Document Number (FOIA) /ESDN (CREST):
Body:
Approved for Release: 2024/02/27 C06552603
Office of Inspector General
Investigations Staff
Case Closing Memorandum
(b)(1)
(b)(3)
(b)(3)
(b)(6)
(b)(7)(c)
(b)(3)
(b)(6)
(b)(7)(c)
(b)(1)
(b)(3)
(b)(6)
(b)(7)(c)
(b)(1)
(b)(3)
(b)(6)
(b)(7)(c)
I. Administrative
Case No.:
Investigator:
Date Received:
Date Assigned:
Data
(b)(3)
2013-11504 (b)(6)
Case Title:
feswri Child Pornography
(b)(1)
(b)(3)
SA (b)(7)(c)
Supervisor:
ASAC
16 August 2013
Date Opened:
20 August 2013
20 August 2013
Case Type:
Full Investigation
II. Summary of Investigative Actions
1. (U//j,014er On 16 August 2013, the Office of Inspector General (OIG) identified child
pornography activity in the proxy logs of the network. OIG determined
that the activity was associated with a contractor
(b)(3)
(b)(6)
(b)(7)(c)
(b)(3)
(b)(6)
(b)(71(c)
(b)(3)
(b)(6)
(b)(7)(c)
2. (U/ OIG reviewedsecurity file, proxy log records, and open source records. (b)(3)
OIG interviewedL and examined his personal computer and other digital media pursuant to a federal (b)(6)
search warrant. (b)(3) (b)(7)(c)
(b)(6)
(b)(7)(c)
III. Findings
3. GS/iNfj began workin
recently through an Agency contract
and scheduled to return
(b)(3)
(b)(6)
(b)(7)(c)
. CSINII A 16 August 2013 review of the
(b)(6)
(b)(7)(c)
for the Agency on
as deployed
2006, most
(b)(1)
(b)(3)
(b)(6)
(b)(7)(c)
(b)(1)
(b)(3)
(b)(6)
(b)(7)(c)
TA I )
A manual review of (b)(3)
Sent ember 2013.
(b)(1)
(b)(3)
(b)(6)
(b)(7)(c)
(b)(7)(e)
the sites visited showed that they contained sexually explicit images of pre-pubescent children. During
the course of the activity, the IP address loaged in to multiple accounts with the usemame (b)(7)(c)
(b)(3)
(b)(6)
(b)(7)(c)
(b)(7)(e)
(b)(1)
(b)(3)
(b)(6)
my-20100)(7)(c)
Page 1 of 2`
(b)(7)(e)
This document is controlled by the CIA/OIG and neither the document nor its contents should be
disseminated without prior IG authorization.
(b)(3)
Approved for Release: 2024/02/27 C06552603
Approved for Release: 202410.2227C06552603
(b)(6)
(b)(3) Case Closing Memorandum (b)(7)(c) (b)(6)
(b)(1)
(b)(7)(c,)3)(3)
(b)(6)
(b)(7)(c) . (S//NF) During a 9 September 2013 interview with OIG and a detective from
stated that he had been deployed
(b)(1)
(b)(3) used the email addresses OIG showed
(b)(3)
(b)(6) sexually explicit images of minors that had been downloaded from and
stated that
(b)(3)
(b)(7)(c) three of the images were not consistent with what he had searched for. was asked if
he recognized
(b)(6)
the remaining images from his browsin and he said "yep". stated that he would search
for images (b)(7)(c)
(b)(3) like the ones shown to him "often". e^3^1is nted to the search of his laptop, iPhone, and
associated
(b)(
(b)(6) media for evidence of childnograph, ,, , clearQn"Pc were suspended and he was
noted as ti-Ntn\03)(6)
(b)(6) (b)(3)
-1-')�)(b)(7)(c)
(D)(J)
(b)(7)(c) 0;0(3) on (b)(6) 2013.
-(b)(7)(c) (b)(7)(c) (b)(6)
6. (UHFOU0) An OIG (b)(7)(c) identified
38 images (b)(6)
found that (b)(7)(c)
of child pornography and 161 images containin child erotica. Additionally, the examination
the laptop had been assigned the IP address (b(3) nd had searched the site (b)(3)
for the term
"Preteen" (b)(6)
_(b)(7)(c)
7. (UHFOU0) On 31 October 2013, obtained an arrest warrant for
of Possession of Child Pornography.
(b)(3)
(b)(6)
for two counts (b)(7)(c)
(b)(3)
(b)(3)
(b)(6)
(b)(6)
(b)(7)(c) (b)(7)(c)
8. (U//FOU0) The subject of the OIG investigation is deceased, and no additional subjects
were identified. The matter is closed.
IV. Review and Approval
Case Closing Memo submitted by Investigator to
(b)(3)
(b)(6)
Supervisor:
(b)(3)
(b)(7)(c)
-(b)(6)
/ Date)
(b)(7)(c)
Case Closing Memo approved by Supervisor:
(b)(3)
1/
/1?
_(b)(6)
Sign / Date)
(b)(7)(c)
INV-201
Page 2 of 2
SECRET
Approved for Release: 2024/02/27 C06552603