EFTA00125856.pdf
Extracted Text (OCR)
1
2
3
4
DIGITALLY RECORDED
5
SWORN STATEMENT
6
OF
7
8
9
OIG CASE #:
10
2019-010614
11
12
13
14
15
16
17
18
DEPARTMENT OF JUSTICE
19
OFFICE OF THE INSPECTOR GENERAL
20
SEPTEMBER 22, 2021
21
22
23
24
25
26
RESOLUTE DOCUMENTATION SERVICES
28632 Roadside Drive, Suite 285
Agoura Hills, CA 91301
Phone: (818) 431-5800
EFTA00125856
LIMITED OFFICIAL USE
1
APPEARANCES:
2
3
OFFICE OF THE INSPECTOR GENERAL
4
BY:
5
BY:
6
7
8
WITNESS:
9
10
11
12
OTHER APPEARANCES:
13
NONE
14
15
16
17
18
19
20
21
22
23
24
25
26
EFTA00125857
LIMITED OFFICIAL USE
3
1
MR.
: It's Senior Special Agent
2
. He's also assisting on the
3
case.
4
MR.
: Is it Dennis --
5
MR.
:
Yeah.
6
MR.
7
MR.
:
Yeah. I'm right here.
8
I'm the Senior Special Agent here. So, yeah.
9
Like
here just said, we just want to ask
10
you a couple questions regarding August 8th
11
through the 10th of 2019.
12
MR.
: Okay.
13
MR.
: And just so you know, all
14
of our interviews are recorded.
15
MR.
: Okay.
16
MR.
: And just for
17
documentation purposes. Just so you know.
18
MR.
:
Understood.
19
MR.
: All right. Great. So,
20
is going to take it. I'll only jump in
21
if we need some clarifying information.
22
MR.
: Okay.
23
MR.
: Perfect. And I'm going to
24
start the recording.
25
MR.
: Okay.
EFTA00125858
LIMITED OFFICIAL USE
4
1
MR.
: My name is
, and
2
I'm a Special Agent with U.S. Department of
3
Justice, Office of the Inspector General. New
4
York Field Office. This interview is with
5
former SigNet employee, Jeff
. And it
6
is being conducted as part of an official U.S.
7
Department of Justice, Office of the Inspector
8
General investigation. Today's date is
9
September 22nd, 2021. The time is 9:03 a.m.
10
This interview is being conducted
11
telephonically, via phone number (III) III-
12
. Did I get that right?
13
MR.
: Yes.
14
MR.
: Okay. Also present --
15
MR.
: I'm going to read that
16
back. (M) •
I'm sorry.
17
MR.
: Yes. Perfect. Also present
18
is DOJ/OIG Senior Special Agent Dennis
19
This interview will be recorded by
20
me, Special Agent
. Could
21
everyone please identify themselves for the
22
record, and spell your last name? To start,
23
again, I am DOJ Special Agent
24
25
MR.
: Senior Special Agent
EFTA00125859
LIMITED OFFICIAL USE
5
1
with the DOJ/OIG.
2
3
MR.
: Jeff, can you introduce
4
yourself, please?
5
MR.
: Former SigNet employee,
6
Jeff - or Jeffrey, full name -
. M-C-
7
K-E-N-Z-I-E.
8
MR.
: Jeffrey. I apologize for
9
calling you Jeff.
10
MR.
: That's - no, no - I go by
11
Jeff.
12
MR.
: All right.
13
MR.
: But I gave you my formal.
14
MR.
: Yeah. Thank you. This is an
15
official DOJ/OIG investigation into the death
16
of inmate Jeffrey Epstein, and the surrounding
17
circumstances. And you are being asked to
18
voluntarily provide answers to our questions.
19
Will you agree to a voluntary interview?
20
MR.
: Yes.
21
MR.
: Thank you. Please let me
22
know if you do not understand any questions I
23
ask, and I will repeat it, or try to rephrase
24
it.
25
MR.
: Okay.
EFTA00125860
LIMITED OFFICIAL USE
1
MR.
: Okay? I'm going to go
2
through some of your background, and then we'll
3
go into the service request. What is your
4
current home address?
5
MR.
: Current home address is
6
- and
7
that's
8
9
MR.
: Okay. And --
10
MR.
: Zip code is
11
MR.
: -- thank you. What is your
12
date of birth?
13
MR.
14
MR.
: Is this your cell phone
15
number, the (III) number?
16
MR.
: Yes.
17
MR.
: Okay. And what is your
18
highest level of education?
19
MR.
: High school. One year of
20
college.
21
MR.
: All right. Where did you
22
attend college?
23
MR.
: I went to Liberty
24
University.
25
MR.
: Where is that?
•
EFTA00125861
LIMITED OFFICIAL USE
1
MR.
: Lynchburg, Virginia.
2
MR.
: Was there a major you were
3
following?
4
MR.
: It's just business
5
management.
6
MR.
: Okay. And what did you do
7
prior to working for SigNet?
8
MR.
: Prior to SigNet, I actually
9
delivered Little Debbie cakes for six months.
10
MR.
: Excellent. And when did you
11
begin working for SigNet?
12
MR.
: When did I pick up working
13
there?
14
MR.
: Yeah. When did you begin
15
working for SigNet?
16
MR.
: Oh. I'm sorry. I'm sorry.
17
I'm going back too far. Sorry. SigNet. I
18
actually worked for Orion Systems Group. That
19
as in Fairfax, Virginia. Sorry. I skipped a
20
whole bunch of years there.
21
MR.
: No problem.
22
MR.
: Yeah.
23
MR.
: I'm thinking before the
24
security industry. Sorry about that. Okay.
25
MR.
: And -.
EFTA00125862
LIMITED OFFICIAL USE
8
1
MR.
: Yeah. Oh, no. Go ahead.
2
MR.
: No, no. No problem. And
3
when exactly did you work, start, begin work
4
for SigNet?
5
MR.
: That was April 2011.
6
MR.
: Okay. And what was your
7
position with SigNet?
8
MR.
: I came on as a service
9
tech, initially. And then, I entered into the
10
role, I want to say it was probably somewhere
11
in 2012, middle of 2012, or maybe early 2013.
12
I think it was the middle of 2012, they put me
13
as the senior customer support representative.
14
MR.
: And that was your position in
15
August 2019?
16
MR.
: Yes.
17
MR.
: Okay. And what did that - as
18
a senior customer representative - what did
19
that position entail?
20
MR.
: So, that was basically
21
traveling to the Federal Bureau of Prisons,
22
whenever they needed their VMS video system
23
server upgrades. Basically, any swap outs of
24
their systems, when they expired or went out of
25
warranty. And then, if I wasn't traveling,
EFTA00125863
LIMITED OFFICIAL USE
9
1
doing the upgrades, I was at home, working from
2
my house, and doing technical support for the
3
video systems at the prisons.
4
MR.
: Okay. So, the main client
5
that you worked with was the Federal Bureau of
6
Prisons?
7
MR.
: Yes.
8
MR.
: Okay. And when did you leave
9
SigNet?
10
MR.
: That was December 30th,
11
2019.
12
MR.
: Where are you employed now?
13
MR.
: I am at a UK based company
14
called ONVU Technologies. That's O-N-V-U.
15
MR.
: Okay. Thank you.
16
MR.
: Off of OSCAR NANCY VICTOR
17
UMBRELLA (Indiscernible *00:05:36) and Victor.
18
(Indiscernible *00:05:39).
19
MR.
: Thank you. As part of your
20
job at SigNet, in 2019, do you recall working
21
on projects, or work orders, for the
22
Metropolitan Correctional Center in New York
23
City?
