10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 DIGITALLY RECORDED SWORN STATEMENT OF OIG CASE #: 2019-010614 DEPARTMENT OF JUSTICE OFFICE OF THE INSPECTOR GENERAL SEPTEMBER 22, 2021 RESOLUTE DOCUMENTATION SERVICES 28632 Roadside Drive, Suite 285 Agoura Hills, CA 91301 Phone: (818) 431-5800 EFTA00125856

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 1 APPEARANC ive) OFFICE OF THE INSPECTOR GENERAL oO 8 WITN te) t ive) fi fea] oo EFTA00125857

--=PAGE_BREAK=--

LIMITED ive) oO wo ive) fea] oo 19 OFFICIAL USE 3 know, all documentation purpo MR MR. a : All right. I’1l1 only jump in information. And I'm going to EFTA00125858

--=PAGE_BREAK=--

LIMITED ies) w fos) wo nN ive) oo wo OFFICIAL USE 4 MR. a: My name is a. and I'm a Special Agent with U.S. Department of Justice, Office of the Inspector General. New York Field Office. This interview is with former SigNet employ And it ts] being conducted as rt < n official Department of Justice ) i ° Inspector General in igation. 4 ie) jon ia a) n o wu ct oO bh on September 22nd, 2021. The time is sonducted This interview is telephonically, via phone number ro - Senior Sp a. This interview will be recorded by please identify themselves for record, and spell your last name? To start, w Q Wy] bP 3 H fw 3 t = 4 q w ue] oO ie] jos w a hed Q i] 5 rt EFTA00125859

--=PAGE_BREAK=--

LIMITED ies) w fos) wo ive) oo OFFICIAL USE wi with the DOJ/OIG. calling MR. Jeff MR MR voluntarily provide Will you and I will repeat Cy o eh fal H @ kK H wu my 12] be ie] Q PB N oO cal 2) al J formal. you. This is an into the death the surrounding asked to let me you do not understand any questions it, or try to EFTA00125860

--=PAGE_BREAK=--

LIMITED 1 oO oO oo 95 OFFICIAL USE 6 Okay? I'm going to go and then we’ll go ir current Is this your cell phone MR. a: Okay. And what is your highest level of education? school. One EFTA00125861

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 7 1 MR. a : Lynchburg, Virginia. 2 MR. ae: Was there a major you were ies) following? 4 MR. a : It’s just business 5 management. 6 MR. a: Okay. And what did you do 7 prior to working for SigNet? 8 MR. a : Prior to SigNet, I actually 9 delivered Little Debbie cakes for six months. 10 MR. ae: Excellent. And when did you 11 begin working for SigNet? 2 MR. a : When did I pick up working ive) ct a o K o F w Oo ini a Bb a] Q fa) 5 u b a 0 ct 7 I'm going back too far. Sorry. SigNet. I 8 actually worked for Orion Systems Group. That 9 as in Fairfax, Virginia. Sorry. I skipped a 20 whole bunch of years there. 21 MR. ae: No problem. 22 MR. QJ: 9 yean. 23 MR. a : I'm thinking before the 24 security industry. Sorry about that. Okay. 25 MR. QJ: «and -. EFTA00125862

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 10 11 12 13 14 16 18 19 20 21 22 23 24 MR. a : Yeah. Oh, no. Go ahead. MR. a: No, no. No problem. And when exactly did you work, start, begin work for SigNet? MR. a : That was April 2011. MR. a: Okay. And what was your position with SigNet? MR. a : I came on as a service tech, initially. And then, I entered into the role, I want to say it was probably somewhere in 2012, middle of 2012, or maybe early 2013. I think it was the middle of 2012, they put me as the senior customer support representative. MR. QJ: 9 And that was your position in August 2019? MR. a : Yes. MR. a : Okay. And what did that - as a senior customer representative - what did that position entail? MR. QM: So, that was basically traveling to the Federal Bureau of Prisons, whenever they needed their VMS video system server upgrades. Basically, any swap outs of their systems, when they expired or went out of warranty. And then, if I wasn’t traveling, EFTA00125863

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 9 w ~] doing the upgrades, I was at home, working from my house, and doing technical support for the video systems at the prisons. MR. QR: Okay. that you worked with was the Federal Bureau of wo o, the main client Prisons? MR. QJ: Ss ves. MR. a: Okay. And when did you leave ie SigNet? MR. a : That was December 30th, 2019. MR. a: Where are you employed now? MR. a : I am at a UK based company called ONVU Technologies. That’s O-N-V-U. MR. a: Okay. Thank you. MR. QJ: «Off of OSCAR NANCY VICTOR UMBRELLA (Indiscernible *00:05:36) and Victor. (Indiscernible *00:05:39). MR. a: Thank you. As part of your job at SigNet, in 2019, do you recall working on projects, or work orders, for the Metropolitan Correctional Center in New York City? mR. QJ: Ss ves. MR. a: Do you recall working on a n EFTA00125864

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 10 ~] oO 10 11 project that started August 8, 2019? MR. a : Yeah. I remember the project. I don't know the exact date, but that sounds about right. MR. a: Hey. I just want to clarify. You mentioned the ONVU, that where you work, have you been working there since December 2019? MR. a : No. I worked at -. When I left SigNet, I went to another company. It’s called Enterprise Security Solutions. MR. a: Okay. And that was in December 2019? MR. a : Yeah. It was December 31st, or yeah, basically. a MR. a : January. MR. a: Okay. And you were there for (Indiscernible *00:06:28) how long? MR. QJ: until suly, pfft. What was that? July. July. It was July this year. I can Look it up. MR. a: And in July, you came over to our -. You started working at ONVU? MR. a : Yes. So, my last day at EFTA00125865

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 11 = wv tn 2 5 6 8 MR a: Now, as part of - and I'm 9 going to go back to question I asked 10 - as part of your job at SigNet in 2019, do you 1 recall working on p or work orders, for 2 the Metropolitan Correctional Center in New a] Wa ' 0 K ny 2) Bb ct Who were fea] Lee) 5 20 MR. 21 SigNet service reque 22 telephonically, I know I can't show it to you, No ox) but I will read it to you. Is that all right 24 with you? EFTA00125866

