API tools faq
paste
Guest User

Fuck The FBI

a guest
Nov 9th, 2017
70
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 31.17 KB | None | 0 0
raw download clone embed print report
  1.  
  2.  
  3.  
  4.  
  5. Case 3:17-mj-00257-BF Document 1 Filed 03/31/17 Page 1 of i,
  6.  
  7.  
  8.  
  9.  
  10.  
  11.  
  12.  
  13.  
  14.  
  15.  
  16.  
  17.  
  18.  
  19.  
  20.  
  21.  
  22.  
  23.  
  24.  
  25.  
  26.  
  27.  
  28.  
  29. IN THE UNITED STATES DISTRICT
  30. FOR THE NORTHERN DISTRICT OF TEXAS
  31. DALLAS DIVISION
  32. UNITED STATES OF AMERICA No. 51 35" 5F
  33. v. - U.S. DISTRICT COURT
  34. NORTHERN DISTRICT or TEXAS
  35. JUSTIN SHAFER FILED
  36. I MR 3' I 20!?
  37. CRIMINAL COMPLAINT ,e
  38. - CLERK, U.S. URT
  39. I, the complainant in this case, state that the following is true Ilo the?le In 0 nd
  40. belief: 61W
  41.  
  42.  
  43.  
  44.  
  45.  
  46.  
  47.  
  48. From in or about May 2016 through and including March 21, 2017, in the Dallas and Fort
  49. Worth Divisions of the Northern District of Texas and elsewhere, defendant JUSTIN
  50. SHAFER, knowingly and with the intent to harass and intimidate and to place under
  51. surveillance with intent to harass and intimidate a person, namely N. and his spouse,
  52. did knowingly and intentionally use an interactive computer service and an electronic
  53. communication service to engage in a course of conduct that caused, attempted to cause,
  54. and would be reasonably expected to cause substantial emotional distress to that person;
  55. in that JUSTIN SHAFER used his Twitter account to post derogatory and in?ammatory
  56. statements about Hopp and personal identifying information of Hopp and his immediate
  57. family and his wife online.
  58.  
  59. In violation of 18 U.S.C. and 18 U.S.C. 2261(b)(5).
  60.  
  61. This criminal complaint is based on the facts set out in the attached af?davit.
  62.  
  63.  
  64.  
  65. RONNIE o. BUENTELLO
  66. Special Agent
  67. Federal Bureau of Investigation
  68.  
  69.  
  70.  
  71. Sworn to before me and signed in my presence in Dallas, Texas, on March
  72.  
  73.  
  74.  
  75.  
  76.  
  77. UNITED STATES MAGISTRATE JUDGE
  78.  
  79.  
  80.  
  81.  
  82.  
  83.  
  84.  
  85. Case 3:17-mj-00257-BF Document 1 Filed 03/31/17 Page 2 of 20 PageID 2
  86.  
  87.  
  88.  
  89. AFFIDAVIT IN SUPPORT OF COMPLAINT
  90.  
  91. 1, Ronnie O. Buentello, being ?rst duly sworn, hereby depose and state as follows:
  92.  
  93.  
  94.  
  95. 1. I am a Special Agent (SA) with the Federal Bureau of Investigation (FBI) duly
  96.  
  97. appointed and acting according to law. I have been employed as an FBI SA since
  98.  
  99.  
  100.  
  101. February of 201 1. Prior to becoming a SA, I was employed by the FBI as an Electronic
  102. Technician. Since January 2013, I have been assigned to investigate violations of federal
  103.  
  104. law including violations involving computer crime, such as malicious computer activity,
  105.  
  106.  
  107.  
  108. computer intrusions, and internet fraud schemes. Since being employed with the FBI, I
  109. have received training and expertise in various forms of computer technology along with
  110. industry recognized cyber forensic and security training to investigate computer crimes. I
  111.  
  112. have participated in the execution of numerous searches and seizures pursuant to warrants
  113.  
  114.  
  115.  
  116. authorizing the seizure of evidence related to the unauthorized access of protected
  117.  
  118. computer systems. Based on my training, experience, and my participation in other
  119.  
  120.  
  121.  
  122. investigations involving individuals engaged in offenses like the current offenses, I know
  123. that individuals and/or business engaged in ?nancial crimes often maintain documents
  124.  
  125. and ?nancial records for long periods of time, particularly when they are involved in
  126.  
  127.  
  128.  
  129. ongoing criminal conduct over a long period of time. I also know that individuals and/or
  130. businesses keep some, if not all, of their records in electronic form, such as on a
  131. computer. I know that documents and records can be in the form of printed documents or
  132.  
  133. stored in computer memory or on computer disks or other computer storage mediums.
  134.  
  135.  
  136.  
  137. 2. Upon information and belief, there is probable cause to believe that between in or
  138. about May 2016, and continuing through and including March 21, 2017, defendant
  139.  
  140. Affidavit Page 1
  141.  
  142.  
  143.  
  144. Case 3:17-mj-00257-BF Document 1 Filed 03/31/17 Page 3 of 20 PageID 3
  145.  
  146.  
  147.  
  148. JUSTIN SHAFER, knowingly and with the intent to harass and intimidate and place
  149.  
  150. under surveillance with intent to harass and intimidate another person, did knowingly and
  151.  
  152. intentionally use an interactive computer service and an electronic communication
  153.  
  154.  
  155.  
  156. service to engage in a course of conduct that caused, attempted to cause, and would be
  157.  
  158.  
  159.  
  160. reasonably expected to cause substantial emotional distress to that person, in violation of
  161.  
  162. 18 U.S.C. Cyber Stalking.
  163.  
  164.  
  165.  
  166. 3. Upon information and belief, there is probable cause to believe that between in or
  167. after May 2016, through on or about March 21, 2017, defendant JUSTIN SHAFER,
  168. knowingly and with the intent to harass, intimidate, and place under surveillance with the
  169.  
  170. intent to harass and intimidate FBI SA Nathan Hopp, his immediate family members, and
  171.  
  172.  
  173.  
