DOWNERS GROVE POLICE DEPARTMENT report 07/14/2016 22:15 Incident Report CASE # 01-16-007468 (cASER Report [Secured From ‘Occurred To REPORT TYPE o1-16.007468 o7rsar2016 22:15, orit272016 00:13 07/14/2016 2013, Original INCIDENT TYPE [Case Statue ‘Case Status Date Cleared EXTORTION [Day of Week TUESOAY Dispatched o7/1472016 2019, acives 07/14/2016 2013 Grd 600 (Can Suspect Be Names? YES [Can Suspect Be Identieg? NO azmo-o2- ‘Gan Suspect Be Located? NO Gre 600 ‘Acotel Relates NO rug Related NO Total Damaged Property Value $0.00, Total Stolen Property Value “$0 09 otal Recovered Property Value $0.00 3] ofonsecians ication ‘Atempled Committed F _ |extorion commrreo F __ | Staruteorainance Toeation pe Dispeaon bi x1 " [Bias NA Forced Entry DNA [Weapon DNA Endence Coleced YES | Were Enty NA Tadcrone—T [> [Paso tyne Business Pana ager PT © |comeuvter RONALD L SANDACK (000 070-009 0000 R [ome Phone Busines Parson AaSTeeT 3 4 _|ioomcoca000 Use Asaress fom indent Location Ifematon o1 Employer Address N RACE ry BLE. bate DL Namber ere a Binh Pace Age 52 Tan Coe Aa Javenie ADULT Boay Mans Tara Pot P| eawsow Proper Type tae Model R — [seweo He ELITE 800K 840 o [senate eater Description onion a [eray tarror £ TV iczcators OWNER IS RONALD SaNDAGK Valve $0900 800 05, R | Guantynvegn 1 LEADSEY Srierd By (ispatcher) ONA T y TT TP APE T Roparing Offcar Deparment Ropar Stats ROBERTIACOSS G7) Signes Records Status DaterTine TaprovingSupepieer Deparment Date Tine) Bo o7faalioa e9rL00-94-10DOWNERS GROVE POLICE DEPARTMENT report 07/14/2016 22:15 Incident Report ASE# 01-16-007468 <4mmvone Wake Model Description ‘Condition RECEIPTS Value $0,000,001 00 LEADS# / Entered By (Dispatchert) NA Teor Propery m<-ap mare Fropie ORIGINAL | responded to the lobby of the Downers Grove Police Department (DGPD) in reference to a walk-in report of an Internet scam. Upon arrival at OGPD | met with the complainant, Ronald L. Sandack. Mr. Sandack related, in summary, that sometime on 07/07/16, he received a Facebook friend request tome screen 727 Tc occo3 hher request and then there were a few Facebook messages exchanged. He then advised that he had not heard from her until 07/12/16, around 1200 hours. He received several Facebook messages from her over the course of a few hours, concluding around 1500 hours. Towards the end of the messaging Mr, Sandack advised that he was on his computer at work in St. Charles, liinois._Itwas at this time that he received a Skype call from the screen name He did not recognize this contact so he did not immediately answer the call. Concurrently he received a Facebook message from [El telling him it was her calling on Skype so he answered the call. Mr. Sandack related that he observed a F/W, in her early 20's with long black hair. He related that the image did not match the photo attached to the Skype account or that of the Facebook account of ‘The call was then ended by Mr. Sandack shortly thereafter. The next mori TT (lic Ri A oS necscne acs dosared hs ‘contacts from Facebook in a text document. The message demanded an Mr, Sandack advised that he agreed to ‘send the money and was told to send the money via Western Union to iH in the Philippines. He advised that he then traveled t land cont the money as ordered. He pro) transaction} The receipt was later entered into evidence. On 7/14/16, Mr. Sandack began to receive additional instant messages via Skype around 1430 hours, requesting that he send MMII tothe same subject inthe Phiippines. He advised that he ignored the request at first and then was alerted that there were two (2) fictitious Facebook pages that had been created without his authorization using his persona. In addition