FROM VLPC SWBT SECURITY (FRI) 4. 16°10 AT&T CALIFORNIA One AT&T Plaza, 208 S. Akard Dallas, Texas 75202 Ph: 8002914952 Fax: 10th Floor 24855217 Reference CONTROL NUMBER: CASE NUMBER: $-2010-04-09-31 08-1103 Enclosed is information requested in the abov TO: FBI:WEST PALM BEACH FL PHONE : 5618208711 FAX: 5618021787 SENT ON: Apr .13, 2010 09:02:52 The information contained in the following me and confidential information intended for the or entity named on this cover sheet. If the message is not the intended recipient or the responsible to deliver it to the intended rec hereby notified that any dissemination, distr this communication is strictly prohibited. 15:07/8T. 15:02/NO. 4861175613 FP 93 9 e referenced legal process. rietary ssage is prop istary ay use of the in reader of this employee or agent ipient, you are ibution, or copying of 1 Ps, EFTA00240784

--=PAGE_BREAK=--

FROM VLPC SWBT SECURITY (FRI) 4.16°10 15:07/8T, 15:02/NO, 4861175615 F AT&T CALIFORNIA AT&T Services, Inc. - Subpoena Center One AT&T Plaza, 10th Floor 208 S. Akard Dallas, Texas 75202 CRIMINAL CASE NUMBER: 08-1103 AT&T CALIFORNIA Reference: S-2010-04-09-319 I, Po hereby declare: I have been authorized by the Custodian of Records for AT&T CALIFORNIA to certify the identity and ; mode of preparation of the attached records which are being produced pursuant to legal process. The records are true and correct copies of either call billing, service or customer information records, employee records or other records, depending upon the legal process (subpoena, search warrant, or court order) request. The attached records were prepared by personnel of AT&T CALIFORNIA in the regular course of business at or near the time of the act, condition, or event referenced in the writing, except that telephone calling records and billing detail is taken from records that were automatically generated by telephone company equipment. Call billing detail is recorded at a Telephone Company Central Office Switch at the time of the event. The billing detail is electron- ically transmitted at AT&T CALIFORNIA's Billing . . Centers. The Billing Centers store the billing data in their computers. On a scheduled basis, the Billing Centers generate bills for each subscriber account. Subscriber data is kept on AT&T CALIFORNIA's computers until such a time |. . : when the records are stored to either optical disk or microfiche. Telephone Sree | detail records attached, if any, are true and correct copies of the information contained in the computer generated records. ** Available eee 1/1/04 - 12/31/06 is attached for and No subscriber information found for either accoun uring requested timeframe. ** I declare, under penalty of perjury, under the laws of the State of FLORIDA, that the foregoing is true and correct. /2010. Customer Billing Support (Subpoenas) EFTA00240785

--=PAGE_BREAK=--

48 75613 F we 4 7/5 5: 02/NO. 611 (FRI) 16°10 15:07/8 15 N VLPC SWBT SECURI FROM VLPC 8 ‘Ss 'N 8636095q4e Pp Z Ty (THU) 4. 8°10 7:41/8T. 7:40/No. 48 3689545 Z FROM VLPC sSweT SECUR 2148560639 09:4e:5) Ml 04-07-2919 SAOI!0 (Rev. Barp7) Le Testify Betove Grund Dury Aoio OY 09 3 9 27 SOUTHERN DISTRICT OF FLORIDA TO: Cc of SUBPOENA TO Pocite Ben of wn rar BEFORE GRAND JURY Four Gell Plaza PGT 08-2103 (wea) wo, 067-007 — 7 —_ SUBPOENA For: ATIN' Ressers Chambers & PERSON _& DocuMENT(S) oR OBJECT(S) You ARE HEREBY COMMANDED to appear and test before the Grand J of the United States District Coun athe plac, date, and time pecifg oe sf “"y United States District Court 701 West Paim Beach, Florida 33401 4/8/2010 9:30 am YOU ARE ALSO COMMANDED to bring with You the following document(s) of objoct(s):* 1) All eubscriber, tailed billing information, inctuding Incoming and outgoing numbers diaiad, and Payment Wy from January 4, 2004 to Decambar Hv, for cellular telephane numbers (310) 840-6989 ang (323) 666-9949, mad Compliance ma 68 made b. the pi - (305) 944-9794" °° 902 by furnishing Terjueated records to FB) Special Agent Ge in Gumbinner at EFTA00240786