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 12 1 MR. a: It says, “Raid (Phonetic Sp. 2 )0:0 32) just crashed.” That’s under the 2 5 6 Jeff a. and Justin Houston. The contact 7 we have is, | a. and the service 8 location is for 150 Park Row, New York, New 9 York Is your understanding that is for the 10 ive) i ft oO 5 7 MR. oo request? It 9 problem was reported by P| a. And - 22 MR. a: -- a. I apologize. And I'm going to read the No ox) 4 rt 0) 24 comments here The earliest comment, it looks 25 like, is on - - on August 8th, at EFTA00125867

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 13 10 11 12 13 14 16 17 18 19 20 21 22 23 24 3:36 p.m. It states that the assignment on August 8th to 16th, all day for Justin Houston, Jeff a. and Jeff Cranor was been created. It says Jeff Cranor will be working on this. Get a case started with Qognify? MR. a : Do you want to start with August 8th first. Is that what you started with? MR. QJ: 9 Yeah. MR. Ee : Okay. Sorry. MR. a : It’s Qognify. That’s Q-0-G- N-I-F-Y. Is that your internal system? MR. a : No. So, Qognify is the video manufacturer of the software that they were using. At the time, though, they were - I believe - their system was a NICE Vision system, just to give you guys a little background on it. So, Nice Vision was the prior company. MR. BJ: 9 Okay. MR. a : When most of the prisons got their video systems. And then, Qognify basically purchased, or bought, Nice Vision. I want to say that was probably in, like, 2018. Maybe 2017. EFTA00125868

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 14 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 MR. a : Okay. So, and that’s why -- MR. a : So, they rebranded, basically, the new systems that they were putting in. MR. a : Understood. Okay. And then, the assignment was created at 3:36 p.m. There is a comment by Jeff | - that’s you, right? - at 3:38 p.m. And -- MR. a : Yeah. MR. a : -- it looks like someone addressed it to you. It says, “Hi, Jeff. Unable to locate anything official. The basic steps are as following: One, set the raid level to none, and save. It will restart it with all drives being J. Replace any faulty drives. Two, set the raid level to five, and save. It will restart and begin initialization. The password is 1111. Four ones. And if I recall correctly, once the raid is created, you will need to restart Windows, and create the proper partitions. I/’11 keep looking, but that should get you going. Best regards, Derek Barr (Phonetic Sp. *00:10:13), Senior Support Engineer.” MR. a : Derek Barr. Okay. I was EFTA00125869

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 15 w ~] wondering who that was. I was going to guess Sharom (Phonetic Sp. *00:10:19), but -. MR. a: Is that someone -- MR. QJ: Okay MR. a: -- internally, or is that from Qognify? MR. QJ: No. «So, that -- yeah - that’s the Qognify technical support engineer. MR. a: So, you reached out to Qognify and to get assistance on this matter, and they responded on these are the steps? MR. GJ: | n-hon. MR. a: All right. And the next step, the next comment I have is by Jeff a. on August 14th, 2019. 8:02 p.m. So, this is approximately six days after the incident. MR. a : Okay. MR. a: yo | called us on Thursday, August 8th, stating that he had two bad drives in his raid unit. Off the Nice Vision Pro, Unit NVR (Phonetic Sp. *00:10:57). We advised him to get replacement drives. Once they are replaced, they should start to initialize, to become available for the raid EFTA00125870

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 16 10 11 12 13 14 16 18 19 20 21 22 23 24 array. | , did not have drives readily available. He checked with his local CSM.” What is CSM? MR. a : Should be computer specialists manager -- MR. a: That’s -- MR. QJ: -- 1 believe. MR. a: -- that’s internal for the BOP? MR. a : Okay. MR. a : That’s what their IT manager, and the IT department, I think. MR. QJ: 9Thank you. “He checked with his local CSM, to see if they had any spare replacement drives. Once he located replacement drives on Friday, August 93th, he did not have access to the DVR room, to replace them. He called SigNet for some phone support on Saturday, August 10th, when he gained access to the DVR room. He attempted to replace the drives, and they started to rebuild. During the rebuild process of the drives, the drives were required to be taken out of raid, on DVR- 2. Once the drives were removed without proper EFTA00125871

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 17 10 11 12 13 14 16 17 18 19 20 21 22 23 24 shutdown of the recorder, the video database becomes corrupted. Typically, any time the raid is - raid on - raid five configuration loses two drives, the raid needs to be rebuild, and all data is wiped from the raid.” Do you recall making that comment? MR. a : Yeah. That sounds about right. That sounds what I would have stated. MR. a: Okay. So, I'm going to go back. Can you explain to me the phone call that you got from | on August 8th, if you recall what he stated to you on August 8th? MR. a : Yeah. I'm trying to think. Well, yeah. I'm trying to -. So, August 8th, well, that was a -. Was that a, like, a Saturday, maybe? MR. QJ: 9 No. MR. a : Maybe it was -. MR. a: That was a Thursday. MR. QJ: Thursday. Okay. MR. a: It looks like, on Thursday, he called - August 8th - he called you, he reported the incident. You gave - possibly gave - him instructions on what to do. August 9th, he got replacement drives, but he did not EFTA00125872

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 18 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 have access to the room. That would be on a Friday. Then August 10th is when he called you back, and it looks like you -. The incident with Epstein happened, and he called you back. MR. a : Oh. Okay. Okay. Yeah, because I was going to say -. Let’s see. Yeah. I have a different recollection than I thought, because I thought, from what, and I want to say, maybe that incident started earlier, but maybe not. Because what I was, what I was recalling on that was, me and my wife were actually about, I think, let’s see, 2019. So, that would have been -. Yeah. Me and my wife and my son were out at a cabin on a weekend get-away, and I remember an email, I believe that was from Justin, saying something that he had gotten a call from | a. Now, that could have been after the initial reach out from him. That the drives were down. I think that might have been. So, I'm kind of questioning if | reached out to me initially, or if he reached to Justin, and then Justin assigned that to me. Because Justin, I believe, was also out on vacation, either that week or that weekend, as EFTA00125873

