“Rights” and Wrongs: Where the Stolen Documents Investigation Is Headed

/194 Comments/in , , /by

I want to start this post about where the stolen documents investigation may be headed with an observation a commenter here made about this passage of the superseding indictment: the import of the word, the “rights,” coming from an IT guy who would think in terms of access privileges.

The passage comes in the midst of the Keystone Cops routine where Walt Nauta and Carlos De Oliveira try to figure out how to achieve Trump’s apparent order — probably given during a 24-minute phone call to De Oliveira on June 23 and to Nauta face-to-face at Bedminster sometime between 3:44 and 5:02PM on June 24 — to delete the surveillance server. They were stomping around, squawking about how sensitive this mission was. Nauta sent someone texts with shush emojis and De Oliveira told a valet Nauta’s visit should remain secret.

The evening of June 25 — one day after DOJ sent Trump Organization a subpoena for surveillance video — they get a flashlight and go to inspect what the surveillance cameras would pick up; by moving in front of the surveillance cameras, which we now know are motion activated, they would have triggered the cameras, thereby creating more damning surveillance footage.

Imagine the video exhibit at trial, as both Nauta and De Oliveira point a flashlight at the surveillance camera that, weeks earlier, caught both of them moving just half the boxes full of classified documents back into the storage room, two earnest faces looking straight into the camera. That footage wouldn’t be covered by the subpoena they were, at that moment, trying to defy; it would probably be covered by the next subpoena.

Two days later (there’s no indication of how Nauta spent his day on Sunday June 26), on June 27, De Oliveira walks into the IT room and asks Yuscil Taveras in front of a witness (possibly in front of another security camera) to step away so they could speak. They go to what they call an “audio closet” (which could be the decommissioned SCIF) and De Oliveira tells Taveras that “the boss” wants the surveillance server deleted.

Taveras says three things in response:

  1. He doesn’t know how to accomplish that
  2. He doesn’t have the “rights” to do that
  3. To accomplish the task, De Oliveira would have to reach out to one of the Matthew Calamaris

The words, “rights,” here hasn’t gotten enough attention. Taveras was saying that he did not have the computer privileges to just delete the surveillance server: one of the Matthew Calamaris in New York would have to be involved to make such a thing happen.

So after that, De Oliveira checks back in with Nauta (who has flown to Florida to accomplish this task, along with whatever he did on June 26), they stomp around some more in suspicious ways that are visible to yet more surveillance cameras, and then two hours later Trump speaks to De Oliveira for 3.5 minutes. As described, Trump calls De Oliveira, not the other way around.

Remember how I said — of the January 6 investigation — that the January 6 investigation would take more time than the Watergate investigation because, unlike Nixon, Trump is not known to have wiretapped himself?

Well, on the stolen documents investigation, he did, effectively, wiretap himself, or at least all the employees he sent to accomplish his corrupt mission. And then Trump tried, over and over, to Rosemary Woods away incriminating video, at least this first time, captured on video again.

But amid all the Keystone Cops stomping around talking about secrets while on surveillance camera and sending shush texts, what Taveras said is an important hint of where this investigation may go next (as I laid out here).

Thus far, this story — and the conspiracy as charged so far — is just a story of a failed attempt to destroy surveillance video. De Oliveira: Can you delete the server? Taveras: Nope. I don’t have the rights. Stomp stomp stomp, almost all of it on surveillance video.

The Keystone Cops caper ends with Trump calling De Oliveira at 3:55PM on June 27, with no word of what led Trump to call De Oliveira and no word of whether whatever video got deleted was deleted in Florida or New York, or somewhere else.

The superseding indictment doesn’t mention, for example, the text that Nauta sent Calamari Sr — possibly even between 1:50PM when he and De Oliveira were stomping in bushes adjacent to Mar-a-Lao and the phone call that Trump made to De Oliveira at 3:55PM.

Both Calamaris testified to the federal grand jury in Washington on Thursday, and were questioned in part on a text message that Trump’s valet, Walt Nauta, had sent them around the time that the justice department last year asked for the surveillance footage, one of the people said.

The text message is understood to involve Nauta asking Matthew Calamari Sr to call him back about the justice department’s request,

Calamari was the guy, Taveras told De Oliveira, who would have the privileges to delete surveillance footage. And sometime in that period, Nauta texted him about the surveillance request.

Thus far, this is a story and a crime about an alleged attempt to delete surveillance footage. But we can be pretty certain that surveillance video was, in fact, deleted. That’s because reporters have reported on witnesses being asked that for months. There would be no reason to obtain nine months of surveillance video — 57 terabytes of raw video, if you can believe the defense attorneys — unless there was a whole bunch more to learn from the surveillance videos.

The initial production also included some 57 terabytes of compressed raw CCTV footage (so far there is approximately nine months of CCTV footage, but the final number is not yet certain).

And there would be no reason for Trump, on August 26, to get Nauta to verify De Oliveira’s loyalty (stomp stomp stomp) before arranging to provide him a lawyer if what came next, what happened after Trump’s phone call to De Oliveira on June 27 isn’t even more damning.

Indeed, that’s why it matters that — buried in a Devlin Barrett story opining that De Oliveira’s, “alleged actions could bolster the obstruction case against the former president” because apparently Devlin hasn’t learned his lesson about presenting evidence of more serious crimes and calling it obstruction — Trump (unusually) came back to Mar-a-Lago twice between June 3 and August 8: once from July 10 to 12, and once again on July 23, and that De Oliveira told the FBI he had given away the key to storage when they showed up on August 8.

The Keystone Cop caper, in part because it is so colorful and in part because it is charged as an unsuccessful attempt, has distracted most commentators from the fact that there was a more successful attempt, and that more successful attempt didn’t hide the movement of boxes in and out of the storage closet. As I’ve noted, all the movement of boxes in May and June shows up in the search affidavit relying on what DOJ did get from Trump, save one: Nauta’s retrieval of a single box on May 22.

The superseding indictment describes that the subpoena asked for footage from “certain locations,” plural, of which the basement hallway is just one. And the most recent unsealing of the affidavit reveals that the only cameras included on the hard drive of surveillance footage turned over on July 6 were four cameras in the basement hallway. So one way or another, footage of those other locations was not turned over in response to the first subpoena.

Everyone treats this indictment as a terminal indictment — and if that’s as far as Jack Smith gets, it’s still far more damning than most everyone imagined on June 8. But multiple public references — the discussion on July 13 of continued efforts to fully exploit Nauta’s phone, the reference in DOJ’s descriptions of discovery that suggest there’s a grand jury somewhere other than DC or SDFL, and the suggestion that interviews have continued after June 23 — suggests that the current instantiation of the indictment is intended to be part of an ongoing investigation.

I noted from the first indictment that it was a “tactical nuke” designed to persuade Nauta to cooperate. Not only hasn’t the effort worked, but Stan Woodward has adopted a position on classified discovery — that Nauta, in addition to his attorneys, should get to see all the stolen classified documents — that I think makes it more likely DOJ would supersede to add a conspiracy to retain classified documents charge with him, because the elements of offense are all satisfied in the existing indictment.