  174. his spouse. Specifically JUSTIN SHAFER used his Twitter Inc. account @jshafer817
  175. and his Facebook Inc. account to publicize personal identifying information of SA Hopp,
  176. his family, and his spouse, to include a past residence address, and acebook pro?le
  177. accounts belonging to SA Hopp?s mother, cousin, and spouse, and ex-wife, in an attempt
  178. to harass and intimidate SA Hopp and his family members. Furthermore, JUSTIN
  179.  
  180. SHAFER, knowingly and willfully, sent a Facebook ?friend request? to SA Hopp?s
  181.  
  182.  
  183.  
  184. spouse, and sent direct messages through Facebook to her. JUSTIN SHAFER started to
  185.  
  186. ?follow? SA Hopp?s spouse?s Twitter account, in an attempt to harass and intimidate her. -
  187.  
  188.  
  189.  
  190. Additionally, JUSTIN SHAFER sent an email from his email address,
  191.  
  192. justinshafer@gmail.com, to SA Hopp?s business email address. Because of the contact by
  193.  
  194.  
  195.  
  196. JUSTIN SHAFER, SA Hopp observed the tweets on Twitter feed, and
  197. reported the criminal conduct for further investigation.
  198.  
  199. Affidavit - Page 2
  200.  
  201.  
  202.  
  203. Case 3:17-mj-00257-BF Document 1 Filed 03/31/17 Page 4 of 20 PageID 4
  204.  
  205.  
  206.  
  207. 4. The information contained in this af?davit is based on my investigation, including
  208. information obtained from other Agents, review of data, and my experience and
  209. background as an FBI SA. I have not included each and every fact known to me
  210. concerning this investigation. I have set forth only the facts that I believe are necessary
  211.  
  212. to establish probable cause to believe that a violation of 18 U.S.C. 2261A.
  213.  
  214.  
  215.  
  216. APPLICABLE CRIMINAL STATUTES
  217. 5. There is probable cause to believe that JUSTIN SHAFER has committed a
  218.  
  219. violation of 18 U.S.C. The pertinent sections of the statutes are set out below:
  220.  
  221.  
  222.  
  223. 18 U.S.C. Stalking
  224.  
  225. Whoever, with the intent to kill, injure, harass, intimidate, or place under
  226. surveillance with intent to kill, injure, harass, or intimidate another person, uses
  227. the mail, any interactive computer service or electronic communication service or
  228. electronic communication system of interstate commerce, or any other facility of
  229. interstate or foreign commerCe to engage in a course of conduct that causes,
  230. attempts to cause, or would be reasonably expected to cause substantial emotional
  231. distress to a person described in clause or of paragraph shall be
  232. punished as provided in section 2261(b) of this title (5 years).
  233.  
  234. 6. The clauses in paragraph identify the ?person? as:
  235.  
  236.  
  237.  
  238. that person;
  239. (ii) an immediate family member (as de?ned in section 115) of that person; or
  240. 'a spouse or intimate partner of that person.
  241.  
  242. 7. 18 U.S.C. 115(c)(2) de?nes an immediate family member as follows:
  243.  
  244. (A) his spouse, parent, brother or sister, child or person to whom he stands in
  245. loco parentis; or
  246.  
  247. (B) any other person living in his household and related to him by blood or
  248. marriage.
  249.  
  250.  
  251.  
  252. PROBABLE CAUSE
  253.  
  254. Affidavit Page 3
  255.  
  256.  
  257.  
  258.  
  259.  
  260. Case 3:17-mj-00257-BF Document 1 Filed 03/31/17 Page 5 of 20 PageID 5
  261.  
  262.  
  263.  
  264. 8. By way of background, FBI Dallas opened an investigation on February 19,2016
  265.  
  266.  
  267.  
  268. based on JUSTIN actions of accessing an FTP server belonging to Patterson
  269. Companies Inc., (PCI) without permission, in which SA Nathan Hopp was the
  270. primary Case Agent. On February 6, 2016, JUSTIN SHAFER accessed an FTP server
  271. belonging to PCI without permission and downloaded approximately 22,000
  272. patient records. PCI sells dental products to dental of?ces, including a management
  273. software, called Eaglesoft. Eaglesoft allows dental of?ces to store patient?s personal
  274. identifying information (PII) and personal health information (PHI). PCI was able to
  275. determine the internet protocol (IP) address used to access the FTP server belonged to
  276. JUSTIN SHAFER, residing in North Richland Hills, Texas.
  277.  
  278. 9. Pursuant to a search warrant approved in the Northern District of Texas, FBI 7 I
  279. Dallas executed a search warrant at JUSTIN residence on May 25, 2016,
  280.  
  281. searching for evidence associated with the accessing of computer systems, and the
  282.  
  283. acquisition and dissemination of personal identifying information and health information
  284.  
  285. of thousands of individuals. On or about May 25, 2016, JUSTIN SHAFER began
  286.  
  287. posting comments on the online social media networking service, Twittercom, and
  288.  
  289. tagged the Twitter pro?les; ?@FBIDallas,? and JUSTIN SHAF ER also posted
  290.  
  291.  
  292.  
  293. comments referring to ?Special Agent Nathan Hawk.?
  294. 10. On June 29, 2016, FBI Atlanta (NDGA) opened a criminal computer intrusion
  295.  
  296. investigation on an individual using the online moniker, ?TheDarkOverlord,? who
  297.  
  298.  
  299.  
  300. It is believed that JUSTIN SHAFER believed SA Nathan Hopp?s true name to be ?Nathan Hawk.?
  301.  
  302. Affidavit Page 4
  303.  
  304.  
  305.  
  306.  
  307.  
  308. Case 3:17-mj-00257-BF Document 1 Filed 03/31/17 Page 6 of 720 PageID 6
  309.  
