020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. a . AT&T Run Date: 06/29/2020 Run Time: Data Usage For: MS= Item Conn. Conn. Originating ET Byte. Bytes Apn =MI INS' NM MODEL Cell Location Date Tiro Number Up On (OTC) 1784 06/24/20 16:44:4 4:19 3968 1464 ism APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0, 023429137:91520:-71.8684166:43.0803055:320:- 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 1785 06/24/20 16:44:4 4:17 3904 1464 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1786 06/24/20 16:49:0 60:00 18388 7268 ims APPLE !PHONES 1787 06/24/20 17:34:3 2:09 192 0nxtgenp APPLE !PHONES (366491266:1431606::::0) U.S. Cellular, hone _USA 1788 06/24/20 17:34:3 2:09 288 48nxtgenp APPLE !PHONES (366491266:1431606::::0) U.S. Cellular, hone _USA 1789 06/24/20 17:34:4 2:09 0 0nxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::0) 1790 06/24/20 17:34:4 2:09 48 0nxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::0) 1791 06/24/20 17:36:4 60:00 117092 92310 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 023310785:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1792 06/24/20 17:49:0 25:21 5072 1588 ims APPLE !PHONES 1793 06/24/20 18:14:2 4:12 76756 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1794 06/24/20 18:14:2 4:12 2596 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1795 06/24/20 18:18:3 6:06 3424 1340 ims APPLE !PHONES 1796 06/24/20 18:24:4 16:19 14792 1340 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1797 06/24/20 18:24:4 16:19 2596 1340 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00170741 The information contained here is for use by authorized persons only and is not for general distribution. Page 93 EFTA01342803

ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: 06/29/2020 Run Time: Data Osage For: MS= Item Conn. Conn. Originating ST Bytes Bytes Apn INEZ INBI MAKE MODEL Col/ Location Date Tame Number up On (OTC) 1798 06/24/20 18:36:49 50:45 69271 47446nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1799 06/24/20 18:41:03 0:19 4964 1588 ims APPLE !PHONES 1800 06/24/20 18:41:22 0:47 2660 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1801 06/24/20 18:41:22 0:47 2596 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1802 06/24/20 18:42:09 60:00 11812 4268 ims APPLE !PHONES 1803 06/24/20 19:27:33 2:25 266 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 1804 06/24/20 19:27:34 2:25 46 Onxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::01 1805 06/24/20 19:29:59 60:00 29691 13021 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1806 06/24/20 19:42:09 51:13 6566 2928 ims APPLE !PHONES 1807 06/24/20 20:29:59 60:00 57441 41726 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1808 06/24/20 20:33:22 0:46 14792 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170742 The information contained here is for use by authorized persons only and is not for general distribution. Page 94 EFTA01342804

020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:13:13pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. • t--d as AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating Et Bytos Bytes Apn flat 1MSI MAKE MODEL Cell Location Data Time Number Up Dn (OTC) 1809 06/24/20 20:33:22 0:46 2596 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1810 06/24/20 20:34:08 1:33 7940 1836 ims APPLE !PHONES 1811 06/24/20 20:35:41 2:39 3752 1356 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1812 06/24/20 20:35:41 2:39 3666 1356 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1813 06/24/20 20:38:20 1:56 14734 14291 /ma APPLE !PHONES 1814 06/24/20 20:44:02 60:00 18185 10962 /ma 1815 06/24/20 21:29:59 60:00 177665 107429nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1816 06/24/20 21:44:02 60:00 11256 3300 ins 1817 06/24/20 22:29:59 3:58 564 388nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1818 06/24/20 22:33:56 2:05 266 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 1819 06/24/20 22:33:57 2:05 46 Onxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::01 1820 06/24/20 22:36:02 60:00 185337 124060 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1821 06/24/20 22:44:02 60:00 8496 2912 ims 1822 06/24/20 23:36:02 60:00 38099 23039nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1823 06/24/20 23:44:02 60:00 8604 3020 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 95 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170743 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342805

020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. r ..,,o 4clas . AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Date Time (1./TC) Originating Number Br Bytes Up Bytes Apn Dn Mei 1MSI MAKE MODEL Col/ Location 1824 06/25/20 00:36:02 60:00 45447 34502 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1825 06/25/20 00:44:02 57:19 18532 6480 ims APPLE !PHONES 1826 06/25/20 01:36:02 60:00 147534 138895 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1827 06/25/20 01:41:21 1:30 196400 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 1828 06/25/20 01:41:21 1:30 2704 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1829 06/25/20 01:42:51 3:50 5072 1588 ims APPLE !PHONES 1830 06/25/20 01:46:40 21:14 2660 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1831 06/25/20 01:46:41 21:13 2596 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 1832 06/25/20 02:07:54 60:00 13212 4608 ims APPLE !PHONES 1833 06/25/20 02:36:02 60:00 13179 12641 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1834 06/25/20 03:07:54 60:00 8496 2928 ims APPLE !PHONES 1835 06/25/20 03:36:02 60:00 3684 892 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1836 06/25/20 04:07:54 60:00 10036 3284 ims APPLE !PHONES 1837 06/25/20 04:36:02 60:00 3556 787nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1838 06/25/20 05:07:54 60:00 15000 4764 ims APPLE !PHONES 1839 06/25/20 05:36:02 60:00 699 694 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1840 06/25/20 06:07:54 60:00 12028 4552 ims APPLE !PHONES 1841 06/25/20 06:36:02 60:00 462 420 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1842 06/25/20 07:07:54 60:00 8728 3160 ims APPLE !PHONES 1843 06/25/20 07:36:02 60:00 578 630 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1844 06/25/20 08:07:54 60:00 8496 3036 ims APPLE !PHONES 1845 06/25/20 08:36:02 60:00 225 210 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 96 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SONYGM00170744 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342806

ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. t—sd as AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Date Time (UTC) MS= Originating Number ET Bytos Up Bytes Apn Dn DMZ 1MSI MAKE MODEL Celt Location 1846 06/25/20 09:07:5 60:00 11236 3316 ims APPLE !PHONES 1847 06/25/20 09:36:0 60:00 289 315nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1848 06/25/20 10:07:5 60:00 12012 4608 ims APPLE !PHONES 1849 06/25/20 10:36:0 60:00 61425 122979nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1850 06/25/20 11:07:54 15:36 0 0 ims APPLE !PHONES 1851 06/25/20 11:23:3 5:53 2596 1340 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 1852 06/25/20 11:23:3( 5:54 2660 1340 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.0) 1853 06/25/20 11:29:2 60:00 16992 6016 ims APPLE !PHONES 1854 06/25/20 11:36:0 60:00 778 425nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1855 06/25/20 12:29:2 60:00 8496 3144 ims APPLE !PHONES 1856 06/25/20 12:36:0 60:00 32307 4431nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1857 06/25/20 13:29:2 31:11 3424 1340 ims APPLE !PHONES 1858 06/25/20 13:36:0 60:00 44758 199034nxtgenp APPLE !PHONES 1023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310785:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 1859 06/25/20 14:00:34 0:15 2660 1340 ims APPLE !PHONES 1023310601:91057:- 71.9598779:43.2972525:150:-1.01 1860 06/25/20 14:00:34 0:15 2596 1340 ims APPLE !PHONES 1023310601:91057:- 71.9598779:43.2972525:150:-1.01 1861 06/25/20 14:00:4 2:51 3532 1340 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 97 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170745 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342807

ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. r u AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Sidi= Item Conn. Conn. OrIganatIng ET Bytos Bytes Apn flat 1MSI MAKE MODEL Coll Location Data Tam Number Up On (OTC) 1862 06/25/20 14:03:39 4:59 2660 1324 ims APPLE !PHONES (023310785:91057:- 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1863 06/25/20 14:03:40 4:58 2596 1324 ims APPLE !PHONES (023310785:91057:- 71.9598779:43.2972525:150:-1.01 1864 06/25/20 14:08:38 9:09 4732 1464 ims APPLE !PHONES 1865 06/25/20 14:17:46 1:36 2660 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 1866 06/25/20 14:17:47 1:35 2596 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1867 06/25/20 14:19:22 60:00 3208 1340 ims APPLE !PHONES 1868 06/25/20 14:23:55 4:13 9561 6301 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1869 06/25/20 14:28:08 2:38 3748 1556 ims APPLE !PHONES 1870 06/25/20 14:30:46 11:26 2644 1324 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1871 06/25/20 14:36:02 60:00 440300 395142 nxtgen APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1872 06/25/20 14:42:12 6:38 3424 1324 ims APPLE IPHONE8 1873 06/25/20 14:48:50 2:58 2644 1324 ims APPLE IPHONE8 (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 1874 06/25/20 14:51:48 0:52 3532 3324 ims APPLE IPHONE8 1875 06/25/20 14:52:40 3:13 6832 2696 ims APPLE IPHONE8 (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1876 06/25/20 14:55:53 60:00 37024 18412 ims APPLE IPHONE8 1877 06/25/20 15:00:44 0:34 18448 34400 ims APPLE IPHONE8 1878 06/25/20 15:06:06 54:31 7838254 7583642 ims APPLE IPHONE8 1879 06/25/20 15:19:22 60:00 0 0 ims APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 98 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170746 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342808

020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. • u AT&T Run Date: Run Time: Data Usage For: 06/29/2020 Item Conn. Conn. Data Time (OTC) 1880 06/25/20 15:36:02 1881 06/25/20 15:55:53 1882 06/25/20 16:17:50 1883 06/25/20 16:18:38 1884 06/25/20 16:19:22 1885 06/25/20 16:30:46 Originating ET Bytes Up Nu:Moor Bytes Apn Dn 60:00 110777 78766nxtgenp hone 21:57 924 700 ins 0:48 3952 1448 ins 60:00 23292 11196 ins 60:00 0 0 ins 1:01 83465 129132 ins flat INBI MAKE MODEL Cell Location APPLE IPEONEB (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- APPLE APPLE 023310608:91057:-71 023310601:91057:-71 023310608:91057:-71 023310601:91057:-71 023310608:91057:-71 023310601:91057:-71 023310608:91057:-71 023310601:91057:-71 023310608:91057:-71 023310601:91057:-71 023310608:91057:-71 023310601:91057:-71 023310608:91057:-71 023310601:91057:-71 023310608:91057:-71 023310601:91057:-71 023310608:91057:-71 .9598779:43.2972525:150:- .9598779:43.2972525:150:- .9598779:43.2972525:150:- .9598779:43.2972525:150:- .9598779:43.2972525:150:- .9598779:43.2972525:150:- .9598779:43.2972525:150:- .9598779:43.2972525:150:- .9598779:43.2972525:150:- .9598779:43.2972525:150:- .9598779:43.2972525:150:- .9598779:43.2972525:150:- .9598779:43.2972525:150:- .9598779:43.2972525:150:- .9598779:43.2972525:150:- .9598779:43.2972525:150:- .9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 1.0] !PHONES IPEONEB (023310608:91057:- 71.9598779:43.2972525:150:-1.01 APPLE IPEONEB APPLE IPEONEB APPLE IPEONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170747 The information contained here is for use by authorized persons only and is not for general distribution. Page 99 EFTA01342809