Here are the obvious things that obtaining credible cooperation from Nauta would obtain:

  • ¶25: Details of Trump’s intent as Nauta helped pack up documents from the White House
  • ¶46: Why Trump was trying to hide when he instructed Nauta to replace the lids of the boxes
  • ¶54: What he was sent for on May 22
  • ¶61: What Trump instructed Nauta before he moved half the boxes back into storage for Evan Corcoran to search
  • ¶73: What boxes got loaded on the plane to Mar-a-Lago on June 3
  • ¶78: What Trump told him at Bedminster that led him to fly to Florida and try to bury the surveillance video (as well as what else he did on June 26, which is not accounted for)
  • ¶86: What both men discussed in the bushes
  • How Nauta came to text Matthew Calamari
  • ¶91: How Trump came to ask Nauta to ascertain De Oliveira’s loyalty and whether Trump had similarly offered him legal representation
  • What Nauta witnessed as Trump’s bodyman, especially in Bedminster

Here are the obvious things that obtaining credible cooperation from De Oliveira would obtain:

  • ¶76: Details of the 24-minute call he had with Trump, while Trump was at Bedminster
  • ¶86: What both men discussed in the bushes
  • ¶87: What Trump said on the phone call and whether De Oliveira had a role in the successful deletion of video, and how he knew what to delete
  • ¶91: What the terms of his representation are and whether it led him to lie (a question, other reports have made clear, many witnesses have been asked)
  • Why Trump returned to Mar-a-Lago twice before the August 8 search
  • To whom he gave the key to the storage room and on whose orders
  • Whether the October flood of the server room was an(other) attempt to destroy surveillance footage and if so, whether he was instructed to do so

De Oliveira might be a key witness to lead Nauta to reconsider his decision to protect Trump.

More importantly, one or both might be irreplaceable witnesses to answer a number of closely intertwined questions:

  • How is Trump is using lawyers to command loyalty and does it create conflict or obstruction issues
  • What surveillance footage has Trump prioritized for destruction and why
  • Why did Trump steal the documents, how has he used them, and where did the ones that went to Bedminster disappear to
  • What role does Trump’s PAC have in exploitation of the documents
  • What role does Trump Organization have in exploitation of the documents
  • Who else has had ready access to these documents

All this superseding indictment shows is that Trump had something to hide that goes beyond his desire to hoard the classified documents. Jack Smith may require the cooperation of one or both of these men to fully understand what Trump is really hiding.

This fairly remarkable post from the WSJ opinion page demonstrates the stakes of trying to answer it. It’s a pitch to elect someone other than Trump in the GOP primary, and premised on an utterly bullshit claim that Biden has politicized justice. But it gets a good distance of the way to an important discovery: even the Keystone Cops attempt already included in the indictment totally debunks Trump’s public defense, because if he believed in June 2022 that he had the right to keep these, he wouldn’t have dug himself — and thus far two staffers — deeper into a legal hole.

If Mr. Trump sought to destroy evidence, it undercuts his defense on the document charges. He contends that the Presidential Records Act gives him the right to retain documents from his time in office. But if Mr. Trump believed that, he would have played it straight. If the indictment is right that he hid the files from his own lawyers and tried to wipe the security video to stop anybody from finding out, then he didn’t buy his own defense.

From a Murdoch rag, this is a really important insight. But then WSJ predictably refuses to take the next logical step: That Trump’s obstruction makes it clear he didn’t just do this out of pigheadedness.

Prudential questions about the wisdom of this prosecution remain. Mr. Trump appears to have kept the files out of pigheadedness, not because he wanted to do something nefarious like sell them to an adversary. The FBI raided Mar-a-Lago to recover the documents.

The episode reflects poorly on Mr. Trump. But is this conduct that truly gives President Biden no choice except to ask a jury to jail his leading political opponent in next year’s election? At least Watergate involved a burglary.

We can’t even rule out a burglary, if Trump learned that he compromised these documents by storing them in his beach resort! Especially since De Oliveira claimed he had given the key away to others. We can’t rule out selling them to an adversary! We sure as hell can’t rule out trying to exploit them for the success of his PAC.

The indictment and an attempt to try this before the general election is an important goal, though potentially unrealistic given the CIPA challenges.

But it really is important to learn what Trump did do with these documents, who got the key, where they disappeared to.

This indictment doesn’t answer the question of why Trump stole these documents or what he did with them. All the superseding indictment did is make the question more urgent.

Update: Fixed Trump’s location from whence he called De Oliveira — the first call would have been Bedminster.

Carlos De Oliveira Added a Lock to the Storage Facility Then (Claimed He) Gave Away the Key

/95 Comments/in , /by

My second favorite bullshit spin of the entire stolen documents investigation (the first being claims about Walt Nauta’s cooperation) is the way, in the days after the search of Mar-a-Lago, Trump got journalists to repeat his claim that the fact he replaced the lock on the storage room at Mar-a-Lago proved he was entirely cooperative with DOJ before the search.

Here’s how WSJ presented the claim in one of its first instances:

Aides to Mr. Trump have said they had been cooperating with the department to get the matter settled. The former president even popped into the June 3 meeting at Mar-a-Lago, shaking hands. “I appreciate the job you’re doing,” he said, according to a person familiar with the exchange. “Anything you need, let us know.”

Five days later, Trump attorney Evan Corcoran received an email from Mr. Bratt, the chief of the Justice Department’s counterintelligence and export control section, who oversees investigations involving classified information.

“We ask that the room at Mar-a-Lago where the documents had been stored be secured and that all the boxes that were moved from the White House to Mar-a-Lago (along with any other items in that room) be preserved in that room in their current condition until further notice,” according to what was read to The Wall Street Journal over the phone.

Mr. Corcoran wrote back, “Jay, thank you. I write to acknowledge receipt of this letter. With best regards, Evan.” By the next day, according to a person familiar with the events, a larger lock was placed on the door. It was the last communication between the men until Monday’s search of Mar-a-Lago, according to the person.

[snip]

Mr. Trump and his lawyers contend they have cooperated with a monthslong effort by the government to retrieve some of the material he took from the White House and expressed outrage with Monday’s unannounced visit to Mar-a-Lago. A timeline of events, they say, demonstrates this cooperation, down to quickly fulfilling the June request to place a new lock on the storage door.

Here’s how John Solomon presented the claim in a post that first broke the news of the surveillance video subpoena.

Trump signaled his full cooperation, telling the agents and prosecutor, “Look, whatever you need let us know,” according to two eyewitnesses. The federal team was surprised by the president’s invitation and asked for an immediate favor: to see the 6-foot-by-10-foot storage locker where his clothes, shoes, documents and mementos from his presidency were stored at the compound.

Given Trump’s instruction, the president’s lawyers complied and allowed the search by the FBI before the entourage left cordially. Five days later, DOJ officials sent a letter to Trump’s lawyers asking them to secure the storage locker with more than the lock they had seen. The Secret Service installed a more robust security lock to comply.

Around the same time, the Trump Organization, which owns Mar-a-Lago, received a request for surveillance video footage covering the locker and volunteered the footage to federal authorities, sources disclosed.

It was always clear this was bullshit, not least because CFR guidelines about storing classified documents are really strict. But journalists repeated it credulously for several weeks, until the affidavit was unsealed, showing that in Jay Bratt’s request that Trump secure the storage room, he never mentioned a lock.

On June 8, 2022, DOJ COUNSEL sent FPOTUS COUNSEL 1 a letter, which reiterated that the PREMISES are not authorized to store classified information and requested the preservation of the STORAGE ROOM and boxes that had been moved from the White House to the PREMISES. Specifically, the letter stated in relevant part:

As I previously indicated to you, Mar-a-Lago does not include a secure location authorized for the storage of classified information. As such, it appears that since the time classified documents (the ones recently provided and any and all others) were removed from the secure facilities at the White House and moved to Mar-a-Lago on or around January 20, 2021, they have not been handled in an appropriate manner or stored in an appropriate location. Accordingly, we ask that the room at Mar-a-Lago where the documents had been stored be secured and that all of the boxes that were moved from the White House to Mar-a-Lago (along with any other items in that room) be preserved in that room in their current condition until further notice.

On June 9, 2022, FPOTUS COUNSEL 1 sent an email to DOJ COUNSEL, stating, “I write to acknowledge receipt of this letter.”

But buried in this Devlin Barrett story about how prosecutors warned Carlos De Oliveira’s attorney, John Irving, that they believed he was lying way back in April is the BREAKING NEWS that after De Oliveira put a new lock on the door — the thing that Trump bragged about for a month, and a tale that Barrett repeats here — he gave away the key.

Or at least that’s the excuse he gave to the FBI when they showed up in August to seize the documents inside and he refused to let them into the storage closet.