  310. claimed to have stolen 655,000 patient medical records and attempted to extort the
  311. medical facilities he victimized. As part of their case, FBI Atlanta is investigating
  312. JUSTIN SHAFER as a co-conspirator of ?TheDarkOverlord.? Subsequent media
  313. reports con?rmed ?TheDarkOverlord? had posted the records for sales where he was
  314. seeking 60 Bitcoins2 for a armington, Missouri database of 47,864 records,
  315. which was found on JUSTIN computer during a search warrant executed on
  316. January 29, 2017; 170 Bitcoins for a Central/Midwest database containing
  317. 207,572 records; and 300 Bitcoins for a Blue Cross/Blue Shield S)
  318. database containing 396,458 records. Since his appearance in June 2016,
  319. ?TheDarkOverlord? has claimed approximately 15 major computer breaches and the sale
  320. of one million customer PII records, and engaged in extortion of the victims across the
  321. Unites States, targeting medical providers, ?nancial companies, large US. corporations,
  322. and even a provider of cancer services in Indiana. In most cases, ?TheDarkOverlord?
  323. extorted his victims with verbose, condescending, and abusive language, and taunted
  324. victim companies, their employees, and (in at least one case) the children of victim
  325. employees. ?TheDarkOverlord? has carried out threats to release data when victims
  326. declined to pay, and has made implied threats to FBI Agents in Atlanta and New Orleans.
  327. 11. Collaboration between multiple FBI Divisions has subsequently identi?ed
  328. signi?cant links (IP addresses, emails, social media accounts) between
  329.  
  330. ?TheDarkOverlord? and JUSTIN SHAF ER. On January 29, 2017, FBI Dallas, FBI
  331.  
  332.  
  333.  
  334. 2 Bitcoins are a type of digital currency in which techniques are used to regulate the generation of units
  335. of currency and verify the transfer of funds, operating independently of a central bank.
  336.  
  337. Affidavit - Page 5
  338.  
  339.  
  340.  
  341.  
  342.  
  343.  
  344.  
  345.  
  346.  
  347.  
  348.  
  349.  
  350.  
  351.  
  352.  
  353.  
  354.  
  355.  
  356.  
  357.  
  358.  
  359.  
  360.  
  361.  
  362.  
  363.  
  364.  
  365.  
  366.  
  367. Case 3:17-mj-00257-BF Document 1 Filed 03/31/17 Page 7 of 20 PageID 7
  368.  
  369.  
  370.  
  371.  
  372.  
  373. Atlanta, FBI Saint Louis, FBI New Orleans, and FBI Newark executed a search warrant
  374.  
  375.  
  376.  
  377. at JUSTIN residence, located in North Richland Hills, Texas. At the time of
  378. entry, JUSTIN SHAFER was logged into at least two different workstations in his home
  379. of?ce and garage. During the execution of the search warrant, the FBI seized
  380.  
  381. approximately 29 evidence items, including desktops, laptops, hard drives, router, several
  382.  
  383.  
  384.  
  385. cell phones, numerous universal serial bus (USB) drives, and an Xbox game
  386.  
  387. console. A chat session appearing to be with ?TheDarkOverlord? was observed on a
  388.  
  389.  
  390.  
  391. computer during the execution of the search warrant. In the months following the initial
  392.  
  393. search warrant on May 25, 2016, several online media outlets published articles
  394.  
  395.  
  396.  
  397. defending Shafer as a ?security researcher? and admonished the FBI for executing a
  398. search warrant at his residence.? SA Nathan Hopp was present for both search warrants
  399. that were executed on May 25, 2016 and on January 29, 2017.
  400.  
  401. 12. The United States Attorney?s Of?ce (USAO) and the FBI are investigating the
  402.  
  403. cyber stalking and disclosure of personal information of an Agent of the Federal
  404.  
  405.  
  406.  
  407. Government. On March 21, 2017, at approximately 8:54 am, SA Hopp received an
  408. email on his government email account from JUSTIN SHAFER from the email address
  409. justinshafer@gmail.com, with the subject of the email titled ?Hola? and the content of the
  410.  
  411. email was a ?smiling face? emoji. Pursuant to a Federal Search Warrant issued out of the
  412.  
  413.  
  414.  
  415. Northern District of Texas, records reveal the email address justinshafer@gmail.com is
  416.  
  417.  
  418.  
  419. used by JUSTIN SHAFER. Additionally, beginning on March 21, 2017 at
  420.  
  421. approximately 4:11 am, JUSTIN SHAFER began posting a series of tweets which
  422.  
  423.  
  424.  
  425. made available personal information about SA Hopp and his family, to include his
  426.  
  427.  
  428.  
  429. Affidavit Page 6
  430.  
  431.  
  432.  
  433. Case 3:17-mj-00257-BF Document 1 Filed 03/31/17 Page 8 of 20 PageID 8
  434.  
  435. cousin, his ex-wife, his mother, and his wife. Af?ant believes that JUSTIN SHAFER
  436.  
  437. engaged in the criminal conduct described herein from his residence in Tarrant County,
  438.  
  439. Texas. SA Hopp and his spouse reside in the NDTX and received and observed the
  440.  
  441. communications from JUSTIN SHAFER on devices in the NDTX.
  442.  
  443. 13. Some of the tweets posted by JUSTIN SHAFER included the following:
  444.  
  445.  
  446.  
  447.  
  448.  
  449.  
  450.  
  451.  
  452.  
  453.  
  454.  
  455.  
  456.  
  457.  
  458.  
  459.  
  460.  
  461.  
  462.  
  463.  
  464.  
  465.  
  466.  
  467.  
  468.  
  469.  
  470.  
  471.  
  472.  
  473.  
  474.  
  475.  
  476.  
  477.  
  478.  
  479. Name Twitter Time Date Post
  480. Account
  481. Justin Shafer @JShafer817 4:11am Mar 21, there is a Nathan Hopp at
  482. 2017 the Dallas
  483. Justin Shafer @JShafer817 5:22am Mar 21, 3
  484. 2017
  485. ..
  486. facebook pro?les that I can
  487. tell.
  488. Justin Shafer @JShafer817 6:06am Mar 21,
  489. 2017 Closer.
