Skip to content

Get Judicial Watch Updates!

DONATE

Judicial Watch • JW v. DOJ 02046 Hillary R. Clinton Part 24 of 24

JW v. DOJ 02046 Hillary R. Clinton Part 24 of 24

JW v. DOJ 02046 Hillary R. Clinton Part 24 of 24

Page 1: JW v. DOJ 02046 Hillary R. Clinton Part 24 of 24

Category:

Number of Pages:158

Date Created:August 3, 2018

Date Uploaded to the Library:August 03, 2018

Tags:consult, Referral, relevant, duplication, 02046, device, sheet, duplicate, bureau, files, Department of the Treasury, investigation, hillary, Hillary Clinton, clinton, State Department, federal, FBI, DOJ, department, FOIA, Washington


File Scanned for Malware

Donate now to keep these documents public!


See Generated Text   ∨

Autogenerated text from PDF

INFORlLll.lION CONT AIHED
HEREHI UHCL.ASSE IEC
DATE 0-23-:;:Ql USICC-
F0-)40 (Rev. 4-1 1--0J)
File Number
J-----------.1 OCJ
b7E
field Qfficc Acquiring Evidence _W_-F-V
Serial OrlginaClng Document _...,lo_C)_._____________
Datt Received
(Address)
(City iind St:lle)
b7C Returned Yes
fl)No
Receipt Given Yes
Grand Jwy Material Disseminate Only Pursuant Rule (e)
federal Rules Criminal Procedure
Yes
federal Tax.payer Information (FTI)
~No
Yes
(lt,,.. ,.o: ~~i ~*~ti ~~f,:(.
FEDERAL BUREAU INVESTIGATION
Electronic Communication
(U) Subfile Opening Document
Title:
From:
Date:
02/12/2
CYBER
DM-TOU
b7C
b7E
Contact:
Approved
Drafted By:
Case
#:I
Synopsis:
By:I
~:u
~CYB )(.; 1-Nti
MIDYEAR
EXAM;
MISHANDLING CLASSIFIED;
UNKNOWN SUBJECT COUNTRY;
SENSITIVE INVESTIGATIVE MATTER (SIM) open CYBER subfile
Details:
Writer requests that subfile opened titled CYBER, store all
Cyber investigative analysis C-10198
DECLASSEIED BY: HSICG
C.87W44B73 01-25-2018
FD-1057(Rev. 5-8-10)
--~~~~~~--~CYB~R
Serial
--- b7E
----
!.~. ~.~~J!~~~-~
~/-NOPOMf
All ~.ir
.,,.:1111e t.;1
i:.. ;~1119r.
,.,, c-.:.1.~:
Y~!,..~
---
FEDERAL BUREAU INVESTIGATION
Electronic Communication
(U//~)
Title:
Searches
From: Document forl
...._~~~~---
Date:
03/24/2 CAGO
CG-CY-1
Contact:
Drafted
b7E
b7C
b7E
By:~I~~~~~~~--
Case ....-------~CYBEW) )(;AW) MIDYEAR EXAM;
Synopsis:
MISHANDLING CLASSIFIED;
UNKNOWN SUBJECT COUNTRY;
SENSITIVE INVESTIGATIVE MATTER (SIM)
(U//FOtffi.1 Submits document the file
for~I~~~~~
b7E
searches conducted this investigation.
Reference:~l~~~~~~--~CYBER
b7E
Serial
Enclosure(s): Enclosed are the following items:
(U)I
lsearch documentation.
b7E
Details:
(U/11eee-)
This communication submits the file the document
that associated with the above reference serial (13) the CYBER
sub file. C-10199
...._~~~~~~---~CYBER
b7E
Serial /NO!eftft
fo~ searches
Re: ~~~~~~~-~CYBER, 03/24 /_2_0_1_6~~~__,
Title:
(U//.POUE)-1
b7E Docume.nt
~/MOP91Ql C-10200
ALL INFORlr.A1IOH CONTAHTED
HEREIN UNCLASSEIEC
DATE 01- 25-:;:018 .3Y C87 il44B73
~ISICG
~nysica
tr.NCLASSIFI ED//~
lA/ Cover Sheet for Serial Expor
b7E
Created Prom:
Package:
Stored Location:
Summary:
Serial
lAlO
None
(U//~
provide
for
Acquired By:
Acquired OD:
Attachment:
Documents
2016-0
(U)
documen ion.
searc hes
b7C
b7E
Isearch C-10201
FEDERAL BUREAU INVESTIGATION
FOI/PA
DELETED PAGE INFORMATION SHEET
FOI/PA# 1353814-0
Total Deleted Page(s)
xxxxxxxxxxxxxxxxxxxxxxxx
Deleted Page(s) Duplication Fee
For this Page
xxxxxxxxxxxxxxxxxxxxxxxx
DECLASSEIED BY: HSICG
C.87W44B73 01-25-2018
1-----.....-
FD-IOS7 (Rev. S-8-10)
--- -~b7E
~~. ;,~~. ~!-!!:~!~ ---................. ...- ..............
~//N6PORN
lt !.. :.::oo -~.,:> !>o~ ,. fY.ii:
 t;.
(Rev 10-16-2009)
:t>:.~
Ill
....., .-;;;,. -.. :...
FEDERAL BUREAU INVESTIGATION
Import Form
Form Type: DEL-REX
Title:(U//~
Approved By:
Drafted
Date:
01/04/2017
Cyber Division TAU Technical Analysis Report
SSA~I__________.
b7C
b7E
By:~I__________.
Case l.__________.~CYBER
IU)
~//MP) MIDYEAR EXAM;
MISHANDLING CLASSIFIED;
UNKNOWN SUBJECT COUNTRY;
SENSITIVE INVESTIGATIVE MATTER (SIM)
Synopsis:
(U//~ Analysis computer intrusion malware
infection laptop hard drive belonging Anthony Weiner
HRC-10260
DECLASSEIED BY: HSICG
C.87W44B73 02-12-2018
~flm
....
:_. ...
::~::Dxesw:u:a prcW irru/~@im; .,..
,,, :.;.. ,_ :~-
..~ ..~.. ..; :IQie~ ri~~ioro/~oies
Response 2/9/16 DOJ Ltr devices equipment
1!>
:.:.-
2/22/16
DOJ/ WC
2/22/
DOJ/WC Inquiries DOJ re: WC seria nos for laptops 21/ 09-2/
emails
~/23/16
DOJ/WC
IPad re: emails for 1/21/09-2/1/13 forensic analysis
HRC-2867
HRC-2868
(./
HRC-2870
HRC- 2872
HRC-2874
LAW OFFICES
WILLIAMS CONNOLLY LLP
725 TWELFTH STREET. N.W.
DJ VID KENDALL
WASHINGTON, 20005-5901
(202) 43
PAUi. CON>lOt.lY 0022 11>.18)
(202} 434-5000
FAX (202} 434-5029
August 31, 2015 EMAIL AND FIRST CLASS MAIL Omted States Department Justice Per NSD
b7C Per NSD
National Security Division
600 Street,
Washington, 20530 ____. Per NSD
b7C Per NSD
Dear... you may know, the former Secretary State has repeatedly stated that
she will cooperate with your inquiry whatever way she can. Accordingly, she would
happy appear voluntarily answer questions, that would helpful achieving
expeditious resolution possible. She does have scheduling commitments, but
sure can work around those.
Z/;. Kendall
DEK/bb
HRC-2875
()1
HRC-2876)
HRC-2880
____ _____
....._.. .... -..- -...-..
LAW OFFICES
WILLIAMS CONNOLLY LLP
725 TWELFTH STREET, NW.
DAVID KENDALL
(202) 434 5145
WASHINGTON, 20005 5901
!l::NVAkD B~NN2TT WJU.lAM$ (1Q20 1$8J
>AUL R... CONNOU.l (l.,22 11l>76)
C202) 434 5000
dkendall@wc.com
FAX (202) 434 5029
September 21, 2015 EMAIL AND FmST CLASS MAIL
United States Department Justice
National Security Division
600 Street,
Washington, 20530 Dea.rl.__ ___. Per NSD
b7C Per NSD Per NSD
b7C Per NSD behalf former Secretary State Clinton, want reiterate our desire facilitate the security inquiry unde.rstand the Department conducting the behest the Intelligence Community Inspector General into the storage r~ently-classified emails anhe hdr22@clintonemail.com address. you know, shortly after this inquiry was announced, voluntarily
