ros a. 10695) FEDERAL BUREAU OF INVESTIGATION De of eenernton 04/27/2011 SA Cauthen appeared at 3381 Shadow Tree Dr., Apartment 327, Sacramento, CA on 04/27/2011. SA Cauthen noted that this apartment, which was believed to be occupied by Matthew Keys, appeared to be empty. SA Cauthen could observe through the front oor window that there was no furniture in the apratment. The window blinds were open ‘The apartment complex managers would not provide any information about Matthew Keys or the occupants of Apartment 327 Without court order. The managers provided the name of Cody Marriott, 3334 Smoketree Dr., Sacramento, CA telephone 916-927-2200 aS a person who would be in 4 position td receive a subpoena for information on Apartment 327 Thereafter SA Cauthen telephoned 916-572-5895 and asked to speak with Natthew Keys. Keyes identified himself immediately and SA Cauthen then identified himself and advised that he was working on a criminal computer intrusion case involving the hacking Group "Anonymous" Keys stated thet he had information pertaining to this group and that he was willing to provide this information but that St was going to be published anyway as he was a journalist working with a foreign news organization on a story involving Anonymous. Keys desired to fax or e-mail the information he had. SA Cauthen replied that he did not desire to receive information this way and that he suspected that Keys’ computer had been compromised along with his social media accounts by the hacking group. $A Cauthen explained that he was concerned that if his name or the PRI's interest in the group were to be found on Keys computer and/or disseminated through a social networking sites than the subjects of the investigation could be alerted and in a position to destroy evidence. SA Cauthen advised that he preferred @ face-to-face meeting. After discussion, it was agreed that the first available time both parties could be available to meet in Sacramento was during the week of 05/10/2011. Keys no longer resided in Sacramento and was currently traveling. SA Cauthen advised that he would contact Keys during that week to schedule a time and place. Inssigston on _ 04/27/2011 _x Sacramento, CA (telephonically) Fite # 288A-8C-44639—\ bute dicted 4/27/2011 98 John MH. cauthen 0427)mc01 .30LY—288A-SC~44639 CommainoreDoaer Matthew Keys oe 94/27/2011 tae 2 SA Cauthen requested that Keys bring his computer to the meeting and, in particular, any logs or communications he had with members of the group Anonymous. Keys replied that he was uncertain about what information he would provide insomuch he was a journalist. SA Cauthen then replied that a week or more should provided him ample time to consult with appropriate legal counsel about what information he would be required, or willing, to provide.ANDREWS, GABRIEL F. (LA) (FBI From: CCAUTHEN, JOHN Mt. (SC) (FBI) a Friday, Janay 13, 2012 13 AN Te SPRINGER, SCOTT A. (SC)(FB). ce DRONE, WESLEY S (SC); ANDREWS, GABRIEL F. (LA) (FBI) Subject Summary of Matinew Keys Invesigaton Classification: UNCLASSIFIED |ASSA Springer, Per your request, here sa summary ofthe Keys investigation and the plan with regard to ‘executing a search warrant and interrogation. FOx40 News is a television station in Sacramento, CA. The station is owned by Tribune Nedia Company in Chicago, IL which also owns LA Times in Les Angeles, CA. AL1 Tribune Media Company entities, including Fox40 and IA Times, use a computer to manage email and online content. The computer is located in Tos Angeles, CA. on October 28, 2010, Matthew Keys an employee of FOx40 News, was fired. cur investigation determined that after he was fired, he hijacked the FOX40 News Facebook and Twitter accounts. He prevented FOX40 from acceasing these accounts and sent communications fron the accounts to the public which damaged the reputation of FOx40 News. He also deleted thousands of followers from the accounts. Investigation also determined that in December 2010, Keys accessed, without authorization, the computer in Les Angeles and stole the FOx40 News customer e-mail list. He sent harassing enails to FOK40 News employees and customers. On December 8, 2010, Keys contacted