020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. . AT&T Run Date: Run Timm: Data Osage For: 06/29/2020 MI= Item Conn. Conn. Data Tina CUTC) 1886 06/25/20 16:36:02 1887 06/25/20 17:18:38 1888 06/25/20 17:19:22 1889 06/25/20 17:36:02 1890 06/25/20 17:55:58 1891 06/25/20 18:18:38 1892 06/25/20 18:19:22 1893 06/25/20 18:25:21 1894 06/25/20 18:36:02 1895 06/25/20 18:45:33 1896 06/25/20 19:18:38 Originating IT Bytes Mamba: up Bytes Apn Dn 60:00 187888 121445 nxtge hone 60:00 19112 12648 ims 60:00 0 0 ims 60:00 340809 172146nxtgen hone 0:21 0 10318 ims 60:00 46036 35500 ims 0:04 0 0 ims 1:18 115712 234551 ims 60:00 43569 32289nxtgen hone 0:35 11955 27276 ims 60:00 67312 37420 ims flat INS! MAKE MODEL Cell Location APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- APPLE !PHONES APPLE !PHONES APPLE APPLE APPLE APPLE APPLE APPLE APPLE APPLE 024577552:96006:-71.9906006:43. 023310608:91057:-71.9598779:43. 023310601:91057:-71.9598779:43. 023310608:91057:-71.9598779:43. 023310601:91057:-71.9598779:43. 024577552:96006:-71.9906006:43. 023310608:91057:-71.9598779:43. 3717995:210:- 2972525:150:- 2972525:150:- 2972525:150:- 2972525:150:- 3717995:210:- 2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 1.0] !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.0] IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 (023310608:91057:- 71.9598779:43.2972525:150:-1.01 IPHONE8 IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. Page 100 SDNY_GNL00170748 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342810

020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 4o. AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Bytes Bytes Apn DEBI 1MSI MAKE MODEL Cell Location Data Tina Number Up On (OTC) 1897 06/25/20 19:36:02 60:00 44408 32385nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1898 06/25/20 19:37:58 8:53 1058845 1710570 Las APPLE !PHONES 1899 06/25/20 19:51:50 0:57 173272 77769 Las APPLE !PHONES 1900 06/25/20 19:55:02 27:18 5465562 3519627 Las APPLE !PHONES 1901 06/25/20 20:18:38 25:27 6192 3384 Las APPLE !PHONES 1902 06/25/20 20:36:02 36:05 48926 100643 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1903 06/25/20 20:44:05 3:18 19140 14408 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1904 06/25/20 20:44:07 0:17 0 599 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1905 06/25/20 20:47:02 0:12 0 201 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1906 06/25/20 20:47:23 2:26 5180 1572 Las APPLE !PHONES 1907 06/25/20 20:49:49 20:10 2644 1324 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 1908 06/25/20 21:09:59 0:19 5072 1572 Las APPLE !PHONES 1909 06/25/20 21:10:18 1:49 2644 1324 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1910 06/25/20 21:12:06 8:18 288 48nxtgenp APPLE !PHONES (366491266:1431606::::0) U.S. Cellular, hone _USA 1911 06/25/20 21:12:08 8:17 48 Onxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::0) AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 101 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170749 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342811

ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. • ....,,• 43/4 1/4-90 AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Date Time (UTc) MS= Originating Number ET Bytes Up Bytes Apn Dn MAKE MODEL Cell Location 1912 06/25/20 21:12:0S 8:20 10327 6655 ims APPLE !PHONES 1913 06/25/20 21:20:25 60:00 47584 219173nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1914 06/25/20 21:20:29 46:20 5300 2648 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 1915 06/25/20 22:06:4 60:00 31996 15208 ins APPLE !PHONES 1916 06/25/20 22:20:2 28:39 346 262nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1917 06/25/20 22:27:2i 1:15 251021 183399 ins APPLE !PHONES 1918 06/25/20 22:49:0 2:05 288 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 1919 06/25/20 22:49:0 2:05 48 Onxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::0] 1920 06/25/20 22:51:0 60:00 18868 11670nxtgenp APPLE IPHONE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1921 06/25/20 23:06:46 30:18 4948 1680 ins APPLE !PHONES 1922 06/25/20 23:37:0 0:44 3392 1448 ins APPLE IPHONE8 (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1923 06/25/20 23:37:0 0:44 3326 1448 ins APPLE IPHONE8 (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1924 06/25/20 23:37:51 60:00 12120 4344 ins APPLE !PHONES 1925 06/25/20 23:51:0 2:35 0 Onxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1926 06/25/20 23:53:4 2:04 901 280nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 1927 06/25/20 23:53:4 2:04 280 613nxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::0] 1928 06/25/20 23:55:4 8:31 6363 4737nxtgenp APPLE IPHONE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1929 06/26/20 00:04:1 8:17 5065 6366nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 1930 06/26/20 00:04:20 8:17 6366 4777nxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::01 1931 06/26/20 00:12:3 34:00 9133 11824nxtgenp APPLE IPHONE8 (023310608:91057: - hone 71.9598779:43.2972525:150: -1.01 1932 06/26/20 00:37:51 60:00 10128 3144 ins APPLE !PHONES 1933 06/26/20 00:46:3i 2:04 288 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 1934 06/26/20 00:46:3 2:04 48 Onxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::0] AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 102 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170750 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342812