provided thumb drive (and copies) and the server equipment which supported th.is email
account during the Secretarys tenure the State Department. also shared with you that
the Secretary would voluntarily answer any questions you might have~ Should you need assess the successor server which for time hosted this address and the successor
hrodl 7@clintonemail.com address, also would happy assist you that regard,
consistent with maintaining the privacy other e~mail accounts that are not part your
inquiry. short, want facilitate the efficiency this security inquiry and look
forward learning from you there are ways which can assistance.
DEK/bb
HRC-2881
--J
HRC-2882
A.LL FBI IlffORU:ATION CONlA.HIED
HEREIN UNCl..ASSIEIEO
CAlE -06 -201; J76J18T80 NSICG
U.S. Department Justice
National Security Division
WasJ1ing1on, D.C. 20530
David Kendall; Esq.
Williams Connolly LLP
725 Twelfth Street, N.W.
Washington, 20005
September 22, 2015
Dear Mr. Kendall, are receipt your letter dated September 21, which offers, among other things, access
what you have referred successor server the server equipment previously produced the FBI August 12, 2015 Based upon the FBI investigation, understand that this successor server
the custody of, and being operated by, Platte River Networks and that it, least for some time,
contained emails from Secretary Clintor1s@clintonemail.com account. are concerned that, notwithstanding your repeated statements oral and written co1Tespondence
regarding your and your.clients wiltingness eooperate this matter, you had not raised the existence the successor server offered access prior your September 2.l letter. remind you that
this server covered the preservation letters delivered Williams Connolly LLP July 31, 201
and Platte River Networks July 30, 2015, and request that you ensure that this server remain
operational with continuous power source (i.e., that not unplugged its operation otherwise
intenupted) until further notice. also reiterate that the aforementioned preservation letters cover any other equipment devices,
whether not previously disclosed, that contain contained emails from the domain account
@clintonemail. com, including all equipment related the server voluntarily produced the FBI
August the successor server and all related equipment; any other server and all related equipment
that received sent emails for this domain account; and all backup devices, including backup hardware
purchased from maintained Datto, Inc. While will seek proceed manner that causes the
least amount disruptjon otherwise unrelated accounts and activities, will take all necessary and
appropriate step:; obtain any and all such equipment and items.
Sincerely, Per NSD
b7C Per NSD cc: Kenneth Eichner, Esq
HRC-2883
HRC-2884
--- .......
,../
HRC-2888 .tf 2892
...
U.S. Department Justice
National Security Division
Wasliing1011, D.C. 20530 EMAIL
David Kendall, Esq.
Wil liams Connolly LLP
725 Twelfth Street, N.W.
Washington, 20005
September 29, 2015
Dear Mr. Kendall,
This letter confirms receipt two letters you sent September 25, 2015. Regarding your letter
providing list individuals and entities with whom Secretruy Clinton may have communicated
privileged context, when deemed necessary will using filter process account for the possibility
that records may contain p1ivileged infonnation. During the filter process, will detennine what
privileges may apply and how best identify privileged.information, utilizing appropriate the list
individuals and entities you provided.
C>. per NSD
b7C per NSD
HRC-2893
.._.
:Ir
HRC-2894
September 30, 2015
VIA ELECTRONIC MAIL per NSD
b7C per NSD
........,U
...,.
S-.
__e_
par -of- ....
Juscice
Na.cional Securit:y Division
905 Pennsylvania Avenue, N.W.
Washington, 20530
o~--- per NSD
b7C per NSD
Pursuant our con ersacion September 29, 2015, this letter provides the Depamnem
Justice consent access the back-up files associated with Ms. Hu.ma Abedins email account
for the purpose your security inquiry. request that the historical email content from Ms. Abedins account dated February
2013 the present migrated the new server and associated equipment acquired
Platte Jm,e.r Nerworks conjunction with your inquiry
Thank you for your co:ilsideracion.
Very r:ruly yours,
Ut~
f.figuel Rodriguez
Bryan Cave LLP
1155 Street, .NW
Washington, 20004
/s/ Kar.en Dunn
Karen Dunn
Boies, Schiller Flcxner lLP
5301 Wisconsin Ave.
Washington, 20015
HRC-2895
Jiiiooi
HRC-2896
LAW OFFICES
WIT..UAM5 CONNOLLY llP
725 TWELFTH STREET,
D/ VID KENDALL
(20 43d-5145
dkendallCwc.com
WASHINGTON, 20005-5901
ED.A.AD BENWETJ OV1U.1AMS (1920-ISJB8)
PAJ.Jl.. k.. C~OU..Y (J922-J978)
(202) 434-5000
FAX (202) 434-5029
October 2015 EMAIL AND FIRST CLASS MAIL
U.S. Department Justice
National Security Division
905 Pennsylvania Avenue
Washington, 20530 per NSD
b7C per NSD write regarding the Department Justices security inquiry response. referral
from the Inspector General the Intelligence Community. Pursuant our conversation,
understand that your security inquiry may involve review Secretary Clintons e-mails for
evidence relevant that inquiry. discussed, her e-mails include materials covered
attorney-client, marital, medical privileges. provide the following list individuals and
entities with whom Secretary Clinton may have communicated privileged _context.
Attorneys
lwilliarns Cormolly ~LP
liiilliams CoIIDolly LLP
David Kendall, Williams Connolly LLP
IUtrecht, Kleinfeld, Fiori, Partners (f/k/a Ryan, Phillips, Utrecht MacK.innon)
Che Mills her capacity personal counsel prior matters)