  490. Justin Shafer @JShafer817 7:00am Mar 21, Close as I will get.
  491. 2017
  492. Justin Shafer @JShafer817 7:11am Mar 21, Skinnier version of this
  493. 2017 dude:
  494. 1 HYYCIX7
  495. Is Nathan Hawk.
  496. Justin Shafer @JShafer817 7:28am Mar 21, Elizabeth
  497. 2017
  498. Justin Shafer @JShafer817 7:30am Mar 21, Bingo:
  499. 2017
  500.  
  501.  
  502.  
  503.  
  504.  
  505.  
  506.  
  507. 3 The Universal Resource Locator (URL) link posted on Twittercom is a link to the website,
  508. crowrivermediacom, in which the webpage is an obituary of an individual named Ervil Hopp.
  509.  
  510. 4 The URL link posted on Twittercom is a link to the website, stateoftexas.info, in which is a past address
  511. location for SA Nathan Hopp and his spouse. .
  512. 5 The URL link posted on Twittercom is a link to a acebook pro?le, belonging to Susan Hopp, SA
  513.  
  514. Hopp?s Mother.
  515.  
  516. 5 The URL link posted on Twitter. com is a link to a Facebook pro?le, belonging to Katy Olson, SA
  517.  
  518. Hopp?s ex-wife.
  519.  
  520. 7 The URL link posted on Twittercom is a link to a acebook pro?le, belonging to Bruce Hopp, SA
  521.  
  522. Hopp?s cousin.
  523.  
  524. 3 The URL link posted on Twitter.com is a link to a Facebook pro?le, belonging to Elizabeth Hopp, SA
  525.  
  526. Hopp?s wife.
  527.  
  528. Affidavit - Page 7
  529.  
  530.  
  531.  
  532.  
  533.  
  534.  
  535.  
  536.  
  537.  
  538.  
  539.  
  540.  
  541.  
  542.  
  543.  
  544.  
  545.  
  546.  
  547.  
  548.  
  549.  
  550.  
  551.  
  552.  
  553.  
  554. Case 3:17-mj-00257-BF Document 1 Filed 03/31/17 Page 9 of 20 PageID 9
  555.  
  556.  
  557.  
  558.  
  559.  
  560.  
  561.  
  562.  
  563.  
  564.  
  565.  
  566.  
  567.  
  568. Name Twitter Time Date Post
  569. Account
  570.  
  571. Justin Shafer @JShafer817 7:31am Mar 21, She kept her maiden name
  572. 2017 on
  573.  
  574. Justin Shafer @JShafer817 7 :3 9am Mar 21, Back the blue.
  575. 2017
  576.  
  577. Justin Shafer @JShafer817 7:56am Mar 21, @bethahopp
  578. 2017 @PogoWasRight This is
  579.  
  580.  
  581.  
  582. Nathan Hawk?s wife --
  583.  
  584. Justin Shafer @JShafer817 8:47am Mar 21, @bethahopp .
  585. 2017 @PogoWasRight -
  586.  
  587.  
  588.  
  589. Based on this complaint.
  590.  
  591. The epileptic tweet.
  592.  
  593. Justin Shafer @JShafer817 11:19am Mar 21, @dawgSu @abtnatural
  594.  
  595.  
  596.  
  597.  
  598.  
  599.  
  600.  
  601.  
  602.  
  603.  
  604.  
  605. 20 17 @Popehat
  606. @associatesmind
  607. @PogoWasRight
  608. Mike @dawg8u 1 1 :20am Mar 21, @abtnatural @Popehat
  609. Honcho 2017 @associatesmind Nathan
  610.  
  611. Hopp is the least busy FBI
  612. agent of all time.
  613.  
  614.  
  615.  
  616.  
  617.  
  618.  
  619.  
  620.  
  621.  
  622.  
  623.  
  624.  
  625.  
  626.  
  627.  
  628.  
  629.  
  630. 14. On January 9, 2017, before the execution of the NDGA search warrant, Shafer
  631. posted on Twitter that he called the Dallas FBI office and left a message for SA Nathan
  632.  
  633. ?Hawk.? JUSTIN SHAFER posted on Twitter.com the following:
  634.  
  635.  
  636.  
  637.  
  638.  
  639.  
  640.  
  641.  
  642.  
  643.  
  644.  
  645.  
  646.  
  647.  
  648.  
  649.  
  650.  
  651. Name Twitter Date Post
  652. Account
  653. Justin Shafer @JShafer817 January 9, 2017 Called the Dallas FBI today an
  654. for Nathan Hawk.
  655.  
  656.  
  657.  
  658.  
  659.  
  660.  
  661.  
  662.  
  663.  
  664. 9 The image is an image of Dallas, Texas skyline, stating ?Back the Blue.? The image was posted by
  665. Elizabeth Hopp, and JUSTIN SHAFER shared her image on his Twitter pro?le feed.
  666.  
  667. ?0 The URL link posted on Twittercom is a Northern District of Texas Dallas Division, Criminal
  668. Complaint of John Rayne Rivello, in which SA Hopp was the affiant.
  669.  
  670. Affidavit Page 8
  671.  
  672.  
  673.  
  674.  
  675.  
  676. Case 3:17-mj-00257-BF Document 1 Filed 03/31/17 Page 10 of 20 PageID 10
  677.  
  678. 15. In the days following the execution of the NDGA search warrant (January 31,
  679.  
  680. 2017), Shafer posted a series of ?tweets? about the execution of the search warrant.
  681.  
  682. 16. On February 6, 2017, and on February 13, 2017, JUSTIN SHAFER posted
  683.  
  684. numerous ?tweets? referring to SA Hopp, and seems to post threatening comments
  685.  
  686. directed to FBI Dallas. The tweets posted by JUSTIN SHAFER included the following
  687.  
  688.  
  689.  
  690.  
  691.  
  692.  
  693.  
  694.  
  695.  
  696.  
  697.  
  698.  
  699.  
  700. Name Twitter Time Date Post
  701. Account
  702.  
