHONES 5873 04/14/20 01:37:39 0:48 0 0 nxtgenpho ne APPLE !PHONES 5874 04/14/20 01:38:26 8:19 192 Onxtgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 240 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171160 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343218

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e s, AT&T Run Date: Run Time: Data Usage For: 06/17/2020 Item Conn. Date Conn. Time (OTC) 5875 04/14/20 01:38:28 5876 04/14/20 01:46:46 5877 04/14/20 01:55:35 5878 04/14/20 01:55:36 5879 04/14/20 01:55:41 5880 04/14/20 02:54:29 5881 04/14/20 02:55:41 5882 04/14/20 03:05:26 5883 04/14/20 03:05:27 5884 04/14/20 03:20:32 5885 04/14/20 03:53:28 5886 04/14/20 03:53:30 5887 04/14/20 03:55:39 5888 04/14/20 03:55:41 5889 04/14/20 03:57:43 5890 04/14/20 03:57:44 5891 04/14/20 04:16:15 5892 04/14/20 04:26:27 5893 04/14/20 04:26:28 5894 04/14/20 04:33:19 5895 04/14/20 04:37:40 5896 04/14/20 04:37:42 Originating Number CT Bytes Bytes Apn DMZ II SI WARR MOLL Up Dn 8:18 0 0 nxtgonpho APPLR 'PROMO no 8:50 0 0 nxtgonpho APPLR 'PROMO no 58:53 192 0 nxtgonpho APPLR 'PROMO no 58:53 0 0 nxtgonpho APPLR 'PROMO no 60:00 7156 3112 imp 10:58 0 0 nxtgenpho APPLE !PHONES no 60:00 13600 4748 imp 15:05 192 0 nxtgenpho APPLE !PHONES no 15:05 0 0 nxtgenpho APPLE !PHONES no 32:57 0 0 nxtgonpho APPLE !PHONES ne 2:10 192 0 nxtgonpho APPLE !PHONES ne 2:09 0 0 nxtgenpho APPLE !PHONES ne 2:05 0 0 nxtgenpho APPLE !PHONES no 60:00 10332 4180 imp 18:31 192 Onxtgonpho APPLE !PHONES ne 18:31 0 0 nxtgonpho APPLE !PHONES no 10:13 0 0 nxtgonpho APPLE IPHONE8 no 6:51 192 0 nxtgonpho APPLE !PHONES no 6:51 0 0 nxtgonpho APPLE !PHONES no 4:22 0 0 nxtgonpho APPLE !PHONES ne 8:33 192 0 nxtgonpho APPLE !PHONES ne 8:32 0 0 nxtgonpho APPLE !PHONES ne AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 241 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171161 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343219

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. cr. AT&T Run Date: Run Time: Data Usage For: 06/17/2020 Item Conn. Conn. Date Time (OTC) 5897 04/14/20 04:46:14 5898 04/14/20 04:55:41 5899 04/14/20 05:46:14 5900 04/14/20 05:55:41 5901 04/14/20 06:46:14 5902 04/14/20 06:55:41 5903 04/14/20 07:46:14 5904 04/14/20 07:55:41 5905 04/14/20 08:46:14 5906 04/14/20 08:46:16 5907 04/14/20 08:55:41 5908 04/14/20 09:46:16 5909 04/14/20 09:55:41 5910 04/14/20 10:46:16 5911 04/14/20 10:55:41 5912 04/14/20 11:32:26 5913 04/14/20 11:32:27 5914 04/14/20 11:55:41 5915 04/14/20 12:00:25 5916 04/14/20 12:00:26 5917 04/14/20 12:09:03 5918 04/14/20 12:09:04 5919 04/14/20 12:20:08 5920 04/14/20 12:29:18 Originating ET Bytes Bytes Apn IN/LI IMSI MAR MODEL Up Dn 60:00 0 0 nxtgenpho ne APPLE IPROME8 60:00 6924 2896 ims 60:00 0 0 nxtgenpho ne APPLE IPROME8 60:00 10068 3284 ims 60:00 0 0 nxtgenpho ne APPLE IPROME8 60:00 9960 3176 ims 60:00 0 0 nxtgenpho ne APPLE 'PHONES 60:00 13476 4624 ims 0:00 0 0 nxtgenpho ne APPLE 'PHONES 60:00 0 0 nxtgenpho ne APPLE 'PHONES 60:00 8496 3036 ims 60:00 0 0 nxtgenpho ne APPLE 'PHONES 60:00 13368 4676 ims 46:11 0 0 nxtgenpho ne APPLE 'PHONES 60:00 14940 4764 ims 27:59 192 0 nxtgonpho no APPLE !PHONES 27:59 0 0 nxtgonpho no APPLE !PHONES 60:00 8496 2928 ims 8:37 192 0 nxtgenpho ne APPLE !PHONES 8:37 0 0 nxtgenpho no APPLE !PHONES 11:04 192 0 nxtgonpho no APPLE !PHONES 11:04 0 0 nxtgonpho no APPLE !PHONES 9:11 0 0 nxtgonpho no APPLE !PHONES 28:04 192 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 242 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171162 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343220

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 NM= Conn. Time (OTC/ Originating Number ET Bytes Up Bytes Apn Dn =RI ISM WANE MODES 5921 04/14/20 12:29:19 28:04 0 0 nxtgenpho no APPLE IPEONEB 5922 04/14/20 12:55:41 60:00 10068 3300 ism 5923 04/14/20 12:57:23 9:06 0 Onxtgonpho ne APPLE 'PEONES 5924 04/14/20 13:06:30 57:52 0 0 nxtgonpho ne APPLE !PEONES 5925 04/14/20 13:55:41 60:00 8496 3036 ims 5926 04/14/20 14:04:21 2:26 192 Onxtgonpho ne APPLE !PHONES 5927 04/14/20 14:04:22 2:27 0 0 nxtgonpho no APPLE !PHONES 5928 04/14/20 14:06:49 9:38 0 0 nxtgonpho no APPLE !PHONES 5929 04/14/20 14:16:28 6:11 0 0 nxtgenpho no APPLE !PHONES 5930 04/14/20 14:22:38 3:18 192 0 nxtgonpho no APPLE !PHONES 5931 04/14/20 14:22:40 3:17 0 0 nxtgenpho ne APPLE !PHONES 5932 04/14/20 14:25:57 57:00 0 0 nxtgonpho ne APPLE !PHONES 5933 04/14/20 14:55:41 60:00 15528 5984 ims 5934 04/14/20 15:22:57 20:00 192 Onxtgonpho no APPLE !PHONES 5935 04/14/20 15:22:58 33:02 0 0 nxtgonpho ne APPLE !PHONES 5936 04/14/20 15:55:41 60:00 6924 2788 ims 5937 04/14/20 15:56:00 45:52 0 Onxtgonpho ne APPLE !PHONES 5938 04/14/20 16:41:52 22:32 192 0 nxtgonpho ne APPLE !PHONES 5939 04/14/20 16:41:53 22:32 0 0 nxtgonpho ne APPLE !PHONES 5940 04/14/20 16:52:53 11:31 8221 8496 ims APPLE !PHONES 5941 04/14/20 16:52:54 11:31 8428 8065 ims APPLE !PHONES 5942 04/14/20 16:55:41 2:33 0 0 ims 5943 04/14/20 17:02:02 60:00 20034 9674 ims 5944 04/14/20 17:04:26 60:00 0 Onxtgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 243 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171163 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343221