to this, Mr. Sandack advised Reporting Officor Department Report Status! ROBERT JACOBS (27) Sioned Records Statue DateTime ‘Approving SubeCis Department ay I fo owaa oh oF sorsooDOWNERS GROVE POLICE DEPARTMENT Report o7/t4r2016 22:15 Incident Report CASE# 01-18-007468 That he was alerted thal several more pages were create Mr. Sandack did not know the URL for any of these fraudulent social He advised that he contacted Facebook and talked to their security division, who shut down the pages: ‘After this Mr. Sandack then travelled to land obtained a MoneyGram in the amount off The transaction number for this was The receipt was later entered into evidence with a copy attached to this report. |A few hours after sending this money, at approximately 1600 hours, he began to receive more instant and then by 1800 hours was demanding he send more dollars| (EEE, V1. Sarnciack responded briefly and then ignored any further message and came to our police department to document the incident Mr. Sandack advised that he had screen captured some of the content of the exchange of messages and would be able to provide those to me via my police department e-mail | advised Sgt. Giancarlo regarding the facts of this case. | advised him that | would like to contact Detective Sgt. Thayer. | then contacted Sgt. Thayer and made him aware of the facts of the case thus far. He advised that he would be responding with another detective and | should begin collection of Mr. Sandack's laptop and messages from Skype and Facebook. Mr. Sandack provided me with his laptop ‘and emailed me copies of the message content he had screen captured on his phone. Copies of the MoneyGram and Western Union receipts were provided to Det. Barczak, as were printed versions of the screen captures provided hy Mr. Sandack to me via email This concludes my initial investigation into this case. ‘Turned over to Investigations. En orNaTave 7 Roaring ica Depart Repor Sata ROBERTACOBS_@7) Sones Records Status 7 Date/Time [Approving Suphyvieor, ‘Department Date/Time L (Yao ovale 3 of B9¥100-91-10INVESTIGATIONS UNIT SUPPLEMENTAL REPORT PAGE 1 OF 4 PAGE (S) INCIDENT # 16-7468 COMPLAINANT'S LAST NAME: SANDACK NARRATIVE: Summary of Initial Investigation On 07-16-16, this investigator, Detective Barozak #42, was directed by Det. Sgt. Thayer #90 to assist him and Officer Jacobs #27 regarding an extortion complaint. The following is a summary of my investigation. Later that night, Det. Sgt. Thayer and | responded to the PD and met with Of¢ Jacobs where he briefed us of the situation. The following is a summary of the facts Ofe. Jacobs gathered from the vietim, Ron Sandack (hereinafter, “Sandack’). Sandack stated that on 07-07-16 he received a “friend request’ on his IE Facebook account, IEEE. The friend request came (ror cc ‘Sandack accepted this friend request, but did not immediately hear back from i. On 07-12-16, Sandack advised he received a Facebook message from [i Sandack advised he and TINIE exchanged several messages between 1200 hours and 1500 hours. The messages back and forth during this time could be characterized as friendly conversation, like two people getting to know basic information about each other. Sandack advised later that same day he received a Skype call from [EEE a user having (EEE. Sarndiac advised he did not connect with the Skype video chat because he did not recognize the caller. At the time of the Skype video chat request, Sandack advised he received a Facebook message from II telling him that it was her calling on Skype and he needed to connect with her. Sandack said he decided to connect with J HERE Who he thought was IEEE. Sandack used his HP Elite