111111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: 06/29/2020 Run Time: Data Osage For: Item Conn. Conn. Date Time (OTC) Ma= Originating Number ET Bytes Up Bytes Apn Dn flat IWBI WARE MODEL Cell Location 1935 06/26/20 00:48:41 60:00 41494 30132nxtgenp APPLE !PHONES (024577552:96006:- hone 71.9906006:43.3717995:210:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1936 06/26/20 01:37:51 60:00 15448 5032 ims APPLE !PHONES 1937 06/26/20 01:48:41 60:00 770 1470nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1938 06/26/20 02:37:51 60:00 10036 4020 ism APPLE !PHONES 1939 06/26/20 02:48:41 60:00 99220 56050nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1940 06/26/20 03:37:51 60:00 10160 3268 ism APPLE !PHONES 1941 06/26/20 03:48:41 60:00 38617 38564nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1942 06/26/20 04:37:51 60:00 12028 4344 ism APPLE !PHONES 1943 06/26/20 04:48:41 60:00 30036 25061nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1944 06/26/20 05:37:51 38:28 5196 1572 ism APPLE !PHONES 1945 06/26/20 05:48:41 60:00 15794 12694nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1946 06/26/20 06:16:19 0:01 0 0 ism APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1947 06/26/20 06:16:19 0:01 0 0 ism APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1948 06/26/20 06:17:27 60:00 16287 9236 ism 1949 06/26/20 06:48:41 60:00 96 630nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1950 06/26/20 07:17:27 60:00 6924 2756 ism 1951 06/26/20 07:48:41 36:47 0 92nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1952 06/26/20 08:17:27 60:00 6616 2756 ism 1953 06/26/20 09:17:27 60:00 7156 2896 ism 1954 06/26/20 10:17:27 47:03 6512 3880 ism APPLE !PHONES 1955 06/26/20 10:53:49 60:00 22428 26251nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1956 06/26/20 11:04:29 1:19 2660 1324 ism APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1957 06/26/20 11:04:30 1:18 2596 1324 ism APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 1958 06/26/20 11:05:48 60:00 15312 5828 ism APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 103 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170751 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342813

020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ......• "--a""a AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Originating ET Data Ties Number (OTC) Bytes Up Bytes Apn On =MI INS' HARE MODEL Cell Location 1959 06/26/20 11:53:49 13:03 225 210nxtgenp APPLE !PHONES (023310608:91057: — hone 71.9598779:43.2972525:150: —1.01 1960 06/26/20 12:05:48 60:00 7032 2772 Las APPLE !PHONES 1961 06/26/20 12:06:51 2:06 288 48nxtgenp APPLE !PHONES (366513795:1431694::::01 U.S. Cellular, hone _USA 1962 06/26/20 12:06:52 2:06 48 Onxtgenp hone APPLE !PHONES (311580084513795:1217109705132::::01 1963 06/26/20 12:08:58 60:00 8453 11625nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1964 06/26/20 13:05:48 60:00 13584 4576 Lau APPLE !PHONES 1965 06/26/20 13:08:58 47:00 42255 29979nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 1966 06/26/20 13:55:57 2:04 288 48nxtgenp APPLE !PHONES [366491266:1431606::::01 U.S. Cellular, hone _USA 1967 06/26/20 13:55:59 2:03 48 Onxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::01 1968 06/26/20 13:58:02 60:00 58914 35107nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1969 06/26/20 14:05:48 60:00 8604 2896 Lau APPLE !PHONES 1970 06/26/20 14:58:02 60:00 81189 48093nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1971 06/26/20 15:05:48 60:00 8496 3004 Lau APPLE !PHONES 1972 06/26/20 15:58:02 60:00 27438 16520nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1973 06/26/20 16:05:48 54:03 13476 4752 Lau APPLE !PHONES 1974 06/26/20 16:58:02 60:00 7609 12693nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1975 06/26/20 16:59:51 0:02 0 0 Lau APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1976 06/26/20 16:59:51 0:02 0 0 Lau APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1977 06/26/20 17:00:00 3:41 10686 7494 Lau APPLE !PHONES 1978 06/26/20 17:03:41 3:06 2836 1340 Las APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 1979 06/26/20 17:03:41 3:06 2704 1340 Lau APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 1980 06/26/20 17:06:47 60:00 14984 4824 ims APPLE !PHONES 1981 06/26/20 17:58:02 60:00 36340 23730nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 1982 06/26/20 18:06:47 60:00 8496 2928 Lau APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 104 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170752 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342814