--=PAGE_BREAK=--

(FRI) 4. 16°10 15:08/8T. 15:02/NO, 4861175613 F 4 FROM VLPC SWBT SECURITY FROM VLPC SWBT SECURITY (THU) 4 O10 7:42/85T. 7:40/NO0. 48663689548 F 2148580639 03:51:46 = 04-07-2010 3/7 U.S. Department of Justice United States Attorney Southern District of Florida 400 S. Australian Ave.. Suita 409 Wesi Paim Beach, FL 234018235 (561) 820-8714 APPEARANCE NOTICE The attached subpoena requires the Production of the records specified to a Federa! Grand Jury/Trial in the Southern District of Florida. authenticity. Therefore, you may be able to avoid appearing Personally at the grand jury/trial at the time and place Specified by completely filling out the attached Certification and Inventory and immediately retuming it with the records to Special Agent Gavin Gumbinner, FBI at the following address; Federal Bureau of Investigation 605 South Flagler Drive, Ste. 600 West Palm Beach, Florida 33401-5923 EARLY VOLUNTARY TURNOVER Please note that we are requesting an early voluntary tumover of the materials Subpoenaed. The early voluntary turnover date is prior to Apri! 8. 2010. Sincerely. JEFFREY H. SLOMAN UNITED STATES ATTORNEY tL BY: . 1E VI ASSISTANT UNITED STATES ATTORNEY wwe eee EFTA00240787

--=PAGE_BREAK=--

c FROM VLPC SWBT SECURITY (FRI) 4.16°10 15:086/8T. 15:02/NO. 4861175615 F 7] AMA REPORT INFORMATION We do not maintain records of all incoming and local calls for all subscriber's accounts. In certain circumstances, such records could be created and maintained for a period of time, but the absence of a record of such a call will not be conclusive as to whether any call was or was not placed or received. We cannot know whether such records exist in this situation until we conduct such a search. Explanation of data fields: Call Type: Used primarily for AT&T internal billing purposes. Connect Date/Time: Date, time, call was connected. Time zone provided. Originating #: Area code, telephone number call was placed from. Terminating #: Area code, telephone number the call was placed to. Call Duration: Length in time of the call: hours:minutes:seconds. cic: Carrier ID Code, first four digits only. Example: 0288 is AT&T. When another carrier or telecommunications company is the originator of a phone call they do not always pass the telephone number to our switch. We are unable to capture the phone number in these cases. These types of calls may appear on the report in two different ways. See below for interpretation. 1. AC PREFIX 0000 Example 7085550000 CALL TYPE CODE 720 (FIRST COLUMN) . - The originating number will usually appear as an area code, prefix and all zeroes. . - The originating phone number is not the subscriber. - The originating number is an internal trunk number. ~ We do not know the number that originated the call. - Use 7 haan code and prefix to determine the carrier that processed the call. 2. 0000000000 This type of call will typically have a CIC CARRIER CODE (LAST COLUMN) - The originating number will usually appear as all zeroes. - We do not_know the number that originated the call. _ - Use the CIC carrier code in the last column to determine the carrier. In both examples above you may choose to send a legal process to the other carrier to try to obtain additional call information. Please be aware that AMA searches may return multiple entries for a call that takes place between time zones or geographical regions, and will be returned sequentially on the report. Helpful website: Po Use FoneFinder option to search for carrier. EFTA00240788