Book 840 laptop computer to connect with EINEM via the Skype website. It should be noted Sandack used Skype usernancs EE (communicate with i! | | a S08 thereatter, Sandack advised he disconnected and the video chat session ended. Reporting Officer: art | Date proving Officer ar? | Dave DET. A Boreal 2 42 | 08-10-16 ( Va 4o [ SS ° RecordsINVESTIGATIONS UNIT SUPPLEMENTAL REPORT PAGE 2 OF 4 PAGE (8) INCIDENT # 16-7468 COMPLAINANT'S LAST NAME: SANDACK NARRATIVE: On 07-13-16, Sandack advised he received a Facebook message from NN 128 191121 0255290 were instructions to wire USC EEE via Western Union. The message indicated that if the wire was 55 TT . Reporing OBR Sart] Dae Apopeipasicer Sar] Dae QL g0 joeais Ty ge BS hf Records C7INVESTIGATIONS UNIT SUPPLEMENTAL REPORT INCIDENT # 16-7468 PAGE 6 OF 6 PAGE(S) COMPLAINANT'S LAST NAME: Ronald L, Sandack NARRATIVE: On the same day, | provided S/A Hogberg with the Western Union report. Investigation continues. Awaiting the return of court order legal compliance. Tone "e St Star # 90 Date: APY weross | Y iver: Siar? #82 f al loll RecordsINVESTIGATIONS UNIT SUPPLEMENTAL REPORT PAGE 1 OF 1 PAGE(S) INCIDENT # 16-7468 COMPLAINANT'S LAST NAME: SANDACK NARRATIVE: Drafting of Skype and Facebook Search Warrants On 7/15/16, this investigator, Det. Bylls #19, was assigned to assist Det. Barczak #42 with an Extortion investigation, | assisted Det. Barczak by drafting search warrants 2016SW416 seeking information from Skype account with user identifier INET and 2016SW417 seeking information from Facebook regarding user account ii | executed search warrant 2016SW416 on 7/15/16 at 1152 hours by emailing the search warrant to Skype via email address lerm@skype.net. | executed search warrant 2016SW417 on 7/15/16 at 1546 hours by uploading the search warrant to Facebook via the Facebook Records request system. Facebook Search Warrant Response On 8/2/16, Facebook replied with information about account a by Sgt. Thayer #90 on 7/15/16 at 0543 hours UTC. | will supplement this report when | receive the response from Skype. No further at this time. eS a a a sat bee i al RecordsINVESTIGATIONS UNIT SUPPLEMENTAL REPORT PAGE 1 OF 4 PAGE (8) INCIDENT # 16-7468 COMPLAINANT'S LAST NAME: SANDACK [NARRATIVE: MoneyGram Supboena Response This is a supplemental report regarding the MoneyGram subpoena (Du Page County subpoena #22738) request | made back on 07-26-16. On 08-09-16, | received an e-mail from the Du Page County State's Attorney Office that included attachments of documents from the subpoena response by MoneyGram. | had an opportunity to review these documents. MoneyGram confirmed that the money was received. | leamed that the recipient's name was confirmed as KEE. Furthermore, the consumer =i HE, provided the following information: | downloaded these documents and subsequently transferred them onto a disc to be entered into evidence. Nothing further. Reportng Officer. Tay Dae sprang cer art] Dag, DET. A. Bk Me 42 | 08-10-16 72 | qe _ be, I Recordsms2018 “The Village of Downers Grove Mal - Preservation Request Received Case #692546) = feouncens tne Jeremy Thayer Preservation Request Received [Case #832546] 1 message Records-noreply Thu, Jul 14, 2016 at 11:46 PM To: jthayer@downers.us [Case #832546] We have taken reasonable steps to preserve the account(s) you requested. Your case number is 832546. Do not submit additional legal process with this preservation request. If you want to follow up with formal legal process, please visit our online request system at www.facebook.com/records to submit a new records request. Please include the same user information provided in this preservation request (user ID, email, or