BYZANTINE CANDOR (Air Force Office of Special Investigations)

Emma North-Best filed this request with the Air Force Office of Special Investigations of the United States of America.
Tracking #

AF 2021-04543-F

Multi Request BYZANTINE CANDOR
Status
Completed

Communications

From: Emma North-Best

To Whom It May Concern:

Pursuant to the Freedom of Information Act, I hereby request the following records:

Records mentioning or describing PLA Unit 61398 AKA BYZANTINE CANDOR, APT1 (Mandiant), Beijing Group (Secureworks), Comment Crew/Comment Group, Comment Panda (CrowdStrike), Elderwood Group (Symantec), Shanghai Group (Secureworks), Sneaky Panda (CrowdStrike) and TITAN RAIN III. You may limit this search to records generated since January 1, 2002.

The requested documents will be made available to the general public, and this request is not being made for commercial purposes.

In the event that there are fees, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not.

Thank you in advance for your anticipated cooperation in this matter. I look forward to receiving your response to this request within 20 business days, as the statute requires.

Sincerely,

Emma North-Best

From: Air Force Office of Special Investigations

This e-mail contains FOR OFFICIAL USE ONLY (FOUO) information which must be protected under the Freedom of Information Act (5 U.S.C. 552) and/or the Privacy Act of 1974 (5 U.S.C. 552a). Unauthorized disclosure or misuse of this PERSONAL INFORMATION may result in disciplinary action, criminal and/or civil penalties. Further distribution is prohibited without the approval of the author of this message unless the recipient has a need to know in the performance of official duties. If you have received this message in error, please notify the sender and delete all copies of this message.

-----------------------------------------------------------------------------------------------------------------------

Your initial Freedom of Information Act (FOIA) request as received by this office on 1 September 2021. Your request has been reassigned tracking number AF 2021-04543-F.

To ensure fairness to all families, we are required to process all FOIA requests on a "first in, first out" basis, in accordance with Federal Law, DoD and Air Force Instructions. Many of these requests involve the loss of loved ones, sexual assaults and other sensitive matters. As such, requests could take a minimum of 6 months to substantially longer to complete based upon the number and complexity of your case or the cases that precede it or other mitigating circumstances.

You may also contact the Air Force FOIA Public Liaison Officer, Ms. Anh Trinh, concerning this matter at AF FOIA Public Liaison Office (SAF/CIO A6XA), 1800 Air Force Pentagon, Washington, DC 20330-1800, usaf.pentagon.saf-cio-a6.mbx.af-foia@mail.mil<mailto:usaf.pentagon.saf-cio-a6.mbx.af-foia@mail.mil> or (703) 614-8500.

Additionally, you may contact the Office of Government Information Services (OGIS) at the National Archives and Records Administration to inquire about the FOIA mediation services they offer. The contact information for OGIS is as follows: Office of Government Information Services, National Archives and Records Administration, 8601 Adelphi Road-OGIS, College Park, Maryland 20740-6001, e-mail at ogis@nara.gov<mailto:ogis@nara.gov>; telephone at 202-741-5770; toll free at 1-877-684-6448; or facsimile at 202-741-5769.

Sincerely

FOIA
HQ OSI/XILI
27130 Telegraph Rd.
Quantico, VA 22134

From: Air Force Office of Special Investigations

Good morning!

We are still processing your FOIA request.

I do not have a good estimate as to when you will receive our final response
to your FOIA request.

If you would like to check back with me next month I can provide you with
another status update.

Thank you!

v/r

Roxanne M. Jensen, GS-13

Chief, Information Release Branch

HQ OSI/FSS/MSII (formerly HQ OSI/XILI)

From: requests@muckrock.com
<mailto:requests@muckrock.com>
<requests@muckrock.com
<mailto:requests@muckrock.com> >

From: Air Force Office of Special Investigations

Good afternoon.

We are still processing your request.

There are classified responsive records which lengthened the time it is
taking us to process your request.

A FOIA and Declassification Specialist are working on your request.

Thank you!

v/r

Roxanne M. Jensen, GS-13

Chief, Information Release Branch

HQ OSI/FSS/MSII (formerly HQ OSI/XILI)

From: Air Force Office of Special Investigations

Good morning!
We are still processing your request.
I do not have a good estimate as to when you will receive our response to
your request.
If you want to check back with me next month I may be able to provide you
with a better estimate.