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:37:57pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro ••-.0# AT&T Run Dato: Run Time: Data Usage Tor: Item Conn. Dato 06/17/2020 NM= Conn. Time (OTC/ Originating ut,...hm. BT Bytes Up Bytom Apn DOLT II I Dn 5945 04/14/20 18:02:02 60:00 8604 3664 ims 5946 04/14/20 18:04:26 4:28 0 Onxtgonpho ne 5947 04/14/20 18:08:54 7:52 0 Onxtgonpho ne 5948 04/14/20 18:16:45 5:27 192 0 nxtgonpho ne 5949 04/14/20 18:16:46 5:27 0 0 nxtgonpho ne 5950 04/14/20 18:22:13 3:03 0 0 nxtgonpho ne 5951 04/14/20 18:25:16 2:03 288 0 nxtgenpho ne 5952 04/14/20 18:25:17 2:03 0 0 nxtgonpho ne 5953 04/14/20 18:27:20 5:05 0 0 nxtgonpho ne 5954 04/14/20 18:32:24 2:03 192 0 nxtgonpho ne 5955 04/14/20 18:32:25 2:03 0 0 nxtgonpho ne 5956 04/14/20 18:34:28 60:00 0 0 nxtgonpho ne 5957 04/14/20 19:02:02 60:00 10408 3376 ims 5958 04/14/20 19:34:28 2:29 0 Onxtgonpho ne 5959 04/14/20 19:36:56 2:09 192 0 ructgonpho ne 5960 04/14/20 19:36:57 2:09 0 0 ructgonpho ne 5961 04/14/20 19:39:06 7:13 0 0 nxtgonpho ne 5962 04/14/20 19:46:18 2:04 192 0 nxtgenpho ne 5963 04/14/20 19:46:20 2:03 0 0 nxtgenpho ne 5964 04/14/20 19:48:23 17:27 0 0 nxtgonpho ne 5965 04/14/20 20:02:02 18:54 5304 1696 ims 5966 04/14/20 20:05:50 2:03 192 Onxtgonpho ne NAM MODEL APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 244 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171164 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343222

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. dro AT&T Run Date: Run Timm: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number BT Bytes Up Bytes Apn Dn L62 IMSI MAKE MODEL 5967 04/14/20 20:05:51 2:03 0 0 nxtgenpho ne APPLE 'PEONES 5968 04/14/20 20:07:54 11:36 0 0 nottgonpho ne APPLE 'PEONES 5969 04/14/20 20:19:29 4:44 192 0 ructgonpho ne APPLE 'PEONES 5970 04/14/20 20:19:30 4:43 6244 6666 ims APPLE 'PEONES 5971 04/14/20 20:19:30 4:44 0 0 nxtgenpho ne APPLE 'PEONES 5972 04/14/20 20:19:31 4:43 6666 6088 ims APPLE 'PEONES 5973 04/14/20 20:20:56 10:30 8209 6232 ims 5974 04/14/20 20:24:14 28:09 0 Oructgonpho ne APPLE 'PEONES 5975 04/14/20 20:24:15 28:08 6674 5980 ims APPLE IPSOMES 5976 04/14/20 20:52:22 8:08 192 Oructgonpho ne APPLE 'PHONES 5977 04/14/20 20:52:24 2:53 6318 8080 ims APPLE 'PHONES 5978 04/14/20 20:52:24 8:07 0 0 nxtgenpho ne APPLE 'PHONES 5979 04/14/20 20:52:25 2:54 8080 6054 ims APPLE 'PHONES 5980 04/14/20 20:52:46 2:33 11634 6729 ism 5981 04/14/20 20:55:17 5:13 6264 6672 ism APPLE 'PHONES 5982 04/14/20 20:55:18 5:13 6672 6000 ism APPLE 'PHONES 5983 04/14/20 21:00:31 9:47 0 Onmtgonpho ne APPLE 'PHONES 5984 04/14/20 21:00:34 9:44 8784 8084 ims APPLE 'PHONES 5985 04/14/20 21:10:17 14:25 192 Onwtgonpho ne APPLE 'PHONES 5986 04/14/20 21:10:18 0:23 7335 8926 ims APPLE 'PHONES 5987 04/14/20 21:10:18 14:25 0 Onmtgonpho ne APPLE 'PHONES 5988 04/14/20 21:10:19 0:23 8818 7071 ims APPLE 'PHONES 5989 04/14/20 21:10:38 0:04 2569 1211 ims 5990 04/14/20 21:10:40 4:21 6450 6674 ims APPLE 'PHONES 5991 04/14/20 21:10:42 4:20 6674 6186 ims APPLE 'PHONES 5992 04/14/20 21:11:03 0:01 0 0 ims 5993 04/14/20 21:11:31 13:11 6478 6848 ims APPLE 'PHONES 5994 04/14/20 21:11:32 13:11 6784 6214 ims APPLE 'PHONES 5995 04/14/20 21:15:01 11:20 8209 6119 ims APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 245 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171165 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343223

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn Lett INS! IDOZZ 5996 04/14/20 21:24:43 60:00 0 0 nottgonpho no APPLE 5997 04/14/20 21:26:21 25:20 2768 1340 ims APPLE 5998 04/14/20 21:26:21 25:20 2704 1340 ims APPLE 5999 04/14/20 21:51:41 40:52 6864 2912 ims APPLE 6000 04/14/20 22:24:43 60:00 0 Onactgonpho no APPLE 6001 04/14/20 22:27:13 19:15 6670 5979 ims APPLE 6002 04/14/20 22:46:28 1:00 14920 9248 ims APPLE 6003 04/14/20 22:47:44 0:33 9726 6322 ims APPLE 6004 04/14/20 22:48:17 17:59 5072 2448 ims APPLE 6005 04/14/20 23:06:16 10:35 4540 5060 ims APPLE 6006 04/14/20 23:16:51 13:42 4964 1788 ims APPLE 6007 04/14/20 23:24:43 54:18 0 Onactgonpho no APPLE 6008 04/14/20 23:30:33 0:34 11432 9252 ims APPLE 6009 04/14/20 23:31:07 20:39 3532 1432 ims APPLE 6010 04/14/20 23:51:46 27:15 7680 3944 ims APPLE 6011 04/15/20 00:19:00 2:33 192 Onactgonpho no APPLE 6012 04/15/20 00:19:01 2:33 0 0 nottgonpho no APPLE 6013 04/15/20 00:19:03 8:32 8209 6124 Lan 6014 04/15/20 00:21:33 5:58 192 0 nottgonpho no APPLE 6015 04/15/20 00:21:34 5:58 0 0 nottgonpho no APPLE 6016 04/15/20 00:27:32 33:55 192 0 nottgonpho no APPLE 6017 04/15/20 00:27:33 28:02 7373 6800 ism APPLE 6018 04/15/20 00:27:33 33:55 0 0 nottgonpho no APPLE 6019 04/15/20 00:27:34 28:03 6800 7109 ism APPLE 6020 04/15/20 00:28:44 32:17 10165 7589 ism 6021 04/15/20 00:55:35 5:52 7156 6856 ism APPLE 6022 04/15/20 00:55:36 5:52 6748 6892 ism APPLE 6023 04/15/20 01:01:28 5:02 0 Onactgonpho no APPLE 6024 04/15/20 01:01:30 5:00 8082 6922 ism APPLE AT&T Proprietary MOODS 'PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES IPHONE8 !PHONES !PHONES !PHONES !PHONES !PHONES IPHONE8 The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 246 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171166 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343224

MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:30:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn =RI INSI MAKE MODEL 6025 04/15/20 01:06:29 8:19 192 0nmtgonpho ne APPLE 'PHONES 6026 04/15/20 01:06:30 8:18 6243 6666 ims APPLE 'PHONES 6027 04/15/20 01:06:30 8:19 0 0nmtgonpho ne APPLE 'PHONES 6028 04/15/20 01:06:31 8:18 6666 5979 ims APPLE 'PHONES 6029 04/15/20 01:14:49 33:25 0 0 nmtgonpho ne APPLE 'PHONES 6030 04/15/20 01:14:52 10:41 9040 7288 ims APPLE 'PHONES 6031 04/15/20 01:25:33 12:45 3640 1432 ims APPLE 'PHONES 6032 04/15/20 01:41:05 23:27 10067 6600 ims 6033 04/15/20 01:48:13 14:46 192 0nmtgonpho ne APPLE 'PHONES 6034 04/15/20 01:48:14 14:46 0 0 nmtgonpho ne APPLE 'PHONES 6035 04/15/20 02:03:00 21:22 0 0 nmtgonpho ne APPLE 'PHONES 6036 04/15/20 02:03:04 5:16 8884 7068 ims APPLE 'PHONES 6037 04/15/20 02:08:20 27:47 3764 1448 ims APPLE 'PHONES 6038 04/15/20 02:24:21 11:46 192 0nmtgonpho ne APPLE 'PHONES 6039 04/15/20 02:24:22 11:46 0 0 nmtgonpho ne APPLE 'PHONES 6040 04/15/20 02:36:08 20:20 0 0 nmtgonpho ne APPLE 'PHONES 6041 04/15/20 02:36:12 7:44 8902 7088 ims APPLE 'PHONES 6042 04/15/20 02:43:56 0:08 8528 6192 ims APPLE 'PHONES 6043 04/15/20 02:44:47 19:04 8189 6014 ims 6044 04/15/20 02:56:27 2:13 192 0nmtgonpho ne APPLE 'PHONES 6045 04/15/20 02:56:28 2:13 0 0 nmtgonpho ne APPLE 'PHONES 6046 04/15/20 02:58:40 6:04 192 0 nmtgonpho ne APPLE 'PHONES 6047 04/15/20 02:58:42 6:03 0 0 nmtgonpho ne APPLE 'PHONES 6048 04/15/20 03:03:33 1:11 6261 7424 ims APPLE 'PHONES 6049 04/15/20 03:03:34 1:11 6676 5997 ims APPLE 'PHONES 6050 04/15/20 03:03:51 14:19 9423 6373 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 247 customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171167 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343225

MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn EBB! INSI MAKE MODEL 6051 04/15/20 03:04:45 33:51 0 Onactgonphe ne APPLE !PHONES 6052 04/15/20 03:27:10 3:06 8084 6944 ism APPLE !PHONES 6053 04/15/20 03:30:16 60:00 13336 4684 ism APPLE !PHONES 6054 04/15/20 03:38:35 57:12 192 Onactgonphe ne APPLE !PHONES 6055 04/15/20 03:38:36 57:12 0 0 nactgonphe ne APPLE !PHONES 6056 04/15/20 04:30:16 60:00 8496 3020 ism APPLE !PHONES 6057 04/15/20 04:35:48 58:13 0 Onactgonphe ne APPLE !PHONES 6058 04/15/20 05:30:16 60:00 3208 1216 ism APPLE !PHONES 6059 04/15/20 06:06:55 59:56 24940 9938 ism 6060 04/15/20 06:30:16 60:00 0 0 ism APPLE !PHONES 6061 04/15/20 07:12:07 60:00 21084 9390 ism 6062 04/15/20 07:30:16 60:00 0 0 ism APPLE !PHONES 6063 04/15/20 08:12:07 60:00 6800 2756 ism 6064 04/15/20 08:16:08 2:04 192 Onactgonphe ne APPLE !PHONES 6065 04/15/20 08:16:09 2:04 0 0 nactgonphe ne APPLE !PHONES 6066 04/15/20 08:18:13 2:06 0 0 nactgonphe ne APPLE !PHONES 6067 04/15/20 08:20:18 1:22 192 0 nactgonphe ne APPLE !PHONES 6068 04/15/20 08:20:19 1:22 0 0 nactgonphe ne APPLE !PHONES 6069 04/15/20 08:21:41 18:55 0 0 nactgonphe ne APPLE !PHONES 6070 04/15/20 08:30:16 60:00 0 0 ism APPLE !PHONES 6071 04/15/20 08:40:36 32:10 192 Onactgonphe ne APPLE !PHONES 6072 04/15/20 08:40:37 32:10 0 0 nactgonphe ne APPLE !PHONES 6073 04/15/20 09:12:07 60:00 9960 3144 ism 6074 04/15/20 09:12:47 2:09 0 Onactgonphe ne APPLE !PHONES 6075 04/15/20 09:14:56 32:32 192 0 nxtgonphe ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 248 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171168 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343226

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e s, AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number BT Bytes Up Bytes Apn Dn INS! ISAICZ MODZI. 6076 04/15/20 09:14:57 32:32 0 Onxtgonpho no APPLE 'PEONES 6077 04/15/20 09:30:16 9:51 0 0 ims APPLE 'PEONES 6078 04/15/20 09:47:29 15:58 0 0 nxtgonpho no APPLE 'PEONES 6079 04/15/20 10:03:26 2:04 192 0 nxtgonpho no APPLE 'PEONES 6080 04/15/20 10:03:27 2:04 0 0 nxtgonpho no APPLE 'PEONES 6081 04/15/20 10:05:31 9:37 0 0 nxtgonpho no APPLE 'PEONES 6082 04/15/20 10:12:07 60:00 9960 3036 ims 6083 04/15/20 10:15:07 2:03 192 0 nxtgonpho no APPLE !PEONES 6084 04/15/20 10:15:08 2:03 0 0 nxtgonpho no APPLE 'PHONES 6085 04/15/20 10:17:11 51:15 0 0 nxtgonpho no APPLE 'PHONES 6086 04/15/20 11:08:26 27:15 192 0 nxtgonpho no APPLE 'PHONES 6087 04/15/20 11:08:26 27:16 0 0 nxtgonpho no APPLE 'PHONES 6088 04/15/20 11:12:07 60:00 8496 2896 ims 6089 04/15/20 11:35:42 23:11 0 0 nxtgonpho no APPLE 'PHONES 6090 04/15/20 11:58:52 9:20 192 0 nxtgonpho no APPLE 'PHONES 6091 04/15/20 11:58:53 9:20 0 0 nxtgonpho no APPLE IPHONE8 6092 04/15/20 12:08:13 32:41 0 0 nxtgonpho no APPLE IPHONE8 6093 04/15/20 12:12:07 60:00 12012 4396 ims 6094 04/15/20 12:40:53 2:13 192 0 nxtgonpho no APPLE IPHONE8 6095 04/15/20 12:40:54 2:13 0 0 nxtgonpho no APPLE IPHONE8 6096 04/15/20 12:43:07 0:05 0 0 nxtgonpho no APPLE IPHONE8 6097 04/15/20 12:43:34 22:29 0 0 nxtgonpho no APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 249 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171169 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343227