vanity ID). PLEASE NOTE: This data will expire 90 days from the preservation date. To request a single extension of your preservation request, please visit our online request system at www.facebook.com/records. Thank you, Law Enforcement Response Team NOTICE: This email (including any attachments) may contain information that is private, confidential, or protected by attorney-client or other privilege. Unless you are the intended recipient, you may not use, copy, or retransmit the email or its contents. ipsa gone omimalvs0? i= 28rk= 96de1O87EE iow =FlBsearc= boxe 1SeceOI@2Hec628s\mI=1SSecuOE2Hea6? wms0. ‘The Village of Downers Grove Mal - Preservation Request Received [Case #832547] osaieeg antael Jeremy Thayer Preservation Request Received [Case #832547] 1 message Records-noreply Thu, Jul 14, 2016 at 11:48 PM To: jthayer@downers.us [Case #832547] We have taken reasonable steps to preserve the account(s) you requested. Your case number is 832547. Do not submit additional legal process with this preservation request. If you want to follow up with formal legal process, please visit our online request system at www-facebook.com/records to submit a new records request. Please include the same user information provided in this preservation request (user ID, email, or vanity ID). PLEASE NOTE: This data will expire 90 days from the preservation date. To request a single extension of your preservation request, please visit our online request system at www.facebook.com/records. Thank you, Law Enforcement Response Team NOTICE: This email (including any attachments) may contain information that is private, confidential, or protected by attorney-client or other privilege. Unless you are the intended recipient, you may not use, copy, or retransmit the email or its contents. ipsiimail goose comimativt7u=28:k=26dc08758 views sen chsinbaxSih= 1ace2 HeBGOcAcBsim|=1SSece2 BROCE "Ts2016 “The Village of Downers Grove Mail - Preservation Request Receives [Case #692572] Jeremy Thayer Preservation Request Received [Case #832572] 1 message Records-noreply Fri, Jul 15, 2016 at 12:40 AM To: jthayer@downers.us [Case #832572] We have taken reasonable steps to preserve the account(s) you requested. Your case number is 832572. Do not submit additional legal process with this preservation request. If you want to follow up with formal legal process, please visit our online request system at www facebook.com/records to submit a new records request. Please include the same user information provided in this preservation request (user ID, email, or vanity 1D). PLEASE NOTE: This data will expire 90 days from the preservation date. To request a single extension of your preservation request, please visit our online request system at www.facebook.com/records. Thank you, Law Enforcement Response Team NOTICE: This email (including any attachments) may contain information that is private, confidential, or protected by attorney-client or other privilege. Unless you are the intended recipient, you may not use, copy, or retransmit the email or its contents. hits sma google comimalivO"At=28ik=2oscHOE7BE ewspHBsearcheirboxBt= 18560" Tonio8f08simI=1S5ed4Tada9860Cowan RIHONs Oynn Gave Gani rae Depaaiss Anwssueanins Dinars ot July 15, 2016 Skype Communications SARL 23-29 Rives de Clausen L-2165 Luxembourg Luxembourg ote Via: email ATTN: Preservation Request This agency is investigating an extortion case, recorded in case report #16-7468, Skype user IEEE has committed extortion and we are requesting that Skype Communications SARL preserve the account belonging to Please preserve the following data types: Preservation pending a court order from this agency. Respectfully, \ liye Sergeant Jeremy Thayer #90 Downers Grove Police Department Criminal Investigations Division 825 Burlington Avenue Downers Grove, Illinois 60515 630-434-5600 (main) 630-434-5653 (desk) 630-434-5690 (fax) jthayer@downers.usresro16 “The Vilage of Douners Grave Mal - USOTI61SPSR28PRMBLE Ret Case report #16-7468) Jeremy Thayer US071615PSR28PRMB:[LE Ref : Case report #16-7468] 1 message ‘Skype LERM team Mon, Jul 25, 2016 at 12:51 AM To: "jthayer@downers.us" Hello, Regarding your request for preservation of Skype user account information, this email is to confirm that it has been received and any available data will be preserved for a period of 180 days from today. ‘Skype cannot advise you whether any data exists for the accounts that are subject to your preservation requests. In order to obtain preserved Skype data, US law enforcement must serve legal process on Microsoft Corporation in the US. Contact information for Service of Legal Process: Microsoft Corporation 1 Microsoft Way Redmond, WA 98052 Email: USLEReq@Microsoft.com Fax: 425.708.0096 We have assigned your case reference LO 258934. PLEASE QUOTE THIS. REFERENCE NUMBER WHEN SUBMITTING YOUR SUPPORTING LEGAL DOCUMENTATION. If you do not, we may not be able to release the preserved data. Regards, Skype LERM Team 71 US, Shape Guidelines pat ips mail google comimallJOrAs=28ik=96deDETEBView =pilsearch=IrboxSi= 15620EbdDecedadEsim=156200bsdlecedad 1"rire Tre ilapec Dove's Gove Mal -DuPoe Cay, Ie Searcher 2ORSWAIe fe or Enis VILAGE OF Chih, DOWNERS GROVE DuPage County, IL Search Warrant 2016SW416 for account i Robert Bylls Fri, Jul 15, 2016 at To lerm@skype.net, USLEReq@microsoft.com Ce: Andrew Barczak , Jeremy Thayer , willam.scrimshaw@skype.net, tonywils@microsoft.com Pease find my search warrant regarding Skype account I tached. [Non-disclosure language is included in the body ofthe warrant. Please contact me with any questions. Thank you, Det. Robert Bylls #19 Downers Grove Police Department 825 Burlington Ave. Downers Grove, IL 60515 630-434-5634 desk 630-364-8003 cell 630-434-5690 fax rbylls@downers.us =] DuPage Co IL Search Warrant 2016SW416.pdt 133K = sAsonsi20lem Ydskypenetbgs=trucsoarch= query Bi 1S5AITEAZGIOTASSSimi=t 11 nipe.mal googercomimat' 2 28= 4154806anoa0ts | Eagauasll MULAGE OF tee GROWL”) DOWNERS GROVE a oa Automatic reply: DuPage County, IL Search Warrant 2016SW416 for account ‘Skype LERM team Fri, Jul 15, 2016 at 11:52 AM To. Rober Bylls ‘Thank you for your e-ma Ifyou have an IMMEDIATE THREAT-TO-LIFE situation you must send your request to our24/7 emengency-only ali, LEALERT@microsoft.com ‘Skype requests will be escalated to the appropriate Skype compliance team for response ip small google ccrimala = 28k 4a SSASOEGBow= pt mir osotas=rvesoar ch query Sth 1SSOTETSTTOBOaAsim= 1SEefTSTST TSONGA 1"manors TheVilge sores 6-00 - Jeremy Thayer 1 message Ron Sandack Mon, Jul 18, 2016 at 6:18 PM To: Jeremy Thayer , mdevires@downers.us Gents, Thanks for your professional assistance. | appreciate it. Ron Sandack ripesimai goog comimals7u=28ik= 36dc 08768 view =BsearcheinxSt= 1S6004«Be0e Tafasim=1S6004cEeOc tata "mares ‘The Village cf Danner Grow Mal - Skype scam linked to Philipines Jeremy Thayer Skype scam linked to Philippines 1 message alerts@crimedex.com Tue, Jul 19, 2016 at 5:39 PM To: alert-recipient@crimedex.com SW CRIMEDEX Alert Number: 262572 Date Published: 07/19/2016, Subject: ‘Skype scam linked to Philippines Distribution: Groups IAFC!, Countries. Philippines: Alert Text AA resident of Downers Grove illina's/USA) was the victim of a Skype extortion scam. The vietim sent money via Wesern Union and Money Grom (2 TE in the Republic of the