RE: RE: Epstein search warrant documents
Ok let's plan on 11am tomorrow morning, I am trying to get an FBI line with a larger capacity but I won't know until tomorrow am. I will push it out when confirmed.
Thanks
Email Details:
- From: [Redacted] (USANYS)
- Sent: Tuesday, April 07, 2020, 3:15 PM
- To: Multiple recipients, including (NY) (FBI) and (USANYS)
- Cc: Multiple recipients, including [Redacted] (USANYS) [Contractor] and (NY) (FBI)
- Subject: RE: Epstein search warrant documents
Yes, I can do anytime tomorrow, and can also join anytime tomorrow. So whenever is good on your end.
Also, we can host a conference call, but only up to six lines at a time — so if FBI has larger capacity than that let us know, otherwise I'd propose we do:
The image appears to be a partial list or outline, not a chart. The key information extracted is:
- Item 1: Blacked out information.
- Item 2: Blacked out information.
- Item 3: Blacked out information.
- Item 4: Blacked out information.
- Item 5: Blacked out information, followed by a slash and more blacked out information.
- Item 6: Blacked out information, followed by a slash and more blacked out information, with the phrase "if either of you wants to join (and if not, one of" continuing.
From: (NY) (FBI)
Sent: Tuesday, April 07, 2020 14:13
To: (USANYS), (NY) (FBI), (USANYS), (USANYS)
Cc: (USANYS) [Contractor], (USANYS), (USANYS)
3503-114
Page 12 of 18
SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17
EFTA 00002327
EFTA00157510
< [REDACTED] >; [REDACTED]. (NY) (FBI) < [REDACTED]>
Subject: RE: Epstein search warrant documents
Are available tomorrow for a conference call to discuss this issue?
SSA
FBI New York
On Apr 7, 2020 1:55 PM, " (USANYS)"
wrote:
Following up on this from a month ago — I know we're living in a different world than what existed four weeks ago, but are you at all able to assist while working remotely? This has been pending for almost two months and we still don't have a very basic list of each device or item that was seized and searched, or for which of those we've received materials. We're happy to have a call if that would be useful, but as a first step the most basic thing we're looking for is the info in the template spreadsheet we sent earlier (that's also attached).
thanks,
From: [REDACTED] (USANYS)
Sent: Monday, March 09, 2020 12:00
To: [REDACTED], [REDACTED], [REDACTED] (NY) (FBI) [REDACTED]; [REDACTED], [REDACTED] (USANYS) <[REDACTED]>; [REDACTED], [REDACTED] (NY) (FBI) <[REDACTED]>; [REDACTED], [REDACTED] (USANYS) <[REDACTED]>
Cc: [REDACTED] (USANYS) [Contractor] <[REDACTED]>; [REDACTED], [REDACTED] (USANYS) <[REDACTED]>; [REDACTED], [REDACTED] (USANYS) <[REDACTED]>; [REDACTED], [REDACTED] (NY) (FBI) <[REDACTED]>
Subject: RE: Epstein search warrant documents
Unfortunately I don't think this is very helpful to us. Did you take a look at the example spreadsheet I sent on 2/24? The excel file you sent has descriptions that don't match up to the items listed in the search warrant returns (that we sent on 2/23), and we don't have the 18 or CART numbers to be able to cross-reference. We also can't tell what you mean by "loose media" without a specific comparison to what was seized, we don't know which items you're referring to as "Windows machines," and we can't tell whether the entirety of any particular item has been transferred, or just partial. For example, it looks like we have gotten very, very few image files, which is surprising.
We have also encountered some very significant problems in trying to review the more than 1 million documents we recently received:
3503-114
Page 13 of 18
SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17
EFTA 00002328
EFTA00157511
The data we've received has no way to put any emails and attachments together. So if an email says, "see the attached flight records," for example, we have no way of linking that up with the records themselves. Not only is that a big problem for us in review, it's going to be a huge problem for producing the documents to defense counsel.
The load file has no link to the native file, so when we load the data to the database, there's no way to have the native files show up in the database. Because many of the files are too large to open in the viewer, it effectively means that there are many files that are completely invisible to us.
Related, the control numbers in the load file don't match up to the native files. So we have two sets of numbers and no way to match up anything—that is, even if we were to try to go hunt down every individual large file in the native files, it would be impossible.
So the data that we most recently got, we need to get in a form that addresses those issues, and we likely will need to get a similar reproduction of the data we received a couple months ago.