Agents had another concern: The lock on the door to the storage room was flimsy. The officials urged staff to put a better lock on the door, which De Oliveira did — using a hasp and a padlock to keep it secure, the people said. If there were still highly sensitive classified documents in the room, such a lock was far from sufficient, but it was better than nothing.

[snip]

When FBI agents arrived at Mar-a-Lago the morning of Aug. 8 with a court-issued search warrant, De Oliveira was one of the first people they turned to. They asked him to unlock a storage room where boxes of documents were kept, people familiar with what happened said. De Oliveira said he wasn’t sure where the key was, because he’d given it to either the Secret Service agents guarding the former president or staffers for Trump’s post-presidency office, the people said.

Frustrated, the agents simply cut the lock on the gold-colored door. [snip]

Imagine how outraged investigators must have been last August when Trump was publicly bragging about the new lock when the currently operative story at the time — one that may still be operative — is that within weeks, Oliveira had given away the key.

To whom, he did not know.

I’ve got a lot of guesses about who may really have gotten that key.

But the stunning news from this story is that Trump put a new lock on the storage facility and promptly gave away the key.

Carlos De Oliveira’s Uncharged Suspected Obstruction Happened on Aileen Cannon’s Watch

/153 Comments/in , /by

I’d like to make something explicit that’s implicit in this post. Some of Carlos De Oliveira’s suspected obstruction of the investigation into stolen documents happened on Aileen Cannon’s watch.

To be sure, it’s not charged, and the timing of all this is not made explicit in the indictment. De Oliveira is charged with four counts:

  • Count 33: Conspiracy to Obstruct Justice (18 USC 1512(k)) from May 11, 2022 until August 2022
  • Count 40: Corruptly asking Trump Employee 4 to destroy surveillance footage (18 USC 1512(b)(2) from June 22, 2022 until August 2022
  • Count 41: Corruptly attempting to alter surveillance footage (18 USC 1512(c)(1)) from June 22, 2022 until August 2022
  • Count 42: False statements in a January 13, 2023 interview with the FBI at his residence

The timeline of this is actually quite interesting. All the conspiracy charges go through August 2022, with no specific end date. That adopts the convention used in the first indictment.

By description, the conspiracies described in the first indictment might otherwise have ended on August 8, 2022, when the FBI seized the documents the obstruction attempted to hide. There was no overt act that post-dates August 8 in the first indictment.

There is in the superseding indictment. There’s this key paragraph, which describes that on August 26, 2022, after Trump confirmed De Oliveira’s loyalty, Trump called him and told him he would get him an attorney.

Just over two weeks after the FBI discovered classified documents in the Storage Room and TRUMP’s office, on August 26, 2022, NAUTA called Trump Employee 5 and said words to the effect of, “someone just wants to make sure Carlos is good.” In response, Trump Employee 5 told NAUTA that DE OLIVEIRA was loyal and that DE OLIVEIRA would not do anything to affect his relationship with TRUMP. That same day, at NAUTA’s request, Trump Employee 5 confirmed in a Signal chat group with NAUTA and the PAC Representative that DE OLIVEIRA was loyal. That same day, TRUMP called DE OLIVEIRA and told DE OLIVEIRA that TRUMP would get DE OLIVEIRA an attorney.

That paragraph is important to prove the conspiracy because Trump Employee 5 appears to have testified independently about it. But it’s not about the June 2022 effort to destroy the surveillance footage. It’s an apparent effort to keep De Oliveira quiet about the June 2022 effort.

Witness tampering, a different kind of obstruction. But it is not charged as such.

At least not yet.

So the overt acts on the three conspiracies appear to go from May and June until August 26, 2022. But the indictment doesn’t include that as the specific end date.

On August 27 — the day after the last overt act in the three alleged conspiracies charged against De Oliveira — Judge Aileen Cannon issued an order providing preliminary notice that she would intervene in the case. On September 5, Judge Cannon issued an order enjoining the government from further investigation of the materials seized on August 8.

De Oliveira’s other alleged crime happened on January 13, 2023.

It happened after, on December 1, 2022, the 11th Circuit ruled that Aileen Cannon “improperly exercised equitable jurisdiction” to — among other things — stay any investigation using non-classified documents.

[T]he district court lacked jurisdiction to consider Plaintiff’s initial motion or to issue any orders in response to it.

[snip]

The law is clear. We cannot write a rule that allows any subject of a search warrant to block government investigations after the execution of the warrant. Nor can we write a rule that allows only former presidents to do so. Either approach would be a radical reordering of our caselaw limiting the federal courts’ involvement in criminal investigations. And both would violate bedrock separation-of-powers limitations. Accordingly, we agree with the government that the district court improperly exercised equitable jurisdiction, and that dismissal of the entire proceeding is required.

The district court improperly exercised equitable jurisdiction in this case. For that reason, we VACATE the September 5 order on appeal and REMAND with instructions for the district court to DISMISS the underlying civil action.

It happened after, on December 12, Aileen Cannon dismissed the civil suit before her.

De Oliveira’s first three alleged crimes happened before Aileen Cannon intervened, up through the day she did, in fact. All of Trump’s and Nauta’s alleged crimes ended before or on the day before she intervened.

De Oliveira’s fourth charge happened after the 11th Circuit ruled that she had improperly halted any investigation using unclassified materials seized from Mar-a-Lago from September 5 to December 1, a total of 87 days.

De Oliveira was not charged for something else, though, that — according to CNN’s report of it — was suspected to be another attempt to damage surveillance equipment, a flood of the IT room that, by description, happened in October.

An employee at Donald Trump’s Mar-a-Lago residence drained the resort’s swimming pool last October and ended up flooding a room where computer servers containing surveillance video logs were kept, sources familiar with the matter told CNN.

While it’s unclear if the room was intentionally flooded or if it happened by mistake, the incident occurred amid a series of events that federal prosecutors found suspicious.

At least one witness has been asked by prosecutors about the flooded server room as part of the federal investigation into Trump’s handling of classified documents, according to one of the sources.

The incident, which has not been previously reported, came roughly two months after the FBI retrieved hundreds of classified documents from the Florida residence and as prosecutors obtained surveillance footage to track how White House records were moved around the resort. Prosecutors have been examining any effort to obstruct the Justice Department’s investigation after Trump received a subpoena in May 2022 for classified documents.

Prosecutors have heard testimony that the IT equipment in the room was not damaged in the flood, according to one source.

Yet the flooded room as well as conversations and actions by Trump’s employees while the criminal investigation bore down on the club has caught the attention of prosecutors. The circumstances may factor into a possible obstruction conspiracy case, multiple sources tell CNN, as investigators try to determine whether the events of last year around Mar-a-Lago indicate that Trump or a small group of people working for him, took steps to try to interfere with the Justice Department’s evidence-gathering.

Agents first subpoenaed the Trump Organization for Mar-a-Lago surveillance footage last summer, before the August search by the FBI. But as more classified documents were found through the end of last year, investigators sought more surveillance footage from the Trump Organization, sources tell CNN. That included an additional subpoena after the FBI search in August and a request from the Justice Department for the Trump Organization to preserve additional footage in late October, according to one of the sources.

[snip]

Prosecutors from the special counsel’s office have focused their obstruction inquiries around Trump, Trump’s body man Walt Nauta and a maintenance worker who helped Nauta move boxes of classified documents ahead of federal agents searching the property last summer, and potentially others, sources told CNN.

The sources say that the maintenance worker is the person who drained the pool that led to the flooding of the IT room where the surveillance footage was held. [my emphasis]

If that really happened, if it really was another attempt to destroy surveillance video (as I noted, video that might show De Oliveira and Nauta’s earlier attempt to destroy the surveillance video, a cover up of the cover up), then it happened during the period when DOJ’s investigation was largely halted thanks to Aileen Cannon’s improperly exercised equitable jurisdiction.

It’s not yet clear whether Cannon’s injunction required DOJ to delay the January 13, 2023 interview until after the 11th Circuit ended it. After all, DOJ interviewed Christina Bobb in October and Kash Patel in November.

