EFTA01263046 ## Attachment A ## I. Devices Subject to Search and Seizure The devices that are the subject of this search and seizure warrant (the “Subject Devices”) are described as follows: The Subject Devices were all recovered from a search of a private island in the U.S. Virgin Islands, known as Little Saint James, which is an approximately 75 acre island located approximately four miles off the southeast coast of St. Thomas Island (the “Virgin Islands Residence”) on or about August 12, 2019. The Virgin Islands Residence consists of multiple structures, including a main residence as well as several other smaller structures on the island, including a pool house, sheds, a beach house, an office, and multiple cabanas. The Subject Devices are particularly described as follows: a. A gray Mac desktop computer labeled "kitchen mac," which was recovered from a desk in the main residence on the island ("Subject Device-1"); b. A silver Mac laptop labeled “JE big laptop,” bearing serial number W89111772QT, which was recovered from a desk in the main residence on the island (“Subject Device-2”); c. A silver MacBook Pro bearing serial number c02qm0gugwdp, which was recovered from a desk in the main residence on the island (“Subject Device-3”); d. A silver iPad model A1567 bearing serial number dmpql25ng5ypy, which was recovered from a desk in the main residence ("Subject Device-4"); e. A silver iPad model A1567 bearing serial number dmpqL1rmg5y, which was recovered from a desk in the main residence (“Subject Device-5”); f. A silver Mac desktop computer bearing serial number c02nm1m0fy14, which was recovered from a desk in the pool house on the island ("Subject Device-6"); g. A silver Mac desktop computer, which was recovered from a desk in a cabana on the island ("Subject Device-7"); h. A Toshiba Laptop, which was recovered from a box on the floor near a desk in a shed on the island ("Subject Device-8"); i. An HP laptop bearing serial number cnd81368v5, which was recovered from a desk in a shed on the island ("Subject Device-9"); j. A silver Mac desktop computer, which was recovered from a desk in a cabana on the island ("Subject Device-10"); 2017.08.02 CONFIDENTIAL SDNY_GM_00000377 EFTA_00114461 EFTA01263047 k. A silver Macbook desktop computer, which was recovered from a desk in a cabana on the island ("Subject Device-11"); 1. A Dell Inspiron Tower computer model D19M QCNFA335, which was recovered from a desk in the beach house on the island ("Subject Device-12"); m. A silver Mac desktop computer model A1311 bearing serial number W804736DDAS, which was recovered from a desk in the beach house on the island ("Subject Device-13"); n. A Unfi video bearing mac ID 1829f b4fbe426ea90, which was recovered from a server rack inside a shed on the island ("Subject Device-14"); o. A Unifi Server bearing mac ID 1735K 788A20463234-8uuu9f, which was recovered from a server rack inside a shed in on the island ("Subject Device-15"); p. An HP server with four 500 GB drives, bearing serial number MXQ3220187, which was recovered from a shed on the island ("Subject Device-16"); q. A Panasonic KX TDE100 computer bearing serial number KX-TDa0104 9LCCD005398, which was found on a server rack in a shed on the island (“Subject Device-17”); r. A 6 bay with 146 GB drives bearing serial number MXQ824A1R, which was found on a server rack in a shed on the island ("Subject Device-18"); s. A silver Mac desktop computer, which was recovered from a desk in a cabana on the island ("Subject Device-19"); t. An HP desktop tower model 260-A010, bearing serial number cnv7160050, which was recovered from the maintenance office on the island ("Subject Device-20"); u. An HP tower model 260-A010, bearing serial number cnv716004y, which was recovered from the maintenance office on the island ("Subject Device-21"); v. A Mac desktop computer model A1312, bearing serial number w89524czspj, which was recovered from the maintenance office on the island ("Subject Device-22"); w. A Lenovo tower machine type 90J0, bearing serial number mj07yg6u, which was recovered the maintenance office on the island ("Subject Device-23"); x. A Lenovo tower bearing serial number 153306g2umjxekgx, which was recovered the maintenance office on the island ("Subject Device-24"); y. An HP Tower bearing serial number CNV74213M3 570-P056, which was recovered the maintenance office on the island ("Subject Device-25"); 2 2017.08.02 CONFIDENTIAL SDNY_GM_00000378 EFTA_00114462 EFTA01263048 z. A Unifi cloudkey with FCCID: SWX-UCCK IC 6545A-UCCK and Mac ID 1843kb4fbe4d30c69-dcrgm9, which was found on a server rack in a shed on the island ("Subject Device-26"); and aa. A red Nikon digital camera, which was recovered on a file cabinet next to a desk in a cabana on the island ("Subject Device-27"). ## II. Review of ESI on the Subject Devices Law enforcement personnel (who may include, in addition to law enforcement officers and agents, attorneys for the government, attorney support staff, agency personnel assisting the government in this investigation, and outside technical experts under government control) are authorized to review the ESI contained on the Subject Device for evidence, fruits, and instrumentalities of violations of Title 18, United States Code, Sections 1591 (sex trafficking of minors), and 371 (sex trafficking conspiracy) (the “Subject Offenses”) described as follows: 1. Evidence concerning the identity or location of the owner(s) or user(s) of the Subject Devices 2. Evidence concerning the identity or location of, and communications with, coconspirators of Jeffrey Epstein, including 3. Any documents or communications with or regarding victims or potential victims of the Subject Offenses; 4. Documents or records reflecting payments to victims and/or co-conspirators including but not limited to bank and financial records, spreadsheets, ledgers, account listings, check and wire records, and documents reflecting cash withdrawals. 5. Any photographs of victims or potential victims of the Subject Offenses. 6. Any nude, partially nude, or sexually suggestive photographs of individuals who appear to be teenage girls, or younger. 7. Records or other items that evidence ownership, control, or use of, or access to devices, storage media, and related electronic equipment used to access, transmit, or store information relating to the Subject Offenses, including, but not limited to, sales receipts, warranties, bills for Internet access, handwritten notes, registry entries, configuration files, saved usernames and passwords, user profiles, e-mail contacts, and photographs. 8. Any child erotica, defined as suggestive visual depictions of nude minors that do not constitute child pornography as defined by 18 U.S.C. §2256(8). If the Government determines that any of the Subject Devices is no longer necessary to retrieve and preserve the data on the device, and that any of the Subject Devices is not subject to seizure pursuant to Federal Rule of Criminal Procedure 41(c), the Government will return any such Subject Device, upon request. 3 2017.08.02 SDNY_GM_00000379 EFTA_00114463