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 19 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 I was, but I was kind of local. So, he had asked me to reach out or, you know, basically work with him, work with Qognify. And so, that’s what I was remembering from that, because I know, I remember specifically, I was on vacation on the weekend. And trying to reach out, basically, to, I want to say, like, our sales rep, Steve Smith (Phonetic Sp. *00:14:27), who worked, you know, for the Bureau, or worked with the Bureau of Prisons. He sold all their equipment. Reaching out to Derek Barr. But again, I could be -. I could be wrong on the timeframe there. But -- mR. QJ: ss tt’s --. MR. a : -- either way, yes, I did work directly with | - | | - at one point, on the case, prior to visiting the site. So, yeah. I was just trying to get that timeline right, because I don’t want to tell you that it happened this specific way you’re saying it, and then it didn't. MR. a: No problem. And you mentioned that you were away with your wife on a camping trip. Do you know how long the trip EFTA00125874

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 20 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 was for? MR. a : It was just a weekend. So, I think we might have left out on a Friday, you know, Friday afternoon, and then, probably came back, like, Sunday night. MR. a: So, it’s possible that you spoke to him on Thursday, August 8th, before you headed out for the camping trip? MR. a : Possibly. Yeah. MR. a : You don’t recall? MR. a : Yeah. I don’t - yeah - I don’t recall specifically. I do - and like I said - I do know, I did talk to him, at one point, about the drives, and that he couldn’t - Okay. So - yeah - that does clear it. Okay. So, that’s really -. Sorry. I'm just trying to piece it together. MR. a : No problem. MR. a : So, yeah. He did mention something about that he would check with -. So, that’s why I'm trying to think that it may have been the weekend prior to the 8th. Or not the 8th. But it would have been the 10th, would have been the Saturday. I want to say he reached out before then. Because I want to say EFTA00125875

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 21 1 we were out on the weekend, before that. 2 MR. ae: So, hold on. Let me just WwW is] hb wu RK = ima) ke 4 MR. QJ: «Yeah. let me. So, 5 I'm looking at this now, Jeff. This is Dennis. 6 So, on August 8th -- 7 MR. QJ: | uh-huh. 8 MR. a : -- that’s when you received, it looks like, a message from that wo i=) individual. Who is 11 MR. a: Derek Barr. MR. ae : Derek Barr -- 4 MR. a : -- saying, “Hi, Jeff. Nm Ww 5 «K 0 wm 5 Unable to locate anything official. The basic 16 steps are as “So, it looks like, 7 maybe somebody would have reached out to you 8 before. So, in fact, that was the August 8th 9 comment. And then -- 20 MR. QJ: Yeah. 21 MR. a : -- that was something 22 that says comment made by you. And then -- 23 MR. QJ: 9 uh-huh. 24 MR. a : -- the next comment made 25 by you was actually on August 14th, 2019. EFTA00125876

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 22 10 11 12 13 14 16 18 19 20 21 22 23 24 MR. a : Okay. MR. a : And what you’re stating here is, it’s saying, yo ; called us on Thursday, August 8th, stating that he had two bad drives.” So, it doesn't specifically say he called you. Do you know if he would have called you direct, or he would have called someone else with SigNet? MR. a : That’s why I was saying. I think he may have called Justin initially. And then, Justin had asked me to basically work on that case because, like I said, I think Justin was out on vacation, and that’s why he passed the case to me, asking me to work with J and Qognify to try to see if we could get those replaced. Let me look at the year here. I'm just trying to pull it up. MR. a : And you mentioned there is a possibility you were away on a camping trip the weekend prior to that. MR. QJ: So, the 10th. Yeah. I mean, I could try to verify that, if that’s, like, an absolute -- MR. a : No, no. MR. a : -- necessity. I could see. EFTA00125877

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 23 10 11 12 13 14 16 17 18 19 20 21 22 23 24 Yeah. I know it was basically right around this case time. So, it could have been the prior, or it could have been that weekend. But yeah. That’s really -. MR. a : I know it’s tough. It’s been a couple years. So, remembering the exact details is kind of hard. MR. a : You know, it may have been that Friday night. The 9th. So, you said I was talking to Derek on the 8th? MR. a : Yes. MR. a : Or I got a reply from him on the 8th. Yeah. Because I want to say we left out on the 93th, and we were at the cabin on the 9th. And I want to say that me and Justin were maybe communicating back and forth via email. And trying to kind of figure out, you know, what drives he could get, or whatever. So, maybe, maybe it all happened right in that weekend. Because I do remember something about hearing that, you know, the incident happened there. MR. a : Okay. Yeah, and I'm -- MR. QJ: | uh-huh. MR. a : -- re-reading this. It EFTA00125878

--=PAGE_BREAK=--

LIMITED OFFICIAL US 24 10 11 12 18 19 20 21 22 doesn't specifically state in your comment, on the 14th, that you actually ever spoke with him. It just says -- a. It just says that he called us on the 8th. And then, it talks about, you talk about how, on the 9th, he didn't have access to the DVR room, to replace them. And then, it says, he called SigNet for phone support on Saturday, August 10th. So, do you know -- MR. a : Okay. MR. a : -- if you were away, I'm assuming this information was passed to you on August 14th, when you made the comment? Would that be accurate, since it sounds like you were aware that weekend? MR. QJ: «Well, I do -. So, I do remember talking to him, at some point, and him -. Well, I don’t know if I talked to him or emailed -- MR. Ee : Okay. MR. a : -- but basically, I remember, I remember him saying that, like, he was trying to find drives. He didn't have any, EFTA00125879

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 25 10 11 12 13 14 16 18 19 20 21 22 23 24 so he was going to check with the CSM, to see if they had any on site. Then, I believe he found them, and then, he said, and he called, he either called me back, or emailed, and said, hey, the room where the NVR is locked, and it’s our internal investigation office, and they have the keys. I don’t have access to that. So, I'm going to have to wait until such and such. It was probably Saturday. I think I stated there that he could actually get access into the room, to go try and replace the drives. MR. QJ: Okay. So -- MR. QJ: Sorry. MR. a : You just -- MR. a: -- but -. MR. a : -- don’t know if that’s August 8th or August 9th, the day you left for your trip? MR. QJ: No. =I was actually trying to see if I could pull up a Outlook data file, because I believe I saved some emails. MR. QM: 0h, that would be awesome. And then, specifically -- MR. a : I'm just like that. EFTA00125880

