EFTA00029020.pdf
166 KB
Extraction Summary
6
People
7
Organizations
2
Locations
4
Events
2
Relationships
5
Quotes
Document Information
Type:
Email chain / incident report
File Size:
166 KB
Summary
This document is an internal DOJ/US Attorney's Office email chain from June 2021 discussing a data security incident ('spill') related to the Ghislaine Maxwell prosecution. A contractor (employed by CACI) improperly uploaded 5.5 GB of discovery material, which included under-age victim names and other PII from the Jeffrey Epstein case, to Sharefile.com instead of the secure USAfx system. The correspondence confirms the data contained sensitive victim information, discusses the lack of disciplinary action for one individual, and notes that a involved contractor was leaving CACI for unrelated reasons.
People (6)
| Name | Role | Context |
|---|---|---|
| Ghislaine Maxwell | Defendant |
Subject of the case files involved in the data spill.
|
| Jeffrey Epstein | Deceased Subject |
Case files related to him were part of the data spill.
|
| Redacted Sender/Recipient | Assistant Director & Chief Information Security Officer |
DOJ / EOUSA; discussing the security incident.
|
| Redacted Sender/Recipient | Assistant United States Attorney |
General Counsel's Office (On Detail), EOUSA.
|
| Redacted Sender/Recipient | Chief, Public Corruption Unit |
SDNY; confirming the confidential nature of the leaked files.
|
| Redacted Individual | Contractor |
Leaving CACI's employ; involved in document transfer discussions.
|
Timeline (4 events)
2021-04-13
Individual uploaded 5.5 GB of data to Sharefile.com instead of USAfx.
Unknown
Redacted Contractor
Locations (2)
| Location | Context |
|---|---|
Relationships (2)
Files described as 'discovery for the Jeffrey Epstein case against Ghislaine Maxwell'
Redacted Contractor
→
Employment
→
CACI
Email states 'he is leaving CACI's employ this Friday'
Key Quotes (5)
"On April 13th, [Redacted] uploaded 5.5 GB of data to [Redacted]"Source
EFTA00029020.pdf
Quote #1
"Analysts determined the content of these files were discovery for the Jeffrey Epstein case against Ghislaine Maxwell. It contained the under-age victim names among other PII."Source
EFTA00029020.pdf
Quote #2
"Contractor stated they chose to use the Sharefile.com instead of USAfx."Source
EFTA00029020.pdf
Quote #3
"As to [Redacted], he is leaving CACI’s employ this Friday, but it has nothing to do with the transfer of documents."Source
EFTA00029020.pdf
Quote #4
"The production [Redacted] uploaded was non-testifying witness 3500... Given that this information clearly contains PII for victims, the designation is necessary."Source
EFTA00029020.pdf
Quote #5
Full Extracted Text
Complete text extracted from the document (4,947 characters)
From: [Redacted] (USANYS)" <[Redacted]>
To: [Redacted] (USANYS)" <[Redacted]>
Subject: RE: Maxwell
Date: Mon, 07 Jun 2021 16:51:03 +0000
Inline-Images: image003.jpg; image002.jpg
To: [Redacted] (USANYS)" <[Redacted]>
Subject: RE: Maxwell
Date: Mon, 07 Jun 2021 16:51:03 +0000
Inline-Images: image003.jpg; image002.jpg
Excellent. Thanks for your careful handling.
On Jun 7, 2021, at 12:43 PM, [Redacted] (USANYS) <[Redacted]> wrote:
From: [Redacted] (USAEO) <[Redacted]>
Sent: Monday, June 7, 2021 12:11 PM
To: [Redacted] (USANYS) <[Redacted]>; [Redacted] (USAEO) <[Redacted]>
Subject: RE: Maxwell
Sent: Monday, June 7, 2021 12:11 PM
To: [Redacted] (USANYS) <[Redacted]>; [Redacted] (USAEO) <[Redacted]>
Subject: RE: Maxwell
Thanks [Redacted].