MOBILITY pu020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn L@3 IMSI MAKE MODEL 6098 04/15/20 13:06:02 2:03 192 Onmtgonpho ne APPLE !PHONES 6099 04/15/20 13:06:03 2:03 0 0 nxtgenpho ne APPLE !PHONES 6100 04/15/20 13:08:06 12:43 0 0 nxtgenpho ne APPLE !PHONES 6101 04/15/20 13:12:07 60:00 11888 4436 ims 6102 04/15/20 13:20:48 8:14 192 Onmtgonpho ne APPLE !PHONES 6103 04/15/20 13:20:49 8:14 0 Onactgonpho ne APPLE !PHONES 6104 04/15/20 13:29:03 11:54 0 0 nxtgenpho no APPLE !PHONES 6105 04/15/20 13:40:56 7:46 192 0 nxtgonpho no APPLE !PHONES 6106 04/15/20 13:40:57 7:46 0 0 nxtgonpho no APPLE !PHONES 6107 04/15/20 13:48:43 4:52 0 0 nxtgenpho ne APPLE !PHONES 6108 04/15/20 13:53:34 9:51 192 0 nxtgenpho ne APPLE !PHONES 6109 04/15/20 13:53:35 9:51 0 0 nxtgenpho no APPLE !PHONES 6110 04/15/20 14:03:26 35:03 0 0 nxtgonpho no APPLE !PHONES 6111 04/15/20 14:12:07 60:00 6908 2880 ims 6112 04/15/20 14:38:29 7:10 0 0 nxtgenpho ne APPLE !PHONES 6113 04/15/20 14:45:38 0:50 192 0 nxtgenpho ne APPLE !PHONES 6114 04/15/20 14:45:39 0:50 0 0 nxtgenpho ne APPLE !PHONES 6115 04/15/20 14:46:30 2:48 0 0 nxtgenpho ne APPLE !PHONES 6116 04/15/20 14:49:18 13:09 192 0 nxtgonpho no APPLE !PHONES 6117 04/15/20 14:49:19 13:09 0 0 nxtgonpho no APPLE !PHONES 6118 04/15/20 15:02:28 2:01 0 0 nxtgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 250 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171170 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343228

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro AT&T Run Data: Run Tim: Data usage For: Item Conn. Data 06/17/2020 Corm. originating Time mambos (OTC) Br Bytes up Bytes Apn Dn flat IASI Ian MODEM 6119 04/15/20 15:04:28 8:17 192 Onstgenpho ne APPLE WEANED 6120 04/15/20 15:04:30 8:16 0 Onstgenpho ne APPLE WEANED 6121 04/15/20 15:12:07 41:27 8388 3004 ims APPLE WEANED 6122 04/15/20 15:12:46 3:22 0 Onstgenpho ne APPLE WEANED 6123 04/15/20 15:16:09 20:00 192 Onstgenpho ne APPLE WEANED 6124 04/15/20 15:16:10 35:10 0 Onstgenpho ne APPLE WEANED 6125 04/15/20 15:51:20 3:30 0 Onstgenpho ne APPLE IPHONE8 6126 04/15/20 15:53:34 1:16 19736 2324 ims APPLE !PHONES 6127 04/15/20 15:53:34 1:16 3388 2324 ims APPLE !PHONES 6128 04/15/20 15:54:49 23:05 192 Onstgenpho ne APPLE !PHONES 6129 04/15/20 15:54:50 23:05 0 Onstgenpho ne APPLE !PHONES 6130 04/15/20 15:54:50 12:52 6334 6856 ism APPLE 'PHONES 6131 04/15/20 15:54:51 12:52 6856 6070 ism APPLE 'PHONES 6132 04/15/20 16:06:56 0:51 9065 6460 ism 6133 04/15/20 16:07:39 60:00 0 0 ism APPLE 'PHONES 6134 04/15/20 16:07:46 4:11 6245 6674 ims APPLE 'PHONES 6135 04/15/20 16:07:47 4:11 6674 5981 ims APPLE 'PHONES 6136 04/15/20 16:16:14 29:08 20553 13524 ims 6137 04/15/20 16:17:55 5:13 0 Onstgenpho ne APPLE 'PHONES 6138 04/15/20 16:23:07 14:51 192 Onstgenpho ne APPLE 'PHONES 6139 04/15/20 16:23:08 14:51 0 Onstgenpho ne APPLE 'PHONES 6140 04/15/20 16:37:59 11:35 0 Onstgenpho ne APPLE 'PHONES 6141 04/15/20 16:47:33 2:01 11986 13222 ims APPLE 'PHONES 6142 04/15/20 16:49:34 15:07 192 Onstgenpho ne APPLE 'PHONES 6143 04/15/20 16:49:35 15:06 7328 7652 ims APPLE 'PHONES 6144 04/15/20 16:49:35 15:07 0 Onstgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 251 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171171 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343229