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 26 MR. Ee : -- yeah. No. That would be great. Specifically -. MR. a : I want to even say I saved all of my tickets from SigNet, but I can't promise that. MR. a : Oh, that would be huge. And I think going back, as far as, like, July 29th, if you don’t mind, because that’s when we think that the drives may have actually gone MR. QJ: | July 29th? MR. a : Yeah. I mean, I don't know that they contacted you or not, but that would be the follow up question, after we figure out what happened on the 8th and 9th. It would be, how far back did you know that these drives, or had you been working with | a. to replace these things, because it looks like they may have gone bad on 7/29/2019. MR. a : 29th. So, that would have been about. That sounds about -. That sounds about right. MR. a: Why do you say that? MR. a : Well, because - again - EFTA00125881

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 27 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 like, I know that he initially contacted us about the drives being out. And I want to say, it took -. I remember it -. I thought it was at least a couple of days of the process of trying to go back and forth with him. And I don’t know if it was me or Justin, basically saying, hey, we’ve got to get drives. You know, they don’t sell them anymore at Qognify, I don’t think. Because they are basically non- production drives, and we would have to get refurbished drives. And I think Justin was looking on, like, eBay, and, you know, a couple of our sources, to find some. So, I don't know exactly, did that comment say that he had drives on site? MR. a: So -- MR. a : Or did he order them? MR. a : -- that -- MR. a : Because that’s the other question -- MR. a: -- it looks -- MR. a : -- is, did he not have them? MR. a : -- he didn't have access to them. EFTA00125882

--=PAGE_BREAK=--

LIMITED ies) w fos) wo i=) ive) fea] oo No ox) OFFICIAL USE co ho been the gap, from the 29th. Okay. So, that may have Well, it does say -- (Indiscernible *00:22:07). MR. QJ: -- so, after the August hecked with his local © rt ta cr ia pb 5 Te] Bb ct w wu for w ir i) a mare replacement Friday, room Okay. So then, he did have them on site. Okay. least that’s -- MR. a : That’s what it sounds like. a : -- that’s what it sounds like. MR. a : So, I'm assuming that means that you wouldn't have sent them. Do y MR. a : I can try to look here. I probably EFTA00125883

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 29 10 11 12 13 14 18 19 20 21 22 23 24 shouldn't have all this information, but -. MR. a : It helps us a lot. We appreciate it. MR. a : Okay. Maybe, yeah. I don’t pass it out to, you know, other companies, but stuff like this, I do find it useful, if it -. Hmm. Okay. I’ve got -. Hey. There is a camera outage. Oh. I've got a camera outage report. MR. QJ: §9o what is that? MR. a : But I don’t -. That shows from 8/16. These are all looking at August 16th. Which could have been the time that I actually was on site. MR. a: Okay. MR. a : Yeah, we would be looking specifically 8/10, and prior. MR. a : Okay. Let me see what I’ve got. Do I have screenshots? 8/16. 8/11. Okay. Let me go back and see. Let me look at this report and see if it gives me, like, a date of when this was exported to, because that could be something, if you guys need it. MR. QJ: okay. MR. a : I don't know if you guys EFTA00125884

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 30 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 have all that or not. MR. a: We don’t have the -. This is -. This is between SigNet employees. Right? MR. a : This is an Excel document, but again, but I’ve got to see what date it shows on here. Because they kind of hide it in the columns. I'm trying to see if it has a date. This is basically just a camera outage report. So, I don't know if you guys need that. And if that, again, I don’t know if that was ran from him, and we got that. MR. a: But you said this was on the 16th? MR. QJ: | That one shows that it was edited on the 17th, but it - like I said - in the outage report, I thought that they give you a date when it was actually exported from the system. MR. a: Okay. MR. a : So, I would have to look at the order. But yeah, let me go back to your original. You’re looking for the email traffic and everything. So, let me see if I can find that. Oh. Hmm. Oh, what’s that? Sorry. I'm looking through gigs and gigs of -- EFTA00125885

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 31 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 MR. a : No problem. MR. a : -- information here. MR. a : No. We appreciate it. Thank you. MR. a : Oh, no problem. Hopefully, I can find something that helps a little more. Okay. So, I’ve got -. All right. Let me see if I can load this into Outlook and see, if it will load. All right. So, files. Open. And export. Let’s do an import. Oh, import from another program or file. Oh, that is a ODF. Yup, right there. Let’s see. Allow duplicates to be created, replace duplicates with items imported. I have no idea. But I’1l1 screw my work email up. Crap. MR. a: No problem. Can I - while you’re doing it, while you take a look - can I ask you a question? MR. QJ: = Yeah. MR. a : This is, in here, it states, “During the rebuild process of the drives, the drives were required to be taken out of raid, on DVR-2. Once the drives are removed without proper shutdown of the recorder, the video database becomes corrupted.” Is that your EFTA00125886

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 32 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 understanding of what happened, from your conversation with |g MR. a : I'm - so, yeah - I'm trying to figure out when that was happening, because I do know that, at some point, the FBI came there on site, I think prior to us showing up. And I want to say that the recorder was rebuilding, and they said that they had to take the equipment out. And that’s what I'm -. That’s what I'm trying to piece together, if it was then that they took it out. Or if it was - Yeah. Because I don’t, I don’t really make any sense of him putting them in and then pulling them out. MR. a: Okay. MR. a : Yeah, because I would think, once he puts them in, I mean, he would leave them to rebuild. And I think I would have probably made that comment, because he said something about the FBI coming in, they need to confiscate the equipment. And then, and I'm pretty sure I told him, I said, well, you don’t want to, you don’t want to unplug those while it’s rebuilding because if it, you know, basically stops, you have no pick up EFTA00125887