24
MR.
: Yes.
25
MR.
: Do you recall working on a
EFTA00125864
LIMITED OFFICIAL USE
1
project that started August 8, 2019?
2
MR.
: Yeah. I remember the
3
project. I don't know the exact date, but that
4
sounds about right.
5
MR.
: Hey. I just want to clarify.
6
You mentioned the ONVU, that where you work,
7
have you been working there since December
8
2019?
9
MR.
: No. I worked at -. When I
10
left SigNet, I went to another company. It's
11
called Enterprise Security Solutions.
12
MR.
: Okay. And that was in
13
December 2019?
14
MR.
: Yeah. It was December
15
31st, or yeah, basically.
16
MR.
: (Indiscernible *00:06:28)
17
MR.
: January.
18
MR.
: Okay. And you were there for
19
how long?
20
MR.
: Until July, pfft. What was
21
that? July. July. It was July this year.
22
can Look it up.
23
MR.
: And in July, you came over to
24
our
You started working at ONVU?
25
MR.
: Yes. So, my last day at
EFTA00125865
LIMITED OFFICIAL USE
11
1
ESS was July 9th. And my first day at ONVU was
2
on July 12th.
3
MR.
: Okay.
4
MR.
: 2021. Yeah.
5
MR.
: Okay. Thank you for
6
clarifying that.
7
MR.
: Yup.
8
MR.
: Now, as part of - and I'm
9
going to go back to that last question I asked
10
- as part of your job at SigNet in 2019, do you
11
recall working on projects, or work orders, for
12
the Metropolitan Correctional Center in New
13
York City?
14
MR.
: Yes.
15
MR.
: Who were you dealing with at
16
the MCC?
17
MR.
: I believe that was
18
MR.
19
MR.
20
MR.
: Okay. And we have a copy of
21
SigNet service request, 24975. Because this is
22
telephonically, I know I can't show it to you,
23
but I will read it to you. Is that all right
24
with you?
25
MR.
: Yeah.
EFTA00125866
LIMITED OFFICIAL USE
12
1
MR.
: It says, "Raid (Phonetic Sp.
2
*00:07:32) just crashed." That's under the
3
service request. And this was created on
4
August 8, 2019. That status shows ESOP
5
assigned, and it's assigned to Jeff Cranor,
6
Jeff
, and Justin Houston. The contact
7
we have is,
and the service
8
location is for 150 Park Row, New York, New
9
York. Is your understanding that is for the
10
MCC?
11
MR.
:
Yes. I believe so. I
12
don't know their exact address, but yeah --
13
MR.
: Okay.
14
MR.
it sounds
15
MR.
: Now, this says
16
MR.
familiar.
17
MR.
is this an emergency
18
request? It says, yes. Must call. The
19
problem was reported by
. And -
20
21
MR.
•
22
MR.
. I apologize.
23
It's
. And I'm going to read the
24
comments here. The earliest comment, it looks
25
like, is on - it's by you - on August 8th, at
EFTA00125867
LIMITED OFFICIAL USE
13
1
3:36 p.m. It states that the assignment on
2
August 8th to 16th, all day for Justin Houston,
3
Jeff
and Jeff Cranor was been
4
created. It says Jeff Cranor will be working
5
on this. Get a case started with Qognify?
6
MR.
: Do you want to start with
7
August 8th first. Is that what you started
8
with?
9
MR.
: Yeah.
10
MR.
: Okay. Sorry.
11
MR.
: It's Qognify. That's Q-O-G-
12
N-I-F-Y. Is that your internal system?
13
MR.
: No. So, Qognify is the
14
video manufacturer of the software that they
15
were using. At the time, though, they were - I
16
believe - their system was a NICE Vision
17
system, just to give you guys a little
18
background on it. So, Nice Vision was the
19
prior company.
20
MR.
: Okay.
21
MR.
: When most of the prisons
22
got their video systems. And then, Qognify
23
basically purchased, or bought, Nice Vision.
i
24
want to say that was probably in, like, 2018.
25
Maybe 2017.
EFTA00125868
LIMITED OFFICIAL USE
14
1
MR.
: Okay. So, and that's why
2
MR.
: So, they rebranded,
3
basically, the new systems that they were
4
putting in.
5
MR.
: Understood. Okay. And then,
6
the assignment was created at 3:36 p.m. There
7
is a comment by Jeff
- that's you,
8
right? - at 3:38 p.m. And --
9
MR.
: Yeah.
10
MR.
: -- it looks like someone
11
addressed it to you. It says, "Hi, Jeff.
12
Unable to locate anything official. The basic
13
steps are as following: One, set the raid
14
level to none, and save. It will restart it
15
with all drives being J. Replace any faulty
16
drives. Two, set the raid level to five, and
17
save. It will restart and begin
18
initialization. The password is 1111. Four
19
ones. And if I recall correctly, once the raid
20
is created, you will need to restart Windows,
21
and create the proper partitions. I'll keep
22
looking, but that should get you going. Best
23
regards, Derek Barr (Phonetic Sp. *00:10:13),
24
Senior Support Engineer."
25
MR.
: Derek Barr. Okay. I was
EFTA00125869
LIMITED OFFICIAL USE
15
1
wondering who that was. I was going to guess
2
Sharom (Phonetic Sp. *00:10:19), but
3
MR.
: Is that someone --
4
MR.
: Okay .
5
MR.
-- internally, or is that
6
from Qognify?
7
MR.
: No. So, that -- yeah -
8
that's the Qognify technical support engineer.
9
MR.
: So, you reached out to
10
Qognify and to get assistance on this matter,
11
and they responded on these are the steps?
12
MR.
: Mm-hmm.
13
MR.
: All right. And the next
14
step, the next comment I have is by Jeff
15
on August 14th, 2019. 8:02 p.m. So,
16
this is approximately six days after the
17
incident.
18
MR.
: Okay.
19
MR.
called us on
20
Thursday, August 8th, stating that he had two
21
bad drives in his raid unit. Off the Nice
22
Vision Pro, Unit NVR (Phonetic Sp. *00:10:57).
23
We advised him to get replacement drives. Once
24
they are replaced, they should start to
25
initialize, to become available for the raid
EFTA00125870
LIMITED OFFICIAL USE
1
array.
did not have drives
2
readily available. He checked with his local
3
CSM." What is CSM?
4
MR.
: Should be computer
5
specialists manager --
6
MR.
: That's
7
MR.
:
I believe.
8
MR.
: -- that's internal for the
9
BOP?
10
MR.
: Yup.
11
MR.
: Okay.
12
MR.
: That's what their IT
13
manager, and the IT department, I think.
14
MR.
: Thank you. "He checked with
15
his local CSM, to see if they had any spare
16
replacement drives. Once he located
17
replacement drives on Friday, August 9th, he
18
did not have access to the DVR room, to replace
19
them. He called SigNet for some phone support
20
on Saturday, August 10th, when he gained access
21
to the DVR room. He attempted to replace the
22
drives, and they started to rebuild. During
23
the rebuild process of the drives, the drives
24
were required to be taken out of raid, on DVR-
25
2. Once the drives were removed without proper
EFTA00125871
LIMITED OFFICIAL USE
17
1
shutdown of the recorder, the video database
2
becomes corrupted. Typically, any time the
3
raid is - raid on - raid five configuration
4
loses two drives, the raid needs to be rebuild,
5
and all data is wiped from the raid." Do you
6
recall making that comment?
7
MR.
: Yeah. That sounds about
8
right. That sounds what I would have stated.
9
MR.