As of now, the overt acts in the apparent overlapping conspiracies to obstruct the investigation stop one day short of the moment when Aileen Cannon got involved, improperly, according to the 11th Circuit. And if DOJ were to substantiate the flooded server room was yet another attempt to tamper with surveillance footage, it would mean the obstruction happened on Judge Cannon’s watch.

Thus far, Cannon has issued one after another after another and yet one more not unreasonable order.

But we are butting against the date when Trump’s continued conspiracy to obstruct the investigation happened during the window she created by improperly intervening in the case.

Chekhov’s Alan Garten: The Human Gaps in the Surveillance Footage Gap

/125 Comments/in , , /by

This post noted, shortly after Trump’s first stolen documents indictment, that the indictment included nothing about the gaps in surveillance footage DOJ spent much of the last year investigating. It also noted that the indictment did not name the maintenance guy who had played a role in moving boxes around.

But the indictment doesn’t hint at when DOJ found gaps in surveillance footage, the topic of numerous recent interviews, or how those gaps got there. In fact, the maintenance guy who flooded the server room doesn’t appear to be mentioned in the indictment at all (his actions are described in ¶61 and ¶72, without a label for him).

As Jay Bratt’s notice to Aileen Cannon of the new details in the superseding indictment released last night explained, those paragraphs now identify newly-charged Carlos De Oliveira by name.

Paragraphs 62 and 63 now identify De Oliveira as the person who helped Nauta move approximately 30 boxes from Trump’s residence to the Storage Room on June 2, 2022, whereas paragraph 61 of the earlier indictment referred to De Oliveira as “an employee of The Mar-a-Lago Club”;

Paragraph 73 alleges that De Oliveira was one of the “others” identified in paragraph 72 of the original indictment who, on June 3, 2022, with Nauta, “loaded several of Trump’s boxes along with other items on aircraft that flew Trump and his family north for the summer”;

Yet even with the inclusion of De Oliveira in the indictment, the gaps about the gaps in the surveillance footage remain.

The conspiracy added to the indictment, laid out in ¶74 through ¶87, describes an attempt to destroy surveillance footage. As described, Walt Nauta and De Oliveira asked someone, identified in the indictment as Trump Employee 4 but who is likely Yuscil Taveras (identified in this story from NYT), to delete the surveillance server, but he said he could not. He told De Oliveira to contact the supervisor of security for Trump Organization.

83. On Monday, June 27, 2022, at 9:48 a.m., DE OLIVEIRA walked to the IT office where Trump Employee 4 was working with another employee in the IT department. DE OLIVEIRA requested that Trump Employee 4 step away from the office so that DE OLIVEIRA and Trump Employee 4 could talk.

84. At 9:49 a.m., Trump Employee 4 and DE OLIVEIRA left the area of the IT office together and walked through a basement tunnel. DE OLIVEIRA took Trump Employee 4 to a small room known as an “audio closet” near the White and Gold Ballroom. Once inside the audio closet, DE OLIVEIRA and Trump Employee 4 had the following exchange:

a. DE OLIVEIRA told Trump Employee 4 that their conversation should remain between the two of them.

b. DE OLIVEIRA asked Trump Employee 4 how many days the server retained footage. Trump Employee 4 responded that he believed it was approximately 45 days.

c. DE OLIVEIRA told Trump Employee 4 that “the boss” wanted the server deleted. Trump Employee 4 responded that he would not know how to do that, and that he did not believe he would have the rights to do that. Trump Employee 4 told DE OLIVEIRA that DE OLIVEIRA would have to reach out to another employee who was the supervisor of security for TRUMP’s business organization. DE OLIVEIRA then insisted to TRUMP Employee 4 that “the boss wanted the server deleted and asked, “what are we going to do?” [my emphasis]

But that section ends with Nauta and De Oliveira meeting in the bushes just off Mar-a-Lago property the next day, then walking to the IT office, then walking back to the bushes again. There’s no allegation that Nauta and De Oliveira succeeded in deleting the video.

The entire section is bookended with these paragraphs, which — and I say this as a PhD in Comparative Literature — are narratively brilliant.

74. On June 3, 2022, when FBI agents were at The Mar-a-Lago Club to collect the documents with classification markings from Trump Attorney 1 and Trump Attorney 3, the agents observed that there were surveillance cameras located near the Storage Room.

75. On June 22, 2022, the Department of Justice emailed an attorney for TRUMP’s business organization a draft grand jury subpoena requiring the production of certain security camera footage from The Mar-a-Lago Club, including footage from cameras “on ground floor (basement),” where the Storage Room was located.

76. On June 23, 2022, at 8:46 p.m., TRUMP called DE OLIVEIRA and they spoke for approximately 24 minutes.

[snip]

87. [On June 27] At 3:55 p.m., TRUMP called DE OLIVEIRA and they spoke for approximately three and a half minutes. [my emphasis]

The section starts and ends with a call to Trump. But never explains how the gaps ended up in the surveillance footage.

Let me go back.

As noted, and as Bratt noted, the original indictment didn’t identify De Oliveira at all. He was just some “other” guy involved, an employee of the club. In fact, in its first indictment, DOJ used a curious dual form of naming. The following people are clearly identified:

  • Trump and Nauta
  • Trump Employee 1
  • Trump Employee 2 (Molly Michael)
  • PAC Representative (reportedly Susie Wiles)
  • Trump Representative 1 (probably Alex Cannon)
  • Trump Attorney 1 (Evan Corcoran)
  • Trump Attorney 2 (possibly Boris Epshteyn)
  • Trump Attorney 3 (Christina Bobb)

Then there are people who are not identified by name:

  • ¶6a, ¶34: the people to whom he showed the Iran document, and the two staffers (reportedly Margo Martin, who recorded it, and Liz Harrington) who witnessed the interview
  • ¶19: the high level intelligence officials who briefed Trump
  • ¶24: other members of Trump’s White House staff, in addition to Nauta, who helped pack up boxes
  • 58c: A female Trump family member
  • ¶61: an employee of The Mar-a-Lago Club (De Oliveira)
  • ¶72: others, including De Oliveira, who helped load up boxes to go to Bedminster

This new indictment adds three identified Trump employees:

  • Trump Employee 3: the co-worker — who would have been at Bedminster — who alerted Nauta that Trump wanted to see him
  • Trump Employee 4: the IT worker, probably Taveras
  • Trump Employee 5: a valet who was asked — and confirmed in a Signal chat with Nauta — that De Oliveira was loyal

And the indictment adds several more unidentified Trump employees, several of which (like the reference to the female Trump family member in the first) could be sourced entirely to communications obtained from Nauta’s phone.

  • ¶77: The attorney for TRUMP’s business organization
  • ¶79: The people to whom Nauta gave inconsistent explanations of why he was making a secret trip to Florida: one person Nauta told he would not travel with Trump and a Secret Service agent
  • ¶83: Another employee in the IT department
  • ¶84c: Supervisor of Security for Trump’s business organization

Significantly, the original indictment describes how DOJ obtained surveillance footage this way:

In July 2022, the FBI and grand jury obtained and reviewed surveillance video from The Mar-a-Lago Club showing the movement of boxes set forth above.

Though the search warrant affidavit had described that “counsel for the Trump Organization” had a role, the original indictment made no mention of that. It was like a virgin birth of surveillance footage, delivered to the FBI with no explanation.

The other figures described but not named in the superseding indictment may or may not appear in later installments of this tale, like a gun shown in an early act of a play that later goes off.

The last — supervisor of security — is almost certainly Matthew Calamari, Sr, who was one of the very last people to appear before the DC grand jury before this case was moved to Florida and charged. Both Calamari and his son were asked why Nauta texted one of them (it turns out to have been Sr.) to call him about the subpoena request.

Both Calamaris testified to the federal grand jury in Washington on Thursday, and were questioned in part on a text message that Trump’s valet, Walt Nauta, had sent them around the time that the justice department last year asked for the surveillance footage, one of the people said.