f-------...JWilliams Connolly LLP
~------=-- ogan Lovells
Katherine Turner, Williams Connolly LLP
,___ ___.~trecht, Kleinfeld, Fiori, Partners (f/k/a Ryan, Phillips, Utrecht MacKinnon) per NSD
b7C per NSD
Doctors per NSD
b7C per NSD
HRC-2898
WIWAMS CONNOU:.Y LLP
October 2015 per NSD
b7C per NSD
Marital
President William Jefferson Clinton
Personal Aides President Clinton form,er Secretary Clinton/Conduits ofMarital per NSD
b?C per NSD
Personal
{?olnfi,u>r per NSD
b7C per NSD rsonal Financial Consultant per NSD
b7C per NSD
HRC-2899
-----------------------------------~--..m
WILLIAMS CONNOLLY LLP
IOctober 2015 per NSD
b7C per NSD request and anticipate that the conclusion your inquiry you will return the
former Secretarys non-federal record, personal e-mails.
f!!Jt?~
Davi~
Kendall
HRC-2900
HRC-2901
U.S. Department Justice
National Security Division
Washington, D.C. 20530 EMAIL
David Kendall, Esq.
Williams Connolly LLP
725 Tweifth Street, N.W.
Washington, 20005
October 2015
Deal Mr. Kendall,
This letter confirms receipt two letters you sent October 2015. Regarding your Jetter
providing list individuals and entities with whom Se::retary Clinton may have communicated
privileged context, when deemed necessary will using filter process account for the possibility
that records may contain privileged information. During the filter process, will determine what
privileges may apply and how best identify privileged information, utilizing appropriate the list
individuals and.entities you provided. per NSD
b7C per NSD
HRC-2902
HRC-2903
HRC-2907
HRC-2910
1i.
HRC-2915
,....
HRC-2918
U.S. Department Justice
National ~ecurity Division
Washington. D.C. 20530
David Kendall, Esq.
Katherine Turner, Esq.
Williams Connolly LLP
725 Twelfth Street., N.W.
Washington, 20005 per NSD
b7C per NSD
Latham Watkins LLP
555 Eleventh Street, N.W.
Suite 1000
Washington, .20004
October 201
Dear Mr. Kendall, Ms. Turner, an4._______. per NSD
b7C per NSD reference letter October 2015, write provide clarification minor factual error
contained therein. The email address associated :with the nam~
set forth
subparagraph and footnote rage the letter, was incorrectly provided
The correct email address for the account
~-~~~~~~~~~ per NSD
b7C per NSD
cc: Miguel Rodriguez, Esq.;
Karen Dunn,. Esq.
HRC-2919
HRC-2920
HRC-2923
HRC-2931
HRC-2933
ALL FBI INFORMA.T CC:HTAINEC
H:EREI UNC L...~SSIFI
DATE 12-0 20115 Ji6 J18 T80 HSICG
LAW OFFICES
WILLIAMS CONNOLLY LLP
725 TWELFTH STREET, N.W.
WASHINGTON, 20005-5901
DAVID KEN DALL
BE.NN~ Wfl.l..l tl9 68)
PAU C.. fl... CON~ OLt..Y (1922 $.78)
JltNhk
(202) 434-5000
(202) 434- 5145
dkend all@wc.com
FAX (202) 434-5029
October 28, 2015 per NSD
b7C per NSD
U:S. Department ofJustice ational Security ivision
905 Pennsylvania Avenue
Washington, 20530
DeaJ...._ ___, per NSD
b7C per NSD discussed, this Jetter supplements September 25, 2015 letter you concerning the
back-up files former Secretary Clinton, and gives the. Department Justice consent search,
for evidence relevant your security inquiry, all content contained those back-up files.
Fwther, note that provide this consent with the understanding that, stated
your October 2015 letter
pnd me, all items voluntarily produced will
returned the owners disposed consistent with FBI policies and procedures the
conclusion the investigation.
Sincerely,
.b6
b7C
(7~,? avid Kendall
HRC-2934
HRC-2935
U.S. Department Justice
National Security Division
Washington. D.C. 20530
David Kendall, Esq.
Katherine Turner, Esq.
Williams Connolly LLP
725 Twelfth Street, N.W.
Washington, 20005 per NSD
b7C per NSD
Latham Watkins LLP
555 Eleventh Street, N.W.
Suite 1000
Washington, 20004
November 2015
Dear Mr. Kendall, Ms. Tumer, an~.__ __. per NSD
b7C per NSD reference letter October 2015, write provide clarification additional minor factual
error contained therein. The letter stated subparagraph and footnote page that all the email
content certain accounts, with the exception six (6) identified emails that may reside the accounts,
could transferred the New Server. These email the letter
~ndan_ accountontll tedinm
October 2015 letter the cor1-ect email address for the
___......
The account th........
For both
ema1
actually appeared twe not six times, iere ore 1en content these accounts was
transferred the New Server, all content was transferred with the exception these twelve (12) emails.
,.....__,
______ per NSD
b7C per NSD
Sincerely, per NSD
b7C per NSD
cc: Miguel Rodriguez, Esq.;
Karen Dunn, Esq.
HRC-2936
HRC-2937
HRC-2941
A.LL F3I nr.rORMAlIOl:l CONTAINED
HERE.I UNCLASSIFIED
CATE 12-06-201 J76J 18T80 NSICC WILMERHALF per FBI, NSD
b7C per FBI, NSD
r------------.
December 14, 2015
INational Security Division
Department Justiee
Washingtop, D,C. 201 530
!_________ Email: ... per NSD
b7C per NSD
___.I
..oeaj.__ ___,J you know, previously .Provided the FBI one Apple brand MaeBook Pro laptop computer,
serial Nwnber W89361H6644 (MacBook Pr9), ~done Apple brand MacBop).< Air laptop.
computer, Seri~Numl:>d
lcMacBook Air) (collectively, laptQpS), that
belonged Justin Cooper: provided botldaptops for the purposes ofDOJ/FBI.s
investigation .ofSecretary Clintons personal email accounts.
b7C agreed, the time theirdelivery t.}1e laptops contained Mr. Coapers emaiis and from
$ec.r etary Clintoti during her tenure Secretary State extracted from his email files. The
laptops also contained back:--UP copies Siackberty device,(or devices) that un9erstood
belonged sedretaiy Clinton. you know have since determined that baek-up copy Blackberry device th~t
remained each the MaeBook Pro and MacBook Air 9id not belong Secretar) CHnton:
Those n1es were .labeled follows:
.MacBook Pro; lterQ. filename BlackBerry Bold.9900.ipd