: Okay. So, I'm going to go
10
back. Can you explain to me the phone call
11
that you got from
on August 8th, if you
12
recall what he stated to you on August 8th?
13
MR.
: Yeah. I'm trying to think.
14
Well, yeah. I'm trying to -. So, August 8th,
15
well, that was a
Was that a, like, a
16
Saturday, maybe?
17
MR.
: No.
18
MR.
: Maybe it was -.
19
MR.
: That was a Thursday.
20
MR.
: Thursday. Okay.
21
MR.
: It looks like, on Thursday,
22
he called - August 8th - he called you, he
23
reported the incident. You gave - possibly
24
gave - him instructions on what to do. August
25
9th, he got replacement drives, but he did not
EFTA00125872
LIMITED OFFICIAL USE
18
1
have access to the room. That would be on a
2
Friday. Then August 10th is when he called you
3
back, and it looks like you -. The incident
4
with Epstein happened, and he called you back.
5
MR.
: Oh. Okay. Okay. Yeah,
6
because I was going to say -. Let's see.
7
Yeah. I have a different recollection than I
8
thought, because I thought, from what, and I
9
want to say, maybe that incident started
10
earlier, but maybe not. Because what I was,
11
what I was recalling on that was, me and my
12
wife were actually about, I think, let's see,
13
2019. So, that would have been -.
Yeah.
14
Me and my wife and my son were out at a
15
cabin on a weekend get-away, and I remember an
16
email, I believe that was from Justin, saying
17
something that he had gotten a call from
18
. Now, that could have been
19
after the initial reach out from him. That the
20
drives were down. I think that might have
21
been. So, I'm kind of questioning if
22
reached out to me initially, or if he reached
23
to Justin, and then Justin assigned that to me.
24
Because Justin, I believe, was also out on
25
vacation, either that week or that weekend, as
EFTA00125873
LIMITED OFFICIAL USE
19
1
I was, but I was kind of local. So, he had
2
asked me to reach out or, you know, basically
3
work with him, work with Qognify. And so,
4
that's what I was remembering from that,
5
because I know, I remember specifically, I was
6
on vacation on the weekend.
7
And trying to reach out, basically, to,
8
want to say, like, our sales rep, Steve Smith
9
(Phonetic Sp. *00:14:27), who worked, you know,
10
for the Bureau, or worked with the Bureau of
11
Prisons. He sold all their equipment.
12
Reaching out to Derek Barr. But again, I could
13
be -. I could be wrong on the timeframe there.
14
But --
15
MR.
: It's --.
16
MR.
: -- either way, yes, I did
17
work directly with
- at
18
one point, on the case, prior to visiting the
19
site. So, yeah. I was just trying to get that
20
timeline right, because I don't want to tell
21
you that it happened this specific way you're
22
saying it, and then it didn't.
23
MR.
: No problem. And you
24
mentioned that you were away with your wife on
25
a camping trip. Do you know how long the trip
EFTA00125874
LIMITED OFFICIAL USE
1
was for?
2
MR.
: It was just a weekend. So,
3
I think we might have left out on a Friday, you
4
know, Friday afternoon, and then, probably came
5
back, like, Sunday night.
6
MR.
: So, it's possible that you
7
spoke to him on Thursday, August 8th, before
8
you headed out for the camping trip?
9
MR.
: Possibly. Yeah.
10
MR.
: You don't recall?
11
MR.
: Yeah. I don't - yeah - I
12
don't recall specifically. I do - and like I
13
said - I do know, I did talk to him, at one
14
point, about the drives, and that he couldn't
15
. Okay. So - yeah - that does clear it.
16
Okay. So, that's really -. Sorry. I'm just
17
trying to piece it together.
18
MR.
: No problem.
19
MR.
: So, yeah. He did mention
20
something about that he would check with -.
21
So, that's why I'm trying to think that it may
22
have been the weekend prior to the 8th. Or not
23
the 8th. But it would have been the 10th,
24
would have been the Saturday. I want to say he
25
reached out before then. Because I want to say
EFTA00125875
LIMITED OFFICIAL USE
1
we were out on the weekend, before that.
2
MR.
: So, hold on. Let me just
3
clarify.
4
MR.
: Yeah. So, let me. So,
5
I'm looking at this now, Jeff. This is Dennis.
6
So, on August 8th --
7
MR.
: Uh-huh.
8
MR.
: -- that's when you
9
received, it looks like, a message from that
10
individual. Who is it?
11
MR.
: Derek Barr.
12
MR.
: Derek Barr --
13
MR.
: Yes.
14
MR.
: -- saying, "Hi, Jeff.
15
Unable to locate anything official. The basic
16
steps are as follows." So, it looks like,
17
maybe somebody would have reached out to you
18
before. So, in fact, that was the August 8th
19
comment. And then --
20
MR.
: Yeah.
21
MR.
: -- that was something
22
that says comment made by you. And then --
23
MR.
: Uh-huh.
24
MR.
: -- the next comment made
25
by you was actually on August 14th, 2019.
EFTA00125876
LIMITED OFFICIAL USE
1
MR.
: Okay.
2
MR.
: And what you're stating
3
here is, it's saying,
called us
4
on Thursday, August 8th, stating that he had
5
two bad drives." So, it doesn't specifically
6
say he called you. Do you know if he would
7
have called you direct, or he would have called
8
someone else with SigNet?
9
MR.
: That's why I was saying.
10
think he may have called Justin initially. And
11
then, Justin had asked me to basically work on
12
that case because, like I said, I think Justin
13
was out on vacation, and that's why he passed
14
the case to me, asking me to work with
15
and Qognify to try to see if we could get those
16
replaced. Let me look at the year here. I'm
17
just trying to pull it up.
18
MR.
: And you mentioned there is a
19
possibility you were away on a camping trip the
20
weekend prior to that.
21
MR.
: So, the 10th. Yeah. I
22
mean, I could try to verify that, if that's,
23
like, an absolute --
24
MR.
: No, no.
25
MR.
: -- necessity. I could see.
EFTA00125877
LIMITED OFFICIAL USE
23
1
Yeah. I know it was basically right around
2
this case time. So, it could have been the
3
prior, or it could have been that weekend. But
4
yeah. That's really -.
5
MR.
: I know it's tough. It's been
6
a couple years. So, remembering the exact
7
details is kind of hard.
8
MR.
: You know, it may have been
9
that Friday night. The 9th. So, you said I
10
was talking to Derek on the 8th?
11
MR.
: Yes.
12
MR.
: Or I got a reply from him
13
on the 8th. Yeah. Because I want to say we
14
left out on the 9th, and we were at the cabin
15
on the 9th. And I want to say that me and
16
Justin were maybe communicating back and forth
17
via email. And trying to kind of figure out,
18
you know, what drives he could get, or
19
whatever. So, maybe, maybe it all happened
20
right in that weekend. Because I do remember
21
something about hearing that, you know, the
22
incident happened there.
23
MR.
: Okay. Yeah, and I'm --
24
MR.
: Uh-huh.
25
MR.
:
re-reading this. It
EFTA00125878
LIMITED OFFICIAL USE
24
1
doesn't specifically state in your comment, on
2
the 14th, that you actually ever spoke with
3
him. It just says
4
MR.
: With
5
MR.
: -- it - yeah - with
6
It just says that he called us on the
7
8th. And then, it talks about, you talk about
8
how, on the 9th, he didn't have access to the
9
DVR room, to replace them. And then, it says,
10
he called SigNet for phone support on Saturday,
11
August 10th. So, do you know
12
MR.
: Okay.
13
MR.