the hacking group called "Anonymous." He gave cone Anonymous group members the Password to the computer in Los Angeles. hackers used this access to Access the wensite for the LA Times and deface the website. ‘The damages incurred by The Tribu: defacement exceeded $1.5 million. Media Company due to the website In April 2011, Sacramento FBI contacted Keys who was still believed to be unemployed. Keys advised that he had records relating to his interaction with the group Anonymous. He refused to turn them over citing his journalistic privilege. (It appears he had found a job at a television Station in san Francisco) In June 2021, Sacramento recommended that the case be transferred to Los Angeles. (At the time, there was not sufficient evidence to support that Keys was involved in the above intrusions. Instead, there was onlyevidence about the subject to whom Keys gave the password. So, Keys was removed from the case and the new subject, Unsub aka Sharpie, was added.) In September 2011, Los Angeles opened the case on Unsub aka Sharpie. The old case Sacramento was transfexred to Los Angeles. In Decenber 2011, Sacranento, while working on the HBGary computer intrusion case, located the evidence showing Keys had turned the password to the Los Angeles computer over to Unsub aka Sharpie, and others In January 2012, Sacramento opened a new case on Matthew Keys for trafficking in passwords. Sacramento and Los Angeles agreed to work the matter jointly. The case will be prosecuted in Sacramento against Keys. Los Angeles will prosecute the case against unsub aka sharpie, and others. Keye hae recently been hired by Reuters in New York City. He currently reeides in Vacaville, CA. He begins work in New York on 1/19/2012. He is expected to depart Sacramento on 1/17/2012 Sacramento and Los Angeles have probable cause that evidence is on Keys’ computer containing logs regarding the trafficking in passwords and other crines. A search warrant affidavit to seize his computer media has been prepared. nen serving the search warrant, Sacramento and Los Angeles desire to interrogate Keys akout his involvement with Anonymous members and his involvement in the disruption of business at FOX40 News. Interrogation of a journalist requires Attorney General consent. The AUSA in Sacranento is seeking to obtain this consent. Once obtained, the search warrant for whatever district Keys is in will be obtained. The search/ interrogation will take place in that district. It will probably be in New York City. Sacramento Case Agent: Wesley S. Drone Los Angeles Case Agent: Garbriel P. Andrews AUSR in Sacramento prosecuting Keys: Matthew Segal. AUSA in New York: Thomas Brown AUSA in Los Angeles prosecuting "Sharpie": Los Angeles Case: 288A-LA-258500 Pending Old Sacramento Case on Sharpie/Keys: 208A-SC-44539 Closed New Sacramento Case on Keys: 288A-SC-New ‘SAlobn M, Cauthen Office: 916-874-6492 el: 916-416-6714 Classification: UNCLASSIFIEDANDREWS, GABRIEL F. (LA) (FB!) From: CCAUTHEN, JOHN M.Sc) (FB!) Sent: ‘Wenesday, January 04,2012 3:53 PM te ANDREWS, GABRIEL F (LA) (F8)) Subject: RE: Good aitsrnoon| Follow Up Fiag: Follow up Flag Status: Completes Classification: UNCLASSIFIED abr, Everything isin the case file. 1am pretty sure all the emallsare on aisk in 1Aenvelope. (At least! sure hope that's the casel) | might have some backups ofthe threatening emails to Fox40/on our CART Storage Area Network drive. Sut check the 18's for CO's Ona related note, gota call fom our CYBER AUSA, his name is Matt Segal. (We only have one in Sacramentol) briefed him onthe status and what we discussed, He was the original AUSA onthe case. (He is also the same AUSA who |shandling the 8 Gary case which has al the IRClogs Including the one where Kaya tells Lauelal that AESCracked i Matt Keys and Matt Keys gave thom all the passwords.) In any case AUSA Sega is quite upset with me for sending the case to LA. He really wants to indict Keys. (Even though at ‘the time, Iwas unaware that Keys had provided the passwords to Anonymous). He wants to ell our AUSA and see fhe «an charge Keys an lat you guys charge kayl/Sharpe eta. It seems that all he AUSA’s involved in Anonymous are going te