◆ SpookStack

FR-302a ev. 10-6-98) Continuation of FD-302 ef ti—‘CSCSY On 07/25/2002 _ Page 2 userids were much greater than the normal activity of the TIMES‘ users. The number of searches performed by the TIMES’ account greatly increased once the userids were created. was able to determine that the increase in the TIMES’ usage of their services was caused by the userids TOOMANYSECRETS, PROTAGONIST, LOCUSTS, VAISHNAV and NUIUJB. The cost of the amount of services utilized by the five (5) userids was approximately $300,000. The TIMES was originally charged for this activity. At this time, is unaware of whether or not the $300,000 has been refunded to the TIMES by LEXIS-NEXUS. Because of the unauthorized access by LAMO, LEXIS-NEXUS has suffered a monetary loss. Log files are maintained by LEXIS-NEXUS in relation to the all userid’s activity. The original log files pertaining to the userid’s created by LAMO have been secured. b6 bIC b3 b7E -6 -2 -3 FBI(19-cv-1495)-170 ss