US. Department of Justice Office of the Inspector General REPORT OF FORENSIC EXAMINATION SUBMITTER Special Agent , New York Field Office OFFICE CONDUCTING EXAMINATION Cyber Investigations Office CYBER ID 0384 DATE SUBMITTED August 13, 2019 CASE NUMBER 2019-010614 SUBJECT(S) Correctional Officer Michael Thomas, Federal Bureau of Prisons, Metropolitan Correctional Center, New York, NY DIGITAL DEVICE(S) EXAMINED 1. Samsung Galaxy S9 IMEI: (Device 1 — BOP issued to 2. Samsung Galaxy S9 IMEI: (Device 2 — BOP issued to 3. Samsung Galaxy S9 IMEI: (Device 3 — BOP issued to Synopsis On August 22, 2019, U.S. Department of Justice Office of the Inspector General (OIG), C ber Investi ations Office (CYBER) Special Agent (SA) and Assistant Special Agent in Charge received and manually reviewed Devices 1-3 at the Federal Bureau of Prisons (BOP) Metropolitan Correctional Center, located in New York, NY. MI and were assisted by OIG Washington Field Office SA Gabriel Ortiz and OIG Fraud Detection Office SA . Devices 1-3 were BOP issued mobile devices which were provided to CYBER in order to determine whether or not they contained any unauthorized communication related to the suicide ofJeffery Epstein. OIG New York Field Office SA was investigating alleged BOP employee misconduct related to Epstein's suicide, and sought the review of Devices 1-3 out of an abundance of caution. There were no allegations of misconduct against the BOP employees to whom Devices 1-3 had been issued. Accordingly, CYBER personnel elected to perform only manual reviews of the phones to limit the disruption of service and to minimize the intrusiveness of the review. In order to fully analyze the BOP devices with forensic tools, CYBER would have had to have manipulated settings on each phone which would have resulted in a loss of data and the need to wipe and reissue each one. The manual review did not limit the data CYBER would have been able to recover using forensi