.MacBook Air, Item 5., filename ~Ja:ckBerry Bold ~900.ipd have discussed, that you (1) reriiove all :copies (digital and hard copy) these tWo
files fr9tn.anyU.S. government review cycle and that they not reviewed; (2) qestroy or.
otherwise ~ndet them inaccessible; and (3) send written ronfirtnation the same. Thank you
for your atten tioii this. matter.
Sincerelv vours
b7C
Wilmer Cutler Piclcering Hale: and Dorr L..I, 8,15 P~nnsylvania Avenue NW, Washington,
Beijing
Berlin
Boston
Brusseis
Denver
Frsnkfun
London
Los Angeles
New York
Odord 20006 Palo Alto Washington
HRC-2942
-....I
HRC-2943
ALL .FBI NFORU.ATION CONTAINED
REREIH U1~C~SIFIED
DAfE 2-0o -20 115 J76J l8T80 HSICG
U.S. Department Jus.tice
National Security Division
Wo:hlng/011, D.C. 20530
Wilmer Cutler Pickering Hale and Dorr LLP
b7C
1875 Pennsylvania Ave. N.W.
Washington, 20006
December J7, 2015 b7C letter confinns receipt the letter you sent December 15, 2015, identifying back-up copy Blackberry device present two computers produced the Federal Bureau oflnvestigation (FB[)
Mr. Cooper that did not meet our agreed-upon cri~eria for production. have discussed, the FBI will
mark the back-up files identified your letter such that, going forward, they will not reviewed any
image the materials that the possession of1the FBI. per NSD
b7C per NSD
HRC-2944
HRC-2945
U.S. Department .Justice
National Security Division
Wa1hingto11. D.C. 20530
January 2016 EMAIL
Beth Wilkinson, Esq.
Paul, Weiss, Rift.ind, Wharton Garrison LLP
2001 Street,
Washington, 20006-1047
...
......._,..,..-;-- -.....
....... ----: ~-- .----- --- ---
..... ---~ ----
____
.... ........
,_.
____
......... ~-: :--:-: :-:--
Dear Ms. Wilkinson: writing reiterate our previous request, which you have declined thus far, conduct
voluntary interviews with your clients Cheryl Mills, Heather Samuelson, and Jake Sullivan.
you are willing make these individuals available for voluntary interviews, please advise
soon possible.
Sincerelv per NSD
b7C per NSD
HRC-2946
----
HRC-2947
ALL fBI IlUORHAfION COHl.l>,.INEC
3Z~Hl um::L..ASSIFIED i::: 12-06 016 6J1 8T80 NSICG
WIIMERHALE
January 11, 2016
b7C
David Kenda14 Esq.
Katherine Turner, Esq.
Williams Connolly
725 Twelfth Street,
Washington, 20005
Dear Mr. Kendall and Ms. Turner: h~ve agreed, (1) today are giving you certain data (hereinafter retention data) from
Justin Coopers Apple MacBook Air laptop and Apple MacBook Pro laptop that were provided
the FBI September 24, 2015, and October 2015, respectively, and (2) you will retain the
retentio data until such time that you reach agreement with DOJ that the retention data
longer need retained.
DOJ may request that you provide files from the retention data part the DOJ/FBI security
inquiry Secretary Clintons personal email accounts. You have assumed responsibility for
responding _to any such future DOJ requests. have made clear DOJ that Mr. Cooper will
not interpose any objection DOJ possessing and reviewing files from the retention data that
are responsive such requests, and that Mr. Cooper has otherwise relinquished his ownership
and rights the ~tet?-tion data
Best ards,
b7C osures
cc:I per NSD
b7C per NSD
--~------ have enclosed our Jetter agreement with DOJ specifying what constitutes retention data.
Wilmer Cucler Pickering Hale and Dorr U.P, 1875
Beijing
Berlin
Boston
Bru$sels
Denver
Frencfurt
Pcnnsylvani~.b.!~!-:1.t Nw.
London
Los Angeles
Washington, 20006
NlW Yori:
Palo Alto
Wa;hington
HRC-2948
(.H
HRC-2949
...
Al.L FBI lFORMAlION CONTAINED
HERE UNCLAS SifIEO
CATE 12- 0~-201 J76J 18180 NSICG
U.S. Department Justice
National Security Division
Washington. D.C. 20S30
January 11, 2016 EMAIL _____.I
b7C
Wilmer Cutler Pickering Hale and Dorr LLP
1875 Pennsylvania Avenue, N.W.
Washington, 20006
Dear Mr. Zebley:
... .... ............---:- .-- -..- ---- -.... ----
___ ___________ __....
--- ---.. ---- ..._____ .._.,._________ ....................
........., _,,,,
,_,.
~.- agreed January 2016, WilmerHale (or other counsel, later agreed between
WilmerHale and DOJ) will maintain back-up copy all personal and business files present
the Mac Book Air (provided the FBI September 24, 2015) and, separately, the Mac Book
Pro (provided the FBI October 2015), whether not retained Mr. Cooper,
containing: (I) any communications that include an@clintonemail.com email address; (2) any
reference the establishment maintenance the@cHntonemail.com domain, including but
not limited references any server(s) which that email domain was maintained, stored,
operated; (3) any communications that include Bryan Pagliano; and (4) any communications that
include @state.gov email address dated December 2008, later (collectively the retention
data). Mr. Cooper.and WilmerHale (or other counsel, later agreed between WilmerHale and
DOJ) need not retain back-up images the MacBook Air and the MacBook Pro. discussed and agreed January 10, 2016, WilmerHale may transfer the retention data
other counsel the conditions that (1) you provide the name and contact infonnation the
other counsel, and (2) the other counsel must agree retain the retention data until such time
that he/she reaches agreement with DOJ that the retention data longer need retained. per NSD
b7C per NSD
HRC-2950
HRC-2951
HRC-2954
ALL fBI IHFCRH..C..TIDH COHlAINED
HEREIN UNCUSSIFIED
DATE .176 Jl8T8 NSICC
WlIMERHALE
b7C
January 11, 2016 per NSD
b7C per NSD
National Security Division
Department Justice
950 Pennsylvania Avenue,
Washington, D.C. 20530
ByEmail: ~I~~~~~~____.
Deail,__ ___, requested, Williams Connolly (points contact: David Kendall and Katherine Turner,
(202-434-5000)) maintaining all files that remained our possession from Justin Coopers
Apple MacBook Air laptop and Apple MacBook Pio laptop that meet the criteria set forth