havea conference call tomorrowTto escuss. He wants to bring this sue up during that cal 'sityour thought that your case has now shifted to Matt Keys as your primary target? Or, do youstll plan on going after Kayla/Sharpie? In any case, can the AUSA in Sacramento contact your AUSA to discuss? Or your AUSA can call Mott steely. Matt's number is 816-554-2708. Feel treet calle Ifyou like. | am trying to keep our AUSA happy, but understand that we have already sent the case to youand therefore notin a postion to make any demands Regards ‘SAJoha M. Cather Office: 916-874.6492 ell:926-416-6714 ‘From: ANDREWS, GABRIEL F. (CA) (F81) Sent: Wesnesday, January 04, 2012 2:42 PM ry‘To: CAUTHEN, JOHN, (SC) (F31) ‘Subject: Good afternoon Classification: UNCLASSIFIED Hliohn, ve been reviewing the Tribune Media case file today, and wondered ifyou wouldn't mind forwarding me some ofthe vitim emails you's mentioned in your summary EC's Namely: The various emails obtained from Mercer (threstenng / Keys / ete Armando Caro, Tribune Media employee, Managing, Diector, Technology Architect, Tribune Technology, 435 N Michigan Ave Chicago, IL 60611 (312) 222-2708 sarmandoCaro@Tribune.com sent writer an email desing the investigation performed by their organization regarding a ‘computer intrusion performed against the Los Angeles Times on 12/14/2010. The computer intrusion resulted ina webpage defacement wherein the defacer used theta, chippy1337." ‘As we dscussed before, 'm hoping to havea sit-down with my AUSA soon t discuss charging Keys. I'm happy tokeep ‘youn the loop. Respectfully yours, ‘Gabriel Classification: UNCLASSIFIED Classification: UNCLASSIFIEDUNCLASSIFIED//FOUO Mars FEDERAL BUREAU OF INVESTIGATION Title: (U0) To document Liaison Contact with the Date: 01/16/2013 United Kingdom's Metrapolitan Police Yor Gabriel P. Andrews Jensen D. Penalosa we-cv4 (ost) From: SASHINGTON FIELD WE-1003 Contact: JON-TODD A. BAKER, 703-686-6770 Approved By: A/SSA Hadley Btiense Drafted By: JoN-TODD A. BAKER BORSUK DANIEL G case ID #: 282A-We-242710 (U) ANONYMOUS HACTIVIST INDIVIDUAL TOWA RIAA-VICPIM; COMPUTER INTRUSION-OTHER; 2BER-WE~C241680-C (U) LTATSON 28@R-WE-C241640-J (U) INTELLIGENCE Synopsis: (U//F0U0) To docunent liaison contact with the UK's Netropolitan Police Service Police Central e-Crime Unit (PCeU) \cerning Anonymous hackitivet activity and the moniker "Sharpie' Full Investigation Initiated: 02/23/2012 U0} On 16 January 2013 FBI Intelligence Analyst Jon-Todd Baker and special Agent Daniel Boreuk telephonically contacted Detective Sargeant Andy Bloomfield of the United Kingdom's Metropolitan Police Service, Police Central e-Crime Unit (PCoU) regarding the ANONYMOUS hacktivist "SHARPIE", Daring that conversation detective Bloomfield provided the Mowing information about the user of the moniker SHARPIE. UNCLASSIFIED//FOUOUNCLASSIFIED//FOUO Title: (U) To document Liaison Contact with the United Kingdom's vetropolitan Folice Service Ret 288A-NF~242710, 01/16/2013 rue name: David George sharp oa: 27 pecenber 1979 country of residence: Scotland (United Kingdom) Address: § Morrison Drive, Postal code FATONZ, Sterling, Scotland (u//uzs| Detective Bloomfield explained that SHARPIE vas anong the UX based Anonymous menbers that Cell Snvestigated under their Operations named "Ucon" and "Westfailian". PCeU passed the information regarding SHARPIE's identity and involvement in criminal hacktivist activities to the Scottish Crime and Drug Enforcement agency (SCDEA). Detective Blocnfield explained that he doubte that the SCDEA conducted any law enforcenent acticn based on that information because no report was ever received from SCDEA in response to the passed informatio standard practice adhered to when the SCDEA acts on information provided to them by PCell. Detective Bloomfield said he would verity With the SCDER what if any law enforcement actions were taken against SHARPTE. which is a (W//F0U0) TA Baker inquired of Detective Bloomfield regarding a previously made request for any Internet Relay Chat (IRC) logs seized or otherwise lawfully obtained by PCeU that pertain to the following criteria. Mention ANONYMOUS' "OPERATION PAYBACK" campaign Cover the timefrane