  703. Justin Shafer @JShafer817 8:46am Feb 6, 2016 @FBIDallas takes big
  704. men to steal a 5 year old
  705. kid?s saved games from his
  706. WII.. But that is who you are.
  707. Worthless, without integrity.
  708.  
  709. Justin Shafer @JShafer817 8:46am Feb 6, 2016 @FBIDallas Cowards.
  710.  
  711. Justin Shafer @JShafer817 8:46am Feb 6, 2016 @FBIDallas And
  712. Nathan Hawk is full of shit.
  713.  
  714. Justin Shafer @JShafer817 8:52am Feb 6, 2016 @FBIDallas ?smiling
  715. face emoji?
  716.  
  717. Justin Shafer @JShafer817 3:59am Feb 13, Next time you send
  718.  
  719. 2017 van to threaten me, you
  720.  
  721.  
  722.  
  723.  
  724.  
  725. know what you are getting
  726. yourself into. Stay out of
  727. trouble FBI.
  728.  
  729.  
  730.  
  731.  
  732.  
  733.  
  734.  
  735.  
  736.  
  737.  
  738.  
  739.  
  740.  
  741.  
  742.  
  743.  
  744.  
  745. 17. On March 18, 2017, JUSTIN SHAFER referenced the Criminal Complaint of
  746.  
  747. John Rayne Rivello and tagged @FBIDallas. JUSTIN SHAFER posted the following
  748.  
  749. tweet on his Twitter account:
  750.  
  751.  
  752.  
  753.  
  754.  
  755.  
  756.  
  757.  
  758.  
  759.  
  760.  
  761.  
  762.  
  763. Name Twitter Time Date Post
  764. Account
  765. Justin Shafer @JShafer817 4:22am Mar 18,2017 @punishedmelpl,
  766. @FBIDallas Holy Shit! It
  767.  
  768.  
  769.  
  770.  
  771.  
  772.  
  773.  
  774. Affidavit Page 9
  775.  
  776.  
  777.  
  778.  
  779.  
  780.  
  781.  
  782.  
  783.  
  784.  
  785.  
  786.  
  787.  
  788.  
  789.  
  790.  
  791.  
  792.  
  793.  
  794.  
  795.  
  796.  
  797.  
  798.  
  799.  
  800.  
  801.  
  802. Case 3:17-mj-00257-BF Document 1 Filed 03/31/17 Page 11 of 20 PageID 11
  803.  
  804.  
  805.  
  806.  
  807.  
  808.  
  809.  
  810. gave that dude a seizure.
  811. Wow!
  812.  
  813.  
  814.  
  815.  
  816.  
  817.  
  818.  
  819.  
  820.  
  821. 18. On or about March 21, 2017, JUSTIN SHAFER shared a photo which SA
  822.  
  823. Hopp?s wife posted on her acebook pro?le webpage. The photo was posted by SA
  824.  
  825. Hopp?s wife on July 8, 2016, which consisted of an image of the Dallas, Texas skyline
  826.  
  827. with the words ?Back The Blue? within the image. Subsequent comments from JUSTIN
  828.  
  829. post and other individuals stated the following:11
  830.  
  831.  
  832.  
  833. Facebook
  834. Pro?le
  835.  
  836. Comment
  837.  
  838.  
  839.  
  840. Justin Shafer
  841.  
  842. She is Elizabeth Augenstein Hopp, married to Nathan Hopp.. AKA..
  843. Nathan Hawk. FBI Agent. 59 I ?gured it out from this document. The
  844. jew_goldstein thing going around.
  845.  
  846.  
  847.  
  848. Justin Shafer
  849.  
  850. Doxxed
  851.  
  852.  
  853.  
  854. Darrell Pruitt
  855.  
  856. So you found him!
  857.  
  858.  
  859.  
  860. Justin Shafer
  861.  
  862. Idid!
  863.  
  864.  
  865.  
  866. Darrell Pruitt
  867.  
  868. What an asshole.
  869.  
  870.  
  871.  
  872. Justin Shafer
  873.  
  874. mil Pruitt is a.possibilitx-. Q.
  875. further damage to my car ..
  876.  
  877.  
  878.  
  879. Darrell Pruitt
  880.  
  881. I guess I missed that.
  882.  
  883.  
  884.  
  885. Justin Shafer
  886.  
  887. Darrell Pruitt Yeah..he was the one That leaves like 20
  888. other people to ?gather evidence?..My wife found her missing ring last
  889. week. . .. So that is good
  890.  
  891.  
  892.  
  893. Justin Shafer
  894.  
  895. ?He knows what he did? Darrell Pruitt
  896.  
  897.  
  898.  
  899. Darrell Pruitt
  900.  
  901.  
  902.  
  903.  
  904.  
  905. Where have I heard that phrase yea! The TDA
  906.  
  907.  
  908.  
  909.  
  910.  
  911. '1 It is unclear at this junction any involvement of ?Darrell Pruitt,? if any, bey0nd the communication above between
  912. Shafer Pruitt on this post.
  913.  
  914. Affidavit - Page 10
  915.  
  916.  
  917.  
  918.  
  919.  
  920.  
  921.  
  922.  
  923.  
  924.  
  925.  
  926.  
  927.  
  928.  
  929.  
  930.  
  931.  
  932.  
  933.  
  934.  
  935.  
  936.  
  937.  
  938.  
  939.  
  940. Case 3:17-mj-00257-BF Document 1 Filed 03/31/17 Page 12 of 20 PageID 12
  941.  
  942.  
  943.  
  944. Justin Shafer
  945.  
  946.  
  947.  
  948.  
  949.  
  950. That?s two people now! Llanfair Cruz
  951.  
  952.  
  953.  
  954.  
  955.  
  956. Affidavit Page 11
  957.  
  958.  
  959.  
  960.  
  961.  
  962.  
  963.  
  964.  
  965.  
  966.  
  967.  
  968.  
  969.  
  970. Case 3:17-mj-00257-BF Document 1 Filed 03/31/17 Page 13 of 20 PageID 13
  971.  
  972.  
  973.  
  974. A copy of the screen capture is included for clarification below:
  975.  
  976.  