--=PAGE_BREAK=--

FROM VLPC SWBT SECURITY Control Number: 2010-04-09-319 (FRI) 4. 16°10 15: O8/ST. 15 O2Z/NO. 4861175613 F 6 Request for: PY 01/01/2004 00:00 PT - 12/31/2006 23:59 PT ORIG/TERM Call Type Connect Date/Time 129 2004-12-13 18:51:30ET 129 2004-12-13 18:52:52ET 129 2005-11-08 20:05:41ET 119 2006-05-24 18:46:05PT 119 2006-05-29 11:45:07PT 110 2006-05-30 12:03:09CT 119 2006-05-30 10:03:36PT 110 2006-05-30 16:23:24ET 119 2006-05-30 13:23:53PT 119 2006-06-05 20:26:26PT 001 2006-06-17 09:48:20PT 001 2006-06-17 09:48:32PT 119 2006-08-10 12:01:00PT 119 2006-08-10 12:02:29PT 119 2006-08-10 12:23:17PT 119 2006-08-27 12:45:09PT 119 2006-11-04 20:53:33PT 119 2006-11-05 11:46:59PT 066 2006-11-05 17:46:19PT Request for: FY 01/01/2004 00:00 PT - 12/31/2006 23:59 Call Type Connect Date/Time 129 2004-01-21 21:30:47ET 129 2004-02-13 18:45:08ET 129 2004-08-23 21:40:02UT 060 2004-09-03 05:31:13MT 060 2005-02-16 11:20:48ET 306 2005-03-10 16:42:48ET 129 2005-03-12 18:58:07ET 129 2005-03-23 10:49:14ET 129 2005-03-27 07:13:33ET 129 2005-03-30 07:07:37ET 342 2005-03-31 07:31:48ET 060 2005-03-31 07:31:56ET 110 2005-03-31 07:31:59ET 129 2005-04-16 08:45:22MT 129 2005-04-28 12:29:02MT 129 2005-05-04 14:15:34MT 129 2005-05-19 14:37:58MT 129 2005-05-24 12:53:34MT 129 2005-06-01 13:00:31MT 129 2005-06-02 11:36:20MT 129 2005-06-07 16:20:06MT 129 2005-10-13 21:25:42ET 306 2006-04-06 09:14:09ET 129 2006-05-13 13:20:23ET 119 2006-05-22 16:06:24PT Originating# 6540730000 6540730000 2027752951 0000000000 0000000000 3141081845 0000000000 4041081203 0000000000 0000000000 2136146834 2136146834 6465264189 6465264189 2128429657 3473941444 0000000000 3235437056 2136340000 Originating# 6492110000 7277246211 2494090000 2129945133 2129945133 7863930700 2494090000 3421400000 2027370789 2027370789 6466379095 6466379095 6466379095 6027070211 6027070211 6027070211 6027070211 6027070211 6027070211 6027070211 6027070211 2494390000 6462919400 2494090000 7753220444 Terminating# 3108406989 3108406989 3108406989 3108406989 3108406989 3108406989 3108406989 3108406989 3108406989 3108406989 3108406989 3108406989 3108406989 3108406989 3108406989 3108406989 3108406989 3108406989 3108406989 Terminating# 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 Call Duration cIc :00:00 00000 7:00:00 00000 7:00:00 00000 2:00:00 04322 2:00:00 02882 7:00:00 02881 7:00:00 02882 :00:00 02881 7:00:00 02882 $ 51582 :00:00 00000 7:00:00 00000 7:00:00 03332 7:00:00 03332 7:00:00 03332 7:00:00 05552 7:00:00 04322 7:00:00 04322 7:00:00 00009 oococooecco0c0c0co0c0c00c0c0Ssd o °o o °o PT ORIG/TERM Call Duration cic :00;00 00000 :00:00 00000 :00:00 00000 7:00:05 S1191 00:47 $1191 7:09:59 02881 :00:00 00000 2:38:16 00000 2:04:12 07321 :01:34 07321 7:02:53 02881 :02:53 02881 7:52 02881 7:00:00 00000 7:00:00 00000 :00;00 90000 7:00:00 00000 7:00:00 oa0n00 7:00:00 00000 7:00:00 00000 7:00:00 900000 7:00:00 00000 :05:19 03141 7:00:00 00000 0:00:00 04322 eooceococococc0o0cC0CcCCCcCCCCCSD =] i] EFTA00240789

