From: (USANYS)"
To: (USANYS)"

Subject: RE: Maxwell
Date: Mon, 07 Jun 2021 16:51:03+0000
Inline-Images: image003.jpg; image002.jpg

Excellent. Thanks for your careful handling.

On Jun 7, 2021, at 12:43 PM, (USANYS) wrote:

From: (USAEO)
Sent: Monday, June 7, 2021 12:11 PM
To: |(USANYS)< |(USAEO) <|
Subject: RE: Maxwell

Thanks

CISSP, C|EH
Assistant Director & Chief Information Security Officer
Department of Justice
Executive Office for the United States Attorneys'
Office of the Chief Information Officer, Cybersecurity Services Group

<image002.jpg>

From: |(USANYS) <||
Sent: Monday, June 7, 2021 11:49 AM
To: (USAEO) <
Cc: |(USAEO) <
Subject: RE: Maxwell

The issue as it relates to conduct of is closed.

As to he is leaving CACI's employ this Friday, but it has nothing to do with the transfer of documents. I think
we can let it die on Friday.

Thanks,

EFTA00030102

From: |(USAEO)
Sent: Monday, June 7, 2021 10:56 AM
To: (USANYS)<
Cc: |(USAEO) <
Subject: RE: Maxwell

Good morning|

GCO's records show that this matter, as it applies to | was already addressed by GCO back on April 19. Those records show that the USAO took necessary steps to mitigate the action and did not wish to proceed with any disciplinary actions given the circumstances. Would you like to discuss the circumstances regarding the new incident with employee who I understand is also a contractor?

Thank you,

Assistant United States Attorney
General Counsel's Office (On Detail)
Executive Office for U.S. Attorneys

From: (USAEO)<
Sent: Friday, June 4, 2021 12:45 PM
To: SOC-EOUSA < (USANYS)<
Cc: |(USAEO) (USAEO) <
(USAEO)< (USAEO)<
(USAEO)
Subject: RE: Maxwell
Importance: High

SOC,

Please complete the following actions with the district:

	- I've spoken with | this is not a classified spill. The data label is based on a protective order issued by the court.

	- The Information Disclosure will need to be completed as there was a substantial amount of PII included in the upload.

• Validate the information was received by the intended recipient.

• Insure the data has been removed from and



I believe the district did speak to the individual on this, not sure if you have any further questions. A summary of the incident is below for your reference.

- On April 13th

- uploaded 5.5 GB of data to

	- Analysts determined the content of these files were discovery for the Jeffrey Epstein case against Ghislaine Maxwell. It contained the under-age victim names among other PII.

• The CISO notification was sent May 26th and the SOC notification with the Information Disclosure form sent on May 28th

EFTA00030103

• Contractor stated they chose to use the Sharefile.com instead of USAfx.

. In the last 24 hours, another user from the same district, uploaded less than a GB of data to another law firm that uses sharefile.com. This user is: in NYS.

R/G

CISSP, C|EH Assistant Director & Chief Information Security Officer Department of Justice Executive Office for the United States Attorneys' Office of the Chief Information Officer, Cybersecurity Services Group

<image003.jpg>

From: |(USANYS)<
Sent: Thursday, June 3, 2021 1:59 PM
To: |(USAEO) <
Subject: FW: Maxwell

From: |(USANYS)<
Sent: Thursday, June 3, 2021 1:49 PM
To: (USANYS)<
Cc: (USANYS)<
Subject: Maxwell

Attached is the Court ordered protective order, which requires us to mark things as confidential (paragraph 7).

The production



uploaded was non-testifying witness 3500. An example page is attached, and includes our

"confidential" marking that we applied pursuant to the protective order. Given that this information clearly contains PII

for victims, the designation is necessary. We'd also ask that this page not be widely disseminated outside of those at

EOUSA who already have access.

Thank you,

Chief, Public Corruption Unit
U.S. Attorney's Office
Southern District of New York

EFTA00030104

THE EXECUTIVE OFFICE
For
UNITED STATES ATTORNEYS
Cybersecurity Staff
THE EXECUTIVE OFFICE
For
UNITED STATES ATTORNEYS
Cybersecurity Staff

EFTA00030105