Thank you!

v/r
Roxanne M. Jensen, GS-13
Chief, Information Release Branch
HQ OSI/FSS/MSII (formerly HQ OSI/XILI)

From: Air Force Office of Special Investigations

*** DO NOT FORWARD ***

This is an automated message sent to you by the DoD SAFE service.

REDMOND.CYNTHIA.R <cynthia.redmond@us.af.mil> has dropped off 3 files for you.

IF YOU TRUST THE SENDER, and are expecting to receive a file from them, you may choose to retrieve the drop-off by clicking the following link (or copying and pasting it into your web browser):

https://safe.apps.mil/pickup.php?claimID=M4vGRGKuR7JnagkY&recipCode=gGCo3x

** This drop-off is encrypted. **<br />
To download any files you must have the correct passphrase, which you can only get from the sender.

You have 7 days to retrieve the drop-off; after that the link above will expire. If you wish to contact the sender, just reply to this email.

The sender has left you a note:

2022-04543-F

Full information about the drop-off:

Claim ID: M4vGRGKuR7JnagkY
Recipient Code: gGCo3x
Claim Passcode: AkrfBEK8jg4R3dEr
Drop-off Submitted: 2022-06-13 14:43:57 UTC
Drop-off Completed: 2022-06-13 14:44:01 UTC

-- Sender --
Name: REDMOND.CYNTHIA.R
Organization: USAF
Email Address: cynthia.redmond@us.af.mil

-- Files --
Name: 2022-04543-F 1 of 3.pdf
Size: 550752
SHA-256 Checksum: CAA30C7E8D4CC9D8B9BB29368C92C41736FA65A7CEC89BB513C94C26CA54BBBF
Content Type: application/pdf

Name: 2022-04543-F 2 of 3.pdf
Size: 406345
SHA-256 Checksum: 06B53C2FE578446F393DE881E67CC2122DB37AC1CDD291C00C2A0513EE034D1B
Content Type: application/pdf

Name: 2022-04543-F 3 of 3.pdf
Size: 515147
SHA-256 Checksum: DE3E54CB633521D51EE14A38BF73F428E9CBA69E2C209A63B9C5152D9E41A850
Content Type: application/pdf

NOTICE: This e-mail message is intended solely for the use of the addressee. If the reader of this message is not the intended recipient, you are hereby notified that any reading, dissemination, distribution, copying, or other use of this message or its attachments is strictly prohibited. If you have received this message in error, please notify the sender immediately.

Thank you.

From: Air Force Office of Special Investigations

Good Morning Emma North-Best,

I have uploaded the 2022-04543-F documents to the DOD SAFE Website -
(https://safe.apps.mil).

Please Note:
Upon receipt of the DOD SAFE e-mail, you will have 7 days to retrieve the
drop-off; after that the link will expire.
If you are unable to download the documents please inform us AS SOON AS
POSSIBLE, so we can work with you to obtain the documents.

How to retrieve your documents:
You will receive a separate email from the DOD SAFE website; the email comes
from the following email address: NoReplyTo@mail.mil
<mailto:NoReplyTo@mail.mil>
Please check your Spam or Junk mail folder if you do not see their email in
your e-mail inbox.

The email sent by the DOD SAFE Website will provide you with a website
address link so you can access the website.

The email sent by the DOD SAFE Website will provide you with a Claim ID that
you will need to enter to access the website.

You must enter this Claim ID before using our passphrase.

Once you are in the website, you can use the below passphrase - which will
allow you to download your documents.

THE PASSPHRASE TO OPEN YOUR DOCUMENTS IS: AFOSI04543foia

AFOSI (ALL CAPS-ALL LETTERS) 04543 (Your FOIA #) foia

NO SPACES IN BETWEEN

PASSWORD: AFOSI04543foia

Sincerely

FOIA
HQ/FSS/MSII
27130 Telegraph Rd.
Quantico, VA 22134
Comm: 571-305-8044; DSN: 240-8044
Fax: 571-305-8229
afosi_hq_foia_requests@us.af.mil <mailto:afosi_hq_foia_requests@us.af.mil>

Files

pages

Close