The text message is understood to involve Nauta asking Matthew Calamari Sr to call him back about the justice department’s request,

But that exchange is for another indictment, possibly even another venue.

In this indictment, though, the attorney for Trump Organization, almost certainly Alan Garten, plays two roles. First, he received the draft subpoena from Jay Bratt on June 22 (this begins to explain the discrepancy regarding the date of the subpoena that I’ve been obsessed with from the start). And he’s the most likely explanation for why, the next day, Trump called De Oliveira and spoke for 24 minutes.

That is, Garten likely told Trump about the subpoena, which set off a process by which employees attempted to destroy surveillance footage in Florida.

According to Michael Cohen’s testimony, Alan Garten is the one responsible for Cohen’s document production to Congress, which ended up withholding documents showing him contacting Dmitri Peskov’s office. And according to the SSCI Report, there were other, “known deficiencies in the Trump Organization’s document responses.”

While DOJ has interviewed Calamari (and so may or may not have gotten honest testimony about what happened when he called Nauta), they are not known to have interviewed Alan Garten, the bar for which would be very high. They have, however, interviewed Alina Habba, who played a role in a suspected Alan Garten shell game to withhold documents from New York State, and in the process did a search of both Bedminster and Mar-a-Lago before DOJ served a subpoena for classified documents.

In spite of all these new details and new players, we still don’t know what happened between June 27, 2022, when Trump Employee 4 told De Oliveiras to reach out to Matthew Calamari and when Trump spoke to De Oliveira for three and a half minutes, and July 6, when Trump Organization turned over two months of video that reportedly had gaps in it.

There are still gaps in this story about how the reported gaps got into the surveillance footage. Indeed, there are still gaps about what the gaps attempted to hide!

As I showed here, the surveillance footage the FBI did get appears to have shown virtually all of Nauta’s box movements — and would have shown De Oliveira helping Nauta move 30 boxes back into storage on June 2 — because the search warrant affidavit relies on it. But they may not have shown Walt Nauta remove a single box from storage on May 22.

That, of course, was just the first subpoena for surveillance footage. There were more, undoubtedly including for footage showing Nauta and De Oliveira checking out the surveillance cameras with a flashlight on June 25, 2022, entering the IT department, walking through a basement tunnel and into an “audio closet,” then walking back into the IT office on June 27, and possibly, still on June 27, walking into the bushes just off of Mar-a-Lago property for two discussions. This superseding indictment must rely on a later subpoena for more surveillance footage from which the specific times of these movements would have been obtained.

Indeed, when De Oliveira allegedly flooded the IT room in October — at a time when Judge Aileen Cannon had put a stay on the investigation of these activities — he may have been attempting to thwart a second or third subpoena attempt, a cover up of the attempted cover up, an attempt to destroy the surveillance footage that ended up in this indictment.

Altogether, the surveillance footage that DOJ has since obtained covers nine different months.

The initial production also included some 57 terabytes of compressed raw CCTV footage (so far there is approximately nine months of CCTV footage, but the final number is not yet certain).

DOJ claims to have pinpointed which cameras they wanted and on what specific dates.

The Government similarly identified to the Defendants a small subset of “key” CCTV footage referenced in the Indictment or otherwise pertinent to the case. See id. And although the CCTV footage the Government obtained and produced comes from various months, the Defendants’ characterization of the production as including “nine months of CCTV footage,” see Resp. at 4, is misleading. The Government obtained footage only from selected cameras (many of which do not continuously record) from selected dates throughout the period for which it obtained footage.

But there’s something in that surveillance footage that has made Trump very concerned about leaks, more so than he was about the documents seized last August.

This indictment provides shocking new details about Nauta and De Oliveiras’ alleged efforts to comply with Trump’s orders to destroy surveillance footage.

But it does not yet explain how reported gaps ended up in the surveillance footage.

And it doesn’t yet explain what Trump was trying to hide — what was worse than video showing Nauta emptying out the storage closet and then only half-filling it before Evan Corcoran did a search.

The Superseding Stolen Documents Indictment: Buying Loyalty

/205 Comments/in , /by

While all the journalists were in Prettyman Courthouse in DC, Jack Smith superseded the Florida stolen documents indictment to add Trump employee Carlos De Oliveira — the property manager — to the indictment.

He’s the guy who helped Walt Nauta move boxes around, including loading them to go to Bedminster. Nauta also allegedly asked him to help destroy surveillance footage.

The superseding indictment adds another stolen document count — the Iran document he showed others, which is classified Top Secret — and another obstruction count for attempting to destroy the video footage.

This passage describes how Nauta flew to Florida to attempt to destroy security footage.

This is a key paragraph of the superseding indictment. It shows how Trump uses legal representation to secure loyalty. It’s a fact pattern that crosses both of Trump’s crimes, and may well be in the expected January 6 indictment. It may help to break down the omerta currently protecting Trump.

Just over two weeks after the FBI discovered classified documents in the Storage Room and TRUMP’s office, on August 26, 2022, NAUTA called Trump Employee 5 and said words to the effect of, “someone just wants to make sure Carlos is good.” In response, Trump Employee 5 told NAUTA that DE OLIVEIRA was loyal and that DE OLIVEIRA would not do anything to affect his relationship with TRUMP. That same day, at NAUTA’s request, Trump Employee 5 confirmed in a Signal chat group with NAUTA and the PAC Representative that DE OLIVEIRA was loyal. That same day, TRUMP called DE OLIVEIRA and told DE OLIVEIRA that TRUMP would get DE OLIVEIRA an attorney.

Several uncharged Trump employees have been added to the indictment.

  • Trump Employee 3, who simply passed on the information that Trump wanted to speak to Nauta on the day Trump Organization received a subpoena
  • Trump Employee 4, who is the Director of IT who had control of the surveillance footage; according to some reports, he had received a target letter
  • Trump Employee 5, who is a valet, but from whom DOJ seems to have firsthand testimony

The passage above seems to rely on testimony from Trump Employee 5 and the final exploitation of Walt Nauta’s phone.

It remains to be seen how DOJ learned the specifics of Trump’s conversation with De Oliveira.

And the PAC Representative — to whom Trump showed an Iran document — has been referred to as Susie Wiles. She’s a pivotal person in the alleged misuse of PAC-raised money.

This superseding indictment substantiates the obstruction more. But it also starts chipping away at the dangling of lawyers to obstruct the investigation.

Update: Here’s Jack Smith’s description of the additions.

Michigan MAGAt News: Michigan Ballot Tabulator Suspect Claims She Has Been Indicted

/30 Comments/in , /by

According to Bridge Michigan, one of the suspects in a tabulator conspiracy, Stefanie Lambert, claims she has been indicted.

“My attorney has been informed that I have been indicted by DJ Hilson, the special prosecutor in Michigan, working at the request of (Attorney General) Dana Nessel,” Stefanie Lambert said Wednesday on a conservative podcast, where she bashed the pending criminal action.

[snip]

Lambert is one of nine suspects Nessel referred to a special prosecutor last fall, citing an alleged tabulator tampering plot that aimed to prove former President Donald Trump’s unfounded claims the 2020 contest was rigged against him.

Court records show Hilson convened a secret grand jury to review evidence. It is the grand jury that would decide any indictments. He did not immediately respond to a request for comment on Lambert’s claims or the timing of any potential charges.

Other suspects in the case include former state Rep. Daire Rendon of Lake City, Barry County Sheriff Dar Leaf, officials with the Cyber Ninjas security firm and former Republican attorney general candidate Matt DePerno, who did not return a voicemail seeking comment late Wednesday.

The move has been anticipated since the prosecutor appointed to conduct this investigation when Dana Nessel recused last year, DJ Hilson, obtained a ruling earlier this month that unwarranted possession of voting equipment is a crime.