: -- if you were away, I'm
14
assuming this information was passed to you on
15
August 14th, when you made the comment? Would
16
that be accurate, since it sounds like you were
17
aware that weekend?
18
MR.
: Well, I do -. So, I do
19
remember talking to him, at some point, and him
20
Well, I don't know if I talked to him or
21
emailed --
22
MR.
: Okay.
23
MR.
: -- but basically, I
24
remember, I remember him saying that, like, he
25
was trying to find drives. He didn't have any,
EFTA00125879
LIMITED OFFICIAL USE
25
1
so he was going to check with the CSM, to see
2
if they had any on site. Then, I believe he
3
found them, and then, he said, and he called,
4
he either called me back, or emailed, and said,
5
hey, the room where the NVR is locked, and it's
6
our internal investigation office, and they
7
have the keys. I don't have access to that.
8
So, I'm going to have to wait until such and
9
such. It was probably Saturday. I think I
10
stated there that he could actually get access
11
into the room, to go try and replace the
12
drives.
13
MR.
: Okay. So --
14
MR.
: Sorry.
15
MR.
: You just
16
MR.
but
17
MR.
don't know if that's
18
August 8th or August 9th, the day you left for
19
your trip?
20
MR.
: No. I was actually trying
21
to see if I could pull up a Outlook data file,
22
because I believe I saved some emails.
23
MR.
: Oh, that would be
24
awesome. And then, specifically --
25
MR.
: I'm just like that.
EFTA00125880
LIMITED OFFICIAL USE
26
1
MR.
: -- yeah. No. That would
2
be great. Specifically -.
3
MR.
: I want to even say I saved
4
all of my tickets from SigNet, but I can't
5
promise that.
6
MR.
: Oh, that would be huge.
7
And I think going back, as far as, like, July
8
29th, if you don't mind, because that's when we
9
think that the drives may have actually gone
10
down.
11
MR.
: July 29th?
12
MR.
: Yeah. I mean, I don't
13
know that they contacted you or not, but that
14
would be the follow up question, after we
15
figure out what happened on the 8th and 9th.
16
It would be, how far back did you know that
17
these drives, or had you been working with
18
, to replace these things,
19
because it looks like they may have gone bad on
20
7/29/2019.
21
MR.
: 29th. So, that would have
22
been about.
That sounds about -. That sounds
23
about right.
24
MR.
: Why do you say that?
25
MR.
: Well, because - again -
EFTA00125881
LIMITED OFFICIAL USE
27
1
like, I know that he initially contacted us
2
about the drives being out. And I want to say,
3
it took -. I remember it -. I thought it was
4
at least a couple of days of the process of
5
trying to go back and forth with him. And I
6
don't know if it was me or Justin, basically
7
saying, hey, we've got to get drives. You
8
know, they don't sell them anymore at Qognify,
9
I don't think. Because they are basically non-
10
production drives, and we would have to get
11
refurbished drives. And I think Justin was
12
looking on, like, eBay, and, you know, a couple
13
of our sources, to find some. So, I don't know
14
exactly, did that comment say that he had
15
drives on site?
16
MR.
: So --
17
MR.
: Or did he order them?
18
MR.
: -- that --
19
MR.
: Because that's the other
20
question --
21
MR.
: -- it looks --
22
MR.
: -- is, did he not have
23
them?
24
MR.
: -- he didn't have access to
25
them.
EFTA00125882
LIMITED OFFICIAL USE
28
1
MR.
: Okay. So, that may have
2
been the gap, from the 29th.
3
MR.
: Well, it does say --
4
MR.
: (Indiscernible *00:22:07).
5
MR.
: -- so, after the August
6
8th thing, it says, "He checked with his local
7
CSM to see if they had any spare replacement
8
drives. Once he located replacement drives, on
9
Friday, August 9th, he did not --
10
MR.
: Okay.
11
MR.
: -- have access to the DVR
12
room to replace them."
13
MR.
: Okay. So then, he did have
14
them on site. Okay.
15
MR.
: At least that's --
16
MR.
: That's what it sounds like.
17
MR.
: -- that's what it sounds
18
like. Yeah.
19
MR.
: Yeah.
20
MR.
: Okay.
21
MR.
: So, I'm assuming that
22
means that you wouldn't have sent them. Do you
23
know who the CSM was, by chance?
24
MR.
: I can try to look here.
25
I'm looking at our database. I probably
EFTA00125883
LIMITED OFFICIAL USE
1
shouldn't have all this information, but -.
2
MR.
: It helps us a lot. We
3
appreciate it.
4
MR.
: Okay. Maybe, yeah. I
5
don't pass it out to, you know, other
6
companies, but stuff like this, I do find it
7
useful, if it -. Hmm. Okay. I've got -.
8
Hey. There is a camera outage. Oh. I've got
9
a camera outage report.
10
MR.
: What is that?
11
MR.
: But I don't
That shows
12
from 8/16. These are all looking at August
13
16th. Which could have been the time that I
14
actually was on site.
15
MR.
: Okay.
16
MR.
: Yeah, we would be looking
17
specifically 8/10, and prior.
18
MR.
: Okay. Let me see what I've
19
got. Do I have screenshots? 8/16. 8/11.
20
Okay. Let me go back and see. Let me look at
21
this report and see if it gives me, like, a
22
date of when this was exported to, because that
23
could be something, if you guys need it.
24
MR.
: Okay.
25
MR.
: I don't know if you guys
EFTA00125884
LIMITED OFFICIAL USE
30
1
have all that or not.
2
MR.
: We don't have the -. This is
3
This is between SigNet employees. Right?
4
MR.
: This is an Excel document,
5
but again, but I've got to see what date it
6
shows on here. Because they kind of hide it in
7
the columns. I'm trying to see if it has a
8
date. This is basically just a camera outage
9
report. So, I don't know if you guys need
10
that. And if that, again, I don't know if that
11
was ran from him, and we got that.
12
MR.
: But you said this was on the
13
16th?
14
MR.
: That one shows that it was
15
edited on the 17th, but it - like I said - in
16
the outage report, I thought that they give you
17
a date when it was actually exported from the
18
system.
19
MR.
: Okay.
20
MR.
: So, I would have to look at
21
the order. But yeah, let me go back to your
22
original. You're looking for the email traffic
23
and everything. So, let me see if I can find
24
that. Oh. Him. Oh, what's that? Sorry. I'm
25
looking through gigs and gigs of --
EFTA00125885
LIMITED OFFICIAL USE
1
MR.
: No problem.
2
MR.
: -- information here.
3
MR.
: No. We appreciate it.
4
Thank you.
5
MR.
: Oh, no problem. Hopefully,
6
I can find something that helps a little more.
7
Okay. So, I've got -. All right. Let me see
8
if I can load this into Outlook and see, if it
9
will load. All right. So, files. Open. And
10
export. Let's do an import. Oh, import from
11
another program or file. Oh, that is a ODF.
12
Yup, right there. Let's see. Allow duplicates
13
to be created, replace duplicates with items
14
imported. I have no idea. But I'll screw my
15
work email up. Crap.
16
MR.
: No problem. Can I - while
17
you're doing it, while you take a look - can
18
ask you a question?
19
MR.
: Yeah.
20
MR.
: This is, in here, it states,
21
"During the rebuild process of the drives, the
22
drives were required to be taken out of raid,
23
on DVR-2. Once the drives are removed without
24
proper shutdown of the recorder, the video
25
database becomes corrupted." Is that your
EFTA00125886
LIMITED OFFICIAL USE
1
understanding of what happened, from your
2
conversation with
3
MR.
: I'm - so, yeah - I'm trying
4
to figure out when that was happening, because
5
I do know that, at some point, the FBI came
6
there on site, I think prior to us showing up.