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 33 10 11 12 13 14 16 17 18 19 20 21 22 23 24 point to start rewriting. It’s going to start all over, and then, you’re going to have gaps where you’re going to be missing recordings. MR. a: Now, so, do you believe, then, for whatever they did, that erased all prior data, anything that was saved on there would have been erased? MR. a : If - yeah - if they pulled, if they pulled power, and pulled the units out, then yeah. I mean, it would have wiped, wiped the raid, I would think. MR. a : So -. MR. a : Now, if we have information that the servers were already down, since 7/29/2019 -- MR. a : Mm-hmm. MR. a : -- would have those servers been recording up until the date that they tried to rebuild them anyway? MR. QM: | That depends, because I don’t remember if the -. I think those servers, the way, the older servers, I believe they were set to a raid five. Let’s see. Those are the pros. So, I want to say that is a raid five, and they loaded, basically EFTA00125888

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 34 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 everything was kind of compiled together, on the same raid in those servers. So, that would have put the OS, and the video storage on the same raid array. But they partition out for the OS. So, if they lost one drive, then that would be okay. With a raid five. If they lost two drives, then -. So, if they would have lost two drives simultaneously, they would lose everything. The recorder would go down, and you wouldn’t be able to get into the OS. From what I understood. So, it’s possible that he lost one drive and called us. Initially. Was trying to replace that. And then, when, you know, basically, another one went down while the other one was rebuilding. That could have been possible. And that could explain why the OS didn't crash. MR. a : So, on that note, so, our understanding, there is, like, let’s say there is 150 cameras in the MCC. MR. a : Uh-huh. MR. a: We were told about half of them go to one drive, and half of them go to the other drive. If that one drive went down EFTA00125889

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 35 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 on 7/29/2019, would those cameras that were on that drive had continued to have recorded on the other drive, or would have they stopped recording, and only the other drive that was good, that housed the other half of the cameras, have recorded? MR. a : Well, sorry. So, it really doesn't work like that. But yeah. I mean, yeah, in theory, you would want it to work like that. But essentially, the raid will spread the data over all drives. MR. a: Oh, I'm going to stop -. Can you explain what a raid is? MR. QM: So, a raid is a group of drives. MR. a : Is that, like, a DVR system? MR. a : What’s that? MR. a : Is that, like, a DVR system? MR. a : Yeah. I'm sorry. Yup. Let’s - yeah - let’s go back. So, the DVR system recorder. So, normally, their old set up, I believe, had a - and that would be a PC or a computer, like a server. A server. Like, a rack PC server. That would contain the OS. Okay. So, yeah. Never mind. Let me take back EFTA00125890

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 36 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 what I said about the OS. Because now, I'm remembering their set up. I believe they had -. The way the old ones were, is they had a separate computer. They called the Nice Vision Pro units. So, that, I believe, had two drives in it. So, that would be a raid one redundancy. So, that -. So, again, the raid is a group of drives for storage. MR. a: Okay. MR. a : And what a raid allows is, so, like, in your case, you were just talking about if you had two drives, you had, you know, half the cameras recording in one, half the other, to the other one, if one went down, you would technically still have all the other cameras on that drive. So, what the raid does is basically, it allows you to take - say you don’t have that scenario, of losing half your cameras - the raid allows you to put, you know, there is a number of drives that it requires to have for certain raid levels. But basically, it allows you to, like, let’s say four to six hard drives. It groups those together. So now, you - then the EFTA00125891

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 10 11 12 13 14 16 17 18 19 20 21 22 23 24 recorder takes the video, the video recording, and starts to spread it out over all those drives, and it basically makes a mirrored copy. So, if one did fail, it still can go back on the other drives, and access the copied files, or the mirrored files. MR. a : Now -. MR. a : So, how -. It’s for the purpose of redundancy, in case you did lose a drive, you’re not losing, you know, certain data that was just written on that drive. Because then, you have gaps in the recording. MR. a : So, a raid can also be referred to as DVR system. Right? Now, if a DVR system, they have two DVRs. If DVR-2 went down completely, right? It stopped recording. Should it have -- MR. a : Mm-hmm. MR. a: -- stopped recording on DVR- MR. a : No, because they are two separate -. They are two separate -- MR. a: Systems. MR. a : -- machines. MR. a: Okay. And how would they 37 EFTA00125892

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 38 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 have known that the DVR system went down? Was there any alerts that come up in Nice Vision, anything that comes up to them? MR. a : Yeah. So, it would. It would normally come up on the -. It’s called the AMS, or the Application Management Server. And that’s, like, the primary unit that controls the whole video system. And then, you add recorders underneath that AMS. Depending on how many cameras you have. That’s how they kind of allocate recorders. So, if you have 100 cameras, okay, let’s put 100 cameras on this recorder. Let’s put 100 more on the second one. So on and so forth. And then, Application Management Server basically allows the users to authenticate and log into that system, from any client in the facility. Or outside if you, you know, if they’ ve managed to network that way. But yeah, the Application Management Server is kind of, like, the gateway to let people in, to view the video. And then, that also manages the traffic of, okay, you want to see this video and this recorder. Okay, you’ve got, you know, you’ve got correct credentials. Okay, you’re allowed EFTA00125893

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 to view that camera. And then, it sends the feed -- MR. a: Okay. MR. a : -- to their client station. So, yeah. In short, the AMS would normally have alerts, in an application, I believe it’s - it’s not Investigator - it’s called Supervision. MR. QJ: 9 m-hon. MR. a : There was five different applications for Nice Vision. Supervision would keep all of the, like, the hardware, and I think most software events, in that application. And I think you could control, basically, if you had pop-ups messages or anything. But as far as if you didn't go to that server physically, and check, from what I know from the Bureau, they did not allow those servers to send email notifications out. MR. BJ: So -. MR. a : Because that would have required them to load with an email client, on the server, and then, you know, basically act like it’s, you know, someone’s account on that server, to send those email notifications out 39 EFTA00125894

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 40 10 11 12 13 14 16 17 18 19 20 21 22 23 24 to other people in the facility there. And as far as I know, up until I left, they didn't allowed that. MR. QJ: 9 So -- MR. a : So, you had, you would have to go the physical server, to see those notifications. Or you would -. Well, I take that back, because you could go on the client and log into Nice Vision. And then, check the Supervision. But it’s not going to send you, like, an email notification. MR. a : So, I want to clarify this for this. If you log into Nice Vision, let’s Say you’re reviewing the video footage -- MR. a : Mm-hmm. MR. a: -- if you log in, there would have been an alert, saying that these cameras are not recording? MR. a : Yes. If you -. Yeah. MR. GJ: 9 Now -- MR. a : Normally. I don’t -. Now, I don’t know if there would have been a pop-up. I would say, to be safe, you would have to actually go into that Supervision app. So, like I said, there was multiple apps, and most EFTA00125895

