Search Warrant Served on Google for WikiLeaks Journalist Kristinn Hrafnsson's Personal Data in US Government "Espionage" Probe WikiLeaks release: January 25, 2015 Keywords: Google, warrant, WikiLeaks, Kristinn Hrafnsson, Espionage Act, search, seize, United States, Iceland, Grand Jury, CFAA, Conspiracy, data, privacy, journalist, communications, email Restraint: Originally: Contempt of court; Now: Still under seal but target can distribute Title: Notification from Google / Search and Seize Warrant Date: December 23, 2014 Group: United States District Court for the Eastern District of Virginia Author: The Honorable John F. Anderson – United States Magistrate Judge Link: http://wikileaks.org/google-warrant Pages: 4 Description On 23 December, 2014, Kristinn Hrafnsson, spokesperson at the publishing organisation WikiLeaks since 2010, received notice from Google Inc. that her Google account(s) had been subject to a search and seize warrant for a matter pending in the U.S. District Court for the Eastern District of Virginia, which is conducting an ongoing "espionage" probe with the US Department of Justice into WikiLeaks and its publisher, Julian Assange. The warrant demands that all information pertaining to the account(s) be handed to the US government, including email contents, metadata, contact addresses, draft emails, deleted emails, and log-in IP addresses. The warrant was issued to seize "evidence" related to the alleged violation of US federal laws, including violation of the Computer Fraud and Abuse Act (18 U.S.C. §1030) and 18 U.S. Code §793, also known as the United States Espionage Act. From: usernotice@google.com Date: 23/12/2014 Subject: [0-5929000005525] Notification from Google To: Dear Google has received the attached legal process for information related to your account in a matter pending in the US. District Court for the Eastern District of Virginia. The legal process was initially subject to a nondisclosure or ?gag? order that prohibited Google from disclosing the existence of the legal process to you. The Court has since issued a second order permitting Google to disclose to you a redacted version of the legal process. Under the terms of the order, you are permitted to disclose these materials to whomever you choose. To comply with the law, Google has provided responsive documents pursuant to the Electronic Communications Privacy Act. See 18 U.S.C. 2701 et seq. If you have questions regarding this matter, we encourage you to contact your attorney as Google is not in a position to provide you with legal advice or discuss the substance of the process in our possession. Regards Google Inc. Legal Investigations Support A0 93 (Rev 12/09) Search and Seizure Warrant gmres DISTRICT COURT for the Eastern District of Virginia In the Matter ol?the Scare! of (Brie?y describe the property In he 1' shed or identify the by name undr ?J'en) Case NO. that Is store a. premises controlled Una! SEARCH AND SEIZURE WARRANT To: Any authorized law ent'orccme ellicer An application by a federal hm enforcement of?cer or an attomey for the government requests the search ot'thc following person or property loot etl in the North_e_rn . District of q_ _Calitomia_ (Menu/1' the person or describe the proper!) 1m .wurc hard an.) iv! in I infOrmation associated with the e-mail a drass&that is stored at premises owned. maintained. controlled. or operated by ioqle. Inc . as further described Ir Attachmert A. The person or property to be se rc ted. described above, is believed to conceal (tdenIr'yI/m person or desert: the property It) seized)? fruits. and instrumentalities otu olations ol ?8 U.S.C. 371. 641, 793(d). 793(9). and 1030. I ?nd that the or an: recorded testimony. establish probable cause to search and seize the person or property. DLL (no! to excel {4 days) ?nin the daytime 6:00 am. to 10]: m. at any time in the day or night as I ?nd reasonable cause has been established. YOU ARE COMMANDED tc execute this warrant on or before Unless delayed notice is authori. ct below, you must give a copy ofthe warrant and a receipt for the property taken to the person from whom, or from whose premises, the property was taken. or leave the cepy and receipt at the place where the property was taken. The of?cer executing this warm t, or an of?cer present during the execution ot'tbe warrant, must prepare an invent ry as req??i 'and mm return this warrant and inventory to linited States Magistrate Judge .39? _t ISQL - (naqu TI ?nd that immediate noti?catio may have an adverse result listed in 18 U.S.C. 2705 (except for delay of trial). and authorize the of?cer execuli lg this warrant to delay notice to the person who, or whose property, is ill be searched or .scized (thee/t the approprth ha: jfor days (no! to exceed 30) i ['qutil. the factsjusti?'ing. the later speci?c date of Date and time issuedzmm? 2 . (?ity and state: a The l_lono_rgble iobn F. Magistrate Judge Primed name and ml: . ATTACHMENT A Property to Be Searched This warrant applies to nx'ormation associated with?that is stored at premises owned, maintainet controlled. or operated by Google. Inc. a company headquartered at 1600 Amphitl Parkway. Mountain View, CA. For the above-listed acu. .nnt, (ioogle. Inc. is required to disclose the following infomiation to the govcmment a. l'he contents ol Ill e-mails associated with the account. including stored or preserved copies ot?e?mails sen to and from the account, dratt e-mails. deleted c-mails, emails preserved pursuant to a request mide under 18 27030), the source and destination addresses associated with each :-mail. the date and time at which each e-mail was sent, and the si7e and length ol?cach e-mail; b. All records or 0 1c: information regarding the identi?cation of the account. to include full name, physical add ess. telephone numbers and other identi?ers, records of session times and durations? the date on which the account was created, the length of service. the t) pes ot? service utilized, the address .scd to register the account. log-in IP addresses associated with session times and dates= accour status. alternative e-mail addresses provided during registration, methods of connecting. log file and means and source of payment (including any credit or bank account number); c. All records or otl e1 information stored at any time by an individual using the account, including address hool: contact and budd) lists. calendar data, pictures. and ?les, and includng any informm (er and any inllirmulinn pursuant to a rcqucal inudc undcr d. All records ?ning lu communications (inuglc, Inc. and an) pcrs'nn regarding account. includii ilh scrviccs and records nfactions lukcn. L)