your letter dated January 11, 2016 .(hereinafter retention data). Williams Connolly has
agreed retain the retention data until such time that reaches agreement with DOJ that the
retention data longer need retained. the owner the retention data, Williams Connolly has assumed responsibility for
responding future OOJ requests made for the retention data the DOJ/FBI security inquiry
Secretary Clintons personal email accounts. Mr. Cooper.will not interpose any objection
DOJ possessing and reviewing files that are responsive such requests, and has otherwise
relinquished his ownership and rights the retention data.
Best
b7C
Wilmer Cutler Pickering Hale and Dorr tu, 1875 Pennsylvania Avenue NW, Washingron, 200o6
Beijing
Berlin
Boston
Brussels
Derwer
Frenldurt
London
Los ArQele~
New York
Pao Alto
Wsshington
HRC-2955
HRC-2956
PAUL, WEISS. RIFKiND, WHARTON GARRISON LLP
.200.1 STR.EET.
TE.E.PHON
WASHINGTON. D.C
2000~-1047
12oi1 ?300
UNIT 380, OFF1C iOWER 1.JING
FORTUNE: PLA.ZA
NO, OONGSANHUAN Z.HONGLU
CHA.OYA.NG snuc:T
etCtJ ING 0002:0
DEO~L. RE.PUSL 0,. Cl-4 1114.A.
TEl.Et-t0N 486 5628 300
SETM A.. WILKINSON
2.TH FL..cioft. MONG KoNG CLue aurLotNG CHA.TER ROAC, Ce:NTRAL
HONC KONC
U.E O!E: 1202) 223-?34C>
F4CSIMIL.t
1202) 204 7395
rtLEPl-40NE. C8S2) 2.806 0300
A.L.O~R
CASTL H09l.t SiREET
LONOON EC2V 7JU. U.K. LEPHOE f.44 Z.OJ
.,:)~7
600
FUKOKU SEIM BUI L.ClNJ; UCH15AIWAICHO 29CH0ME
CHfYOOA. >AN
January 12, 2016
TELIEPMON l~SJ 3~9.,. lOt
TOAONTO DOMtNION C:~NTRe: K1NC SJAf:ET W!.ST, SUITt;: 3100
f.o. eox 2z.6
TOAONTO. ONTARIO MSlI. tJ3
TELEPMONE SOA1 0520
2001 STAEE.T.
WASHINGTON, 2.0006>1047 LEPHONE l202> 2.l.1300 VIA Electronic Mail
500 OELAWA11:E AVENUE. SUlff.:200
POST OF~JCE eox 32.
WILMIHGTO~, 19899 0032
iELEPMONE C302.) 6SS-4410 per NSD
b7C per NSD
Counterintelligence and Export Control Section
National Security Division
U.S. Department Justice per NSD
Dew!.__ ____,
b7C per NSD writing behalf Cheryl Mills and Heather Samuelson response your
January 2016 request that they submit volun~ interview.
Ms. Mills and Ms. Samuelson serve attorneys for Hillary Clinton. Accordingly, they
each are bound ethical rules and obligations not discuss privileged confidential
information within the scope their legal representation former Secretary Clinton.
See D.C. Rule Professional Conduct 1.6. therefore are not position consent voluntary interview either Ms. Mills Ms. Samuelson.
Sincerely,
--g~
4/_.4_
//.%-g
Beth Wilkinson
HRC-2957
HRC-2958
PAUL, WElss: RIFKIND, WHARTON GARRISON LLP
2001 STREET,
T~~EPHONE
WASHINGTON, 20006 1047
C2:02:J 2:23-7300
UNli 3601. OFFLCE TOWEii! A., BE.tJtNG
Ft>RTUNE Pl..AZA
NO. OONGS ..NHUAN ZHONGl.U
CHA.OYANG DISTRICr JJINC 0002.0
Pe:CPl.($ RE.PUBl.IC CHtrU.
TEt..EPHONE t8f.-1 S82-6300
SETH ...
wn.. KINSON
i2TH PL00R. HONG 1(0NG C:t.UB BUl~DING
:u. CH4TE.R RQAD. CENTFtAt.
MONC KON
TELE:lHONE 1202) ZZ3 7340
A=SlMl.E
TE-.EPHONE t852) 6..0300
(:!02) 204 7395
A.LC C:ASTl.E
E.-M,IUL~ NOBL STRE.
bwHlunsonOpa1Jlwe 1s:s.com
LONDON E.C2V 7JU. U.K.
lE!..EPHONE C46 ~OJ 7::167 160C
u.as
A.V NUE RICAS
NEW YORK, NEW YORK ()011 604
lEL PH0NE 3.,3 >100
J.Q. 80X Z26
.TORONTO. ONTARIO M5t(
TE.l.EPHON SJ ~04 0S20
VIA Electronic Mail
$00 O:l..AWARE: NUE, SUJTE 200
POSi FfICE 80)(
Wl1.M~1GTON, 19899-00$2 LE.FHONE. 1302.) c5SS per NSD
b7C per NSD
Countennteibgence and Export Control Section
National Security Division
u.s. Department Justice
De~..__ ___. per NSD
b7C per NSD writing behalf Jake Sullivan response your Ja.n~ 2016 request that submit voluntary interview. light our discussions with you dat.e about the parameterS such interview,
cannot recommend client that this time. you are able clarify and
define the scope and duration the interview, are certainly willing further discuss
your request.
Sincerely,
]?~ L./__:L._//Tf;J
Beth Wilkinson
HRC-2959
HRC-2960_/
U.S. Department Justice
National Security Division
Wasllington. D.C. 10530
January 14, 2016 EMAIL
.............
Beth Wilkinson, Esq Paul, Weiss, Rifkind, Wharton Garrison LLP
2001 Street, _20006-1,._..._
04....... .......... ...._.-...... ..........- ....._...___,,__,__,,.._ .........
..Washington,
___
_____
-.. ___ _______
.................
,_.........
..,.
Dear Ms. Wilkinson: writing response your letter January 12, 2016 which you indicated your
willingness further discuss providing your client, Jake Sullivan, for voluntary interview
the government was able clarify and define the scope and duration such interview. effort provide such clarification, can inform you that the subject areas covered
during the interview would be: Mr. Sullivans knowledge and understanding the former
Secretarys use private email system; his knowledge email communications regarding
sensitive classified information sent and/or forwarded the fonner Secretary; and his
knowledge the handling and transmission classified information during his tenure the
State Department. Although only estimate, anticipate that interview Mr.
Sullivan would require approximately six hours. you would like discuss making Mr. Sullivan available for voluntary interview, please
advise soon possible.
Sincerelv. per NSD
b7C per NSD
HRC-2961
HRC-2962
/~-
HRC-2965
~.LL FBI INf.ORMATION CONlAIHED
HEREIN ffi-lCLASSIFIEC
CATE 12-06-2016 J76J18T80 NSICG
WILMERHALE
b7C
February 22, 2016
.........
Nabona... Sec......
urtfyD~1vision
Department Justice
Washingt~n, D.C. 20530 per NSD
b7C per NSD
:rw1j you know, pursuailtto written agreements with you, Justin Cooper vollintarily provided the
FBI with two laptop computers and certain other media, and Williams Connolly retaining
certain -other data that was previously Mr~ Coopers possession. write now describe the