020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Sim Item Conn. Conn. Originating ET Data Timm Number (UTC) Bytes Up Bytes Apn Dn L@I INSI MAKE MODEL Cell Location 1983 06/26/20 18:58:02 2:24 0 Onxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1984 06/26/20 19:00:25 2:04 288 48nxtgenp APPLE !PHONES (366491266:1431606::::0) U.S. Cellular, hone _USA 1985 06/26/20 19:00:26 2:04 48 Onxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::0) 1986 06/26/20 19:02:30 60:00 29594 25706nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1987 06/26/20 19:06:47 60:00 6712 3036 ims APPLE !PHONES 1988 06/26/20 20:02:30 60:00 96984 58541 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1989 06/26/20 20:06:47 60:00 6632 2572 ims APPLE !PHONES 1990 06/26/20 21:02:30 60:00 82722 101556 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 1991 06/26/20 21:06:47 38:02 8496 3036 ims APPLE !PHONES 1992 06/26/20 21:44:49 16:18 87880 3088 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 1993 06/26/20 21:44:49 16:18 7232 3088 ims APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 1994 06/26/20 22:01:07 60:00 32520 12668 ims APPLE !PHONES 1995 06/26/20 22:02:30 60:00 1486 6526 nxtgenp APPLE !PHONES (023310601:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 1996 06/26/20 22:20:12 0:19 0 5454 ims APPLE !PHONES 1997 06/26/20 23:01:07 60:00 6820 3392 ims APPLE !PHONES 1998 06/26/20 23:02:30 60:00 249949 80477 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 1999 06/27/20 00:01:07 60:00 8604 3052 ims APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. Page 105 SDNY_GNL00170753 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342815

ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ...,„0 4a`" -es AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Data Tana (OTC) MS= Originating Number ET Bytes Up Bytes Apn DMZ 1MSI Dn MAKE MODEL Cell Location 2000 06/27/20 00:02:30 54:31 29024 25916nxtgen APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2001 06/27/20 00:57:00 2:05 9569 6971nxtgen APPLE !PHONES (366491269:1431606::::0) U.S. Cellular, hone _USA 2002 06/27/20 00:57:01 2:05 6971 9281nxtgen hone APPLE !PHONES (311580084491269:1217109705044::::0) 2003 06/27/20 00:59:06 60:00 4175518 4170231nxtgen APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 2004 06/27/20 01:01:07 33:05 3532 1340 ims APPLE !PHONES 2005 06/27/20 01:34:12 3:29 75600 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 2006 06/27/20 01:34:12 3:29 2704 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 2007 06/27/20 01:37:41 60:00 13676 4624 ims APPLE !PHONES 2008 06/27/20 01:59:06 46:08 18642 28862 nxtgen APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2009 06/27/20 02:37:41 60:00 13568 4800 ims APPLE !PHONES 2010 06/27/20 02:45:13 1:16 901 280nxtgen APPLE !PHONES (366491266:1431606::::0) U.S. Cellular, hone _USA 2011 06/27/20 02:45:14 1:16 280 613nxtgen hone APPLE !PHONES (311580084491266:1217109705044::::0) 2012 06/27/20 02:46:30 60:00 62398 29324 nxtgen APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0) 2013 06/27/20 03:37:41 60:00 8496 2928 ims APPLE !PHONES 2014 06/27/20 03:46:30 29:02 0 0nxtgen APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0) 2015 06/27/20 04:37:41 60:00 10380 4020 ims APPLE !PHONES 2016 06/27/20 05:37:41 60:00 6848 2896 ims APPLE !PHONES 2017 06/27/20 06:37:41 60:00 6848 2572 ims APPLE !PHONES 2018 06/27/20 07:37:41 60:00 11920 4552 ims APPLE 1PHONE8 2019 06/27/20 08:37:41 60:00 6956 2788 ims APPLE 1PHONE8 2020 06/27/20 09:37:41 60:00 13368 4532 ims APPLE 1PHONE8 2021 06/27/20 10:37:41 60:00 8696 3036 ims APPLE 1PHONE8 2022 06/27/20 11:37:41 60:00 12136 4552 ims APPLE !PHONES 2023 06/27/20 12:37:41 60:00 10036 3500 ims APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 106 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SONYGM00170754 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342816

111111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided UTC. in u AT&T Run Date: 06/29/2020 Run Time: Data Usage For: ISSN Item Conn. Conn. Originating ET Data Tama Number (OTC) Bytes. Up Bytes Apn Dn flat INSI MAKE MODEL Col/ Location 2024 06/27/20 13:37:41 60:00 10036 3176 ims APPLE !PHONES 2025 06/27/20 14:37:41 60:00 13352 4732 ims APPLE !PHONES 2026 06/27/20 15:37:41 60:00 8496 3144 ims APPLE 'PHONES 2027 06/27/20 16:37:41 60:00 10036 3176 ims APPLE IPHONEB 2028 06/27/20 17:15:18 60:00 28467 24322 nxtgenp APPLE IPHONEB (023310601:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 2029 06/27/20 17:37:41 60:00 12600 5048 ims APPLE !PHONES 2030 06/27/20 18:15:18 60:00 1033 840 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2031 06/27/20 18:37:41 60:00 13460 4624 ims APPLE !PHONES 2032 06/27/20 19:15:18 60:00 38243 23394 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2033 06/27/20 19:37:41 60:00 12796 3548 ims APPLE !PHONES 2034 06/27/20 20:15:18 60:00 751 735nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2035 06/27/20 20:37:41 35:19 3532 1340 ims APPLE !PHONES 2036 06/27/20 21:13:00 1:21 71836 1464 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 2037 06/27/20 21:13:00 1:21 3328 1464 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 2038 06/27/20 21:14:21 60:00 13460 4624 ims APPLE !PHONES 2039 06/27/20 21:15:18 60:00 4476 9652 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2040 06/27/20 22:14:21 60:00 17868 5172 ims APPLE !PHONES 2041 06/27/20 22:15:18 19:22 173 105 nxtgenp APPLE !PHONES (023310608:91057: - hone 71.9598779:43.2972525:150: -1.0) 2042 06/27/20 22:34:40 2:03 288 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA 2043 06/27/20 22:34:41 2:03 48 Onxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::01 2044 06/27/20 22:36:44 0:32 48 Onxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2045 06/27/20 22:37:16 1:51 288 48nxtgenp APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, hone _USA AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. Page 107 SDNY_GNL00170755 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342817