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn DOM INSI MAIM MOBIL 6145 04/15/20 16:49:36 15:06 7544 6976 isms APPLE !PEONES 6146 04/15/20 17:04:42 16:57 0 Onxtgonpho no APPLE !PEONES 6147 04/15/20 17:04:45 15:37 8338 8030 isms APPLE !PEONES 6148 04/15/20 17:07:39 18:46 0 0 isms APPLE !PEONES 6149 04/15/20 17:20:22 8:34 3532 1432 ims APPLE !PEONES 6150 04/15/20 17:21:38 8:17 192 Onmtgonpho no APPLE !PEONES 6151 04/15/20 17:21:39 8:17 0 0 nxtgonpho no APPLE !PEONES 6152 04/15/20 17:26:24 3:31 6333 50190 ims APPLE !PEONES 6153 04/15/20 17:26:25 3:31 6670 5981 ims APPLE !PEONES 6154 04/15/20 17:28:56 17:03 8263 6198 ims 6155 04/15/20 17:29:56 24:29 0 Onatgonpho no APPLE !PEONES 6156 04/15/20 17:41:23 13:02 8058 6034 ims APPLE 'PHONES 6157 04/15/20 17:54:24 2:03 192 0 nxtgonpho no APPLE 'PHONES 6158 04/15/20 17:54:25 2:02 6952 6512 ims APPLE 'PHONES 6159 04/15/20 17:54:25 2:03 0 0 nxtgonpho no APPLE 'PHONES 6160 04/15/20 17:54:26 2:02 6404 6688 ims APPLE 'PHONES 6161 04/15/20 17:56:28 8:49 0 0 nxtgonpho no APPLE 'PHONES 6162 04/15/20 17:56:29 8:48 7732 6246 ims APPLE 'PHONES 6163 04/15/20 18:05:16 2:04 192 0 nxtgonpho no APPLE 'PHONES 6164 04/15/20 18:05:17 2:03 6458 7494 ims APPLE 'PHONES 6165 04/15/20 18:05:17 2:04 0 0 nxtgonpho no APPLE !PHONES 6166 04/15/20 18:05:18 2:03 7494 6194 ims APPLE !PHONES 6167 04/15/20 18:07:21 0:05 0 0 nxtgonpho no APPLE !PHONES 6168 04/15/20 18:07:37 51:27 0 0 nxtgonpho no APPLE !PHONES 6169 04/15/20 18:07:40 45:14 11412 7607 ims APPLE !PHONES 6170 04/15/20 18:52:54 27:01 3548 2524 ims APPLE !PHONES 6171 04/15/20 18:59:03 8:16 192 0 nxtgonpho no APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 252 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171172 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343230

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. c r. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating CT Time Number (OTC) Bytes Up Bytes Apn Dn n6I INSI MAKE MODEL 6172 04/15/20 18:59:05 8:15 0 Onmtgonphe ne 310410214827503 APPLE !PHONES 6173 04/15/20 19:07:20 0:36 0 0 nactgonphe ne 310410214827503 APPLE !PHONES 6174 04/15/20 19:07:56 2:03 192 0 nactgonphe ne 310410214827503 APPLE !PHONES 6175 04/15/20 19:07:57 2:03 0 0 nactgonphe ne 310410214827503 APPLE !PHONES 6176 04/15/20 19:10:00 7:55 0 0 nactgonpho ne 310410214827503 APPLE !PHONES 6177 04/15/20 19:17:33 60:00 16873 9324 ism 310410214827503 6178 04/15/20 19:17:54 2:09 192 0 nactgonphe ne 310410214827503 APPLE !PHONES 6179 04/15/20 19:17:55 2:09 0 0 nactgonphe ne 310410214827503 APPLE !PHONES 6180 04/15/20 19:20:05 60:00 0 0 nmtgonphe ne 310410214827503 APPLE !PHONES 6181 04/15/20 20:17:33 60:00 10376 3268 ism 310410214827503 6182 04/15/20 20:20:05 3:36 0 0 nictgonphe ne 310410214827503 APPLE !PHONES 6183 04/15/20 20:23:40 6:04 192 0 nictgonphe ne 310410214827503 APPLE !PHONES 6184 04/15/20 20:23:41 6:04 0 0 nictgonphe ne 310410214827503 APPLE !PHONES 6185 04/15/20 20:29:45 57:39 0 0 nictgonphe ne 310410214827503 APPLE !PHONES 6186 04/15/20 21:17:33 55:02 16772 9188 ism 310410214827503 6187 04/15/20 21:27:23 35:36 192 0 nictgonphe ne 310410214827503 APPLE !PHONES 6188 04/15/20 21:27:24 35:36 0 0 nictgonphe ne 310410214827503 APPLE !PHONES 6189 04/15/20 22:03:00 13:02 0 0 nictgonphe ne 310410214827503 APPLE !PHONES 6190 04/15/20 22:07:09 0:00 0 0 ism 310410214827503 APPLE !PHONES 6191 04/15/20 22:10:27 60:00 39452 25378 ism 310410214827503 6192 04/15/20 22:16:01 37:38 192 0 nictgonphe ne 310410214827503 APPLE !PHONES 6193 04/15/20 22:16:02 37:38 0 0 nictgonphe ne 310410214827503 APPLE !PHONES 6194 04/15/20 22:53:40 1:14 0 0 nictgonphe ne 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 253 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171173 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343231

..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ce. ‘sei. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn TIM INSI MAKE Dn MODEL 6195 04/15/20 22:54:00 0:29 4811 18287 ism 6196 04/15/20 22:54:53 28:10 192 Onxtgonpho ne APPLE !PHONES 6197 04/15/20 22:54:54 28:10 0 0 nxtgenpho ne APPLE !PHONES 6198 04/15/20 23:06:36 25:23 5201114 4269382 ism 6199 04/15/20 23:10:27 60:00 16484 15256 ism 6200 04/15/20 23:23:03 3:39 192 Onxtgonpho ne APPLE !PHONES 6201 04/15/20 23:23:04 3:39 0 0 nxtgenpho ne APPLE !PHONES 6202 04/15/20 23:26:43 1:53 0 0 nxtgenpho ne APPLE !PHONES 6203 04/15/20 23:28:35 3:42 192 0 nxtgenpho ne APPLE !PHONES 6204 04/15/20 23:28:36 3:42 0 0 nxtgenpho ne APPLE !PHONES 6205 04/15/20 23:32:18 7:25 0 0 nxtgenpho ne APPLE !PHONES 6206 04/15/20 23:39:42 13:51 192 0 nxtgenpho ne APPLE !PHONES 6207 04/15/20 23:39:43 13:51 0 0 nxtgenpho ne APPLE !PHONES 6208 04/15/20 23:53:34 34:44 192 0 nxtgenpho ne APPLE !PHONES 6209 04/15/20 23:53:35 34:44 0 0 nxtgenpho ne APPLE !PHONES 6210 04/16/20 00:10:27 60:00 10036 3408 ism 6211 04/16/20 00:28:19 1:10 0 0 nxtgonpho no APPLE !PHONES 6212 04/16/20 00:29:28 9:34 192 0 nxtgonpho ne APPLE !PHONES 6213 04/16/20 00:29:29 9:34 0 0 nxtgenpho ne APPLE !PHONES 6214 04/16/20 00:39:03 28:34 0 0 nxtgenpho ne APPLE !PHONES 6215 04/16/20 01:07:36 2:10 192 0 nxtgenpho ne APPLE !PHONES 6216 04/16/20 01:07:38 2:09 0 0 nxtgenpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 254 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171174 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343232