status hardware used .to process data connection with those productions and Williams
Connolly retention data.
Certain. ata was perlodically saved external drives order search for, isolate, and/or save
data for production retention. Kroll Inc. (Kroll) has degaussed and shredded (using thirdparty vendor called Shred Patsippany, New Jersey) all: such extei:nal drives, except
follows: (-1) drivescontaini;ng,rete~tiori data held Wrllialils Connolly; (2) seven drives .that
were wiped and remain WilmethHale possession pending direction from you fmal
disposition (Note, Kroll also ctegaus~ed _and shredded (u!ii~g the same vendor) the drive known the Seagate drive.)
Certain data was proce~ed using s~dalone computers. the. ~onClusi9n our work this
matter; alFCfata wa8wiped from those drives, tl;:e drives were reinov. from t:qeir ~~chines; and
the drives were securely stored .periding dire~tio_nJrom you final disposition. Wilm~Hale
holding. tWo
and Kroll holding the remaining nine
drives. 6fthose dHve5,,
Pleas~ let know you have any questions.
b7C
Wilmer Cutler Pickering Hal~ and Dorr LLP, 1875 Pennsylvania Avenue NW, Wa~hingcon, 20006
Beijing
Berlin
Boston
Brussels
~envar
Franl::turt
London
Los Angeles
New York
Palo Alto
Washingion
HRC-2966
HRC-2967
HRC-2969
HRC-2971
~Ui
CLF-SSIFIED BY: NSICC
EASON:
1_4
D:E:C~.SSI!i
.i76.J18TBO
(C}
OH: 1:2-31-2041
DATE: 12-01-201
~-LL
rm:oru.LATION CONTAINED
HEREIN mrCLll,.SSUIED EXCEPf
hHE~ s:ra~~1 OTHERWISE
FD-)40~.R_ev.4, 11-01
1-_Jo-z.
File Number -..............:....,....----:------___;---
b7E
W./-.-.
Flcld.Ottlec
Atqulrlog
Evidence
.... rlal ofOrlglnat,nc meat ZDI6
Da.te tletelnd
F~om --1-#~e~cnr~~/J11..;.:rlJ!~ler:: ..- -.:-;::-~ ~(NameofConlrib~!orllnlcrviewee)
/ftJ/) J1// ffPlf /i/t) J,1e
T.!.....,....._ ___,.._
JJ_~~-~l_______ _m_ rr--~---------,.-~
z___ Returned
b7C
~No
Yes
ReceiptOiven Ye~
Grand Jmy Material Disseminate Only suant Rule (e)
:)J Federal Rules Criminal
Piocedure.
:.J
~No Yes.
..1
Federal-Taxpayeflnf~rmation (FTI)
o:. Y~s
Rererence:
c:rNo.
]DZ
----~-~-------....:....---------~
(Communicalion Enclosing Material)
~esmptlon: ... Original no~e intervi~ fo1tJ.e1i.i !e/ler{J;
~..=
HRC-2013
.J-
FD-S97 (Rev. 4-13-201
UNITED STA TES DEPARTMENT JUSTICE
FEDERAL BUREAU INVESTIGATION
Receipt for Property
ALL n-iroRHAnDH coNlAINED
HEREIN UNCLASSifIEC
DATE 12-01-20145 :3Y
Case ID: (date)
Ji~ 1818
NSICC
Dbfio/20Jb
item (s) listed below were:
Collected/Seized Received From
RetumedTo
Released
(Name)
(City)
Description ofltem (s):
ani
b7C
~A(
b7C
Receind By:
HRC-2014
ALL IBI
~REIH
IHF~U..TIOH CONl.UNE:i::: T.mCL..Z.SSIFIED
DATE 12-01-2016 J76Jl8T80 HSICG
WILKINSON
1900 STREET,
SUITE800
WASHINGTON, 20036
WALSH
ESKOVITZ
WASHINGTON, D.C.
WWW.WILKDISONWALSH.COM LIMflED LIABIUTY PARnmRSHIP
LOS ANGELES
June 10, 2016
VIA Electronic Mall Per NSC
b7C Per NSC
U.S. Department Justice
National Security Division
950 Pennsylvania Avenue
Washington, 20530 Per NSC
b7C Per NSC
Deat...._ ___.
This letter provides consent, connection with the Department Justices investigation
into the use private server former Secretary State Hillary Clinton, search the Lenovo
Yoga Pro (Serial No.I
j(hereinafter the Device) belonging client, Heather
Samuelson, who Secretary Clintons attorney, pursuant the terms described below. The
Device being provided the Federal Bureau Investigation (FBI) solely for the purposes
this Department Justice investigation, and for the Departments use connection with the
investigation. vol~ntarily providing the Device, Heather Samuelson. does not relinquish
ownership control over the Device,. except for the FBIs limited investigative use specified
this agreement. The FBI does not assert custody and control over the Device its contents for
any other purpose, including any requests made pursuant the Freedom Information Act,
552.
b7C
u.s.c. You have confirmed that the sole purposes the search are: (1) search for any .pst
files, .ost files, compressed files containing .pst .ost files, that were created
Platte River Networks (PRN), after June 2014 and before February 2015,
response requests for former Secretary Clintons e-mail from her tenure Secretary State, (hereinafter the PRN Files), including intact but deleted form; (2)
attempt identify any e-mails from, remnants of, the PRN Files that could
potentially present the Device; (3) identify any e-mails resident the Device
sent received from the following e-mail accounts: hdr22@clintonemail.com;
hrodl 7@clintonemail.com;
hrlS@att.blackberry.net;
and
hrlS@mycingular.blackberry.net (hereinafter the Relevant Accounts), for the period
-1-
HRC-2015 January 21, 2009 through February 2013 (hereinafter the Relevant Period); and
(4) conduct forensic analysis the device determine whether the Device was
subject intrusions otherwise compromised. You have confirmed that Phase One your search will proceed follows: Your Tec~nical Team (to include FBI technical personnel only), will review the
allocated space (i.e., active files) the Device search only for the PRN Files.
Neither the Technical Team nor anyone else will review during Phase One the
content any .pst files, .ost flies, compressed files containing .pst .ost
files that can identified created before June 2014 after January 31,
2015. The Technical Team will review any files identified pursuant subsection 2(a)
above determine whether they contain e-mails sent received from the
Relevant Accounts during the Relevant Period. The files that not include
such e-mails will not subject any further review anyone for any
purpose, unless they meet the criteria identified Phase Two for purposes. intrusion analysis, both set forth below. The PRN Files that include e-mails sent to, received by, the Relevant Accounts