020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTZ. • tzTs`"" 1:• AT&T Run Date: Run Tins: Data Usage For: 06/29/2020 Item Conn. Data Conn. Time (OTC) Originating Number Er Bytes UP Bytes Apn On 2046 06/27/20 22:37:17 1:51 48 Onxtgenp hone 2047 06/27/20 22:39:08 4:49 48 Onxtgenp hone 2048 06/27/20 22:43:56 8:16 5222 6382nxtgenp hone 2049 06/27/20 22:43:57 8:16 6362 4934nxtgenp hone 2050 06/27/20 22:52:13 60:00 7471 6350 nxtgenp hone 2051 06/27/20 23:14:21 60:00 12996 3424 ims 2052 06/27/20 23:52:13 60:00 87635 54889nxtgenp hone 2053 06/28/20 00:14:21 60:00 8604 3052 ims 2054 06/28/20 00:52:13 4:28 4613 3978nxtgenp hone 2055 06/28/20 00:56:41 1:11 192 Onxtgenp hone 2056 06/28/20 00:56:41 1:11 286 48nxtgenp hone 2057 06/28/20 00:56:42 1:11 48 Onxtgenp hone 2058 06/28/20 00:56:42 1:11 0 Onxtgenp hone 2059 06/28/20 00:57:53 60:00 50230 29632 nxtgenp hone 2060 06/28/20 01:14:21 60:00 13584 4640 ims 2061 06/28/20 01:57:53 60:00 42211 26196 nxtgenp hone 2062 06/28/20 02:14:21 60:00 8496 3052 ims 2063 06/28/20 02:57:53 60:00 202322 228580 nxtgenp hone 2064 06/28/20 03:14:21 57:41 11920 4536 ims DMZ DISE MAKE MODEL Coll Location APPLE !PHONES (311580084491266:1217109705044::::0] APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, _USA APPLE !PHONES (311580084491266:1217109705044::::0] APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] APPLE !PHONES APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] APPLE !PHONES APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, _USA APPLE !PHONES (366491266:1431606::::01 U.S. Cellular, _USA APPLE !PHONES (311580084491266:1217109705044::::0] APPLE !PHONES (311580084491266:1217109705044::::01 APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 APPLE !PHONES APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] APPLE !PHONES APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 108 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170756 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342818

020 MOBILITY 400. (with cell location) \\*t os AT&T AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Data Tine (ox) Originating Number ET Bytes Up Bytes Apn Dn DEBI IMSI MAKE MODEL Celt Location 2065 06/28/20 03:57:53 60:00 924 840nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2066 06/28/20 04:15:34 0:00 0 0 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 2067 06/28/20 04:17:29 2:42 6675 5980 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 2068 06/28/20 04:20:11 60:00 14876 4592 ins APPLE !PHONES 2069 06/28/20 04:57:53 60:00 571 420nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2070 06/28/20 05:20:11 60:00 6956 2772 ins APPLE !PHONES 2071 06/28/20 05:57:53 60:00 687 630nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2072 06/28/20 06:20:11 60:00 10036 3144 ins APPLE !PHONES 2073 06/28/20 06:57:53 60:00 3536 6012nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2074 06/28/20 07:20:11 60:00 13460 4592 ins APPLE !PHONES 2075 06/28/20 07:57:53 60:00 635 525nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2076 06/28/20 08:20:11 60:00 10036 3144 ins APPLE !PHONES 2077 06/28/20 08:57:53 60:00 908 1120nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2078 06/28/20 09:20:11 60:00 12012 4504 ins APPLE !PHONES 2079 06/28/20 09:57:53 60:00 346 210nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2080 06/28/20 10:20:11 41:21 6956 2880 ins APPLE !PHONES 2081 06/28/20 10:57:53 60:00 22177 17284nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2082 06/28/20 11:01:32 31:15 5240 2648 ins APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0) 2083 06/28/20 11:32:47 60:00 11920 4220 ins APPLE !PHONES 2084 06/28/20 11:57:53 60:00 867 945nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2085 06/28/20 12:32:47 60:00 10144 3144 ins APPLE !PHONES 2086 06/28/20 12:57:53 60:00 14181 1781nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2087 06/28/20 13:32:47 60:00 15000 4608 ins APPLE !PHONES 2088 06/28/20 13:57:53 60:00 462 420nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2089 06/28/20 14:32:47 60:00 12152 4628 ins APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 109 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170757 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342819