7
And I want to say that the recorder was
8
rebuilding, and they said that they had to take
9
the equipment out. And that's what I'm -.
10
That's what I'm trying to piece together, if it
11
was then that they took it out. Or if it was -
12
Yeah. Because I don't, I don't really make
13
any sense of him putting them in and then
14
pulling them out.
15
MR.
: Okay.
16
MR.
: Yeah, because I would
17
think, once he puts them in, I mean, he would
18
leave them to rebuild. And I think I would
19
have probably made that comment, because he
20
said something about the FBI coming in, they
21
need to confiscate the equipment. And then,
22
and I'm pretty sure I told him, I said, well,
23
you don't want to, you don't want to unplug
24
those while it's rebuilding because if it, you
25
know, basically stops, you have no pick up
EFTA00125887
LIMITED OFFICIAL USE
33
1
point to start rewriting. It's going to start
2
all over, and then, you're going to have gaps
3
where you're going to be missing recordings.
4
MR.
: Now, so, do you believe,
5
then, for whatever they did, that erased all
6
prior data, anything that was saved on there
7
would have been erased?
8
MR.
: If - yeah - if they pulled,
9
if they pulled power, and pulled the units out,
10
then yeah. I mean, it would have wiped, wiped
11
the raid, I would think.
12
MR.
: So -.
13
MR.
: Now, if we have
14
information that the servers were already down,
15
since 7/29/2019 --
16
MR.
: Mm-hmm.
17
MR.
: -- would have those
18
servers been recording up until the date that
19
they tried to rebuild them anyway?
20
MR.
: That depends, because I
21
don't remember if the -. I think those
22
servers, the way, the older servers, I believe
23
they were set to a raid five. Let's see.
24
Those are the pros. So, I want to say that is
25
a raid five, and they loaded, basically
EFTA00125888
LIMITED OFFICIAL USE
34
1
everything was kind of compiled together, on
2
the same raid in those servers. So, that would
3
have put the OS, and the video storage on the
4
same raid array.
5
But they partition out for the OS. So, if
6
they lost one drive, then that would be okay.
7
With a raid five. If they lost two drives,
8
then -. So, if they would have lost two drives
9
simultaneously, they would lose everything.
10
The recorder would go down, and you wouldn't be
11
able to get into the OS. From what I
12
understood. So, it's possible that he lost one
13
drive and called us. Initially. Was trying to
14
replace that. And then, when, you know,
15
basically, another one went down while the
16
other one was rebuilding. That could have been
17
possible. And that could explain why the OS
18
didn't crash.
19
MR.
: So, on that note, so, our
20
understanding, there is, like, let's say there
21
is 150 cameras in the MCC.
22
MR.
: Uh-huh.
23
MR.
: We were told about half
24
of them go to one drive, and half of them go to
25
the other drive. If that one drive went down
EFTA00125889
LIMITED OFFICIAL USE
35
1
on 7/29/2019, would those cameras that were on
2
that drive had continued to have recorded on
3
the other drive, or would have they stopped
4
recording, and only the other drive that was
5
good, that housed the other half of the
6
cameras, have recorded?
7
MR.
: Well, sorry. So, it really
8
doesn't work like that. But yeah. I mean,
9
yeah, in theory, you would want it to work like
10
that. But essentially, the raid will spread
11
the data over all drives.
12
MR.
: Oh, I'm going to stop -. Can
13
you explain what a raid is?
14
MR.
: So, a raid is a group of
15
drives.
16
MR.
: Is that, like, a DVR system?
17
MR.
: What's that?
18
MR.
: Is that, like, a DVR system?
19
MR.
: Yeah. I'm sorry. Yup.
20
Let's - yeah - let's go back. So, the DVR
21
system recorder. So, normally, their old set
22
up, I believe, had a - and that would be a PC
23
or a computer, like a server. A server. Like,
24
a rack PC server. That would contain the OS.
25
Okay. So, yeah. Never mind. Let me take back
EFTA00125890
LIMITED OFFICIAL USE
36
1
what I said about the OS. Because now, I'm
2
remembering their set up.
3
I believe they had -. The way the old
4
ones were, is they had a separate computer.
5
They called the Nice Vision Pro units. So,
6
that, I believe, had two drives in it. So,
7
that would be a raid one redundancy. So, that
8
-. So, again, the raid is a group of drives
9
for storage.
10
MR.
: Okay.
11
MR.
: And what a raid allows is,
12
so, like, in your case, you were just talking
13
about if you had two drives, you had, you know,
14
half the cameras recording in one, half the
15
other, to the other one, if one went down, you
16
would technically still have all the other
17
cameras on that drive. So, what the raid does
18
is basically, it allows you to take - say you
19
don't have that scenario, of losing half your
20
cameras - the raid allows you to put, you know,
21
there is a number of drives that it requires to
22
have for certain raid levels.
23
But basically, it allows you to, like,
24
let's say four to six hard drives. It groups
25
those together. So now, you - then the
EFTA00125891
LIMITED OFFICIAL USE
1
recorder takes the video, the video recording,
2
and starts to spread it out over all those
3
drives, and it basically makes a mirrored copy.
4
So, if one did fail, it still can go back on
5
the other drives, and access the copied files,
6
or the mirrored files.
7
MR.
: Now -.
8
MR.
: So, how
It's for the
9
purpose of redundancy, in case you did lose a
10
drive, you're not losing, you know, certain
11
data that was just written on that drive.
12
Because then, you have gaps in the recording.
13
MR.
: So, a raid can also be
14
referred to as DVR system. Right? Now, if a
15
DVR system, they have two DVRs. If DVR-2 went
16
down completely, right? It stopped recording.
17
Should it have --
18
MR.
: Mm-hmm.
19
MR.
: -- stopped recording on DVR-
20
1?
21
MR.
: No, because they are two
22
separate -. They are two separate
23
MR.
: Systems.
24
MR.
: -- machines.
25
MR.
: Okay. And how would they
EFTA00125892
LIMITED OFFICIAL USE
38
1
have known that the DVR system went down? Was
2
there any alerts that come up in Nice Vision,
3
anything that comes up to them?
4
MR.
: Yeah. So, it would. It
5
would normally come up on the -. It's called
6
the AMS, or the Application Management Server.
7
And that's, like, the primary unit that
8
controls the whole video system. And then, you
9
add recorders underneath that AMS. Depending
10
on how many cameras you have. That's how they
11
kind of allocate recorders. So, if you have
12
100 cameras, okay, let's put 100 cameras on
13
this recorder. Let's put 100 more on the
14
second one. So on and so forth.
15
And then, Application Management Server
16
basically allows the users to authenticate and
17
log into that system, from any client in the
18
facility. Or outside if you, you know, if
19
they've managed to network that way. But yeah,
20
the Application Management Server is kind of,
21
like, the gateway to let people in, to view the
22
video. And then, that also manages the traffic
23
of, okay, you want to see this video and this
24
recorder. Okay, you've got, you know, you've
25
got correct credentials. Okay, you're allowed
EFTA00125893
LIMITED OFFICIAL USE
39
1
to view that camera. And then, it sends the
2
feed --
3
MR.
: Okay.
4
MR.
: -- to their client station.
5
So, yeah. In short, the AMS would normally
6
have alerts, in an application, I believe it's
7
- it's not Investigator - it's called
8
Supervision.
9
MR.
: Mm-hmm.
10
MR.