during the Relevant Period will provided Filter Team, which will
limited two attorneys, one FBI agent, and one FBI analyst: none whom are
members the investigative team.
.d. The Filter Team will review the contents any file they receive from the
process described subsection 2(c) identify and remove: (1) any privileged
material; and (2) any material they can determine not e-mail sent to,
received by, the Relevant Accounts during the Relevant Period. You will notify the results Phase One the search before proceeding Phase Two the search. You will proceed Phase Two your search only the event that the PRN
File containing approximately 62,000 emails from the former Secretarys
clintonemail.com account not identified the allocated space the Device.
You have confirmed that Phase Two your search will proceed follows: The Technical Team will search the Device, including the Devices unallocated
space, identify any e-mails, fragments e-mails, files, fragments files:
(1) that include e-mails sent to, received by, the e-mail addresses
hdr22@clintonemail.com and.hrod17@clintonemail.com during the Relevant
Period for which the date that the e-mail was sent received cannot
determined; and (2) that include e-mails sent to, received by, the e-mail
addresses hrlS@att.blackberry.net and hrlS@mycingular.blackberry.net that
Should there extremely large volume materials loc:ated the Devic:e and provided the Filter
Team, understand that the Department Justic:e reserves the right expand the number Fiiter Team members order avoid significant delay the review proc:ess. such expansion were necessary, the Department
Justice has agreed inform this change.
HRC-2016
can clearly identified having been sent to, received by, those accounts
during the Relevant Period.2 Aside from the intrusion analysis described below,
neither the Technical Team nor anyone else will search review the Device for
any other material for any other purpose. The Technical Team will review the results the foregoing searches for the
purpose removing any file data that not e-mail fragment
e-mail sent to, received by, the Relevant Accounts dur.ing the Relevant
Period. Aside from the intrusion analysis described below, such material will
not further reviewed the Technical Team anyone else for any other
purpose. The remaining results the search wili provided the Filter Team, which
will review those results identify and remove: (1) any privileged material; (2)
any material that, upon further review, determined not e-mail sent
to, received by, th~ Relevant Accounts during the Relevant Period; and (3)
any material that, upon further review, d~termined not work-related
e-mail sent to, received by, the e-mail account hrod17@clintonemail.com.
Aside from the intrusion analysis described below, such material will not
further reviewed anyone for any purpose. You have confirmed that you will also conduct forensic analysis the Device
determine whether the Device was subject intrusions otherwise compromised,
without reviewing the content any user created files, including .doc, .xis, .pdf, .jpeg, e-mails not captured the aforementioned searches. soon the investigation completed, and the extent consistent with all FBI policies
and applicable laws, including the Federal Records Act, the FBI will dispose the Device and any
printed electronic materials resulting from your search. part this letter shall read
imply the consent retrieve from the Device any data other than the data described above
conduct any search review any manner other than described above.
Sincerely,
Beth Wilkinson large volume e-malls from the hrlS@att.blackberry.net and hrlS@myclngular.blackberry.net accounts for which send receive date cannot clearly determined are located. understand that the Department Justice reserves the right discuss further with counsel any additional search efforts that could undertaken
assess whether such e-mails were sent received during the Relevant Period. The Department Justice will not
undertake any such search without prior discussions with counsel and agreement with counsel the scope of.
and procedures used during, that additional search.
-3-
HRC-2017
ALL !BI mroRMATIOH COHTA.IHED
HEREIN TJNCLASSIF.IEC
CAlE 12-01-201 J76J18T80 NSICG
WILKINSON
1900 SlllET,
WALSH
SUITii BOO
WASHINGTON, ~0036
ESKOVITZ
WWW.WlLKJNSONWALSH.COM LIMITED LIABILITY PARTNERSHIP
WASHINGTON, O.C. LOS ANGELES
June 10, 2016
VIA Electronic Mail Per NSC
b7C Per NSC
U.S. Department Justice
National Security Division
950 Pennsylvania Avenue
Washington, 20530
Dea~.__ Per NSC
b7C Per NSC
This letter provides consent, connection with the Department Justices investigation
into the use private server former Secretary State Hillary Clinton, search the Dell
Latitude E6330 (Serial Nol
(hereinafter the Device) belonging client, Cheryl
Mills, who Secretary Clintons attorney, pursuant the terms described below. The Device
being provided the Federal Bureau Investigation (FBI) solely for the purposes this
Department Justice investigation, and for the Departments use connection with the
investigation. voluntarily providing the De.vice, Cheryl Mills does not relinquish ownership
control over the Device, except for the FBls limited investigative use specified this
agreement. The FBI does not assert custody and control over the Device its contents for anv
other purpose, including any requests made pursuant the Freedom Information Act, U.S.C.
552.
b7C You have confirmed that the sole purposes the search are: (1) search for any .pst
files, .ost files, compressed files containing ,pstor .ost files, that were created
Platte River Networks (PRN), after June 2014 and before February 201S,
response requests for former Secretary Clintons e-mail from her tenure secretary State, (hereinafter the PRN Files), including intact but deleted form; (2)