Lambert’s co-conspirators would make this a fairly important development. Dar Leaf is a sheriff who made excuses for the seriousness of the militia-tied kidnapping plot against Governor Whitmer. Cyber Ninjas, which has had backing from Patrick Byrne, Mike Flynn, and Christina Bobb, is better known for their role in the Arizona audit. And Matt DePerno was the GOP nominee for Attorney General last year, which is why Nessel recused from this investigation.

Per Bernie Kerik’s privilege log, DePerno also had at least three contacts with Rudy Giuliani’s team:

  • 12/9/2020: Cyber Forensics Team Company Overview and CVs Sullivan Strickler.pdf
  • 12/14/2020: FINAL ANTRIM FORENSICS REPORT PRESS RELEASE AND TALKING POINTS FOR DISTRIBUTION.pdf
  • 12/17/2020: Navarro POTUS Fraud report out.pdf

When Hilson got his ruling on the underlying law, it attracted almost no national attention.

But the news has the possibility of having national repercussions.

Meanwhile, another key Michigan MAGAt, failed gubernatorial primary candidate Ryan Kelley (who was arrested for vandalizng the inauguration platform last June), is expected to plead guilty at 10AM in DC.

Update: Here are the plea and the statement of offense for Kelley. He will be sentenced in October, and has yet to do the FBI interview that comes standard with these generic plea deals.

Update, 8/1: Matthew DePerno has, indeed, been indicted. He was arraigned today along with another of the tabulator alleged election fraudsters, former state Rep. Daire Rendon.

Rudy Giuliani Appears to be Claiming Privilege Over Hundreds of Items He Already Agreed Were Not

/25 Comments/in , /by

Based on statements that Rudy Giuliani and his attorney Robert Costello have made in the Ruby Freeman suit, he should be claiming privilege over no more than 43 items total.

He is claiming privilege over around 400.

We can say that based on two claims, made in sworn declarations.

First, Rudy submitted this declaration stating that all his comms from the coup conspiracy would be in the materials archived by TrustPoint as part of the SDNY search of his devices.

Mind you, there’s a claim in that declaration that Costello’s declaration debunks — and it explains a lot about Rudy’s failure to provide discovery. Rudy claims that all his iCloud emails would be in the TrustPoint materials.

All of my [redacted]@icloud.com iCloud data would have also been included in the TrustPoint data because I synced my iCloud to my devices.

But Costello’s declaration reveals that prior to October 18, 2021, he had observed to the Special Master that many of the email files, “contain no ‘body’ text” and by October 18, 2021, he learned that the reason for that is that “this is the way the iPhone stores backup data.”

Rudy’s lawyer, at least, learned before this lawsuit was filed that the TrustPoint material wouldn’t have his emails intact. Nevertheless, Rudy claimed his emails would be available in the TrustPoint materials, and apparently never checked his existing iCloud, Gmail, and ProtonMail accounts for relevant emails.

Meanwhile Costello confirmed something still more damning: that ultimately he and Rudy never appealed any of the designations that the Special Master in that case, Barbara Jones, came to on his content.

Trustpoint would then send me sections of the electronic material, so that I could designate whatever communications I believed were covered by attorney client, work product, or executive privilege. Those identified communications would then be sent to Judge Jones for her ruling. If there was a dispute between Judge Jones and myself, the matter would be referred to Judge J. Paul Oetken, the sitting SDNY Judge who had authorized the search warrants. We never needed to have Judge Oetken resolve a dispute.

That’s important, because we know how many files, total, Barbara Jones ultimately deemed to be privileged: 43.

Remember: per Judge Paul Oetken’s order, this privilege review covered all material post-dating January 1, 2018, regardless of topic.

Here’s what Jones said about the results of her review in a January 22, 2022 filing (filed before this lawsuit moved towards discovery):

As indicated in my November 2, 2021 Report, I initially reserved decision on the first 3 items that were designated as privileged by Mr. Giuliani’s counsel. After further discussions regarding these items, I agree that they are privileged and should not be turned over to the Government’s investigative team.

B. Device 1B05 – Chats and Messages

I next assigned for review the chats and messages that post-dated January 1, 2018 on Device 1B05, which is a cell phone. There were originally 25,481 such items, which later increased to 25,629 after a technical issue involving document attachments was identified. An initial release of non-designated items was made to the Government’s investigative team on November 11, 2021.1

Of the total documents assigned for review, Mr. Giuliani designated 96 items as privileged and/or highly personal. Of those 96 designated items, I agreed that 40 were privileged, Mr. Giuliani’s counsel withdrew the privilege designation over 19, and I found that 37 were not privileged. I shared these determinations with Mr. Giuliani’s counsel, and they indicated that they would not challenge my determination that the 37 items are not privileged. The 40 privileged documents have been withheld from the Government’s investigative team and the remaining 56 were released on January 19, 2022.

43 documents total, across Rudy’s 16 devices, were privileged. Most were on an iPhone referred to as 1B05.

Rudy actually used the device identifiers from the search in his privilege log. Most are from 1B05 — and the Bates numbers show that there were over 21,000 items on that phone.

Indeed, we can see that around 40 really are privileged — because they pertain to Rudy’s own representation by Joe Sibley (indeed, those appear to be the only emails that were preserved).

That says Rudy and Costello already agreed that all the rest of the things in this privilege log (save potentially 3 files) — around 220 of which are just from that one phone — are not privileged.

That is, if you put Costello’s declaration together with Rudy’s, it suggests that Rudy claimed, in the Ruby Freeman lawsuit, that hundreds of things were privileged when he and his attorney had already agreed, before this case moved towards discovery, they were not.

I emailed both Costello and Freeman’s attorney Michael Gottlieb to check whether I understand these details correctly and got no response from either.

Damages

/81 Comments/in , , /by

Rudy has effectively, apparently legally, admitted liability for defamation.

The thing is, in a civil case, once you admit liability, you are on to damages.

That is just how it goes.

What are the damages for these women?

They are far from negligible as Rudy will argue. Damages are huge.

So, what are the damages? And why is Rudy admitting to liability? Does Rudy have no money to be attached?

That is really it, isn’t it? Rudy is admitting he has no money, otherwise would never make this argument.

Rudy’s Corrupted Devices

/21 Comments/in , , , /by

In a remarkable set of filings, Robert Costello — Rudy Giuliani’s defense attorney and a key player in the effort to package up a doctored laptop and pitch it as Hunter Biden’s — has provided an explanation for why his client wasn’t charged for doing the bidding of Russian-backed Ukrainians without registering as a foreign agent: Because many of the devices seized on April 28, 2021 were “corrupted” (his word).

Here are the filings:

  • Joe Sibley’s response to Ruby Freeman’s motion for sanctions
  • Robert Costello’s declaration purporting to describe the Special Master process in Rudy’s Ukraine influence-peddling case
  • A nolo contendere declaration from Rudy stipulating that he will not contest that he made the defamatory statements about Ruby Freeman and Shaye Moss or that the statements were false, but preserving his ability to argue the statements were opinion or otherwise protected speech

No contest that Rudy lied

The last of these, Rudy’s nolo contendere declaration, may be an attempt to put all these discovery disputes behind him by simply stipulating that the information he would have turned over had he complied with discovery would show that he made the defamatory claims about Freeman and Moss and there was no basis for them. His stipulation is limited to this case, so could not be used in an 18 USC 241 case against him.

Rudy is attempting to stop digging himself deeper in a hole.

Let’s see where we might go if we dig further, shall we?

Costello blames the government contractor for “corrupting” Rudy’s devices

Costello’s declaration claims that he encountered numerous technical problems with the data on the devices, and attributes those problems to the government’s vendor. Based on having blamed the government’s discovery vendor for any technical problems, he claims it is impossible for Rudy to have spoiled any of the materials on the phones.