: There was five different
11
applications for Nice Vision. Supervision
12
would keep all of the, like, the hardware, and
13
I think most software events, in that
14
application. And I think you could control,
15
basically, if you had pop-ups messages or
16
anything. But as far as if you didn't go to
17
that server physically, and check, from what
18
know from the Bureau, they did not allow those
19
servers to send email notifications out.
20
MR.
: So -.
21
MR.
: Because that would have
22
required them to load with an email client, on
23
the server, and then, you know, basically act
24
like it's, you know, someone's account on that
25
server, to send those email notifications out
EFTA00125894
LIMITED OFFICIAL USE
40
1
to other people in the facility there. And as
2
far as I know, up until I left, they didn't
3
allowed that.
4
MR.
: So --
5
MR.
: So, you had, you would have
6
to go the physical server, to see those
7
notifications. Or you would -. Well, I take
8
that back, because you could go on the client
9
and log into Nice Vision. And then, check the
10
Supervision. But it's not going to send you,
11
like, an email notification.
12
MR.
: So, I want to clarify this
13
for this. If you log into Nice Vision, let's
14
say you're reviewing the video footage --
15
MR.
: Mm-hmm.
16
MR.
-- if you log in, there would
17
have been an alert, saying that these cameras
18
are not recording?
19
MR.
: Yes. If you -. Ye ih.
20
MR.
: Now --
21
MR.
: Normally. I don't -. Now,
22
I don't know if there would have been a pop-up.
23
I would say, to be safe, you would have to
24
actually go into that Supervision app. So,
25
like I said, there was multiple apps, and most
EFTA00125895
LIMITED OFFICIAL USE
41
1
of the time, from what I see, you've got -.
2
So, there is a control app that's normally for,
3
you know, you can play back video and see live
4
video in that application.
5
And then, there is an app called Site
6
Builder, and that's basically letting you set
7
up the site. But the Supervision app would be
8
where you check on the status of, okay, if your
9
recorder is offline, if you've got a bad hard
10
drive, things like that. So, that's where you
11
have to go, to see that. So, I don't know if
12
they had pop-up alerts on there, and you, like
13
I said, I think you could set those up to pop-
14
up on your machine. But again, that would
15
dependent if you're logged in to Nice Vision.
16
And you have those pop-up alerts turned on.
17
Otherwise, you would have to log in, go to that
18
application, and look at the list of alerts --
19
MR.
: To see it. Okay.
20
MR.
: -- to see what was going
21
on.
22
MR.
: Or, if they tried to review
23
video, they would realize the fact it was not
24
recording.
25
MR.
: Right. That's the other
EFTA00125896
LIMITED OFFICIAL USE
1
way.
2
MR.
: Okay.
3
MR.
: Well, that goes back to,
4
I don't think that you actually ever answered
5
this question. I think we got kind of
6
diverted. Was --
7
MR.
: Sorry.
8
MR.
: -- you were talking about
9
the half of the video that were on the one
10
server, if that server went down, would have
11
that other server, then, captured it? Where
12
you're saying the mirrored it. Would have they
13
have captured that video, that, you know, the
14
server went down on 7/29/2019, the other server
15
is good. Would those videos have been saved
16
somewhere, if they were still a live feed was
17
going?
18
MR.
: Okay. So, you're saying,
19
if the server two went down, but server one
20
stayed up, you're asking, could you retrieve
21
the video from server two on server one?
22
MR.
: Correct.
23
MR.
: No. Because you have to
24
have a redundant server backup.
25
MR.
: And they didn't, in this
EFTA00125897
LIMITED OFFICIAL USE
1
case?
2
MR.
: No.
3
MR.
: All right. So,
4
regardless if they pulled the drives when it
5
was being rebuilt on the 10th, if the server
6
went down on the 29th of July, nothing would
7
have -. They wouldn't have been able to
8
extract anything from 7/29 to August 10th,
9
anyway.
10
MR.
: Yeah. If the whole server
11
went down. Yup.
12
MR.
: Okay.
13
MR.
: And just to clarify, I think
14
my understanding is, when the FBI got in there
15
on Saturday morning - -
16
MR.
: Mm-hmm.
17
MR.
already had pulled
18
out two drives.
19
MR.
: Okay.
20
MR.
: And he was rebuilding it.
21
MR.
: Okay.
22
MR.
: So, if they walked in, and if
23
- let's just say FBI followed the proper
24
protocol, they shut it down properly, they
25
pulled it down. And is it possible, when
EFTA00125898
LIMITED OFFICIAL USE
1
went to replace the drives, when he
2
replaced the drives, he could have wiped out
3
whatever was saved on the drives?
4
MR.
: If - yeah - it just depends
5
if they showed if they were bad. So, or if
6
they were totally, like, wiped. And non-
7
retrievable.
8
MR.
: All right. Because I
9
thought --
10
MR.
: (Indiscernible *00:39:07).
11
MR.
: -- what you were saying -
12
13
MR.
: Sorry. Go ahead.
14
MR.
: -- was that
was
15
rebuilding them --
16
MR.
: Yeah.
17
MR.
: -- and that's what he
18
should have done, was to replace those drives,
19
but then, the FBI pulled the ones that he was
20
replacing. Is that not correct? That he was
21
rebuilding.
22
MR.
: I don't know if they pulled
23
the drives, or if they pulled the whole
24
recorder out.
25
MR.
: They pulled the whole system.
EFTA00125899
LIMITED OFFICIAL USE
45
1
And my understanding is, when they left the
2
MCC, they took the whole system with them.
3
MR.
: Okay. Then that, I think
4
that was when I actually showed up on site the
5
following.
6
MR.
: And then, you guys set up a
7
new system for them, right?
8
MR.
: Yes. Yeah. Because I know
9
10
MR.
: Okay.
11
MR.
:
I know that FBI met me
12
there. Yeah. They showed up when I was kind
13
of getting the new system set up. And then,
14
they kind of jumped in and they were doing
15
stuff, and asking me questions about a, you
16
know, check to see where those video gaps and
17
stuff like that. Okay. So, I'm starting to
18
remember a little bit.
19
On the drives that you're talking about,
20
so, I want to say that we actually suggested to
21
him to pull all of the drives out, and try to
22
rebuild it, because I think that was our normal
23
protocol. If, let's say you had a bad drive,
24
sometimes on those older Pro units, you can
25
pull one out. As long as you don't have, like,
EFTA00125900
LIMITED OFFICIAL USE
46
1
two failed drives, like I was saying on our
2
raid five.
3
MR.
: Okay.
4
MR.
: Because if you have two
5
failed drives, you're not going to do anything
6
to fix it. But if you had one, you can pull
7
one out, and refeed it, and it will give you a
8
status on the front of that recorder, saying
9
it's attempting to rebuild. So, I'm starting
10
to recall that we may have told him to pull one
11
out.
12
MR.
: Okay.
13
MR.
: And let it rebuild.
14
MR.
: That would be the same
15
That would be based on the instructions came
16
over from a Derek Barr?
17
MR.
: Yes. And so, I think what
18
I'm recalling is, I think we had him pull one
19
out, try to rebuild. That failed, I think.
20
And then, I think he told the other -. He may
21
have pulled the second drive out, that was
22
showing bad, and tried to rebuild that.
23
MR.
: And then, your comment, your
24
comments exactly on this is, "He attempted to
25
replace the drives, and they started to
EFTA00125901
LIMITED OFFICIAL USE
47
1
rebuild. During the rebuild process of the
2
drives, the drives were required to be taken
3
out of the raid on DVR-2. Once the drives are
4
removed without proper shut down of the
5
recorder, the video database becomes corrupted.