Philippines. {All money orders were picked up atthe following locations in the Philippines —- MLHUILLIER - ANGELES SWILLY NG BLDG. COR, ROVIMAR ST MC ARTHUR ANGELES, PAMPANGA 2009 ~- USSC SERVICE STORE GUAGUA - CALLE RIZAL GUAGUA, PAMPANGA 2003 Skype user SINE using Skype Name IIEENIH orchestrated the threats and organized the payments SGT Jeremy Thayer sthayer@uoaners us Doviners Grove (IL) Police Department usa Work, 1-830-434-8659 Fax: 1-630-234-5800 To download this alert in PDF format, click here ebsites asta ern athdlelc Nila Click. Search. Find. Find your eviden If you no longer wish to receive alert emails from 3VR CrimeDex, click here to unsubscribe. CrimeDex® is a registered trademark of 3VR Inc. Copyright ©2013 CrimeDex® ike 36dc108768 ews serch: nboxSt 1SECSS 165 TeIBEEBsIm|=1550SS1TES ICES ws Inipimal google commaCase Ortieer: Offense Date/Time: Offense Location Offense Type: Expiration Date Jurisdedon: Court Dat Dispositon: Disposition Date: Case Comments Name-Type: Vietim CAMO OU A Downers Grove Police Department Department Case Report Department Case Number: 16-7468 Related Case #'s Case Information + 27-JACOBS, ROBERT 0771272016 -12:00Hies 3970 - Extorion onn2n019 DuPage County 3: 07-14-16 Officer Jacobs transfered Item Hl to Sgt. Thayer who in tum transferred it to FIAT CFU for forensic analysis. Victim Sandack needed computer back for work, so when it wos returned by CFU, it was given to Midnight Patrol Supervisr Lichemer to be given back 1 Sandack 08-04-16 Paper copies of Items 2 and 4 given to Records Manager Tracy Adams, Case Names Name Soni Rov sec Ree Doo one Pon a Zz on Additions Rae Torna SSN {sgn Neb 01 Container # Current Custody: Ret Collection Date Tie: Packaging Quantity Make/Mode: Weight Received ‘em Notes: Case Items Process jumed To Owner 0714/2016 -22:15Hies Collection Purpose: Evidence Collected By: 27 -JACOBS, ROBERT Collection Location: DGPD tem Type: One paper beg containing - 1 - Computer components Detail Description; HP Elite Book 840 Laptop ‘Owner: Ronald Sandack Value: $0.00 Weight Disposed: Tem Numb O02 Container Colletion Date/Time: Make/Model: Weight Receive: Hom Notes: On OF Process: Hold for investigative purposes ‘Current Custody: Siored in Location - Room A 07/14/2016 -22:15Hrs Colletion Purpose: Evidence Collected By:27- JACOBS, ROBERT CColletion Location: DOPD Packaging/Quantiy/Item Type: One envelope etal Description: Moneygratn and Westem Union receipts ‘Owner: There is no owner associated with thi term taining | ~ Miscellaneous Vatu: $0.00 Weight Disposed: 16 Detective Barezak located the recip: onthe copy machine and was turned over to Property Control to be entered into Evidence Pdcvidence | 1ACKADODepartment Case PC Pave tf?————- AU EA Downers Grove Police Department Department Case Report Department Case Number: 16-7468 Case Items Item Number: 003 Container # Process: Hold fr investigative purposes Current Custody: Stored in Location «Room A Collection DateTime: 071152016 - 02 304s Colletion Purpose: Evidence Collected By: 27 -JACOBS, ROBERT Collection Location: DGPD Packaging/Quantity/Item Type: One paper bag containing - 1 - Computer components Detail Description: Image ofthe hard drive contained in Evidence item 1 the HP laptop ‘Owner: There is no owner associated with this item MakelModel: Value: $0 00| ‘Weight Receive: Weight Disposed: Hem Notes: Tem Number: 004 Container Process: Hold for investigative purposes Current Custody: Stored in Location - Room A Colleetion Date/Time: 07/14/2016 - 01:00Hrs Collection Purpose: Evidence Collected By: 42 - BARCZAK, ANDREW Collection Location: DGPD Packaging/Quantity/ltem Type: One envelope containing - 7 - Documents (non-curency) Detail Description: stl images provided by Oe. Jacobs #27 ‘Owner: There is no owner associated with his item MakeiModel: Value: $0.00 ‘Weight Received: Weight Disposed: Item Notes: Tem Number O05 i ee ek Container # Process: Hold for investigative purposes Current Custody: Stored in Location - Roam A Collection Date/Time: 08/09/2016 - 12:37Hrs Collection Purpose: Evidence Collected By: 42 - BARCZAK, ANDREW Collection Location: DGPD Packaging/Quantity/Item Type: One envelope containing - 1 - Video tapes resords cssetes Detail Description: CD containing documents from MoneyGraim subpoena response ‘Owner: Theres no owner associated with his item Make/Model: Value: $0 00| Weight Recelved Weight Disposed: lem Notes: Case Officer Signature Date Supervisor Signature idence FUR ACK ADO Departanent (se HEC Page 2 of 29.62016 A Downers Grove Police Department Department Case Report (Selected Items Only) Department Case Number: 16-7468 Related Case t* Case Information Case Otic Offense Date/Time: Offense Location: 7 - JACOBS, ROBERT 1272016 = 12.001Ie8 Offense Type: 3970 Extortion Expiration Date: 07122019 Jurisdiction: DuPage County ‘Court Date: Disposition Disposition Date: ‘Case Comments: 07-14-16 Oiticer Jacobs transfered tem #1 to Sg. Thayer who in tum transferred it to FIAT CFU for forensie analysis. Victim Sandack needed computer buck for work, so when it was returned by CII, it was given to Midnight Patol Supervisor Lichamet to be given back to Sandack 8-04-16 Paper copies of tems 2 and 4 given to Records Manager Tracy Adams Case Names Name Type: Vietim Same: Sandck Ronald SecM Race: W000: I Hon: Phone: wwe: Address: Additional Name Information SSN: Case Items tem Number: 006 Container i Process: Hold for investigative purposes Current Custody: Item Submitted into Property ~ Temp Locker Colletion Date/Time: (0906/2016 - 10-00Hes Collection Purpose: Evidence Colleeted By: 42 - BARCZAK. ANDREW Cotletion Location: DGPD Packaging/Quantity/tem Type: One envelope containing - |= Video tapesrevards.cassetes Detail Description: CD containing documents from Yahoo subpoena response ‘Owner: There i no ovsner associated wath this item Make/Model: Value: $0.00 Weight Received: Weight Disposed: {tem Notes: Ly #2 Pb Page | of 198 2016 ‘AN 0 Downers Grove Police Department Department Case Report (Selected Items Only) Department Case Number: 16-7468 Related Case's: Case Information (Case Officer: 27 “JACOBS, ROBERT e: D226 12.00lIrs Offense Type: 3970 Extortion Expiration Date: 07/12/2019 Jurisdiction: DuPage County Court Date: Disposition Disposition Date: ‘Case Comments: 07-14-16 Otic Jacobs transfered He SSandack ned computer back For wrk, sa when it wa returned by CFL be piven back to Sandack 171 co Sel. Thayer who inn transferred i fo FIA CPU fr forensic analysis. Vietim it us given to Midnight Parol Supervisor Lichamer to (08-04-46 Paper copies of lems 2 and 4 given to Records Manager Tracy Adams Case Names Name Type: Vietim Name: Sandack, Ronald L SerM Race W 008 EEE Nome Phone: Addcess: we: Additional Name Information SNA Case Items tem Number: Container Current Custody: lem Submited into Propery = Temp Locker Collection Date/Time: 09/08/2016 - 10 00L}rs Collected By: 19 BYLLS. ROBERT Colleetion Location: DGPD Via Einsit Packaging/Quantity/Item Type: One envelope contamning - | -CDROM. Detail Description: Dats Irom Skype search warrant Owner: There is no owner associated ith this item Make/Model: Weight Received: Weight Disposed: term Notes: Process: old for investigative purposes Collection Purpose: Evidence Value: $0 00) (Case Officer Signature Date Supervisor Signature Page Lof |992016 YN 0 Downers Grove Police