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ctio AT&T Run pato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn EBB! INSI NAAS MODEL 6217 04/16/20 01:09:46 33:55 0 Onactgonpho ne APPLE !PHONES 6218 04/16/20 01:10:27 60:00 6956 2788 Las 6219 04/16/20 01:43:40 1:07 192 Onactgonpho ne APPLE !PHONES 6220 04/16/20 01:43:41 1:07 0 0 nxtgenpho ne APPLE !PHONES 6221 04/16/20 01:44:48 24:29 0 0 nxtgenpho ne APPLE !PHONES 6222 04/16/20 02:09:16 2:04 192 0 nxtgenpho ne APPLE !PHONES 6223 04/16/20 02:09:17 2:04 0 0 nxtgenpho ne APPLE !PHONES 6224 04/16/20 02:10:27 60:00 12260 4516 ism 6225 04/16/20 02:11:21 14:40 0 0 nxtgenpho ne APPLE !PHONES 6226 04/16/20 02:26:00 2:04 192 0 nxtgenpho ne APPLE !PHONES 6227 04/16/20 02:26:01 2:04 0 0 nxtgenpho ne APPLE !PHONES 6228 04/16/20 02:28:05 27:57 0 0 nxtgenpho ne APPLE !PHONES 6229 04/16/20 02:56:02 0:40 192 0 nxtgenpho ne APPLE !PHONES 6230 04/16/20 02:56:03 0:40 0 0 nxtgenpho ne APPLE !PHONES 6231 04/16/20 02:56:42 56:17 0 0 nxtgenpho ne APPLE !PHONES 6232 04/16/20 03:10:27 60:00 10272 4288 ism 6233 04/16/20 04:10:27 60:00 8496 3036 ism 6234 04/16/20 05:10:27 60:00 6956 2804 ism 6235 04/16/20 05:47:48 6:10 0 Onactgonpho ne APPLE !PHONES 6236 04/16/20 05:53:58 20:47 192 0 nxtgenpho ne APPLE !PHONES 6237 04/16/20 05:53:59 20:47 0 0 nxtgenpho ne APPLE !PHONES 6238 04/16/20 06:10:27 60:00 14892 4764 ism 6239 04/16/20 06:14:46 1:49 0 0 nxtgenpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 255 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171175 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343233

..020 MOBILITY 4:211 0 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm tar," AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ‘...1....._stoe OTC. Run Data: Run Tina: Data Usage For: Item Conn. Date 06/17/2020 MI= Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn MAX IASI NAM MODEL 6240 04/16/20 06:16:34 1:35 192 Onxtgonpho ne APPLE !PHONES 6241 04/16/20 06:16:36 1:34 0 0 nxtgonpho ne APPLE !PHONES 6242 04/16/20 06:18:10 60:00 0 0 nxtgonpho ne APPLE !PHONES 6243 04/16/20 07:10:27 60:00 6956 2788 ims 6244 04/16/20 07:18:10 59:18 0 0 nxtgonpho ne APPLE !PHONES 6245 04/16/20 08:10:27 60:00 10272 4180 ims 6246 04/16/20 08:17:27 1:30 192 Onxtgonpho no APPLE !PHONES 6247 04/16/20 08:17:28 1:30 0 0 nxtgonpho no APPLE !PHONES 6248 04/16/20 08:18:58 19:37 0 0 nxtgonpho ne APPLE !PHONES 6249 04/16/20 08:38:34 1:41 192 0 nxtgonpho ne APPLE !PHONES 6250 04/16/20 08:38:35 1:41 0 0 nxtgonpho ne APPLE !PHONES 6251 04/16/20 08:40:16 60:00 0 0 nxtgonpho no APPLE !PHONES 6252 04/16/20 09:10:27 60:00 13352 4516 ims 6253 04/16/20 09:40:16 60:00 0 0 nxtgonpho ne APPLE !PHONES 6254 04/16/20 10:10:27 60:00 8388 2928 ims 6255 04/16/20 10:40:16 60:00 0 0 nxtgonpho ne APPLE !PHONES 6256 04/16/20 11:10:27 60:00 7064 2788 ims 6257 04/16/20 11:40:16 60:00 0 0 nxtgonpho ne APPLE !PHONES 6258 04/16/20 12:10:27 60:00 8604 3036 ims 6259 04/16/20 12:40:16 0:00 0 0 nxtgonpho ne APPLE !PHONES 6260 04/16/20 12:40:18 60:00 0 0 nxtgonpho no APPLE !PHONES 6261 04/16/20 13:10:27 60:00 13444 4676 ims 6262 04/16/20 13:40:18 60:00 0 0 nxtgonpho no APPLE !PHONES 6263 04/16/20 14:10:27 60:00 13568 4516 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 256 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00171176 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343234

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:55:55pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro ‘•.. .a° AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Mid= Conn. Time (OTC) Originating ET Bytes Up Bytes Apn Dn flat INSI HAKE MODEL 6264 04/16/20 14:40:18 60:00 0 0 nmtgonpho no APPLE !PHONES 6265 04/16/20 15:10:27 55:27 6956 2788 ism 6266 04/16/20 15:40:18 25:06 0 0 nmtgonpho no APPLE !PHONES 6267 04/16/20 16:05:23 2:23 192 0 nmtgonpho no APPLE !PHONES 6268 04/16/20 16:05:25 2:21 7268 6900 ism APPLE !PHONES 6269 04/16/20 16:05:25 2:23 0 0 nmtgonpho no APPLE !PHONES 6270 04/16/20 16:05:26 2:22 6792 7004 ism APPLE !PHONES 6271 04/16/20 16:05:54 0:01 0 0 ism 6272 04/16/20 16:06:16 1:30 6386 7468 ism APPLE !PHONES 6273 04/16/20 16:06:17 1:31 7404 6122 ism APPLE !PHONES 6274 04/16/20 16:07:47 2:18 0 Onxtgonpho no APPLE !PHONES 6275 04/16/20 16:07:49 2:16 8400 7968 ism APPLE !PHONES 6276 04/16/20 16:10:04 4:37 192 0 nxtgonpho no APPLE 'PHONES 6277 04/16/20 16:10:05 4:36 6335 6668 ism APPLE 'PHONES 6278 04/16/20 16:10:05 4:37 0 0 nxtgonpho no APPLE 'PHONES 6279 04/16/20 16:10:06 4:36 6668 6071 ism APPLE 'PHONES 6280 04/16/20 16:11:02 60:00 21113 10326 ism 6281 04/16/20 16:14:42 60:00 0 Onxtgonpho no APPLE 'PHONES 6282 04/16/20 17:11:02 60:00 6956 2680 ism 6283 04/16/20 17:14:42 19:04 0 0 nxtgonpho no APPLE 'PHONES 6284 04/16/20 17:33:46 18:29 192 0 nxtgonpho no APPLE 'PHONES 6285 04/16/20 17:33:46 18:30 0 0 nxtgonpho no APPLE 'PHONES 6286 04/16/20 17:52:15 6:37 192 0 nxtgonpho no APPLE 'PHONES 6287 04/16/20 17:52:16 6:37 0 0 nxtgonpho no APPLE 'PHONES 6288 04/16/20 17:58:53 19:47 0 0 nmtgonpho no APPLE 'PHONES 6289 04/16/20 18:11:02 39:36 3424 1340 ism AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was Page 257 customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171177 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343235