Otherwise we're sifting through more than a million documents without much rhyme or reason.
I've re-attached the spreadsheet we sent last week — I think that's a good place to start in terms of our necessary record-keeping, and we need that info at the very least, as well as anything else you think would be useful. Also attaching the SW returns for reference. And again, we're happy to meet up anytime and hash all this out in person if that's useful.
thanks,
The image is an email.
Sender: (NY) (FBI)
Recipient: Various individuals, including (USANYS) and (USANYS) [Contractor]
Date Sent: Wednesday, March 04, 2020 16:36
Subject: RE: Epstein search warrant documents
Here is a listing of what I have already handed over in load files to the US Attorney's Office for taint review. Some points of clarification: There were 9 IDE hard drives found in the Manhattan apartment, they turned out to be 3 copies of 3 drives (9 drives in total) from a July 2007 search on one of his properties. I only processed 3 (as they were all copies). All the loose media from the NY apartment is included. All the Windows machines from the NY apartment are included. Only 2 Macs from NY and 1from the Island are included.
I will have to more closely coordinate with whoever is loading up Relativity with the
3503-114
Page 14 of 18
SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17
EFTA 00002329
EFTA00157512
remaining Macs as the tool they have to be processed with does not easily re-name the load files.
Spreadsheet is attached.
This image is an email.
Sender: (USANYS)
Recipient(s) (To): Multiple recipients including (NY) (FBI) and (USANYS)
Recipient(s) (Cc): Multiple recipients including (USANYS) [Contractor]
Date Sent: Tuesday, March 03, 2020 12:25 PM
Subject: RE: Epstein search warrant documents
I could do Thursday morning, but I think it would be helpful for us to get the accounting in advance
of the meeting so we can figure out in advance what (if any) additional steps we need — is that possible?
- Sender: FBI (NY)
- Date Sent: Tuesday, March 03, 2020, 09:59
- Subject: RE: Epstein search warrant documents
- Recipients (To): Multiple individuals from USANYS, and FBI (NY)
- Recipients (Cc): Multiple individuals from USANYS (including a Contractor), and FBI (NY)
Can we do Thursday morning? My network should be back by then and I can give you a good accounting.
[Redacted]
NY CART Coordinator
Senior Forensic Examiner
[cell desk]
On Mar 2, 2020 11:15 AM, " [Redacted], [Redacted] (USANYS)"
< [Redacted] > wrote:
3503-114
Page 15 of 18
SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17
EFTA_00002330
EFTA00157513
Doing the weekly check in on this — is there a time this week when everyone can meet on this?
thanks,
The image displays an email with the following details:
From: An individual associated with (USANYS).
Sent: Monday, February 24, 2020, 17:38.
To: Multiple recipients, including individuals from (NY) (FBI) and (USANYS).
Cc: Several recipients, including an individual identified as (USANYS) [Contractor], and others from (USANYS).
Subject: RE: Epstein search warrant documents.
Totally understand about the network issues—we can relate. I do still think it will be helpful to all sit down together to have an in-person discussion, to make sure everybody is on the same page. Are folks available for that next week? And what I think would be most helpful to facilitate that would be a spreadsheet of each separate device referenced in the two search warrant returns, with columns for whether we've dumped the contents, whether they've been reviewed and/or transferred, what portions were transferred, etc.
Something roughly like the attached, with any other categories you think would be useful — and the info on the attached is mostly hypothetical, obviously, just as examples. That will help us fully understand what's been reviewed, transferred, and received so far, and what remains.
(Also just on the pictures, we do want copies of those as well, please including from the discs and the devices — I think FBI was going to do an initial screen to make sure no CP, and since I think the answer was no, we'll need to get those to be able to review them as well.)
many thanks,
From: [Redacted] (NY) (FBI)
Sent: Monday, February 24, 2020 09:24
To: [Redacted] (USANYS), [Redacted] (USANYS), [Redacted] (NY) (FBI), [Redacted] (USANYS)
Cc: [Redacted] (USANYS) [Contractor], [Redacted] (USANYS), [Redacted] (USANYS), [Redacted] (NY) (FBI)
Subject: RE: Epstein search warrant documents
3503-114
Page 16 of 18
SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17
EFTA 00002331
EFTA00157514
Sorry for the delayed response. They are tearing out our old network and giving us a new one, they mandated we delete old stuff (about 400 TB worth). Now that they are working on replacing the network, we can do only local work. I should be able to give you an accounting of what is what. I can say, off the top of my head, that all windows based items from the NY search have been handed over as well as all loose media. The CDs from NY only contained pictures, no documents. There are still some Apple items from NY that need to be produced. As far as the Island stuff goes, the 1st item on your spreadsheet, the "kitchen" mac has been produced. Still working on the rest.