--=PAGE_BREAK=--

FROM VLPC SWBT SECURITY 119 119 119 066 119 119 119 119 119 119 119 119 066 119 119 119 110 119 110 119 110 119 119 Lis 119 119 119 119 119 119 119 119 119 119 119 119 119 119 119 119 119 419 119 119 119 119 060 119 119 119 119 119 119 119 066 066 129 119 2006-05-22 2006-05-22 2006-05-26 2006-05-27 2006-05-31 2006-06-01 2006-06-01 2006-06-02 2006-06-03 2006-06-05 2006-06-06 2006-06-21 2006-06-26 2006-07-08 2006-07-09 2006-07-12 2006-07-12 2006-07-12 2006-07-12 2006-07-12 2006-07-12 2006-07-12 2006-07-18 2006-08-29 2006-09-07 2006-09-15 2006-09-28 2006-10-06 2006-10-11 2006-10-11 2006-10-18 2006-10-18 2006-10-18 2006-10-19 2006-10-23 2006-10-23 2006-10-24 2006-10-25 2006-10-25 2006-10-26 2006-10-26 2006-10-26 2006-10-27 2006-10-27 2006-10-27 2006-10-27 2006-10-28 2006-10-28 2006-10-28 2006-10-29 2006-10-30 2006-10-30 2006-11-03 2006-11-06 2006-11-23 2006-12-02 2006-12-12 2006-12-12 16:16: :33PT :20PT 16:30 18:27 15:22: 19:21: :48PT 18:44: :15PT :56PT 10:52: :12PT 19:53: 16:04 09:21 16:31 09:28 15:37 10:36 12:11 17:54 19:15 19:21 19:34 17:35 18:25 14:48 12:05 42PT 32PT 30PT 36PT 58PT 57PT :04PT :03PT :42PT 11:02: 19:41: 17:41: 19:42: 17:43: 19:54: 15PT 37CT 59PT 59CT O9PT 32CT :S3PT :41PT 18:18: :49PT :42PT 11:26: 18:45: 26PT 11PT 11PT :30PT :45PT 11:51: 12:01: 18:55: 18:41: 17:54: 18:04: 12:10: 09:33: 09:43: 09:25: 18:32: 18:42: 09:29: 16:23: 16:33: 17:49: 08:19: 10:07: 12:48: O9PT 29PT 19PT 52PT O1lPT 20PT 54PT 21PT 33PT 41PT 24PT 52PT 24PT 10PT 29PT 58PT 17ET 44PT O7PT >34PT 09:33: 12:00: 18:39: 17:56: 01:02: 18:20: :O07ET 09:05: O9PT 36PT OSPT O9PT 19PT 35PT O7PT 7753220444 7753220444 7209740386 9499730000 7209740386 9549772900 9549783027 9549783027 7209740386 9549783027 7209740386 7753220444 2136340000 9549772900 9549783027 3123603000 8067451844 8067451844 8067451844 8067451844 8067451844 8067451844 7753220444 7753220444 5712836406 5712836406 9549783027 8005284637 5712836408 9549783027 8003468042 8003468042 7028182436 8003468042 8003468042 8003468042 8003468042 8003468042 8003468042 8003468042 8003468042 8003468042 8003468042 8003468042 8003468042 3077648623 7875908000 8003468042 8003468042 8003468042 8003468042 8003468042 8188235612 3077648627 2133000000 6266276945 2494090000 9733602026 (FRI) 4. 16°10 15:09/8T. 15:02/NO, 4861175615 F 7 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 0:00: 0:00: eesessese9seooo9eCoo COC COC OOOO BO OOOO ODO ODOC ODOC OOOO COCCOOCDS co °o 00 04322 :00 04322 00 05552 :00 00009 :00 OS552 :00 04322 :00 05552 :00 05552 7:00 05552 :00 05552 :00 04442 | :00 04322 :00 00009 700 04322 :00 05552 :00 05552 :00 57221 :00 51582 :00 57221 :00 51582 :00 57221 :00 51582 :00 04322 :00 04322 :00 04322 — :00 04322 | :00 05552 :00 04322 :00 04322 700 05552 :00 05552 :00 05552 :00 04322 :00 05552 :00 05552 :00 05552 :00 05552 :00 05552 :00 05552 :00 05552 :00 05552 :00 05552 700 05552 :00 05552 :00 05552 :00 04322 :47 03771 :00 05552 :00 05552 :00 05552 :00 05552 :00 05552 :00 06982 :00 04322 :00 00009 :00 90009 :00 00000 :00 02882 EFTA00240790