[Redacted] CISSP, C|EH
Assistant Director & Chief Information Security Officer
Department of Justice
Executive Office for the United States Attorneys’
Office of the Chief Information Officer, Cybersecurity Services Group
Assistant Director & Chief Information Security Officer
Department of Justice
Executive Office for the United States Attorneys’
Office of the Chief Information Officer, Cybersecurity Services Group
From: [Redacted] (USANYS) <[Redacted]>
Sent: Monday, June 7, 2021 11:49 AM
To: [Redacted] (USAEO) <[Redacted]>
Cc: [Redacted] (USAEO) <[Redacted]>
Subject: RE: Maxwell
Sent: Monday, June 7, 2021 11:49 AM
To: [Redacted] (USAEO) <[Redacted]>
Cc: [Redacted] (USAEO) <[Redacted]>
Subject: RE: Maxwell
The issue as it relates to conduct of [Redacted] is closed.
As to [Redacted], he is leaving CACI’s employ this Friday, but it has nothing to do with the transfer of documents. I think we can let it die on Friday.
Thanks,
[Redacted]
(USAEO)
EFTA00029020
(USAEO)
EFTA00029020
[Redacted]
From: [Redacted] (USAEO) <[Redacted]>
Sent: Monday, June 7, 2021 10:56 AM
To: [Redacted] (USANYS) <[Redacted]>
Cc: [Redacted] (USAEO) <[Redacted]>
Subject: RE: Maxwell
From: [Redacted] (USAEO) <[Redacted]>
Sent: Monday, June 7, 2021 10:56 AM
To: [Redacted] (USANYS) <[Redacted]>
Cc: [Redacted] (USAEO) <[Redacted]>
Subject: RE: Maxwell
Good morning [Redacted],
GCO's records show that this matter, as it applies to [Redacted] was already addressed by GCO back on April 19.
Those records show that the USAO took necessary steps to mitigate the action and did not wish to proceed with any disciplinary actions given the circumstances. Would you like to discuss the circumstances regarding the new incident with employee [Redacted], who I understand is also a contractor?
Those records show that the USAO took necessary steps to mitigate the action and did not wish to proceed with any disciplinary actions given the circumstances. Would you like to discuss the circumstances regarding the new incident with employee [Redacted], who I understand is also a contractor?
Thank you,
[Redacted]
[Redacted]
Assistant United States Attorney
General Counsel's Office (On Detail)
Executive Office for U.S. Attorneys
[Redacted]
[Redacted]
[Redacted]
General Counsel's Office (On Detail)
Executive Office for U.S. Attorneys
[Redacted]
[Redacted]
[Redacted]
From: [Redacted] (USAEO) <[Redacted]>
Sent: Friday, June 4, 2021 12:45 PM
To: SOC-EOUSA <[Redacted]>; [Redacted] (USANYS) <[Redacted]>
Cc: [Redacted] (USAEO) <[Redacted]>; [Redacted] (USAEO) <[Redacted]>; [Redacted] (USAEO) <[Redacted]>; [Redacted] (USAEO) <[Redacted]>; [Redacted] (USAEO) <[Redacted]>
Subject: RE: Maxwell
Importance: High
Sent: Friday, June 4, 2021 12:45 PM
To: SOC-EOUSA <[Redacted]>; [Redacted] (USANYS) <[Redacted]>
Cc: [Redacted] (USAEO) <[Redacted]>; [Redacted] (USAEO) <[Redacted]>; [Redacted] (USAEO) <[Redacted]>; [Redacted] (USAEO) <[Redacted]>; [Redacted] (USAEO) <[Redacted]>
Subject: RE: Maxwell
Importance: High
SOC,
Please complete the following actions with the district:
• I've spoken with [Redacted], this is not a classified spill. The data label is based on a protective order issued by the court.
• The Information Disclosure will need to be completed as there was a substantial amount of PII included in the upload.
• Validate the information was received by the intended recipient.
• Insure the data has been removed from [Redacted] and [Redacted].
Please complete the following actions with the district:
• I've spoken with [Redacted], this is not a classified spill. The data label is based on a protective order issued by the court.
• The Information Disclosure will need to be completed as there was a substantial amount of PII included in the upload.
