US. Department of Justice Office of the Inspector General REPORT OF FORENSIC EXAMINATION SUBMITTER DATE SUBMITTED CASE NUMBER Special Agent New York Field Office August 13, 2019 2019-010614 OFFICE CONDUCTING EXAMINATION CYBER II) SUBJECT(S) Cyber Investigations Office 0384 Correctional Officer Michael Thomas, Federal Bureau of Prisons, Metropolitan Correctional Center, New York, NY DIGITAL DEVICE(S) EXAMINED 1. Samsung Galaxy S9 IMEI: 355028093551622 (Device 1— BOP issued to 2. Samsung Galaxy S9 IMEI: 355028093486118 (Device 2 — BOP issued to 3. Samsung Galaxy S9 IMEI: 355028093495721 (Device 3 — BOP issued to Synopsis On August 22, 2019, U.S. Department of Justice Office of the Inspector General (OIG), Cyber Investi ations Office (CYBER) Special Agent (SA) and Assistant Special Agent in Charge received and manually reviewed Devices 1-3 at the Federal Bureau of Prisons (BOP) Metropolitan Correctional enter, located in New York, NY. M and a were assisted by OIG Washington Field Office SA and OIG Fraud Detection Office SA . Devices 1-3 were BOP issued mobile devices which were provided to CYBER in order to determine whether or not they contained any unauthorized communication related to the suicide of Jeffery Epstein. OIG New York Field Office SA was investigating alleged BOP employee misconduct related to Epstein's suicide, and sought the review of Devices 1-3 out of an abundance of caution. There were no allegations of misconduct against the BOP employees to whom Devices 1-3 had been issued. Accordingly, CYBER personnel elected to perform only manual reviews of the phones to limit the disruption of service and to minimize the intrusiveness of the review. In order to fully analyze the BOP devices with forensic tools, CYBER would have had to have manipulated settings on each phone which would have resulted in a loss of data and the need to wipe and reissue each one. The manual review did not limit the data CYBER would have b