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 41 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 of the time, from what I see, you’ve got -. So, there is a control app that’s normally for, you know, you can play back video and see live video in that application. And then, there is an app called Site Builder, and that’s basically letting you set up the site. But the Supervision app would be where you check on the status of, okay, if your recorder is offline, if you’ve got a bad hard drive, things like that. So, that’s where you have to go, to see that. So, I don't know if they had pop-up alerts on there, and you, like I said, I think you could set those up to pop- up on your machine. But again, that would dependent if you’re logged in to Nice Vision. And you have those pop-up alerts turned on. Otherwise, you would have to log in, go to that application, and look at the list of alerts -- MR. QJ: 39vTo see it. Okay. MR. a : -- to see what was going on. MR. a: Or, if they tried to review video, they would realize the fact it was not recording. MR. QJ: «Right. That’s the other EFTA00125896

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 42 10 11 12 13 14 16 18 19 20 21 22 23 24 way. MR. a: Okay. MR. a : Well, that goes back to, I don’t think that you actually ever answered this question. I think we got kind of diverted. Was -- MR. a : Sorry. MR. ae : -- you were talking about the half of the video that were on the one server, if that server went down, would have that other server, then, captured it? Where you’re saying the mirrored it. Would have they have captured that video, that, you know, the server went down on 7/29/2019, the other server is good. Would those videos have been saved somewhere, if they were still a live feed was going? MR. a : Okay. So, you’re saying, if the server two went down, but server one stayed up, you’re asking, could you retrieve the video from server two on server one? MR. Es : Correct. MR. a : No. Because you have to have a redundant server backup. MR. QJ: | nc they didn't, in this EFTA00125897

--=PAGE_BREAK=--

LIMITED OFFICIAL US 43 1 case? 2 MR. QJ: No. 3 MR. QJ: 411 right. So, 4 regardless if they pulled the drives when it 5 was being rebuilt on the 10th, if the server 6 went down on the 29th of July, nothing would have -. They wouldn’t have been able to 8 extract anything from 7/29 to August 10th, 9 anyway. 10 MR. a : Yeah. If the whole server 11 went down. Yup. 2 MR. QM: okay. 3 MR. a: And just to clarify, I think 4 my understanding is, when the FBI got in there 15 on Saturday morning - - 16 MR. QJ: 9 m-hon. 7 MR. a: -- FY already had pulled 8 out two drives. 9 MR. a : Okay. 20 MR. QJ: 9 And he was rebuilding it. 21 MR. QJ: okay. 22 MR. a: So, if they walked in, and if 23 - let’s just say FBI followed the proper 24 protocol, they shut it down properly, they 25 pulled it down. And is it possible, when EFTA00125898

--=PAGE_BREAK=--

LIMITED OFFICIAL US 44 1 | went to replace the drives, when he 2 replaced the drives, he could have wiped out 3 whatever was saved on the drives? 4 MR. a : If - yeah - it just depends 5 if they showed if they were bad. So, or if 6 they were totally, like, wiped. And non- retrievable. 8 MR. All right. Because I wo thought - nn (Indiscernible *00:39:07). 11 MR. a : -- what you were saying - i=) a) Sorry. Go ahead. -- was that F was t wi tal oO on c Pp. H on Bp =] Q ct a oO 3 i} | Yeah. 7 MR. a : -- and that’s what he t oO a 8 should have done, was to replace those drives, 9 but then, the FBI pulled the ones that he was 20 replacing. Is that not correct? That he was 21 rebuilding. 22 MR. a : I don't know if they pulled 23 the drives, or if they pulled the whole 24 recorder out. 25 MR. a: They pulled the whole EFTA00125899

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 45 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 And my understanding is, when they left the mcc, they took the whole system with them. MR. a : Okay. Then that, I think that was when I actually showed up on site the following. MR. a: And then, you guys set up a new system for them, right? MR. QM: yes. Yeah. Because I know MR. a: Okay. MR. a : -- I know that FBI met me there. Yeah. They showed up when I was kind of getting the new system set up. And then, they kind of jumped in and they were doing stuff, and asking me questions about a, you know, check to see where those video gaps and stuff like that. Okay. So, I'm starting to remember a little bit. On the drives that you’re talking about, so, I want to say that we actually suggested to him to pull all of the drives out, and try to rebuild it, because I think that was our normal protocol. If, let’s say you had a bad drive, sometimes on those older Pro units, you can pull one out. As long as you don’t have, like, EFTA00125900

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 46 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 two failed drives, like I was saying on our raid five. MR. a : Okay. MR. a : Because if you have two failed drives, you’re not going to do anything to fix it. But if you had one, you can pull one out, and refeed it, and it will give you a status on the front of that recorder, saying it’s attempting to rebuild. So, I'm starting to recall that we may have told him to pull one out. MR. a : Okay. MR. QJ: «And let it rebuild. MR. QJ: 9 That would be the same -. That would be based on the instructions came over from a Derek Barr? MR. a : Yes. And so, I think what I'm recalling is, I think we had him pull one out, try to rebuild. That failed, I think. And then, I think he told the other -. He may have pulled the second drive out, that was showing bad, and tried to rebuild that. MR. a: And then, your comment, your comments exactly on this is, “He attempted to replace the drives, and they started to EFTA00125901

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 47 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 rebuild. During the rebuild process of the drives, the drives were required to be taken out of the raid on DVR-2. Once the drives are removed without proper shut down of the recorder, the video database becomes corrupted. Typically, any time the raid on a raid five configuration loses two drives, the raid needs to be rebuilt, and all data wiped from the raid.” Does this - based on your comment - does it mean that - your understanding is - that he went in, tried to replace it, and he pulled the drive without the proper shut down of the recorder? MR. a : Wait, so, you don’t have to shut down the drive if - or, you don’t have to shut down the recorder if you’re pulling a drive out. Like, one drive. And it’s calleda hot swappable (Phonetic Sp. *00:42:11) drive. MR. a: Yeah. MR. QJ: So, what that means basically, you can pull it out, re-insert it, and let it rebuild. But there is a limit to how many you can do. Because you can't just say, Okay, I’ve got two bad drives. Lightbulb goes out. And try to re-insert them, let those EFTA00125902