• Validate the information was received by the intended recipient.
• Insure the data has been removed from [Redacted] and [Redacted].
[Redacted]
I believe the district did speak to the individual on this, not sure if you have any further questions. A summary of the incident is below for your reference.
I believe the district did speak to the individual on this, not sure if you have any further questions. A summary of the incident is below for your reference.
• On April 13th, [Redacted] uploaded 5.5 GB of data to [Redacted]
• Analysts determined the content of these files were discovery for the Jeffrey Epstein case against Ghislaine Maxwell. It contained the under-age victim names among other PII.
• The CISO notification was sent May 26th and the SOC notification with the Information Disclosure form sent on May 28th.
EFTA00029021
• Analysts determined the content of these files were discovery for the Jeffrey Epstein case against Ghislaine Maxwell. It contained the under-age victim names among other PII.
• The CISO notification was sent May 26th and the SOC notification with the Information Disclosure form sent on May 28th.
EFTA00029021
• Contractor stated they chose to use the Sharefile.com instead of USAfx.
• In the last 24 hours, another user from the same district, uploaded less than a GB of data to another law firm that uses sharefile.com. This user is: [Redacted] in NYS.
• In the last 24 hours, another user from the same district, uploaded less than a GB of data to another law firm that uses sharefile.com. This user is: [Redacted] in NYS.
R/G
[Redacted] CISSP, C|EH
Assistant Director & Chief Information Security Officer
Department of Justice
Executive Office for the United States Attorneys’
Office of the Chief Information Officer, Cybersecurity Services Group
[Redacted]
[Redacted]
[Redacted]
[Redacted]
[Redacted]
[Redacted] CISSP, C|EH
Assistant Director & Chief Information Security Officer
Department of Justice
Executive Office for the United States Attorneys’
Office of the Chief Information Officer, Cybersecurity Services Group
[Redacted]
[Redacted]
[Redacted]
[Redacted]
[Redacted]
From: [Redacted] (USANYS) <[Redacted]>
Sent: Thursday, June 3, 2021 1:59 PM
To: [Redacted] (USAEO) <[Redacted]>
Subject: FW: Maxwell
Sent: Thursday, June 3, 2021 1:59 PM
To: [Redacted] (USAEO) <[Redacted]>
Subject: FW: Maxwell
From: [Redacted] (USANYS) <[Redacted]>
Sent: Thursday, June 3, 2021 1:49 PM
To: [Redacted] (USANYS) <[Redacted]>
Cc: [Redacted] (USANYS) <[Redacted]>; [Redacted] (USANYS) <[Redacted]>
Subject: Maxwell
Sent: Thursday, June 3, 2021 1:49 PM
To: [Redacted] (USANYS) <[Redacted]>
Cc: [Redacted] (USANYS) <[Redacted]>; [Redacted] (USANYS) <[Redacted]>
Subject: Maxwell
[Redacted],
Attached is the Court ordered protective order, which requires us to mark things as confidential (paragraph 7).
The production [Redacted] uploaded was non-testifying witness 3500. An example page is attached, and includes our "confidential" marking that we applied pursuant to the protective order. Given that this information clearly contains PII for victims, the designation is necessary. We’d also ask that this page not be widely disseminated outside of those at EOUSA who already have access.
Thank you,
[Redacted]
Chief, Public Corruption Unit
U.S. Attorney's Office
Southern District of New York
[Redacted]
[Redacted]
EFTA00029022
Chief, Public Corruption Unit
U.S. Attorney's Office
Southern District of New York
[Redacted]
[Redacted]
EFTA00029022
THE EXECUTIVE OFFICE
for
UNITED STATES ATTORNEYS
Cybersecurity Staff
THE EXECUTIVE OFFICE
for
UNITED STATES ATTORNEYS
Cybersecurity Staff
EFTA00029023
for
UNITED STATES ATTORNEYS
Cybersecurity Staff
THE EXECUTIVE OFFICE
for
UNITED STATES ATTORNEYS
Cybersecurity Staff
EFTA00029023
Discussion 0
No comments yet
Be the first to share your thoughts on this epstein document