  977.  
  978.  
  979.  
  980. F. Jaw-52 mews 3
  981.  
  982.  
  983.  
  984. 1% mac
  985.  
  986. Liv-7e in Ncr?th i?i'z
  987.  
  988. Jami?: Shams: 55th il ?ew} Augerzslenre pawn
  989. it Ems has
  990.  
  991.  
  992.  
  993.  
  994.  
  995. Mm mm
  996.  
  997.  
  998.  
  999.  
  1000.  
  1001.  
  1002. From Ken-er
  1003.  
  1004. Photos
  1005.  
  1006.  
  1007.  
  1008.  
  1009.  
  1010.  
  1011.  
  1012.  
  1013. as
  1014. dad naming, 93?s;an
  1015. ia ?rm 19%? My?!
  1016.  
  1017.  
  1018.  
  1019. ml
  1020.  
  1021.  
  1022.  
  1023. uh Uke szment A Share:
  1024.  
  1025.  
  1026.  
  1027. Jti?h? Sham/r aha ls Elizamrh Augxemsmin Hop? marriml Mailman
  1028. :?gurea! l? Bunion! (his dbcumen! ?me
  1029.  
  1030.  
  1031.  
  1032.  
  1033.  
  1034. lihn- Emily a:
  1035.  
  1036. Jusxm Shah?? Dunno
  1037. j? Like ?nal; 3 ms;
  1038.  
  1039. Jumm Shain
  1040. - Va ..
  1041.  
  1042.  
  1043.  
  1044. mu: mime-we
  1045.  
  1046.  
  1047.  
  1048.  
  1049. Beth ?Augeux?uain
  1050. The max Threats 5mm aatnewg'e'n-s'mr @be-manopm;
  1051. "The; is variously Such an smaclim organiza?un
  1052.  
  1053.  
  1054.  
  1055.  
  1056.  
  1057. em: Reply
  1058.  
  1059. .man 5mm?
  1060.  
  1061. mum
  1062. x. mm 9 )mn? W?u'
  1063.  
  1064.  
  1065.  
  1066. {wee .. .rzbiw?yu?? m:
  1067.  
  1068.  
  1069.  
  1070.  
  1071.  
  1072. Aww?apvw.? .1), M.
  1073.  
  1074.  
  1075.  
  1076. mm . ..
  1077.  
  1078. ?mama ??awleer mm ..
  1079.  
  1080.  
  1081.  
  1082. immil-h-mI-rm-mWJ-?HK mm.
  1083. him Remy m:
  1084.  
  1085. Emvmn Fm?? yrhu taunt:
  1086. Like Re?lls *i
  1087. Justin *5me mm:
  1088. Mik? {Wink
  1089.  
  1090.  
  1091.  
  1092.  
  1093.  
  1094. ?an-mat} i?rui? W?he? em aas?mle?
  1095. Ri?pl?y 5 ii
  1096.  
  1097.  
  1098.  
  1099.  
  1100.  
  1101.  
  1102.  
  1103. Justm shaker Darrun Pruitt That is a pa-as?ebal?tir He ?anged mom
  1104. from dalng any tanner damage in my 6m? . -
  1105.  
  1106. mm Reply 5h?"
  1107.  
  1108.  
  1109.  
  1110. ?11,861?
  1111.  
  1112.  
  1113.  
  1114. new: 149! Fron I (gm-ms; i
  1115. like: Rl?zi?g
  1116.  
  1117.  
  1118.  
  1119. dimlin ?5?an Eurruli Pruiztmear?r?, he war; the ana intelmsannu. ?Fl-last
  1120. leave-2 other to "gamer ewdence My wave mums new
  1121. nno la? week So that goon,
  1122.  
  1123. ?in Weary 3 we
  1124.  
  1125.  
  1126.  
  1127.  
  1128.  
  1129. Justus: saunter ?He knows what he cud? Barre? Pr
  1130. :4 new; i215
  1131.  
  1132.  
  1133.  
  1134.  
  1135.  
  1136. ?animal Where have I haan mm shims?: Oh yea! The
  1137.  
  1138. Reply
  1139.  
  1140.  
  1141.  
  1142.  
  1143.  
  1144. Jumm 3mm, Thaw we: beanie new
  1145. mi:
  1146.  
  1147.  
  1148.  
  1149. Lzunh?tw Cruz
  1150.  
  1151.  
  1152.  
  1153.  
  1154.  
  1155. 3
  1156.  
  1157. Justin ahaf?r
  1158. 2 a i
  1159.  
  1160. Get an Umbe- switch to Demzlx. Ell'adlay DDS. R?rmu' dull
  1161.  
  1162.  
  1163.  
  1164.  
  1165.  
  1166.  
  1167.  
  1168. ?Anya; E?g
  1169.  
  1170. Affidavit - Page 12
  1171.  
  1172.  
  1173.  
  1174.  
  1175.  
  1176. Case 3:17-mj-00257-BF Document 1 Filed 03/31/17 Page 14 of 20 PageID 14
  1177.  
  1178.  
  1179.  
  1180. 19. On or about March 21, 2017, JUSTIN SHAFER sent a Facebook message to SA
  1181.  
  1182. Hopp?s wife, using the application Facebook Messenger. A screen capture was obtained
  1183.  
  1184. and the contents of the message states:
  1185.  
  1186.  
  1187.  
  1188.  
  1189.  
  1190.  
  1191.  
  1192.  
  1193.  
  1194. Facebook Comment
  1195. Pro?le
  1196. Justin Shafer How ya doin? 59
  1197. Justin Shafer Tell Nathan I said howdy.
  1198. Justin Shafer Tell him I want my videos of my kids you should just use
  1199.  
  1200. your real last name on facebook.
  1201. Justin Shafer
  1202.  
  1203.  
  1204.  
  1205.  
  1206.  
  1207.  
  1208.  
  1209.  
  1210.  
  1211.  
  1212.  
  1213.  
  1214.  
  1215.  
  1216.  
  1217.  
  1218.  
  1219.  
  1220.  
  1221.  