6
Typically, any time the raid on a raid five
7
configuration loses two drives, the raid needs
8
to be rebuilt, and all data wiped from the
9
raid." Does this - based on your comment
10
does it mean that - your understanding is -
11
that he went in, tried to replace it, and he
12
pulled the drive without the proper shut down
13
of the recorder?
14
MR.
: Wait, so, you don't have to
15
shut down the drive if - or, you don't have to
16
shut down the recorder if you're pulling a
17
drive out. Like, one drive. And it's called a
18
hot swappable (Phonetic Sp. *00:42:11) drive.
19
MR.
: Yeah.
20
MR.
: So, what that means
21
basically, you can pull it out, re-insert it,
22
and let it rebuild. But there is a limit to
23
how many you can do. Because you can't just
24
say, okay, I've got two bad drives. Lightbulb
25
goes out. And try to re-insert them, let those
EFTA00125902
LIMITED OFFICIAL USE
48
1
build. Because once you do that, if there is a
2
possibility of the one of the two being good,
3
and it's writing somewhat, you pull those both
4
out, you're going to crash your system.
5
So, so, and those drives, when you rebuild
6
them, it takes - I want to say it takes at
7
least eight hours. So, I do remember him
8
replacing one, and I want to say it was an
9
overnight process. He pulled it out. Put it
10
in. It looked like it started rebuilding. And
11
I think he came in the next day, and it failed.
12
I don't know if he tried it again. Or he may
13
have tried that second drive, then, at that
14
point. Tried to pull that and let it rebuild.
15
And that may have been the point where the FBI,
16
maybe, come on site. And said, hey, we've got
17
to, you know, confiscate it or whatever. I
18
don't know, at that point.
19
MR.
: Yeah.
20
MR.
: I don't know.
21
MR.
: And that's what my
22
question was. Is this all talking about
23
Daniel, his actions, or is it talking about
24
both his actions, as well as the FBI actions of
25
them pulling it, while it was trying to be
EFTA00125903
LIMITED OFFICIAL USE
1
rebuilt? Are you able to tell by what was
2
read?
3
MR.
: So, you can't send me that
4
comment, right?
5
MR.
: No. Well, I'll just keep
6
on reading it to you. It says, "He attempted
7
to replace the drives, and they started to
8
rebuild. During --
9
MR.
: Oh.
10
MR.
: -- the build of the
11
drives, the drives were required to be taken
12
out of the raid on DVR-2. Once the drives are
13
removed without proper shutdown of the
14
recorder, the video database becomes
15
corrupted." So, my question there would be,
16
like, is that new sentence - "Once the drives
17
are removed without proper shut down" - is that
18
anything that you're talking about with regard
19
to the FBI removing them without proper shut
20
down, or are you still talking about what
21
Daniel did?
22
MR.
: I would say what the FBI
23
because I wouldn't
I don't think I would
24
have put "required to be." Did I say,
25
"Required to be taken out," or "Required to be
EFTA00125904
LIMITED OFFICIAL USE
50
1
removed"?
2
MR.
: Yeah. So, I'll just read
3
it again.
4
MR.
: Okay.
5
MR.
: "He attempted to replace
6
the drives, and they started to rebuild.
7
During the rebuild process of the drives, the
8
drives were required to be taken out of the
9
raid on DVR-2. Once
10
MR.
: Okay.
11
MR.
: -- once the drives are
12
removed without proper shutdown of the
13
recorder, the video database becomes corrupted.
14
Typically, any time the raid on a raid five
15
configuration loses two drives, the raid needs
16
to be rebuilt, and all data is wiped from the
17
raid."
18
MR.
: Okay. So, yeah. And
19
listening to my statement of, "During the
20
drives being rebuilt, they were required to be
21
taken out." Yeah. I wouldn't have stated that
22
they would have been required to be taken out.
23
Because there was nobody requiring him, other
24
than the FBI, to take them out.
25
MR.
: I thought that was
EFTA00125905
LIMITED OFFICIAL USE
1
(Indiscernible *00:45:26).
2
MR.
: Okay.
3
MR.
: So, that's, like, you're
4
talking about him rebuilding it, and then the
5
FBI pulling them while they were being rebuilt?
6
MR.
Yup.
7
MR.
: Yeah. Okay.
8
MR.
: That's - yeah - that's what
9
I'm understanding, and what I would have --
10
MR.
: Thanks for clarifying --
11
MR.
: -- yeah.
12
MR.
: -- that for us.
13
MR.
: Yeah.
14
MR.
: I'm going to keep moving
15
because --
16
MR.
: Sorry. Sorry it took so
17
long. I was just, like --
18
MR.
: -- no, no, no.
19
MR.
:
uhh.
20
MR.
: No, no. I guess the main
21
question is, is there anything that Daniel did,
22
that was wrong, or did he, you know, was he
23
doing everything that he could have done to
24
rebuild this thing, but then the FBI came and
25
pulled it, and lost any chance of potentially
EFTA00125906
LIMITED OFFICIAL USE
1
recovering things?
2
MR.
: Yeah. From what I can
3
tell, he was - yeah - going through the process
4
of what we instructed him to do, pull the drive
5
out, insert, then let it rebuild. And yeah, :
6
think he gave it plenty of time on the first
7
drive. Like I said, I think, I think, from
8
what I remember, that was an overnight process.
9
And so, that may have been the Thursday, or
10
something, maybe. Again, prior to that
11
incident, I believe --
12
MR.
: Okay.
13
MR.
: -- where he would have
14
inserted it, let it rebuild, and came back in
15
the next morning, or hours later, and realized
16
that it had failed. And then, yeah, then that
17
second drive was probably where he went next.
18
MR.
: Well, just for
19
clarification --
20
MR.
: (Indiscernible *00:46:47).
21
MR.
: -- on that, prior to the
22
- in that same statement - you said, you August
23
8th, he contacted you regarding the two bad
24
drives. And then, you advised him to get
25
replacement drives. It says, "Once they are
EFTA00125907
LIMITED OFFICIAL USE
53
1
replaced, they should start to initialize, to
2
become available for the raid array.
3
did not have drives readily available. He
4
checked with his local CSM, to see if they had
5
any spare replacement drives. Once he located
6
replacement drives on Friday, August 9th, he
7
did not have access to the DVR room to replace
8
them. He called SigNet for some phone support
9
on Saturday, August 10th. When he --
10
MR.
: Oh, okay.
11
MR.
: -- gained access." Sc,
12
it sounds like --
13
MR.
: Okay.
14
MR.
: -- it all happened on the
15
10th, or he replaced them --
16
MR.
: Yeah, because he
17
MR.
-- and --
18
MR.
: -- didn't have access.
19
Yup. He didn't have access in --
20
MR.
: -- and then -.
21
MR.
: -- there until the 10th,
22
right?
23
MR.
: Right. So, he started
24
rebuilding them in the morning, and then it
25
sounds like the FBI came in, and then pulled
EFTA00125908
LIMITED OFFICIAL USE
54
1
the drives while they were being rebuilt. Does
2
that sound right, based upon on your comments?
3
MR.
: I - yeah - I think so.
4
Yeah. Yeah.
5
MR.
: And just to clarify, too.
6
MR.
: Yeah. My comments are
7
going to be a little more solid than my memory,
8
I think.
9
MR.
: Yeah.
10
MR.
: At this point.
11
MR.
: Yeah. If, based on these
12
comments, right, and if --
13
MR.
: Yeah.
14
MR.
: -- based on the FBI, my
15
understanding is, when they came in, two drives
16
were pulled out. And there was two drives that
17
were replaced, and it was going through. You
18
mentioned before that, if he pulls one drive
19
out, it's okay, but if he pulls out two drives,
20
at the same time, it could have possibly
21
corrupted everything.
