SUBPOENAS | wizard

SUBPOENAS. Five Subpoenas were sent for (DIY) Civil Case CC 2016#### to identify a crypto hacker. Intent was to use the Discovery process to Investigate and identify the hacker, and then convert to a Criminal Case for Prosecution for felony theft of identity and property. The response to the Subpoenas is summarized below with #### detail kept private.

* Google (Sacramento CA): Service provider for hacker's email ryry####@gmail.com
> Returned was a 2nd email address pooky####@yahoo.com and US phone number 1816343####.

> Reimbursment request was $125, not yet paid and not yet added to legal costs for Investigation.

>> Comment: Subpoena request for name and address of user of ryry####@gmail.com was NOT provided.

* Time Warner Cable (Herndon VA): Internet Service Provider (ISP) for hacker's IP address 108.167####

> Records no longer available since their record retention period for IP addresses is 180 days.

> No reimbursement request.

>> Comment: Record retention period is TOO SHORT. Laws need to be updated for retention of at least 3 years.

* Comcast IP Phone LLC (Philadelphia PA): ISP for hacker's 2nd IP address 50.178####

> Records no longer available since their record retention period for IP addresses is 180 days.

> No reimbursement request.

>> Comment: Record retention period is TOO SHORT. Laws need to be update for retention of at least 3 years.

* Global Crossing Local Services Inc (statutory agent in Phoenix AZ) now owned by Level 3 Communications (Broomfield CO): Service provider for hacker's phone 1816343#### (from Google Subpoena)

> Level 3 claimed they no longer had a record of user for phone number 1816343####

> Reimbursment request was $5, paid and included in legal costs for investigation.

>> Comment: When companies merge, laws need to be updated so records retained for at least 3 years.

* Yahoo Inc (Sunnyvale CA): Provider for hacker's 2nd email pooky####@yahoo.com (from Google Subpoena).

> Yahoo returned a CD with relevant records. First CD was broken and not readable. Second CD was readable and contained 2 files. The first file had data from Oct-2005 thru Feb-2016. The 2nd file had data from Sept-2015 thru Jun-2016. This data was compared with data from hack and what was received from Google Subpoena.

> Reimbursment request was $125, not yet paid and not yet added to legal costs for investigation.

>> Comment: Data showed same IP from hack in May-2015 and current email usage.