In reviewing the materials, I encountered numerous non-user generated files and what I referred to as computer gibberish. In addition, there were many emails that contained the header with the sender and recipient addresses, but no text in the body of the email. With respect to this material, in September and October of 2021, I made inquiries of the Special Master’s electronic discovery people, and they informed me that this was exactly how they received the electronic materials. The Special Master’s lawyers informed me that they had made similar inquiries to the Government and the Government reported that any errors in the production of the electronic data, would have occurred when PAE, the Government vendor, performed their extraction procedure. I have attached some of the contemporaneous communications with the Special Master’s office in September and October of 2021. See Exhibit C attached.

As a result of that information, you can see that the allegations made by Mr. Gottlieb are false and not based upon any factual material. Mr. Giuliani has not spoliated any electronic evidence. What has been produced is what Mr. Giuliani received from the United States Government. Mr. Giuliani has never possessed the electronic materials since they were seized in April 2021. It was, and is, physically impossible for Mr. Giuliani to have spoliated any of this evidence as Mr. Gottlieb claims. [my emphasis]

Later, Costello outright claims that the government “had apparently corrupted some of the files as they were extracting the data,” and then wiped them.

There was no way for Mr. Giuliani or I, to know that the Government had apparently corrupted some of the files as they were extracting the data. Likewise, there was no way for Mr. Giuliani or I, to know, [sic] that when the devices were returned by the FBI, AFTER they concluded there would be no charges forthcoming, that the actual devices would be wiped clean. [my emphasis]

That, Costello claims, is proof that Rudy couldn’t have destroyed any electronic evidence.

In short, there is simply no factual basis for Mr. Gottlieb’s allegations of spoliation. It was physically impossible for Rudy Giuliani to do what Mr. Gottlieb swears to.

Except that’s not clear at all. That’s true because Costello’s own evidence doesn’t support his claim that the government attributed all of this to the vendor. That leaves the possibility that Rudy spoiled the evidence before SDNY seized his phones. If so, Costello’s claim that Rudy couldn’t have spoiled the evidence after Ruby Freeman’s lawsuit, in December 2021, is true, but it doesn’t rule out Rudy or someone else — perhaps his Russian spy friends — spoiling evidence before the search in April 2021, at which point he was already lawyered up for at least the Smartmatic suit.

Costello misrepresents review scope

Before I show that Costello’s own evidence about the evidentiary problems doesn’t support his claims, let me demonstrate something more basic.

Costello repeatedly claims (and Sibley repeats) that the government reviewed 26 years of electronic evidence. It’s true that there was evidence from 26 years on the devices. But as I’ve explained repeatedly, even the government asked to limit the scope of review to everything after January 1, 2018. And that’s what Judge Paul Oetken approved on September 16, 2021.

An email Costello included with his declaration — directing Rudy what to review next — shows that’s what the scope of the review was.

Costello may have a reason he wants to obscure the scope of the review, which I’ll return to. Or it may be that after discovering the “corruption” on Rudy’s phones, FBI’s technical experts had to look further, using a warrant that is not yet public. But at least given the public record, it is not an honest representation of what was reviewed, as distinct from what was extracted.

The corruption found on Rudy’s phones

Based on Costello’s evidence, there were five different problems found with Rudy’s devices:

  • The dates on emails adopted the date of extraction — July 2021 — as the last modified date
  • Some .jpg files could not be viewed
  • Emails from Rudy’s phone lacked the text of the email
  • There were unreadable files on the larger devices
  • The WhatsApp texts had gotten garbled

Costello includes some cherry-picked emails to substantiate those problems. I’ll put them in order.

The first identified problem was the last-modified date, which Costello wrote someone from Trustpoint to identify on September 15 and which I first noted days later. Costello does not mention whether or how that problem was fixed.

Then, Costello quoted from his own email sent on September 30, which described that everything on seven devices was non-readable non-user created.

The bottom line of which is that there is virtually No User Created Info on the first seven devices. The screen shots of data we observed was non- readable non user created data which is clearly non- responsive and so we shouldn’t raise any objections to it being turned over to the Government.

Additionally we are getting the Special Master to go to the Government and its vendor to see if they can eliminate all of the non- user created data from the 9 remaining devices to make our future work more manageable.

A response from the Special Master on October 1, 2021 describes the problems with those seven devices somewhat differently, this way:

  • .jpg files that cannot be viewed
  • missing email/text body issue
  • unreadable “computer files” on the larger devices

Those devices were reviewed for files through seizure, so they likely had contemporaneous records.

Then, an instruction email from the Special Master team, written on October 15, 2021 — regarding the iPhone from which the bulk of the files were turned over — suggests that on that phone only the missing email/text issue remained. This is one of the only communications that describes something the government represented. And at least per them, it’s not a matter of corruption, it’s a matter of how iPhones work.

It is our expectation that these documents can be reviewed quickly, given that many are very short, and others — as you’ve pointed out previously — contain no “body” text. We have asked the Government why many messages do not contain bodies, and their understanding is that this is the way the iPhone stores backup data.

Then, on October 21, 2021, Costello sent an email noting that the WhatsApp texts were muddled.

Trustpoint reports to us that within the field of approximately 25,000 data items there are approximately 7500 “WhatsApp” entries. The way the Government’s expert presented this evidence almost all the Whats App entries consist of garbled words in English. For example the phrase “In God we trust” would likely appear to us now as “God we trust in”.

[snip]

Frankly we do not know how to deal with this, and we wanted to alert you to his latest glitch which will be found on more than 25% of the items to be searched.

The Special Master responded the following week that they “hope to have a solution shortly.”

As noted above, the Special Master turned over virtually everything on that phone, so they found a way to deal with the WhatsApp issue.

Given the number of files found on the remaining 8 devices, may well have found the same problem on those devices as they did on the first seven.

In short, at least per the record Costello himself provides, he has no evidence the government attributed any of this to the vendor. Costello claimed that the government had told the Special Master that,

the government reported that any errors in the production of the electronic data, would have occurred when PAE, the Government vendor performed their extraction procedure.

But, unless I’m missing it, he provides no evidence of that.

It appears likely that 15 of 16 devices lacked substantive information, and the only thing he provides an explanation for is that some emails — emails that Rudy would have separate access to — weren’t downloaded onto a backup of his phone.

Costello spins on Rudy’s non-compliance on emails

According to Rudy’s own declaration, he helped Trump plot a coup attempt using three different emails, which other documents (including Costello’s own declaration!) reveal must be:

  • rudolphgiuliani at icloud
  • helen0528 at gmail
  • TruthandJustie4U at proton

Rudy’s own privilege log shows that he retained both the gmail and icloud emails — but for things after January 6 and before the seizure, which in the log are fairly presented as privileged.

Rudy’s own privilege log shows none of the protonmail accounts used, even though Bernie Kerik’s does (more on that later).

That’s why it’s so interesting that Costello attacks rather than addresses why Epshteyn (and Christina Bobb) had responsive records that Rudy didn’t turn over.

In paragraph 5 of Mr. Gottlieb’s affirmation, he states that they obtained a December 13, 2020 email from Defendant Giuliani to Boris Ephsteyn [sic] which ” reiterates Defendant’s false claims about Plaintiffs that: “Georgia has video evidence of 30,000 illegal ballots cast after the observers were removed.”” Note first, that the Plaintiffs in in this case were not mentioned, but further note, that when one reviews the citation for this email (ECF-56-7), there is a later email in that same exhibit from Jason Miller that reports: “Statement on hold until further notice, pending Rudy’s talk with the President.” In the spirit of lack of candor, Mr. Gottlieb failed to mention that email.

Here’s the email in question (which redacts which email it went to, but one Bobb turned over was sent to Rudy’s Gmail). But whichever one it came from, it’s an email that Rudy still had access to in 2021, as evidenced by the exhibits presented in this case.

There seems to be good cause to conclude Rudy deleted the email or refused to look for it.

Costello and Sibley’s exaggeration of the investigative closure

Again, 15 of 16 of these devices had some as yet unexplained data that was not user created. I don’t see where Costello substantiated that the government’s vendor did this. Short of doing that, he can’t rule out that Rudy — or, again, the Russian spies he was cozy with at the time — destroyed the data on the devices.