from 16 September 2030 to 27 January 2011 Mention or include the moniker ANONYJOSH mention or include the moniker TICK Mention or includes the moniker IOWA mention or include the moniker OWEN Mention or include the moniker INTERNETS (u//E0U0) Detective Bloomfield stated that ne would follow-up with Stewart Garrick who runs PCeU's database housing data obtained under operations Ucon and Westfailian to get the chats passed to FBT washington Field. TA Baker requested that any chats mentioning or UNCLASSIFIED//FOUO 2UNCLASSIFIED//FOUO Title: (U) To document Liaison Contact with the United Kingdom's vetropolitan Folice Service Ret 288A-NF-242710, 01/16/2013 containing the moniker SHARPIE be added to the aforementicned request. In subsequent email conversations it was determined that the chats will be passed initially for intelligence purposes only and any chats determined to have evidentiary value to the captioned investigation will be requested via MLAT. ” UNCLASSIFIED//FOUO(ao osname Precedence ROUTINE Dae. 6/6/2001 Tes Losdngeles Attn: CV.2SSASmallntt Sacramento ‘en: SacramentoELSUR, ‘san: SST Linda Facer From: Sicrmento ot ‘Contact: Sahn M.Cauthen Approved By: CCabome Tor Drafted By auton fon Bj 6065) ee BASC-14699 (Pending) Tile: chANGED, Une, ak Sharpe Tabune Media-Mitins Smopsi, Change ase tle and wander invenigation to Loe Angele Tle: Tile marked "Changed!" oreflectrew subject. Tale prevouly cared as Mahe Keys cp Reference: 2804-5C-14629 Ser 16 288 C-44767 Serial 46 Reference Tell rm SAlohn M,Cauthen SC.CW, SSA asonSmolanof UA. CV-3 on 6/6/2013 Derails: Rerekall.hiscazetobetransferredto Lor Angeles. The cage involves asubecrbteved 0 be resident ofthe United Kingdom who hacked ina computer Los Anges and damaged data affecting Tribune Media Cotporation. _Spectely the subject hacked ino a server called P2Panéafleced databases used bythe Los Angeles Timerand FOXNews both eis owned by Tribune Med,UNCLASSIFIED To: Los Angeles From: Sacramento Sacramento opened ihe investigation sued four subpoenasthe resus of which ae parof the cael Aso, Sacramento conducted one sonsensualy recorded telephone eal he reauts of wich wee placednis evidence 1D (copy was als placed ino tA evdence) Ducto veces she investigation lot be pursud in Sacramento (ase Background Reser 16,on about 1/7/2010, Unb, aka Sharpe, logged into IRC chat channels associated th the hacknggroup called “Anonymous” —ThelRC channelsan which Sharpe pacpated clad Snernefeds and -operatonpayback Reser 16,on about 11/15/2010 char on RC operatonpayback-uggested sharpie was UK based Rosaria 4, Sharpie was 2 hacker wih she group Anonymous and was involved "Operation Payback” On about 12/01/2070, the eevson station KTAL FOXSOlocaed in Sacrament CA eames email contact fet had been existed rom thecompany'ssenerin os Angeles, Theservers called the"P2P Servers The ‘aliration appeared to have been accomplished via a compromised account onthe P2P seve, ter the P2P sere wa compromised the manager af the news satan began to recive emails from the person who purportedly hackedthe server. The news taten's estomers whos email were part! the contac ist also Eegantorecene e-mail fom person who punporedly hacked the sever ‘The majority of theemallscarrede theme of making disparaging remarks about Fx 40 business pretes. As determinedly headerinlormston the emails appesced ta come rom proxy server urepe teappearstheacker alto cented fake email accountclledcberollSx@hormacom and pretended tobe Joseph Huma, FOXNews employee. As further dacisted below, the subject Iter sent an email using the nae {ance Mar tothe FOXAD sation manager andincuded an aachment image called yber lying” The eal alsa referenced Matthew Keye who wat aformet employee ofFOXAO News, The email augested the hacker nay have vied Huerta’ Facebook page) The name” Mathew Key” also surfaced in an enti from te hicker using the monier"Cancer Man fucher described below. (By way of background, Maew Keys was afermer FOXAO News empleyce who was terminated in about November 2070) (01 12/3/2010, FOXIO News recened an ema from she hacker withthe subjectline"Re: Donating” The ai aad “watch yourselves fo 40" aed conned a forwarded Socey "Cancer