--=PAGE_BREAK=--

FROM VLPC SWBT SECURITY 119 119 119 119 119 119 119 119 119 119 119 119 119 119 119 119 Call 2006-12-13 2006-12-18 2006-12-19 2006-12-19 2006-12-19 2006-12-19 2006-12-19 2006-12-20 2006-12-20 2006-12-21 2006-12-21 2006-12-22 2006-12-22 2006-12-26 2006-12-26 2006-12-28 :05PT :S9PT :16PT :1L9PT :49PT :S4PT :32PT :O1PT :09PT :18PT :49PT :51PT :52PT :33PT :S3PT :22PT Type Connect Date/Time 012 O12 021 012 O11 oll 021 014 014 013 033 014 033 034 013 033 013 019 013 034 034 013 034 019 019 034 013 033 034 033 034 033 012 012 012 021 021 2004-04-08 2004-07-13 2004-09-03 2004-09-15 2004-10-26 2005-02-11 2005-02-16 2005-02-21 2005-02-21 2005-02-21 2005-02-21 2005-03-04 2005-03-10 2005-03-16 2005-03-16 2005-03-16 2005-03-16 2005-03-22 2005-03-22 2005-03-22 2005-03-23 2005-03-23 2005-03-23 2005-03-23 2005-03-23 2005-03-23 2005-03-23 2005-03-25 2005-03-27 2005-03-30 2005-03-30 2005-03-31 2005-12-17 2006-01-18 2006-02-18 2006-04-06 2006-10-28 :24UT :S1UT :16UT :04UT :10UT :51U0T :48UT :54UT :S1UT :S1UT :S1UT :370T :47UT :02UT :O02UT :02UT :03UT :17U0T :36U0T :36UT :130T :27UT :27UT :SSUT :56UT :22UT :22UT :O07UT :32UT :11U0T :36UT :SSUT :30UT :22UT :56UT :O09UT :14UT 2032540372 7166506240 42598465248 4259846248 4259846248 4259846248 4259846248 6169426880 6169547460 8662127408 4253540006 8006765883 8006765883 4253540005 6169426880 0000000000 Originating# 0000000000 8006838184 2129945133 9739933000 0000000000 41217841994 2129945133 41217841994 41217841994 41217841994 41217841994 41793902156 7863930700 41217841992 41217841992 41217841992 41217841992 0000000000 0000000000 0000000000 3421400000 41244954620 41244954620 0000000000 0000000000 0000000000 0000000000 41793902156 2027370789 2027370789 2027370789 6466379095 8888409992 8888409992 8888409992 6462919400 7875908000 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 Dialed Number 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 3236669942 (FRI) 4. 16'10 15:09/8T. 15:02/NO, 4861175613 0:00:00 05552 0:00:00 02882 0:00:00 05552 0:00:00 05552 0:00:00 05552 0:00:00 05552 0:00:00 05552 0:00:00 04322 0:00:00 04322 0:00:00 05552 0:00:00 oOS5552 | 0:00:00 04322 0:00:00 04322 0:00:00 05552 0:00:00 04322 0:00:00 04322 Call Duration 0:00:00 ICDR 0:00:00 ICDR 0:00:06 ICDR | 0:00:00 ICDR 0:00:24 ICDR 0:10:14 TCDR 0:00:48 ICDR 0:00:00 ICDR 0:00:26 ICDR 0:00:27 ICDR 0:00:27 ICDR 0:00:25 ICDR 0:10:00 ICDR 0:00:23 ICDR 0:00:24 ICDR 0:00:25 ICDR 0:00:23 ICDR 0:00:00 ICDR 0:07:59 ICDR 0:07:59 ICDR 0:38:17 ICDR 0:18:17 ICDR 0:18:18 ICDR 0:00:00 ICDR 0:00:00 ICDR 0:00:35 ICDR 0:00;35 ICDR 0:02:15 ICDR 0:04:12 ICDR 0:00:00 ICDR 0:01:34 ICDR 0:02:53 ICDR 0:00:00 ICDR 0:00:00 ICDR 0:00:00 ICDR 0:05:20 ICDR 0:00:48 ICDR EFTA00240791

--=PAGE_BREAK=--

(FRI) 4. 16°10 15:09/8T. 15:02/NO. 4861175613 PF 9 FROM VLPC SWBT SECURITY ICDR equals International Call Detail Records. AT&T may not have handled AT&T did handle the leg of the call as presented the call from end to end. in the call detail record. ICDR time stamp all UT. END-OF-FILE EFTA00240792