And that’s why I find it notable how Costello and Sibley misrepresent the nature of DOJ’s notice the grand jury investigation into Rudy’s Ukraine influence peddling had concluded.

At the same time as NY State was asking Barbara Jones to serve as the monitor over Trump Organization’s legal woes with the state, SDNY filed this letter, asking Judge Oetken to terminate the appointment of Jones.

The Government writes to notify the Court that the grand jury investigation that led to the issuance of the above-referenced warrants has concluded, and that based on information currently available to the Government, criminal charges are not forthcoming. Accordingly, the Government respectfully requests that the Court terminate the appointment of the Special Master, the Hon. Barbara S. Jones.

As I noted at the time, Costello ran to the press and claimed this meant Rudy would not be charged.

But Costello never claimed to have received a declination letter. And contemporaneous reporting made clear the case remained open.

We now know why: Instead of whatever prosecutors expected to find on at least 7 of Rudy’s phone, they found non-user generated non-readable files. Maybe their vendor fucked up. Maybe something else happened to the devices. But there was nothing there for them to build their case on.

Which is why Costello’s spin on what happened is so interesting. He faults Ruby Freeman’s lawyer for not mentioning that Rudy wasn’t charged.

In his Affirmation, Mr. Gottlieb referenced a criminal investigation run by the SDNY involving Mr. Giuliani, but conveniently failed to mention that it was resolved in Mr. Giuliani’s favor.

[snip]

First, let me state that after the Government, be it the FBI or the U. S. Attorney’s Office for the Southern District of New York (“SDNY”) reviewed 26 years’  worth of electronic data, the SDNY, [sic] issued an unusual public statement declaring that it was not charging Mr. Giuliani with any violation of federal law.

But he overstates the filing, which only addresses the grand jury in question. And the only reason the statement was unusual is that it wasn’t a declination letter sent to Costello himself.

Given the revelation that at least 7 and possibly as many as 15 of these devices were — to use Costello’s word — “corrupted,” it makes other details of the Rudy investigation more interesting, including a request, reported in April 2022, for help accessing other phones.

If the vendor didn’t “corrupt” the data on 15 of 16 of Rudy’s devices — and I don’t see where Costello shows they did — I can imagine that the SDNY might pursue how they got corrupted.

And that may be why Rudy is attempting to end any further review of why he can’t even find emails that Boris Epshteyn had access to.

Cover-Up: Joseph Ziegler Provided a Different Explanation Why Hunter Biden Wasn’t Charged

/11 Comments/in , , /by

You will read a lot of insane reporting about the GOP attempt to prevent the President’s son from pleading guilty in a federal court today.

Virtually all of it will misrepresent the testimony of the so-called IRS whistleblowers who claim that Hunter Biden got a plush deal. That coverage will misrepresent where any potential misconduct may lie.

Here’s what those misrepresentations look like, in this case from NYT:

The committee has heard testimony from two Internal Revenue Service investigators who claim to be whistle-blowers and have told the panel that the younger Mr. Biden received preferential treatment from the Justice Department. Mr. Smith’s brief asked the judge to consider the testimony in deciding whether to approve the agreement.

[snip]

The judge overseeing the case, Maryellen Noreika, agreed to seal the filing, but not before The New York Times was able to obtain a copy. The brief argued that the plea deal was “tainted,” citing the testimony of the two I.R.S. officials.

“The situation here is not that the Justice Department exercised charging or plea negotiation discretion, but the presence of credible allegations that the investigation, charging decisions and plea negotiations were tainted by improper conduct at various levels of the government,” wrote Theodore A. Kittila, a lawyer who filed the brief on behalf of Mr. Smith.

[snip]

Republicans have more recently tried to make a case that Hunter Biden’s plea deal was marked by favorable treatment from the Justice Department in his father’s administration. That assertion has been rejected by Attorney General Merrick B. Garland and by the prosecutor who has overseen the case, David C. Weiss, the U.S. attorney in Delaware, a Trump appointee.

It’s true that the so-called whisleblowers complained about things they weren’t able to do — most of which occurred while Bill Barr was Attorney General.

But that’s not the only thing the so-called whistleblowers testified to.

Joseph Ziegler testified that when he asked why Hunter wasn’t being charged, he was told that prosecutors had found emails that led them to worry they couldn’t charge the case at all.

So we found out through talking with our SAC that the attorneys had found — we were always asking for updates on charging. When are we going to charge? When are we going to charge? We were told that the prosecutors had found some emails that concerned them if they could actually charge the case. That’s what they said to us.

He even explained what some of those emails might be: documentation of Sixth Amendment problems with the case and evidence of Trump’s improper influence on it.

Around the same time in 2019, I had emails being sent to me and the Hunter — and the prosecutors on the case, the Hunter Biden prosecutors, from my IRS supervisor. So this was Matt Kutz still.

From what I was told by various people in my agency, my IRS supervisor, Matt Kutz, created memos which he put in the investigative files regarding the investigation potentially violating the subject’s Sixth Amendment rights. He also referred to Donald Trump’s tweets at the time.

I recall that at one point I had to go around my supervisor and ask his boss, ASAC George Murphy, to tell him to stop sending me and the Hunter Biden prosecution team these emails and that I was searching media articles on a weekly basis and was aware of everything being written in the media regarding the case.

There’s documentation in the case file that some part of the investigation — potentially something Ziegler himself did! — created what are probably Confrontation Clause problems for the case generally.

But that may not be the only thing.

Gary Shapley testified that he was distanced and then removed from the case after prosecutors had to ask him to turn over his own emails for discovery review a second time, after he had blown off a request seven months earlier.

Shapley was first asked to turn over his emails about the case in March 2022. But even though he was the one who had prepped to interview Hunter Biden himself, he did not comply.

It is common practice for DOJ to ask for the case agents’ communications in discovery, as they might have to testify in court. However, it’s much more unusual to ask for management communications, because it is simply not discoverable.

In March of 2022, DOJ requested of the IRS and FBI all management-level emails and documents on this case. I didn’t produce my emails, but I provided them with my sensitive case reports and memorandums that included contemporaneous documentation of DOJ’s continued unethical conduct. [my emphasis]

Then, in October 2022, prosecutors asked again. As Shapley himself described, he was angry that he was being asked for emails that might show exculpatory or impeachment information.

They also renewed the request for all my emails on the case, saying they needed to ensure they were aware of any exculpatory or impeachment effort in the case. But their extraordinary request looked to us just like a fishing expedition to know what we’d been saying about their unethical handling of the case.

[snip]

[T]his was the culmination of an October 24th communication from Delaware U.S. Attorney’s Office and — well, it was really Lesley Wolf and Mark Daly who called the case agent, [redacted], on the telephone and said, hey, we need — we need Shapley’s emails and his — these sensitive case reports that he’s authored back to May.

And they didn’t ask for discovery for anybody else. They didn’t ask for, from the — mind you, the agents had provided discovery March-April timeframe, so there was 6 months or so of additional discovery, and they’re not asking for that, right? They’re only asking for mine.

So [redacted] sends me an email with Wolf and Daly on it that says, hey, you know, they asked for this, you got to talk to Shapley. I respond, hey, yeah, I’m available 9:15, let’s chat. And she sends that, she forwards my email to Shawn Weede, number [two] — a senior level at Delaware U.S. Attorney’s Office.

And then he contacts me about this discovery, and he’s kind of putting a lot of pressure on me. So even Weiss called up, the deputy chief, to complain about timing of the emails that got turned over from me at that request. [my emphasis]

A month or so later, Shapley made the extraordinary request for the FBI agent reviewing emails to share anything he found in advance. As I’ve noted, Shapley asked for the kind of special treatment he claims Hunter Biden got.

This is what the NYT won’t tell you: That the testimony of both Ziegler and Shapley provides an entirely different explanation for why Hunter Biden wasn’t charged with felonies. And that explanation may have to do with their own conduct, not Hunter Biden’s.