020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. u AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Data Time (OTC) Originating Number ET Bytes Up Bytes Apn On =MI ISM MARE MODEL Coll Location 2090 06/28/20 14:57:53 60:00 7365 12430nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 2091 06/28/20 15:32:47 4:02 0 0 Las APPLE !PHONES 2092 06/28/20 15:36:49 1:09 2644 1324 Lau APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 2093 06/28/20 15:37:58 60:00 15000 4948 Lau APPLE !PHONES 2094 06/28/20 15:57:53 52:43 519 315nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 2095 06/28/20 16:37:58 60:00 10376 3268 Lau APPLE !PHONES 2096 06/28/20 16:50:36 60:00 7234 5761nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2097 06/28/20 17:37:58 60:00 8496 3004 Lau APPLE !PHONES 2098 06/28/20 17:50:36 60:00 24391 13042 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2099 06/28/20 18:37:58 60:00 10036 3036 Lau APPLE !PHONES 2100 06/28/20 18:50:36 60:00 2824 2304 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2101 06/28/20 19:37:58 60:00 16868 6076 Lau APPLE !PHONES 2102 06/28/20 19:50:36 60:00 58713 37399nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2103 06/28/20 20:37:58 60:00 9928 3036 Lau APPLE !PHONES 2104 06/28/20 20:50:36 60:00 36619 57095nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 1.0] 2105 06/28/20 21:37:58 12:34 0 0 Lau APPLE !PHONES 2106 06/28/20 21:50:32 38:29 18240 2860 Lau APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 2107 06/28/20 21:50:32 38:29 5972 2772 Lau APPLE !PHONES (023310601:91057:- 71.9598779:43.2972525:150:-1.0) 2108 06/28/20 21:50:36 60:00 69100 281243 nxtgenp APPLE !PHONES (023310601:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.0] AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 110 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170758 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342820

111111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 4111116 1/4<rf ol0 ‘..". AT&T Run Dato: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Date IMO (MC) Originating Number ET Bytes Up Bytes Apn Dn MCI IMSI MAKE MODEL Celt Location 2109 06/28/20 22:29:01 60:00 13908 4716 ims APPLE !PHONES 2110 06/28/20 22:50:3 60:00 1638 5118nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2111 06/28/20 23:29:01 60:00 10376 3392 ims APPLE !PHONES 2112 06/28/20 23:50:3f 60:00 13365 13177nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0. 024577552:96006:-71.9906006:43.3717995:210:- 023310608:91057:-71.9598779:43.2972525:150:- 1.0] 2113 06/29/20 00:29:01 28:10 3408 1432 ims APPLE !PHONES 2114 06/29/20 00:50:3f 60:00 15439 15330nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2115 06/29/20 00:57:11 0:02 0 0 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 2116 06/29/20 00:57:11 0:02 0 0 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 2117 06/29/20 00:57:1 8:15 10806 6602 ims APPLE !PHONES 2118 06/29/20 01:05:3 0:02 0 0 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 2119 06/29/20 01:05:3 0:02 0 0 Ms APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 2120 06/29/20 01:08:11 12:59 6687 5919 Ms APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 2121 06/29/20 01:21:10 54:16 14016 4716 Ms APPLE !PHONES 2122 06/29/20 01:50:3f 60:00 751 735nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2123 06/29/20 02:15:2f 45:43 5240 2540 ims APPLE !PHONES [023310608:91057:- 71.9598779:43.2972525:150:-1.01 2124 06/29/20 02:50:3f 60:00 97896 245373nxtgenp APPLE !PHONES [023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2125 06/29/20 03:01:0 60:00 13460 4576 ims APPLE !PHONES 2126 06/29/20 03:50:3f 60:00 578 630nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2127 06/29/20 04:01:0 60:00 10128 3144 ims APPLE !PHONES 2128 06/29/20 04:50:3f 60:00 519 315nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2129 06/29/20 05:01:0 60:00 8604 3236 ims APPLE !PHONES 2130 06/29/20 05:50:3f 60:00 346 210nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2131 06/29/20 06:01:0 60:00 13676 4644 ims APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 111 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170759 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342821

ill1111020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. • AT&T Run Data: 06/29/2020 Run Timm: MI= Data Usage For: Item Conn. Conn. Originating ET Date Tama Number (UTC) Bytes Up Bytom Apn Dn DEBI BOX MAKE MODEL Cell Location 2132 06/29/20 06:50:3i 60:00 519 315nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2133 06/29/20 07:01:0 60:00 11812 4328 Las APPLE !PHONES 2134 06/29/20 07:50:3i 60:00 8316 6271nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2135 06/29/20 08:01:0 60:00 8388 3004 Las APPLE !PHONES 2136 06/29/20 08:50:3i 60:00 346 210nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2137 06/29/20 09:01:0 60:00 6636 3144 Las APPLE !PHONES 2138 06/29/20 09:50:3i 60:00 995 1155nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2139 06/29/20 10:01:0 60:00 8496 3128 Las APPLE !PHONES 2140 06/29/20 10:50:3i 60:00 514 525nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2141 06/29/20 11:01:0 60:00 18300 6308 Las APPLE !PHONES 2142 06/29/20 11:50:3i 60:00 9936 7546nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.0, 023310608:91057:-71.9598779:43.2972525:150:- 1.01 2143 06/29/20 12:01:0 60:00 10144 3360 ism APPLE !PHONES 2144 06/29/20 12:50:3i 60:00 4351 6992nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2145 06/29/20 13:01:0 60:00 10144 3252 ism APPLE !PHONES 2146 06/29/20 13:50:3i 60:00 67496 10318nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2147 06/29/20 14:01:0 60:00 14896 4592 ism APPLE !PHONES 2148 06/29/20 14:50:3i 6:52 0 0nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2149 06/29/20 14:57:2 2:04 48 0nxtgenp hone APPLE !PHONES (311580084491266:1217109705044::::0) 2150 06/29/20 14:59:3 60:00 119030 61260nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2151 06/29/20 15:01:0 60:00 10144 3252 ism APPLE !PHONES 2152 06/29/20 15:59:3 60:00 34394 26273nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023310601:91057:-71.9598779:43.2972525:150:- 023310608:91057:-71.9598779:43.2972525:150:- 1.01 2153 06/29/20 16:01:09 60:00 8712 3128 Las APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 112 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00170760 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342822