  1222.  
  1223. A copy of the screen capture is included below:
  1224.  
  1225.  
  1226.  
  1227.  
  1228.  
  1229.  
  1230.  
  1231. 21-2: v:
  1232. saw
  1233. 1 i, 3914
  1234. mm Refer
  1235. ?Saiwamlien ?ows this? i=2 Writ-{amorous
  1236. nus/>2:
  1237. ?4 wsxawagiwidlwme maxim-m
  1238.  
  1239. V, I
  1240. Tell Em . want my meets of my (in: bark?, and- gnu moxith use 361 mi
  1241. ammonites-back
  1242.  
  1243. (foj?F??
  1244. S4: mange. he said
  1245.  
  1246.  
  1247.  
  1248. Mite ms
  1249.  
  1250. ?ex; ?In The: utter-e; f?
  1251.  
  1252.  
  1253.  
  1254.  
  1255.  
  1256.  
  1257.  
  1258. Affidavit Page 13
  1259.  
  1260.  
  1261.  
  1262.  
  1263.  
  1264.  
  1265.  
  1266.  
  1267.  
  1268.  
  1269.  
  1270.  
  1271.  
  1272. Case 3:17-mj-00257-BF Document 1 Filed 03/31/17 Page 15 of 20 PageID 15
  1273.  
  1274.  
  1275.  
  1276.  
  1277.  
  1278. 20. On March 29, 2017, Shafer sent SA Hopp two additional emails, one at 5:55am
  1279.  
  1280. and the second at 5:57am. A screen shot of the emails are below:
  1281.  
  1282.  
  1283.  
  1284. Wad 3:2957751? Ali/Ii:
  1285.  
  1286.  
  1287.  
  1288.  
  1289.  
  1290.  
  1291. Eust?o Skater {gustEmsbaier?2?tna?ig_
  1292.  
  1293.  
  1294.  
  1295. {3 sou-{mam this message on assets}? 3:13 AM
  1296.  
  1297.  
  1298.  
  1299. Welcome to the Federal Government?
  1300.  
  1301. On Wed, Ma: 29: 201? at 5:55 AM. Justin Simfcr?iius?inshafez?mn?eom? wrote:
  1302. "Fuck the police?"
  1303.  
  1304.  
  1305.  
  1306. f?3??502484 5 2,2 liS a??ra9620McGowan 000} rigs:
  1307. i submitted this SEITU to OCR on march 3111.. .What is the hold up?
  1308.  
  1309. Over 500 patients inthe sign-in-sheet folders." No SSN on this ftp.
  1310.  
  1311.  
  1312.  
  1313. Why has this taken so long for the FTP server to go down?
  1314.  
  1315.  
  1316.  
  1317.  
  1318.  
  1319. Justin Shafez
  1320.  
  1321. Onsite Dental Systems
  1322.  
  1323. 3?04 Sagebrush CL 5?
  1324.  
  1325. North Riddand Hills. TX. 76182
  1326. (817) 909-4332
  1327.  
  1328.  
  1329.  
  1330.  
  1331.  
  1332. 21. SA Hopp and his spouse advised Af?ant that JUSTIN conduct, his
  1333. obsession with SA Hopp, his sending messages to SA Hopp and his spouse, his posting
  1334.  
  1335. personal identifying information of SA Hopp, his spouse, and other family members on
  1336.  
  1337.  
  1338.  
  1339. Twitter and on Facebook, and the derogatory and in?ammatory statements made about
  1340.  
  1341.  
  1342.  
  1343. Affidavit - Page 14
  1344.  
  1345.  
  1346.  
  1347. Case 3:17-mj-00257-BF Document 1 Filed 03/31/17 Page 16 of 20 PageID 16
  1348.  
  1349. SA Hopp since the execution of the NDTX Search Warrant in May 2016, have caused
  1350. substantial emotional distress to SA Hopp and his spouse.
  1351. CONCLUSION
  1352.  
  1353. 22. JUSTIN communication using Twitter and Facebook intended to
  1354.  
  1355.  
  1356.  
  1357. intimidate, harass, and cause harm to SA Hopp and to his family and were alarming in
  1358.  
  1359. nature.
  1360.  
  1361.  
  1362.  
  1363. 23. Based on the forgoing, I have probable cause to believe that from in or about May
  1364. 2016, through and including March 21, 2017, defendant JUSTIN SHAFER, knowingly
  1365. and with the intent to harass and intimidate and place under surveillance with intent to
  1366. harass and intimidate a person, namely Nathan Hopp and his spouse, did knowingly and
  1367. intentionally use an interactive computer service and an electronic communication
  1368.  
  1369. service to engage in a course of conduct that caused, attempted to cause, and would be 3' .
  1370.  
  1371.  
  1372.  
  1373. reasonably expected to cause substantial emotional distress to that person; in that
  1374.  
  1375.  
  1376.  
  1377. JUSTIN SHAFER used his Twitter and his Facebook accounts to post derogatory and
  1378.  
  1379. in?ammatory statements about Hopp and personal identifying information of Hopp and
  1380.  
  1381.  
  1382.  
  1383. his immediate family and his wife online, in violation of 18 U.S.C.
  1384. I request that a warrant be issued for the arrest of JUSTIN SHAFER. I further request
  1385.  
  1386. that this complaint, af?davits, and warrant be sealed, except to the extent necessary to
  1387.  
  1388.  
  1389.  
  1390. effectuate the arrest and arraignment of the defendant.
  1391. 24. I understand that on January 5, 2017, Chief Judge Barbara M.G. of the
  1392.  
  1393. United States District Court of Northern District of Texas issued Special Order No. 19-1
  1394.  
  1395.  
  1396.  
  1397. requiring in section 1, that ?the clerk of court will ensure that there is no public access . . .
  1398.  
  1399.  
  1400.  
  1401. Affidavit - Page 15
  1402.  
  1403.  
  1404.  
  1405.  
  1406.  
  1407. Case 3:17-mj-00257-BF Document 1 Filed 03/31/17 Page 17 of 20 PageID 17
  1408.  