Department Department Case Report (Selected Items Only) 16-7468 Department Case Number Related Case #'s: Case Information Case Officer: 27- JACOBS, ROBERT Offense Date/Time: 07/12/2016 12.0085 ‘Difense Location: ‘Offense Type: 3970 Extortion Expiration Date: 07122019 ‘Jarisdietion: DuPage County Court Date: Disposition: Disposition Date: ‘Case Comments: 07-14-16 Otic lacs tra Sandack nevded computer bick Tor work, s0 when as ho given back vo Sandack J tem #1 to St. Thayer who in turn eanserred itto FIAT CPU for forensic analysis. Vietim turn by CFU), it was given to Midnight Paeol Supervisor Lichumer to (08-04-16, Paper copies of Items 2 and 4 given to Records Munager Tracy Adams Case Names Name Type: Viet 2 Name: Sandck, Rona sexM Race: DOB ARE Home Pron adres we Adgitional Name Eaformatier SSN Case Items tem Number: 008 Container # Process: Hold for investigative purposes ‘Current Custody: Item Submate into Property Temp Locker Collestion Date/Time: 0909/2016 -20 10liss Callection Purpos Collected By: 90 «THAYER JEREMY Collection Location: DGPD | Packaging/Quantity/Item Ty} |, Detail Description: all messages copied ffom Sandack’'s SKYPE profile Owners here over associated with this item idence One envelope conning 1 = known Gocument(s) Make/Model: Value: $0 00 Weight Received: ‘Weight Disposed: Item Notes: Case Officer Signature Date Supervisor Signature Page 1 of |INVESTIGATIONS UNIT SUPPLEMENTAL REPORT PAGE 1 OF 1 PAGE (5) INCIDENT # 16-7468 COMPLAINANT'S LAST NAME: NARRATIVE: Yahoo Subpoena Response This is a supplemental report regarding the Yahoo subpoena (Du Page County subpoena #22670) request | made back on 07-15-16. | On 09-06-16, | received an e-mail from the Du Page County State's Attorney Office that included attachments of documents from the subpoena response by Yahoo. | had an opportunity to review ——— es | attached a copy of these documents to this report. | downloaded the Yahoo documents and subsequently transferred them onto a disc to be entered into evidence. Nothing further. —7 Reporting OMe iar® | Da ] Approving Oniper sarF | Date DET. A. Bastzak 42 | 09-06-16 / NaS | C 40 |nafor/ Recordses 2 | of | VE HUE (Users/abarczak/AppData/Local/Temp/Temp1_fwrequestforinformationpertainingt.XO FUEINVESTIGATIONS UNIT SUPPLEMENTAL REPORT PAGE 1 OF 4 PAGE(S) COMPLAINANT'S LAST NAME: SANDACK NARRATIVE: INCIDENT # 16-7468 ‘Skype Search Warrant Response On 9/7/16, Microsoft (of which Skype is a subsidiary) replied with electronic records regarding search warrant 2016SW416 in which | sought records regarding Skype account | copied the records to CD-ROM and entered it into evidence. | provided the search warrant inventory to Judge Ferguson on 9/8/16 at 1345 hours. No further at this time. a Reponing ee: 7 Sur? [Dare ‘Approving Off Sar? ] Date LEY Mn | 19 9-8-16 Le ao. cafes/ie SY "RecordsINVESTIGATIONS UNIT SUPPLEMENTAL REPORT PAGE 1 OF 1 PAGE(S) INCIDENT # 16-7468 COMPLAINANT'S LAST NAME: SANDACK NARRATIVE: On 09-13-16, after examining all leads, including subpoena responses and search warrants, it was, determined that the offender was in the Philippines when this incident occurred. DGPD investigative personnel contacted the local authorities in the Philippines to provide them with information pertaining to this incident It should be noted Western Union has not responded to the subpoena request as of this date. However, DGPD investigators were able to obtain all necessary information through the initial fraud inguiry. At this time, all investigative leads have been exhausted with no local charges forthcoming. Case closed Reporting Omer Sart] Dae i Oiifeer: var] Date DET. A. Barozak #42 42 | 09-13-16 £32 Wy Mh, Records