[Redacted]
NY CART Coordinator
Senior Forensic Examiner
[cell desk]
On Feb 23, 2020 12:21 AM, " [Redacted], [Redacted] (USANYS)"
< [Redacted] > wrote:
Team,
Following up on the below from last weekend, I'm still not sure how we're addressing this so I thought it would make sense for us to all schedule a (hopefully relatively brief) meeting to all get on the same page? We didn't hear back on which files had previously been provided, but our tech folks did their best to differentiate, and we got access to the materials yesterday and its well over a million documents, and we don't have any idea what we're looking at — i.e., which devices the materials came from, whether it's full or partial results, how many more devices we have coming, etc.
Based on the attached search warrant returns, it looks like from the New York mansion (the PDF) there are approximately 40 devices that would have storage (computers, hard drives, thumb drives, etc.) and that's not even counting at least 60+ CDs. And then from the Virgin Islands (the Excel spreadsheet), at least more than 25 devices, including multiple servers / server racks.
So we gotta know what we've already received, what remains, anticipated schedule, etc, and I know it's a lot of moving pieces on all sides so wanted to loop in everybody at once. The case team will be in California this coming week from Tuesday through Friday, but then I think generally around the first week of March, which will hopefully be plenty of time to schedule a productive meeting.
thanks all,
This image is not a chart. It appears to be an excerpt from an email.
Key Information:
- From: (USANYS)
- Sent: Saturday, February 15, 2020, 16:30
- To: Multiple recipients including individuals from (NY) (FBI)
- Cc: Individuals from (USANYS) [Contractor]
3503-114
Page 17 of 18
SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17
EFTA 00002332
EFTA00157515
(USANYS)< (USANYS)
Subject: RE: Epstein search warrant documents
I'm not sure who's the exact right person to ask this, so wanted to get everybody on one email chain about it — I have the hard drive that dropped off that has new Epstein search warrant materials, but it looks like there are also old materials (that I think we had previously received and uploaded??) on the hard drive, and so I'm not sure what's new.
Just generally, and and I talked about this last week too, but it's basically impossible for us to keep track of what we're getting, and what has been completed, without some kind of identification or labeling system, along with a list of which devices have been extracted and downloaded.
So for example on the hard drive currently, there are 38 folders labeled "loadFiles" through "37loadFilesn with a modified date of 11/14/19, which I think we may have already previously received — but I'm not sure, because we haven't gotten any info on which folders match up to which devices, etc. And then there's another folder titled "NYC024362" that has a modified date of 1/27/20, so I think that may be the materials we hadn't previously received? That folder by itself has more than 600,000 items.
I don't want to give =anything that we've already previously received and uploaded, and I can't tell from the folder or file names whether everything on the drive is new, or whether just additional materials were saved onto it in addition to what we already have. S are you able to give us some guidance on this? Ultimately what we really need is a spreadsheet of every device, whether it's been dumped (or partially dumped), and then identifying that same info — which device, and what materials from it—are being given to us with each data transfer. Otherwise I think organizationally and for review purposes it will be a total disaster for us.
We're happy to have a meeting on this if that's helpful — and thanks everybody for the assistance.
Assistant U.S. Attorney
Southern District of New York
3503-114
Page 18 of 18
SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17
EFTA 00002333
EFTA00157516
There has been talk of us returning to normal soon, so I don't think it will effect the timeline I initially gave you. If it does, I'll let you know.
NY CART Coordinator
Senior Forensic Examiner
cell
desk
On May 8, 2020 1:58 PM, " [REDACTED], [REDACTED] (USANYS)"
[REDACTED] wrote:
Understood, thanks—it will be great to get that list on Thursday. As a refresh, the info we are looking for is in the attached spreadsheet template.