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 MI= Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn DMZ INSI MAKE Dn MODEL 6290 04/16/20 18:18:39 2:20 192 0nmtgonpho ne APPLE !PHONES 6291 04/16/20 18:18:40 2:20 0 0nstgenpho ne APPLE !PHONES 6292 04/16/20 18:21:00 29:34 0 0nmtgonpho ne APPLE !PHONES 6293 04/16/20 18:50:33 2:51 192 0nmtgonpho ne APPLE !PHONES 6294 04/16/20 18:50:34 2:51 0 0nxtgonpho ne APPLE !PHONES 6295 04/16/20 18:50:36 2:48 8152 7618 Las APPLE !PHONES 6296 04/16/20 18:50:37 2:48 7550 7888 Las APPLE !PHONES 6297 04/16/20 18:53:25 22:32 0 0nmtgonpho ne APPLE !PHONES 6298 04/16/20 18:53:29 60:00 16933 9322 Las 6299 04/16/20 19:15:56 2:03 192 0nmtgonpho ne APPLE !PHONES 6300 04/16/20 19:15:57 2:03 0 0nstgenpho ne APPLE !PHONES 6301 04/16/20 19:18:00 55:48 0 0nstgenpho ne APPLE !PHONES 6302 04/16/20 19:53:29 60:00 9928 3176 isms 6303 04/16/20 20:13:47 1:51 192 0nmtgonpho ne APPLE !PHONES 6304 04/16/20 20:13:48 1:51 0 0nmtgonpho ne APPLE !PHONES 6305 04/16/20 20:15:39 5:31 0 0nxtgonpho ne APPLE !PHONES 6306 04/16/20 20:21:09 3:19 192 0nmtgonpho ne APPLE !PHONES 6307 04/16/20 20:21:10 3:19 0 0nxtgonpho ne APPLE !PHONES 6308 04/16/20 20:24:29 7:26 0 0nxtgonpho ne APPLE !PHONES 6309 04/16/20 20:31:55 29:30 0 0nstgenpho ne APPLE !PHONES 6310 04/16/20 20:53:29 60:00 12260 4576 isms 6311 04/16/20 21:01:24 2:03 192 0nstgenpho ne APPLE !PHONES 6312 04/16/20 21:01:25 2:03 0 0 nstgenpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 258 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171178 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343236

PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro ••- .ai. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 6313 04/16/20 6314 04/16/20 6315 04/16/20 6316 04/16/20 6317 04/16/20 6318 04/16/20 6319 04/16/20 6320 04/16/20 6321 04/16/20 6322 04/16/20 6323 04/16/20 6324 04/16/20 6325 04/16/20 6326 04/16/20 6327 04/16/20 6328 04/16/20 6329 04/16/20 6330 04/16/20 6331 04/16/20 6332 04/16/20 6333 04/16/20 6334 04/16/20 6335 04/16/20 06/17/2020 MI= Conn. Originating BT Bytos Bytes Apn MMAI IASI MARE MODEL Time Number Up Dn lu7C) 21:03:28 3:29 0 0 nxtgonpho no APPLE !PHONES 21:06:56 14:30 192 0 nxtgonpho no APPLE !PHONES 21:06:57 14:30 0 0 nxtgonpho no APPLE !PHONES 21:21:27 0:54 0 0 nxtgonpho no APPLE !PHONES 21:22:20 2:17 192 Onxtgonpho no APPLE !PHONES 21:22:21 2:17 0 0 nxtgonpho no APPLE !PHONES 21:24:38 0:05 0 0 nxtgonpho no APPLE !PHONES 21:24:56 9:39 0 0 nxtgonpho no APPLE !PHONES 21:34:34 8:20 192 0 nxtgonpho no APPLE !PHONES 21:34:36 8:19 0 0 nxtgonpho no APPLE !PHONES 21:42:55 0:55 0 0 nxtgonpho no APPLE !PHONES 21:43:50 8:20 192 0 nxtgonpho no APPLE !PHONES 21:43:51 8:20 0 0 nxtgonpho no APPLE !PHONES 21:52:11 9:10 0 0 nxtgonpho no APPLE !PHONES 21:53:29 9:05 0 0 ims 22:01:21 21:51 192 0 nxtgonpho no APPLE !PHONES 22:01:22 21:52 0 0 nxtgonpho no APPLE !PHONES 22:07:21 15:51 18152 16510 ims APPLE !PHONES 22:07:22 15:51 16442 17888 ims APPLE !PHONES 22:15:08 0:21 9096 0 ims APPLE !PHONES 22:15:09 0:21 0 9096 ims APPLE !PHONES 22:23:13 1:29 0 Onmtgonpho no APPLE !PHONES 22:23:20 50:27 19231 15535 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 259 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171179 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343237

pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. cro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 SS= Conn. Time (OTC) Originating Numbor ET Bytes Up Bytes Apn MST IMSI MAR Dn MODEL 6336 04/16/20 22:24:41 2:11 192 Onxtgonpho ne APPLE 'PROMO 6337 04/16/20 22:24:44 2:09 0 0 nxtgenpho ne APPLE 'PROMO 6338 04/16/20 22:26:53 1:11 0 0 nxtgenpho ne APPLE 'PROMO 6339 04/16/20 22:28:03 2:09 192 0 nxtgonpho ne APPLE 'PROMO 6340 04/16/20 22:28:05 2:09 0 0 nxtgonpho ne APPLE 'PHONES 6341 04/16/20 22:30:14 1:44 0 0 nxtgonpho ne APPLE !PHONES 6342 04/16/20 22:31:48 0:11 1003 5372 nxtgenpho no 6343 04/16/20 22:31:57 2:04 192 0 nxtgenpho no APPLE !PHONES 6344 04/16/20 22:31:58 2:04 0 0 nxtgenpho no APPLE 'PHONES 6345 04/16/20 22:34:02 16:17 0 0 nxtgenpho no APPLE 'PHONES 6346 04/16/20 22:50:18 9:04 192 0 nxtgenpho no APPLE 'PHONES 6347 04/16/20 22:50:19 9:04 0 0 nxtgenpho no APPLE 'PHONES 6348 04/16/20 22:59:22 1:09 192 0 nxtgenpho no APPLE !PHONES 6349 04/16/20 22:59:23 1:09 0 0 nxtgenpho no APPLE !PHONES 6350 04/16/20 22:59:58 0:35 4807 34708 nxtgonpho no 6351 04/16/20 23:00:31 0:56 192 0 nxtgonpho ne APPLE !PHONES 6352 04/16/20 23:00:32 0:56 0 0 nxtgonpho no APPLE !PHONES 6353 04/16/20 23:01:28 60:00 0 0 nxtgonpho ne APPLE !PHONES 6354 04/16/20 23:08:27 42:36 9266 7303 ims APPLE !PHONES 6355 04/16/20 23:51:03 24:33 3748 1664 ism APPLE !PHONES 6356 04/17/20 00:01:28 27:44 0 Onxtgonpho no APPLE !PHONES 6357 04/17/20 00:15:36 0:58 2644 1324 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 260 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00171180 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343238

MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:58:58pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. es AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC/ Bytes Up Bytes Apn LEI IMEI IOJCIL Dn MODEL 6358 04/17/20 00:16:34 60:00 24032 13612 ims APPLE !PEONES 6359 04/17/20 00:28:44 0:12 9796 20982 ims APPLE !PEONES 6360 04/17/20 00:29:11 2:04 192 Onmtgonpho ne APPLE !PEONES 6361 04/17/20 00:29:12 2:05 0 Onmtgonpho ne APPLE !PEONES 6362 04/17/20 00:31:16 60:00 0 Onmtgonpho ne APPLE !PEONES 6363 04/17/20 01:16:34 60:00 14512 8752 ims APPLE IPHONE8 6364 04/17/20 01:31:16 28:19 0 Onmtgonpho no APPLE !PHONES 6365 04/17/20 01:54:16 42:00 6204486 8118640 ims APPLE !PHONES 6366 04/17/20 01:59:33 1:39 192 Onmtgonpho ne APPLE !PHONES 6367 04/17/20 01:59:35 1:38 0 Onmtgonpho ne APPLE !PHONES 6368 04/17/20 02:01:13 1:08 0 Onmtgonpho ne APPLE !PHONES 6369 04/17/20 02:02:20 2:03 192 Onmtgonpho ne APPLE !PHONES 6370 04/17/20 02:02:21 2:03 0 Onmtgonpho ne APPLE !PHONES 6371 04/17/20 02:04:24 4:04 0 Onmtgonpho ne APPLE !PHONES 6372 04/17/20 02:08:27 2:04 192 Onmtgonpho ne APPLE !PHONES 6373 04/17/20 02:08:28 2:04 0 Onmtgonpho ne APPLE !PHONES 6374 04/17/20 02:10:32 2:52 0 Onmtgonpho ne APPLE !PHONES 6375 04/17/20 02:13:23 14:17 192 Onmtgonpho ne APPLE !PHONES 6376 04/17/20 02:13:24 14:17 0 Onmtgonpho ne APPLE IPHONE8 6377 04/17/20 02:16:34 60:00 6224 2920 ims APPLE !PHONES 6378 04/17/20 02:27:41 60:00 0 Onmtgonpho ne APPLE !PHONES 6379 04/17/20 02:51:19 0:00 0 0 ims APPLE !PHONES 6380 04/17/20 02:51:29 60:00 21442 9856 ims 6381 04/17/20 03:16:34 60:00 0 0 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 261 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171181 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343239

MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ‘•-. 0° AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 6382 04/17/20 6383 04/17/20 6384 04/17/20 6385 04/17/20 6386 04/17/20 6387 04/17/20 6388 04/17/20 6389 04/17/20 6390 04/17/20 6391 04/17/20 6392 04/17/20 6393 04/17/20 6394 04/17/20 6395 04/17/20 6396 04/17/20 6397 04/17/20 6398 04/17/20 6399 04/17/20 6400 04/17/20 6401 04/17/20 6402 04/17/20 6403 04/17/20 6404 04/17/20 6405 04/17/20 06/17/2020 MI= Conn. Originating ET Bytes Bytes Apn DOLT INSI MAKE MODEL Time Number Up Dn (OTC/ 03:27:41 24:51 0 Onactgonpho ne APPLE !PHONES 03:51:29 60:00 8388 2896 ins 03:52:31 2:24 192 Onactgonpho ne APPLE !PHONES 03:52:32 2:24 0 0 nxtgenpho ne APPLE !PHONES 03:54:55 6:03 192 0 nxtgenpho no APPLE !PHONES 03:54:56 6:03 0 0 nxtgenpho no APPLE !PHONES 04:01:00 60:00 0 0 nxtgenpho no APPLE !PHONES 04:16:34 60:00 0 0 Las APPLE !PHONES 04:51:29 60:00 7440 3236 Las 05:01:00 60:00 0 0 nxtgenphe ne APPLE !PHONES 05:16:34 60:00 0 0 Las APPLE !PHONES 05:51:29 60:00 10020 3268 Las 06:01:00 60:00 0 0 nxtgenphe ne APPLE !PHONES 06:16:34 19:50 0 0 Las APPLE !PHONES 06:51:29 60:00 17224 6216 Las 07:01:00 60:00 0 0 nxtgenphe no APPLE !PHONES 07:51:29 60:00 7636 2896 Las 08:01:00 0:01 0 0 nxtgenphe no APPLE !PHONES 08:01:02 40:34 0 0 nxtgenphe no APPLE !PHONES 08:41:35 3:31 192 0 nxtgenphe no APPLE !PHONES 08:41:36 3:31 0 0 nxtgenphe no APPLE !PHONES 08:45:07 8:39 0 0 nxtgenphe no APPLE !PHONES 08:51:29 60:00 8156 2988 Las 08:53:47 3:01 0 0 nxtgenphe ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 262 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171182 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343240

PRI020 MOBILITY 41110 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:50:59pm ttrs„s `-a. AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Data: Run Time: Data Usage For: Item Conn. Date 6406 04/17/20 6407 04/17/20 6408 04/17/20 6409 04/17/20 6410 04/17/20 6411 04/17/20 6412 04/17/20 6413 04/17/20 6414 04/17/20 6415 04/17/20 6416 04/17/20 6417 04/17/20 6418 04/17/20 6419 04/17/20 6420 04/17/20 6421 04/17/20 6422 04/17/20 6423 04/17/20 6424 04/17/20 6425 04/17/20 6426 04/17/20 6427 04/17/20 6428 04/17/20 6429 04/17/20 6430 04/17/20 06/17/2020 Mid= Conn. Tame (OTC) 08:56:47 08:56:48 08:58:28 09:47:13 09:47:14 09:49:26 09:51:29 10:49:26 10:51:29 11:49:26 11:51:29 12:45:00 12:45:09 12:49:26 12:51:29 13:45:09 13:49:26 13:49:30 13:51:29 14:45:09 14:49:30 14:51:29 15:31:13 15:31:14 15:33:37 Originating ET Bytes Bytes Apn flax INSI NAME MODEL Number Up Dn 1:40 192 0 nxtgenpho APPLE 'PHONES ne 1:40 0 0 nxtgenpho APPLE 'PHONES NO 48:46 0 0 nxtgenpho APPLE 'PHONES ne 2:12 192 0 nxtgenpho APPLE 'PHONES ne 2:12 0 0 nxtgenpho APPLE 'PHONES ne 60:00 0 0 nxtgenpho APPLE 'PHONES ne 60:00 7064 2664 ims 60:00 0 0 nxtgenpho APPLE 'PHONES ne 60:00 12028 4220 ims 60:00 0 0 nxtgenpho APPLE 'PHONES ne 60:00 7204 2880 ims 0:00 0 0 ims APPLE 'PHONES 60:00 16705 9144 ims 60:00 0 0 nxtgenpho APPLE 'PHONES ne 60:00 0 0 ims 60:00 8388 2928 ims 0:02 0 0 nxtgenpho APPLE 'PHONES ne 60:00 0 0 nxtgenpho APPLE 'PHONES ne 60:00 0 0 ims 60:00 24360 11316 ims 41:44 0 0 nxtgenpho APPLE 'PHONES ne 60:00 0 0 ims 2:23 192 0 nxtgenpho APPLE 'PHONES ne 2:23 0 0 nxtgenpho APPLE 'PHONES ne 5:17 0 0 nxtgenpho APPLE 'PHONES ne AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 263 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00171183 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01343241