Man. The email appeared response rom the American Cancer Sociey fo Cancer Man. Baeedontbe response, i appeared the person purporting wo be Cancer Manhad seat ane-railto the American Cancer Scie fem the fe mailaddeess ancerman4300@yahoo coukand provided a contact name of Matthew Ke. This emallapparedto bein therm ofa pres reeave and described news coverage of stor by epoteSkavm Benne. The ©maileefered othe "tion managers Facebook ger aceboo com /Srandon Meccr/Peats/ 1732 4¥182694509 which supgeted te hacker hd sted she satin manager, Brandon Mercer Facebook age which had been sent rm the American Cancer (on 12/12/2010, Mathews Keys using e-mailaddressmatthew@sactownmeda.com,sentan unsolcted ‘emalto FOXENews stating he has inflated the hacking poup Anonymous Key en Brandon Mee, the ation UNCLASSIFIEDUNCLASSIFIED To: Los Angeles From: Sacramento ‘manages cof usernames and passwords he clams he “bain by a high author within che ‘conscous act {rganieaton Anonymous The lat pertained to ahackinvoving the webste"Gawker” Key alo stated he ha access toute operaiens, including operasions against Paypal Amazon, te Los Angeles Times Fox News, and ethers. (0 13/12/2010, Mercer engaged Keys ina consensually recorded telephone conversation. They lscussed the Gawker hack Keys said he had entered chatroom with 2.00 plus members. Inths chat om. Keyssid he ‘net someanewhoimited him int private chat oom populated by 15 highly stillet hackers Keys cussed the Gawker tack burclaimedhe did narknowhewitwas done. _Keyssai he had lined echnical hnwedge but dd have comput records of hisirteracion wh he group overthepastweck._ Inconmmunicatrgwith he hackers Keys has discussed past yburmalamexpennce. He eleved thatthe hackers weve using him fortheve stl, was ntclear ia hese dcussone ‘nhether Keys was acing asa jouralt to collecthis information. Ina ce, was clearhe was sharing the nfermation he abianed wth jours from PBS, Keys dime no krowege about ema being sent to FOXA, (91 Note: Based on the convestion, the apeats Key! Twiter account may have been compromisedby Anonymous members) . incon ay steel the pani ug eyo tL ge Tes Keyshadio specie about what was being planned ‘The Los Angeles Tes and Foxd0 News are both ewnedby the same parentcompary Tribune Media basedin Chicago Il, They bth usethe sever elled PRP, dcussed above, which islocated nos Angeles, CA. [predicted by Keys, within noo dyson 12/18/2010, Tes server hosting he public facing webte was compromied. The website ws defaced ty somcore purporting tobe Chippy 337, Thehack ignated form IP 18 1655.178 which appeared tobe 2 European pron server (land). Thehack appeared to have been complished ia & onpromitedaccounton the POP tev “Tibune Media conducted an intemalinesigation regarding the irsion performed agsnst the Loe ‘Angeles Times en 12/14/2010 wherein the hacker used theta “chippy 137." According te Tribune Meda management the cost of teinusion andthe resukingtime spentresing it, asthe company ever SS00000.(Aspreadshetshowirgrie sndesponte: was preparedly the inestgatrs and included in he invecignve roporton DAD na Verve) Fallowingthe website hack onecf the Tabune Media emplyeesaeessed an IRC chanel alld ‘hegson hosted ara server called satus. Accordngte the chats on ths channel a person using themomer share, tlaimedto be irvoted inthe LATimes hickand usedhetagchppy 337. Other persons mvoled in ackappearedto. ince aperton called Nikon faced onthe information above it appees hat Keys war invlved ithe group “Anonymous” and smerbers fs grup hacled the P2Pserverontwo ocasons, The usin ay have beer accomplished by silly ‘engineering someone ro providing wie passwords, Keys didhave cess t0P2P. Hie Twiter acount mayhave been ‘ompromised Keys therfore my have urvtingy been the vector used toby te hackarsto perform the anaks Or he iy have besa wing conepiatr The person usngthemoniker shape. sp pearsto be behind the Los Angeles Times hack on 12/14/2010 The connection of Shrpetothe hackintothe PP server afetng FOXAONews isunclear. The only connection appears tobe thefactthar bth hack apparently inolveda compromised user account UNCLABSIFIEDUNCLASSIFIED To: Los Angeles From: Sacramento ter comacted Manhew