22
MR.
: Mm-hmm.
23
MR.
: All right. So, it's a
24
possibility that, if he did pull out two drives
25
at the same time, it might have contributed to
EFTA00125909
LIMITED OFFICIAL USE
55
1
the failure, and also the fact that, if he has
2
two drives rebuilding, and the FBI came in and
3
pulled it out in the middle of the rebuild, it
4
could have also contributed to the failure?
5
MR.
: That is correct. So, yeah,
6
and that's what I was questioning, is if the
7
statement said that he had two drives basically
8
out of the system at that point, and if there
9
were two drives out, then, and nothing was
10
replaced, if there was two blank spots, then
11
yeah, then the system would have already been
12
failed. As far as the video sort side.
13
MR.
: Okay.
14
MR.
: But again, yeah, I don't
15
know - again - if he had four total drives, two
16
old ones, two new ones, and he was kind of in
17
the process of that when they came in.
18
MR.
: But when --
19
MR.
: And I don't know the detail
20
21
MR.
: -- my understanding is when -
22
23
MR.
: -- (Indiscernible
24
*00:48:54).
25
MR.
: -- they came in, they took
EFTA00125910
LIMITED OFFICIAL USE
56
1
everything, there were two old drives that were
2
sitting --
3
MR.
: Yeah.
4
MR.
: -- outside of the housing,
5
two new drives sitting inside, that
6
MR.
: Okay.
7
MR.
: -- he could have replaced
8
that morning.
9
MR.
: Okay. Gotcha.
10
MR.
: So -.
11
MR.
: So, yeah. I don't know at
12
that process, or, at that point, if he - yeah -
13
basically maybe pulled, you know, maybe he had
14
attempted both old ones.
15
MR.
: (Indiscernible *00:49:15)
16
SigNet.
17
MR.
: Maybe they failed. And
18
then, he said, okay, I'm going to pull those.
19
This is all speculation, at this point, but
20
yeah, he could have. If they both failed at
21
that point, then yeah, it would have been
22
screwed anyways.
23
MR.
: Who actually
24
MR.
: Because he
25
MR.
: -- go ahead. Sorry.
EFTA00125911
LIMITED OFFICIAL USE
57
1
MR.
: -- he had already lost the
2
two drives, at that point.
3
MR.
: So, White House, at SigNet,
4
would have walked him through this process?
5
MR.
: That would have been,
6
probably between me and Justin.
7
MR.
: But you both were on
8
vacation, technically. Right?
9
MR.
: Yes.
10
MR.
: I think both of you were or.
11
camping trips. So, would
12
MR.
: And I want to say -. So,
13
you had mentioned, there was a comment from
14
Jeff Cranor. And so, he had actually started
15
with SigNet, I believe it was February of 2019.
16
So, yeah. He was a former Bureau employee. He
17
was a -. What's -? Rachel comtech out in
18
Kansas City. And then, we brought him on to
19
work with SigNet because he knew, he knew Nice
20
Vision pretty well.
21
MR.
: Okay. You think he might
22
have --
23
MR.
: So -.
24
MR.
: -- worked with him?
25
MR.
: That's kind of what I'm
EFTA00125912
LIMITED OFFICIAL USE
58
1
wondering because, that kind of started to ring
2
a bell, since, if me and Justin were out,
3
Justin basically pushed it to me. And I don't
4
think I had access to, like, our -. Something
5
was -. It might have been, like, my internet
6
service, or phone service, or something,
7
because I, I mean, I was out in the middle of
8
nowhere. At that point. So, I may have tried
9
to text him, or, you know, if we went into town
10
or something, and I contacted him, and said,
11
hey, you know, this is what's going on. Can
12
you get a case started? That may have been
13
what I had done. So, he may have had a little
14
bit of interaction with
, as well.
15
MR.
: Okay. I'll reach out to him
16
17
MR.
: More at least --
18
MR.
: -- about that, too.
19
MR.
: --, now was there
20
MR.
: I'm look -.
21
MR.
: -- any additional comments?
22
MR.
: No. That's all --
23
MR.
: About him on that case?
24
MR.
: -- that's all. That was the
25
only comment over there. There is nothing else
EFTA00125913
LIMITED OFFICIAL USE
59
1
in there.
2
MR.
: They didn't give you any
3
other tickets, right?
4
MR.
: No.
5
MR.
: I'm going to look and see
6
if I have more tickets. I don't know if I
7
saved the tickets, or if I just saved contacts,
8
but -.
9
MR.
: I'm going to ask you that, if
10
you can get everything together, right?
11
MR.
: Mm-hmm.
12
MR.
: Everything you have on this
13
tickets, any communications, things like that,
14
can you forward that over to me?
15
MR.
:
Yeah.
16
MR.
:
We actually have another
17
interview starting at 10:00. So, I'm going to
18
wrap it up quick.
19
MR.
: All right. Yup.
20
MR.
:
We're not trying to push you
21
off. Just had a question for you.
22
MR.
: Mm-hmm.
23
MR.
: Do you recall, prior to
24
August 8th - right? - were there any issues
25
that you were aware of, with the MCC cameras?
EFTA00125914
LIMITED OFFICIAL USE
‘ -
1
MR.
: Prior to August 8th. No.
2
So, whenever - again, I don't know if the -.
3
So, that's where I was unclear on the weekend,
4
basically. But I think we may have clarified
5
that, that everything happened on the 8th,
6
through the 10th. So, I think, prior to the
7
8th, I may have known about - yeah, I mean -
8
may have known about issues through Justin's
9
correspondence with
10
MR.
: Okay.
11
MR.
: He may have been working.
12
Yeah. I don't know. But yeah. And I would
13
say, August 8th is when I definitely picked up
14
the case.
15
MR.
: Understood. Okay. So, but
16
you were not aware of any other issues, prior
17
to it?
18
MR.
: No.
19
MR.
: Thank you for taking the time
20
to talk to us today. Is there anything that
21
you think that we've missed to ask, or anything
22
pertinent that you think will be useful for our
23
investigation?
24
MR.
: I don't believe so, at this
25
time. Yeah. But if I can think of anything, I
EFTA00125915
LIMITED OFFICIAL USE
61
1
can send you some information over, but -.
2
MR.
: I appreciate that. You have
3
my email address. Anything you have, if you
4
can forward that over to me, I would really
5
appreciate it.
6
MR.
: Okay.
7
MR.
: Mm-hmm.
8
MR.
:
Yeah. I'll take a look
9
here in a few minutes, and see if I can find
10
some stuff.
11
MR.
: Thank you for taking the time
12
to talk to us today.
13
MR.
:
Yes.
14
MR.
: And --
15
MR.
: All right. Not a problem.
16
MR.
:
I'm going to end the
17
interview. The time is 9:55 a.m. on September
18
22nd, 2021. This is Special Agent
, and
19
the interview is being ended.
20
21
22
23
24
25
26
EFTA00125916
LIMITED OFFICIAL USE
62
1
CERTIFICATE
2
I hereby certify that the foregoing pages
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
represent an accurate transcript of the
electronic sound recording of the proceedings
before the Department of Justice, Office of the
Inspector General in the matter of:
Interview of
Brianna Rose Burton, Transcriber
EFTA00125917
Extracted Information
Dates
Phone Numbers
Document Details
| Filename | EFTA00125856.pdf |
| File Size | 2276.6 KB |
| OCR Confidence | 85.0% |
| Has Readable Text | Yes |
| Text Length | 60,398 characters |
| Indexed | 2026-02-11T10:46:01.956836 |