From: Lesley Groff hii Subject: Receipt for Hyatt Date: Wed, 06 Feb 2019 18:19:56 +0000 Attachments: Invoice.pdf Inline-Images: image001 .jpeg; image002.png; image003.png; image004.png HI HE the receipt for your room at the Hyatt is attached at the bottom of this email! Good for you to have... Begin forwarded message: From: "Okasha, Oleksandra (KIEVH)" <q Subject: RE: Credit Card Authorization form Date: February 6, 2019 at 12:24:40 PM EST To: " Ce: " Supervisors < >, KIEVH-Front Office Dear Lesley, Kindly find in attached file requested invoice. Best regards, Aleksandra Okasha Fron m Leader HYATT REGENCY KYIV www.kyiv.regency.hyatt.com EFTA00490334

--=PAGE_BREAK=--

From: Lesley Groff [mailto i) Sent: Wednesday, February 06, 2019 4:37 PM To: KIEVH-Shared MB-Reservations <\q > Subject: Re: Credit Card Authorization form Cyber Security Reminder: Please use caution - message originated outside Hyatt. Send suspicious messages Can you please send me an email confirmation receipt of payment? Lesley On Feb 6, 2019, at 9:35 AM, KIEVH-Shared MB-Reservations cS s—<isSSSCiS wrote: Dear Lesley, Thank you for the letter. Please be kindly informed that we do not work with a third party payment. You may follow the link bellow to proceed with the direct payment. Please be informed that the payment can be done with Visa or MasterCard. If you need any further assistance please do not hesitate to contact us. Best regards, Darya Maksymova Reservation Department www.kyiv.regency.hyatt.com <image002.jpg> <image003.jpg> Follow us on simage004.png> <image005.png> <image006.png> EFTA00490335

--=PAGE_BREAK=--

From: Natalia X Molotkova (mailto: | Sent: Tuesday, February 05, 2019 10:06 PM To: KIEVH-Shared MB-Reservations <_ > Subject: Credit Card Authorization form Cyber Security Reminder: Please use caution - message originated outside Hyatt. Send suspicious messages Dear Sir/Madam, Will you be so kind to send me 3d party credit card authorization form? | booked a room using one of my Card for his employee, so my Card member wants to pre-pay for the room, confirmation number is name on reservation is Thank you, NATALIA (NATASHA) MOLOTKOVA | RELATIONSHIP MANAGER AMERICAN EXPRESS CENTURION SERVICES WORKING HOURS: 9:00 AM — 5:30PM ET MONDAY-FRIDAY S: cx: 63152 |: <image001.png> American Express made the following annotations "This message and any attachments are solely for the intended recipient and may contain confidential or privileged information. If you are not the intended recipient, any disclosure, copying, use, or distribution of the information included in this message and any attachments is prohibited. If you have received this communication in error, please notify us by reply e-mail and immediately and permanently delete this message and any attachments. Thank you." American Express a ajouté le commentaire suivant le Ce courrier et toute piéce jointe qu'il contient sont réservés au seul destinataire indiqué et peuvent renfermer des renseignements confidentiels et privilégiés. Si vous n'étes pas le destinataire prévu, toute divulgation, duplication, utilisation ou distribution du courrier ou de toute piéce jointe est interdite. Si vous avez recu cette communication par erreur, veuillez nous en aviser par courrier et détruire immédiatement le courrier et les piéces jointes. Merci. American Express made the following annotations "This message and any attachments are solely for the intended recipient and may contain confidential or EFTA00490336

--=PAGE_BREAK=--

privileged information. If you are not the intended recipient, any disclosure, copying, use, or distribution of the information included in this message and any attachments is prohibited. If you have received this communication in error, please notify us by reply e-mail and immediately and permanently delete this message and any attachments. Thank you." American Express a ajouté le commentaire suivant le Ce courrier et toute piéce jointe qu'il contient sont réservés au seul destinataire indiqué et peuvent renfermer des renseignements confidentiels et privilégiés. Si vous n'étes pas le destinataire prévu, toute divulgation, duplication, utilisation ou distribution du courrier ou de toute piéce jointe est interdite. Si vous avez regu cette communication par erreur, veuillez nous en aviser par courrier et détruire immédiatement le courrier et les piéces jointes. Merci. EFTA00490337