  1409.  
  1410.  
  1411. to criminal complaints, supporting af?davits, and related papers, until each named
  1412.  
  1413.  
  1414.  
  1415.  
  1416.  
  1417. defendant has been arrested or has made an appearance in federal court.?
  1418.  
  1419. 1:??tu submitted,
  1420.  
  1421.  
  1422. Ryonnie C5. Buentello, Special Agent
  1423. Federal Bureau of Investigation
  1424.  
  1425.  
  1426.  
  1427.  
  1428.  
  1429. Subscribed . - 0 before me on March 2017
  1430.  
  1431.  
  1432.  
  1433. UNITED STATES MAGISTRATE JUDGE
  1434.  
  1435.  
  1436.  
  1437.  
  1438.  
  1439.  
  1440.  
  1441.  
  1442.  
  1443. Affidavit - Page 16
  1444.  
  1445.  
  1446.  
  1447.  
  1448.  
  1449. Case 3:17-mj-00257-BF Document 1 Filed 03/31/17 Page 18 of 20 PageID 18
  1450.  
  1451. MW
  1452. Property to Be Searched
  1453.  
  1454. The warrant applies to information associated with the email account
  1455. and ustin.Shafer.79, that is stored at premises
  1456. owned, maintained, controlled, or operated by acebook Inc., a company headquartered
  1457. in Menlo Park, CA.
  1458.  
  1459.  
  1460.  
  1461. Case 3:17-mj-00257-BF Document 1 Filed 03/31/17 Page 19 of 20 PageID 19
  1462.  
  1463. Attachment
  1464.  
  1465. Particular Things to be Seized
  1466.  
  1467. 1. Information to be disclosed by Facebook Inc.
  1468.  
  1469. To the extent that the information described in Attachment A is within the
  1470. possession, custody, or control of Facebook including any
  1471. messages, records, ?les, logs, or information that have been deleted but are still
  1472. available to Facebook, or have been preserved pursuant to a request made
  1473. under 18 U.S.C. 2703(f), Facebook. is required to disclose the following
  1474. information to the government for each account or identi?er listed in
  1475. Attachment A:
  1476.  
  1477. a.
  1478.  
  1479. All contact and personal identifying information, including full name, user
  1480. identi?cation number, birth date, gender, contact e-mail addresses,
  1481. Facebook passwords, Facebook security questions and answers, physical
  1482. address (include city, state, and zip code), telephone numbers, screen
  1483. names, websites and other personal identi?ers.
  1484.  
  1485. All activity logs for the account and all other documents showing the user?s
  1486. posts and other Facebook activities;
  1487.  
  1488. All photos and videos uploaded by that username and all photos and Videos
  1489. uploaded by any user that have that user tagged in them;
  1490.  
  1491. All photos and associated data through which Facebook has used facial
  1492. recognition to identify the user through additional posts.
  1493.  
  1494. . All pro?le information; News Feed information; status updates; links to
  1495.  
  1496. Videos, photographs, articles, and other items; Notes; Wall postings; friend
  1497. lists, including the friend? Facebook usernames/identi?cation numbers;
  1498. groups and networks of which the user is a member, including the groups?
  1499. Facebook group identi?cation numbers; future and past event postings;
  1500. rejected ?Friend? requests; comments; gifts; pokes; tags; and information
  1501. about the user?s access and use of Facebook applications;
  1502.  
  1503. All other records of communication and messages made or received by the
  1504. user, including all private messages, chat history, video calling history, and
  1505. pending ?friend? requests;
  1506.  
  1507. All ?check ins? and other location information;
  1508.  
  1509. All IP logs including all records of all the IP addresses that loges into the
  1510. account;
  1511.  
  1512.  
  1513.  
  1514.  
  1515.  
  1516. Case 3:17-mj-00257-BF Document 1 Filed 03/31/17 Page 20 of 20 PageID 20
  1517.  
  1518. i. All records of the account?s usage of the ?like? feature, including all
  1519. Facebook posts and all non-Facebook webpages and content that the user
  1520. has ?liked?;
  1521.  
  1522. All information about the Facebook pages that the account is or was a ?fan?
  1523. of;
  1524.  
  1525. All past and present lists of friends created by the account;
  1526.  
  1527. All records of Facebook searches performed by the account;
  1528.  
  1529. . All information about the user?s access and use of Facebook Marketplace;
  1530. The types of service utilized by the user;
  1531.  
  1532. The length of service (including start date) and the means and source of any
  1533. payments associated with the service (including any credit card or bank
  1534. account number);
  1535.  
  1536. p. A11 privacy settings and other account settings, including privacy settings
  1537. for individuals Facebook posts and activities, and all records showings
  1538. which Facebook users have been blocked by the account;
  1539.  
  1540. q. All records pertaining to communications between Facebook and any
  1541. person regarding the user or the user?s Facebook account, including
  1542. contacts with support services and records actions taken.
  1543.  
  1544. 3
  1545.  
  1546. g-
  1547.  
  1548.  
  1549.  
  1550. 11. Information to be seized by the government
  1551.  
  1552. All information described above in Section I that constitutes fruits, evidence, and
  1553. instrumentalities of violations 18 U.S.C. 119 and involving Justin
  1554. Shafer, using since account inception including, for
  1555. each username identi?ed on Attachment A, information pertaining to the following
  1556. matters:
  1557.  
  1558. a. Files, databases, and database records stored by Facebook related to
  1559. criminal activity by the user
  1560. b. The identity of the person(s) who created or used the username, including
  1561. records that help reveal the whereabouts of such person(s).
  1562. 0. The identity of the person(s) who communicated with the username about
  1563. matters relating to criminal activity.
  1564. (1. Subscriber information related to the accounts established in Attachment A
  1565. to include:
  1566. i. Names, physical addresses, telephone numbers and other identi?ers,
  1567. email address and business information;
  1568. ii. Length of service (including start date), types of service utilized,
  1569. means of source payment for services (including credit card or bank
  1570. account number), and billing and payment information.
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!