020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 4111110 u AT&T Run Date: 06/29/2020 Run Time: Data Usage For: Item Conn. Conn. Date Time (UTC) SS= Originating ET Bytes Up Bytes Apn On flat INS' MBE MODEL Cell Location 2154 06/29/20 16:59:32 60:00 12739 53439nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 2155 06/29/20 17:01:09 54:59 11920 4412 Lou APPLE !PHONES 2156 06/29/20 17:57:47 8:14 6669 5938 Las APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 2157 06/29/20 17:59:32 60:00 40145 42018 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 2158 06/29/20 18:06:01 60:00 10052 3268 /ma APPLE !PHONES 2159 06/29/20 18:37:47 16:42 14483 7707 /ma APPLE !PHONES 2160 06/29/20 18:54:29 25:29 2768 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.01 2161 06/29/20 18:54:29 25:29 2704 1340 ims APPLE !PHONES (023310608:91057:- 71.9598779:43.2972525:150:-1.0] 2162 06/29/20 18:59:32 60:00 15191 13519nxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 2163 06/29/20 19:06:01 60:00 0 0 ims APPLE !PHONES 2164 06/29/20 19:19:58 60:00 13476 4748 ims APPLE !PHONES 2165 06/29/20 19:59:32 60:00 1246 1050 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0] 2166 06/29/20 20:06:01 60:00 0 0 ims APPLE !PHONES 2167 06/29/20 20:19:58 60:00 6924 2772 ims APPLE !PHONES 2168 06/29/20 20:59:32 51:42 4547 4458nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2169 06/29/20 21:06:01 60:00 0 0 ims APPLE !PHONES 2170 06/29/20 21:19:58 60:00 10176 3160 ims APPLE !PHONES 2171 06/29/20 21:51:15 2:03 48 Onxtgonp hone APPLE !PHONES (311580084513795:1217109705132::::01 2172 06/29/20 21:53:19 9:10 48 Onxtgonp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2173 06/29/20 22:02:29 2:04 48 0nxtgenp hone APPLE !PHONES (311580084491269:1217109705044::::01 2174 06/29/20 22:04:33 15:36 7689 4952nxtgenp APPLE IPHONE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 2175 06/29/20 22:06:01 25:01 0 0 ims APPLE IPHONE8 2176 06/29/20 22:19:58 60:00 8712 3160 ims APPLE IPHONE8 2177 06/29/20 22:20:09 1:47 48 0nxtgenp hone APPLE IPHONE8 (311580084491266:1217109705044::::01 2178 06/29/20 22:21:56 55:45 7274 5995 nxtgenp APPLE !PHONES (023310608:91057:- hone 71.9598779:43.2972525:150:-1.01 AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 113 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170761 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342823

020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: 06/29/2020 Run Time: Data Usage Tor: Item Conn. Conn. Originating ET Bytes Bytes Apn MARE MODEL Cell Location Date Tame DP Dn (OTC) 2179 06/29/20 23:17:42 2:04 48 Onxtgenp hone APPLE IPE0NE8 (311580084491266:1217109705044::::0) 2180 06/29/20 23:19:45 60:00 80390 40970nxtgenp APPLE IPE0NE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0, 023413008:91457:-72.166667:43.205:100:-1.01 2181 06/29/20 23:19:58 60:00 19736 6388 ims APPLE IPE0NE8 2182 06/30/20 00:19:45 5:00 2633 2591nxtgenp APPLE IPE0NE8 (023310608:91057:- hone 71.9598779:43.2972525:150:-1.0) 2183 06/30/20 00:24:45 11:44 48 0nxtgenp hone APPLE IPE0NE8 (311580084491269:1217109705044::::0) AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 114 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170762 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342824

020 MOBILITY (with cell location) AT&T has queried for records from 06/01/2020 12:00:00am to 06/29/2020 10:17:17pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. et, AT&T Run Date: Run Time: SMS Linage For: 0""n0.0 Item Conn. Conn. Or inati Teraina! IICI INS! Dose MMS Type Mature Cell Location Date Time MC) 1 06/08/20 15:49:4 MST 2 06/15/20 17:15:4 ONO 3 06/15/20 17:16:3 MST 4 06/25/20 17:56:5 MST 5 06/25/20 18:26:0' MST 6 06/25/20 18:26:3: MST AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 1 SDNY_GM_00170763 EFTA01342825