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 48 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 build. Because once you do that, if there is a possibility of the one of the two being good, and it’s writing somewhat, you pull those both out, you’re going to crash your system. So, so, and those drives, when you rebuild them, it takes - I want to say it takes at least eight hours. So, I do remember him replacing one, and I want to say it was an overnight process. He pulled it out. Put it in. It looked like it started rebuilding. And I think he came in the next day, and it failed. I don’t know if he tried it again. Or he may have tried that second drive, then, at that point. Tried to pull that and let it rebuild. And that may have been the point where the FBI, maybe, come on site. And said, hey, we’ve got to, you know, confiscate it or whatever. I don't know, at that point. ve. : yeah. MR. a : I don't know. MR. a : And that’s what my question was. Is this all talking about Daniel, his actions, or is it talking about both his actions, as well as the FBI actions of them pulling it, while it was trying to be EFTA00125903

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 49 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 rebuilt? Are you able to tell by what was read? MR. a : So, you can't send me that comment, right? MR. a : No. Well, I’1l just keep on reading it to you. It says, “He attempted to replace the drives, and they started to rebuild. During -- wR. RB: on. MR. QJ: -— the build of the drives, the drives were required to be taken out of the raid on DVR-2. Once the drives are removed without proper shutdown of the recorder, the video database becomes corrupted.” So, my question there would be, like, is that new sentence - “Once the drives are removed without proper shut down” - is that anything that you’re talking about with regard to the FBI removing them without proper shut down, or are you still talking about what Daniel did? MR. a : I would say what the FBI because I wouldn’t -. I don’t think I would have put “required to be.” Did I say, “Required to be taken out,” or “Required to be EFTA00125904

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 50 10 11 12 13 14 16 18 19 20 21 22 23 24 removed”? MR. a : Yeah. So, I’1l just read it again. MR. a : Okay. MR. a : “He attempted to replace the drives, and they started to rebuild. During the rebuild process of the drives, the drives were required to be taken out of the raid on DVR-2. Once -- MR. a : Okay. MR. a : -- once the drives are removed without proper shutdown of the recorder, the video database becomes corrupted. Typically, any time the raid on a raid five configuration loses two drives, the raid needs to be rebuilt, and all data is wiped from the raid.” MR. a : Okay. So, yeah. And listening to my statement of, “During the drives being rebuilt, they were required to be taken out.” Yeah. I wouldn’t have stated that they would have been required to be taken out. Because there was nobody requiring him, other than the FBI, to take them out. MR. a : I thought that was EFTA00125905

--=PAGE_BREAK=--

LIMITED w oO wo i=) nN ive) fea] oo wo No N No Wa OFFICIAL USE So talking about him rebuil FBI pulling them while t Yup. I'm understanding, and w Thanks I'm go no, question is, is No there an ct hat was wrong, doing everything that he but rebuild this thing, pulled it, and lc any or did he, wo ray , that’s, like, you’re ding it, and then the hey were being rebuilt? Okay. ‘s - yeah - that’s what hat I would have -- for clarifying -- ing to keep moving y. Sorry it took so no, no. hh. , no. I guess the main w oO ything that Daniel did, you know, was he could have done to then the FBI came and chance of potentially EFTA00125906

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 52 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 recovering things? MR. a : Yeah. From what I can tell, he was - yeah - going through the process of what we instructed him to do, pull the drive out, insert, then let it rebuild. And yeah, I think he gave it plenty of time on the first drive. Like I said, I think, I think, from what I remember, that was an overnight process. And so, that may have been the Thursday, or something, maybe. Again, prior to that incident, I believe -- MR. a : Okay. MR. a : -- where he would have inserted it, let it rebuild, and came back in the next morning, or hours later, and realized that it had failed. And then, yeah, then that second drive was probably where he went next. MR. a : Well, just for clarification -- MR. QJ: (indiscernible *00:46:47). MR. a : -- on that, prior to the - in that same statement - you said, you August 8th, he contacted you regarding the two bad drives. And then, you advised him to get replacement drives. It says, “Once they are EFTA00125907

--=PAGE_BREAK=--

LIMITED OFFICIAL US wo ios) 1 replaced, they should start to initialize, to 2 become available for the raid array. | 3 did not have drives readily available. He 4 checked with his local CSM, to see if they had 5 any spare replacement drives. Once he located 6 replacement driv on Friday, August 9th, he 7 did not have access to the DVR room to replace 8 them. He called SigNet for some phone support 9 on Saturday, August 10th. When he -- Oh, okay. 11 MR. a : -- gained access. 2 it sounds like -- 3 MR. a : Okay. 4 MR. a : -- it all happened on the 15 10th, or he replaced them -- 16 MR. a : Yeah, because he -- 7 MR. a : -- and -- 8 MR. a : -- didn't have access. 9 Yup. He didn't have access in -- 20 MR. QJ: -- sand then -. 21 MR. QM: -- there until the 10th, 22 right? t i=) a So, 23 MR. a : Right. So, he started 24 rebuilding them in the morning, and then it 25 sounds like the FBI came in, and then pulled EFTA00125908

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 54 w ~] 10 11 12 18 19 20 the drives while they were being rebuilt. Does that sound right, based upon on your comments? MR. a : I - yeah - I think so. Yeah. Yeah. MR. a: And just to clarify, too. MR. a : Yeah. My comments are going to be a little more solid than my memory, I think. MR. QJ: veah. MR. a : At this point. MR. a: Yeah. If, based on these comments, right, and if -- MR. QJ: Yeah. MR. a: -- based on the FBI, my understanding is, when they came in, two drives were pulled out. And there was two drives that were replaced, and it was going through. You mentioned before that, if he pulls one drive out, it’s okay, but if he pulls out two drives, at the same time, it could have possibly corrupted everything. MR. QE: | m-hon. MR. a: All right. So, it’s a possibility that, if he did pull out two drives at the same time, it might have contributed to EFTA00125909