On the returns themselves, do the changes you mentioned mean that the estimate of a month from now for complete transmission of the search warrant returns is no longer likely? If so could you
3503-114
Page 10 of 18
SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17
EFTA 00002325
EFTA00157508
Okay, so just to check, you both think that there is not a need to do a test run? You're both comfortable with just basically sending us copies of everything? I don't totally understand why we couldn't have done that eight months ago, but regardless of the passage of time, I want to make sure we understand so we can report to our supervisors. I assume that means that we (at the U.S. Attorney's Office and through contractors) will therefore need to do all the processing ourselves, correct? And thanks again to you both.
This image is an email.
Key Information:
- From: An individual from the FBI in NY.
- Sent: Tuesday, May 12, 2020, 11:30.
- To: Individuals from USANYS, including a contractor.
- Cc: Individuals from USANYS.
- Subject: RE: Epstein search warrant documents.
Like said in his earlier email. It will be the raw data and it will be marked so it is easier [ ]
to attribute it to a particular device. Problem now is how to get the data to since he is [ ]
teleworking.
NY CART Coordinator
Senior Forensic Examiner
Date: May 12, 2020
Time: 11:15 AM
Sender: (NY) (FBI)
Recipient: (USANYS)
Message: "I have no doubt you do, but can you please tell us what that plan is? Thanks!"
3503-114
Page 8 of 18
SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17
EFTA 00002323
EFTA00157506
Will do.
NY CART Coordinator
Senior Forensic Examiner
cell
desk
On Jun 1, 2020 4:26 PM, " [REDACTED], [REDACTED] (USANYS)"
[REDACTED] wrote:
Understood, and thanks for letting us know. Let's keep in touch both on timing and also on whether there's a way to identify and categorize what's already been produced, or if we'll need to just get all the raw data at this stage and go from there.
This image is an email header.
From: (Redacted) (NY) (FBI)
Sent: Monday, June 01, 2020 16:23
To: (Redacted), (Redacted) (USANYS) [Contractor], (Redacted); (Redacted); (Redacted) (USANYS)
Cc: (Redacted), (Redacted) (NY) (FBI), (Redacted); (Redacted), (Redacted) (USANYS), (Redacted); (Redacted), (Redacted) (USANYS), (Redacted), (Redacted) (NY) (FBI)
Subject: RE: Epstein search warrant documents
Unfortunately, recent events and our staffing levels have conspired to put a kink in just about everything. If we can't make heads or tails of the stuff I've already produced, well do it again. They have told us that our staffing levels will be steadily increasing over the next few weeks, but I'm going to have to push back my estimate by a week or 2. Sorry about that. My next day in the office is Thursday, so I'll be able to see if I can easily identify what I already gave you and marry it to a reliable identifier.
NY CART Coordinator
Senior Forensic Examiner
cell
desk
3503-114
Page 3 of 18
SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17
EFTA 00002318
EFTA00157501
know you already got this, just wanted to confer with you as to what is going on with all this. Feel like you, me, andMI need to chat and see what is what. I'm thinking that this started before the case took a turn yet is still moving in the same direction. In other words, do we really need to be doin this? Seems to me that I should be taking all my marching orders from and M.
NY CART Coordinator
Senior Forensic Examiner
cell
desk
- Type: Email
- Status: Forwarded Message
- Date: Jun 17, 2020, 2:28 PM
- Subject: RE: Epstein search warrant documents
- From: (USANYS)
- To: (NY) (FBI), (USANYS)
- Cc: (NY) (FBI), (USANYS)
3503-114
Page 2 of 18
SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17
EFTA 00002317
EFTA00157500
This is a log of email communications from June 18, 2020. Key entities involved are (NY) (FBI) personnel.
- Jun 18, 2020 6:03 PM: A message states that "stuff has been imaged and processed" and will be discussed later.
- Jun 18, 2020 6:01 PM: A request for assistance from other Forensic Examiners (FEs) is made.
- Jun 18, 2020 5:35 PM: A response of "No problem."
- Jun 18, 2020 5:33 PM: A message suggests scheduling a follow-up for "early next week."
- Jun 18, 2020 5:31 PM: A response indicating availability by phone and in the office on Monday, Wednesday, and Friday of the following week, with a request to schedule a call.
- Jun 18, 2020 5:28 PM: An initial, mostly redacted message.
The sender "NY CART Coordinator Senior Forensic Examiner" appears multiple times, suggesting their involvement in coordinating and processing forensic examinations. An SSA from FBI New York is also mentioned.
3503-114
Page 1 of 18
SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17
EFTA 00002316
EFTA00157499