attempt identify any e-mails from, remnants of, the PRN Files that could
potentially present the Device; (3) identify any e-mails resident the Device
sent received from the following e-mail accounts: hdr22@clintonemail.com;
hrod17@clintonemail.com;
hrlS@att.blackberry.net;
and
hrlS@mycingular.blackberry.net (hereinafter the Relevant Accounts), for the period
-1-
HRC-6462 January 21, 2009 through February 2013 (her~inafter the Relevant Period); and
(4) conduct forensic analysis the device determine whether the Device was
subject intrusions otherwise compromised. You have confirmed that Phase One your search will proceed follows: Your Technical Team (to include FBI technical personnel only), will review the
allocated space (i.e., active files) the Device search only for the PRN Files.
Neither the Technical Team nor anyone else will review during Phase One the
content any .pst files, .ost files, compressed files containing .pst .ost
flies that c~n identified created before June 2014 after January 31,
2015. The Technical Team will review any files identified pursuant subsection 2(a)
above determine whether they contain e-mails sent received from the
Relevant Accounts during the Relevant Period. The files that not include
such e-mails will not subject any further review anyone for any
purpose, unless they meet the criteria identified Phase Two for purposes intrusion analysis, both set forth below. The PRN Files that include e-mails sent to, received by, the Relevant Accounts
during the Relevant Period will provided Filter Team, which will mited two attorneys, one FBI agent, and one FBI analyst, none whom are
members the investigative team. The Filter Team will review the contents any file they receive from the
process described subsection 2(c) identify and remove: (1) any privileged
material; and (2) any material they can determine not e-mail sent to,
received by, the Relevant Accounts during the Relevant Period. You wi!I notify the results Phase One the search before proceeding Phase Two the search. You will proceed Phase Two your search only the event that the PRN
File containing approximately 62,000 emails from the former Secretarys
clintonemail.com account not identified the allocated space the Device.
You have confirmed that Phase Two your search will proceed follows: The Technical Team will search the Device, including the Devices unallocated
space, identify any e-mails, fragments e-mails, files, fragments files:
(1) that include e-mails sent to, received by, the e-mail addresses
hdr22@clintonemail.com and hrod17@clintonemail.com during the Relevant
Period for which the date that the e-mail was sent received cannot
determined; and (2) that include e-mails sent to, received by, the e-mail
addresses hrlS@att.blackberry.net and hrlS@mycingular.blackberry.net that
Should there extremely large volume materials located the Device and provided the Filter
Team, understand that the Department Justice reserves the rig expand the number Filter Team members order avoid significant delay the review process. such expansion were necessary, the Department
Justice has ag~eed inform this change.
-2-
HRC-6463
can clearly identified having been sent to, received by, those accounts
during the Relevant Period.2 Aside from the intrusion analysis described below,
neither the Technical ream nor anyone else will search review the Device for
any other material for any other purpose. The Tec~nical Team will review the results the foregoing searches for the
purpose removing any file data that not e-mail fragment ari
e-mail sent to, received by, the Relevant Accounts during the Relevant
Period. Aside from the intrusion analysis described below, such material will
not further reviewed the Technical Team anyone else for any other
purpose. The remaining results the search will provided the Filter Team, which
will review those results identify and remove: (1) any privileged material; (2)
any material that, upon further review, determined not e-mail sent
to, received by, the Relevant Accounts during the Relevant Period; and (3)
any material that, upon further review, determined not work-related
e-mail sent to, received by, the e-mail account hrod17@clintonemail.com.
Aside from the intrusion analysis described below, such material will not
further reviewed anyone for any purpose. You have confirmed that you will also conduct forensic analysis the Device
determine whether the Device was subject intrusions otherwise compromised,
without reviewing the content any user created files, including .doc, .xis, .pdf, .jpeg, e-mails not captured the aforementioned searches. soon the investigation completed, and the extent consistent with all FBI policies
and applicable laws, including the Federal Records Act, the FBI will dispose the Device and any
printed electronic materials resulting from your search. part this letter shall read
imply the consent retrieve from the Device any data other than the data described above
conduct any search review any manner other than described above.
Sincerely,
Beth Wilkinson large volume e-mails from the hrlS@att. blackberry.net and hrlS@mycingular.blackberry. net accounts for which send receive date cannot clearly determined are located, understand that the Department Justice reserves the right discuss further with counsel any additional search efforts that could undertaken
assess whether such e-mails were sent received during the Relevant Period. The Department Justice will not
undertake any such search without prior discussions with counsel and agreement with counsel the scope of,
and procedures used during, that addltlonal search.
-3-
HRC-6464