Keys 4/27/2011 andasked ito bringrecord in hi possession relating othe hacking group Anonymous. Keys has not sesponde to this equest. ‘eter contacted AUSA Mathew Seg Estern Districf California on 5/31/2011, Whiter expressed the opinion that Key probably ci not dey hack no the P2P server ahough he may fecitated te hackino the P2P srverby ‘members of Anonymous abe uniting, ASA Sealfstened alle information but was uncemanced thatKeys was notknowingyimvaled. —AUSASegladivedthatasutpoen,or search warrant, forcatain the possesion of Keys relating to ctimina acs by the loup Anonymous was feasible, but wuld tequre tore Generalconcurence. However, insomuch asthe P2 server vaslocatedn Los Angeles, ven nthe East DisrctofCalfornia wis weak, ALISA Segal vised he would dedine preseason based on his at alone and recommended vansferingthe investigation ros, gels. Water bees the Anonymous member"Sharpi” isin she United Kingdom and iknow to police fiche forbs vehement inthe Anonymous group. The loge course of action to requet information from iestigaors nthe United Kingdom to sce they have tforatonegaring Sharpie. The other oil step, would be ro retrieve data rom Matthew Keys regarding is information re ‘Anerymous.~in paricuar the Anonyeusimemiber’harpl:” Todo ths assuming Keys remains uncooperative, would requires subpoena.orsarchwarrant. Incomuchas Keys considers imi oumalt and appears uncooperative, the ppeouch could require Atorney Generleoncunence. Wisthecpinion of Sacrament that Los Ageles has soi json ‘nthe hacia the P2 server and which we perm iestigator to compel Keys to prove the information he has about ‘mony The final approach woukdbetosek records fram the compas hosing the prony servers, Thisernt to bethe avert feast potential The ony venue Sacramento es withthe person and computer of Mathew Keys, The fllowing things point to Keys criminal culpa «Keys had recent been terminated fom FOXAO News and therfore, he may have bore resentnent 8) Reychad prevouly held acess tothe P2P server ard cerainly knew how teaccess i (However, not enw whic account on P2P was used to hack the FONAO News ema and the acount used to hackthe Los Angeles Ties didnot appear rate wth Keys) ‘Ale being lt go fom FOX4O, Key had acesed an are ther coca media webites Belonging te FOXAO News resulting inlets. <4} eye mame was referenced in two ema by the person who purported o hack she FOX#O NewsP2P ©} One othe mal sen referencing Keys appeaedto originate inthe Sacraments area However she write does nat eve that Kes knwinghy hacked the PZP server for shefollowingeasns: 4} Wile Keys natn was mentioned into email seems ogc thatthe real hacker would dently mee so obvious while gong suchlengieto avoid ction through the eof ron eer. UNCLASSIFIEDUNCLASSIFIED To: Los Angeles From: Sacramento inthe consensual recorded telephone call Keys appears genuinely baled by allegatonshe perpetrated the nisin, Keys wasctherwe cand about is imvohement ithe hacking group Anonymous and ether Target ofthe group. Keys. by the account of he FOX#O News tation manager, aswell a by his tatements inthe telephone «all did no appearto be technically sophisticated inthe ares of computer infusions, Keys interest appar be soty inthe ‘eal socel media usageonthelntemes His imvslement with Anonymous Hel nly x journalist. Keys acordingto his webpage, has le the Sacrament area ar now works fr KGO Television in San Francica, Hiceesidence eunknown. — Keyewilnocanswer hs phone, or eturn phone calls reas en by the we. Base onthe lckf venue inthe Eastern District irecommended this case be trarsferred io Los Angeles. Theabove information, aswellather case dat, canbe packaged inthe frm af Letterhead Memorandum (UHM) andsentto London by Les Angee LeAve SetLead ts (Aetion) UNCLASSIFIEDUNCLASSIFIED To: Los Angeles From: Sacramento Receive results of investigative efforts in Sacramento a pursue logialimestigation. SetLead 2s (Retion) saceaMenTo ATSACRAMENTO,c (©¥-158T toma main case fle toinclude 1A to Loe Angele CV atetion SSA Jason Smoanofsclephone SotLead3+ (Ration) ELSUR so mal 2604 $¢-44639 evidence tem 101 to Loe Angeles EUSUR for funher atention of SA Jason Smolanl. telephone 310-296 3608, UNCLASSIFIED