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 55 10 11 12 13 14 16 17 18 19 20 21 22 23 24 the failure, and also the fact that, if he has two drives rebuilding, and the FBI came in and pulled it out in the middle of the rebuild, it could have also contributed to the failure? MR. a : That is correct. So, yeah, and that’s what I was questioning, is if the statement said that he had two drives basically out of the system at that point, and if there were two drives out, then, and nothing was replaced, if there was two blank spots, then yeah, then the system would have already been failed. As far as the video sort side. MR. a : Okay. MR. QJ: But again, yeah, I don’t know - again - if he had four total drives, two old ones, two new ones, and he was kind of in the process of that when they came in. MR. a : But when -- MR. QJ: | And 1 don't know the detail MR. a: -- my understanding is when - MR. a : -- (Indiscernible *00:48:54). MR. a: -- they came in, they took EFTA00125910

--=PAGE_BREAK=--

LIMITED ~] wo i=) 11 OFFICIAL USE 56 everything, there were two old drives that were sitting -- mR. QJ: Yeah. MR. ae: -- outside of the housing, two new drives sitting inside, that -- MR. QJ: okay. MR. a: -- he could have replaced that morning. MR. a : So, yeah. I don't know at that process, or, at that point, if he - yeah - basically maybe pulled, you know, maybe he had attempted both old ones. MR. QM: (indiscernible *00:49:15) MR. a : Maybe they failed. And then, he said, okay, I'm going to pull those. This is all speculation, at this point, but yeah, he could have. If they both failed at that point, then yeah, it would have been screwed anyways. MR. ae: Who actually -- MR. a : Because he -- MR. a: -- go ahead. Sorry. EFTA00125911

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 57 -- he had already lost the 2 two drives, at that point. 3 MR. a: So, White House, at SigNet, 4 would have walked him through this process? 5 MR. a : That would have been, 6 probably between me and Justin. 7 MR. a: But you both were on 8 vacation, technically. Right? 9 MR. QJ: Ss ves. 10 MR. a: I think both of you were on 11 camping trips. So, would -. 12 MR. a : And I want to say -. So, 3 you had mentioned, there was a comment from 14 Jeff Cranor. And so, he had actually started 15 with SigNet, I believe it was February of 2019. 16 So, yeah. He was a former Bureau employee. He 17 was a -. What’s -? Rachel comtech out in 8 Kansas City. And then, we brought him on to 9 work with SigNet because he knew, he knew Nice 20 Vision pretty well. 21 MR. a: Okay. You think he might 22 have -- 23 MR. QJ: so - 24 MR. a: -- worked with him? 25 MR. QJ: | that’s kind of what I'm EFTA00125912

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 58 10 11 12 13 14 16 17 18 19 20 21 22 23 24 wondering because, that kind of started to ring a bell, since, if me and Justin were out, Justin basically pushed it to me. And I don’t think I had access to, like, our -. Something was -. It might have been, like, my internet service, or phone service, or something, because I, I mean, I was out in the middle of nowhere. At that point. So, I may have tried to text him, or, you know, if we went into town or something, and I contacted him, and said, hey, you know, this is what’s going on. Can you get a case started? That may have been what I had done. So, he may have had a little bit of interaction with J, as well. MR. a: Okay. I’11 reach out to him MR. a : More at least -- MR. a : -- about that, too. MR. a : --, now was there -- MR. QJ: 9 'm look -. MR. a : -- any additional comments? MR. a: No. That’s all -- MR. a : About him on that case? MR. a : -- that’s all. That was the only comment over there. There is nothing else EFTA00125913

--=PAGE_BREAK=--

LIMITED OFFICIAL USE ~] wo 10 11 in there. uw to They didn't give you any other tickets, right? No. I'm going to look and see if I have more tickets. I don’t know if I saved the tickets, but -. or if I just saved contacts, I'm going to ask you that, if you can get everything together, right? Mm-hmm. Everything you have on this tickets, any communications, things like that, can you forward that over to me? Yeah. We actually have another interview starting at 10:00. So, I'm going to wrap it up quick. August 8th - right All right. Yup. We’re not trying to push you Just had a question for you. Mm-hmm. Do you recall, prior to ? - were there ny issue ifs) “ w that you were aware of, with the MCC cameras? EFTA00125914

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 60 10 11 12 13 14 16 17 18 19 20 21 22 23 24 MR. a : Prior to August 8th. No. So, whenever - again, I don’t know if the -. So, that’s where I was unclear on the weekend, basically. But I think we may have clarified that, that everything happened on the 8th, through the 10th. So, I think, prior to the 8th, I may have known about - yeah, I mean - I may have known about issues through Justin’s correspondence with a. MR. a : Okay. MR. a : He may have been working. Yeah. I don't know. But yeah. And I would say, August 8th is when I definitely picked up the case. MR. a: Understood. Okay. So, but you were not aware of any other issues, prior to it? MR. SJ: no. MR. a: Thank you for taking the time to talk to us today. Is there anything that you think that we’ve missed to ask, or anything pertinent that you think will be useful for our investigation? MR. a : I don’t believe so, at this time. Yeah. But if I can think of anything, I EFTA00125915

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 61 1 can send you some information over, but -. 2 MR. a: I appreciate that. You have 3 my email address. Anything you have, if you 4 can forward that over to me, I would really 5 appreciate it. 6 MR. QJ: okay. MR. a: Mm-hmm. 8 MR. a : Yeah. I’1ll take a look ~] 9 here in a few minutes, and see if I can find 10 some stuff. 11 MR. a: Thank you for taking the time 2 to talk to us today. 3 MR. QJ: Ss Yes. 4 MR. QJ: «And -- 15 MR. a : All right. Not a problem. 16 MR. a: -- I'm going to end the interview. The time i n 9:55 a.m. on September 8 22nd, 2021. This is Special Agent J, and 9 the interview is being ended. No wi N fea) EFTA00125916

--=PAGE_BREAK=--

LIMITED OFFICIAL USE 62 1 CERTIFICATE ies) io ose Burton, Transcriber ive) oO co 19 EFTA00125917