ERIC F. MELGREN, District Judge.
This matter comes before the Court on Defendant Curtis Allen's motion to exclude from trial all evidence obtained and any information derived from the second search and seizure of his Facebook account. Defendants Patrick Stein and Gavin Wright joined this motion. On March 22, 2018, the Court held a hearing on the motion. After reading the briefs, considering the evidence, and questioning counsel during oral arguments, the Court denied Allen's Motion to Suppress Second Facebook Warrant (Doc. 296). As stated on the record, the purpose of this memorandum is to further explain the ruling made by the Court during that hearing.
The Federal Bureau of Investigation ("FBI") began its investigation in this case in February of 2016. The investigation ended on October 14, 2016, when FBI agents arrested Defendant Stein. Defendant Wright was arrested a short time later, and Defendant Allen had been detained on unrelated domestic violence charges three days earlier. Defendants were all members of a militia group called "the Crusaders."
According to the Government, the FBI learned that each of the Defendants had a Facebook account, and that they used their accounts to make anti-Muslim and anti-government postings, as well as to periodically communicate with each other. Defendants' Facebook Username and Entity IDs were confirmed using publicly-available internet searches. The FBI sent Facebook, Inc. preservation letters for Defendants' Facebook accounts at some point in October of 2016.
On November 22, 2016, FBI agent Tracey Jenkins submitted a warrant application to a federal magistrate judge in the District of Kansas seeking a warrant for records from Defendants' Facebook accounts. The application included a 57-paragraph affidavit that identified the crime under investigation as a conspiracy to use a weapon of mass destruction, in violation of 18 U.S.C. § 2332a, and provided a detailed account of the allegations against Defendants.
Paragraph 33 of the affidavit generally described Defendants' usage of Facebook in connection with the plot:
Chief U.S. Magistrate Judge James O'Hara signed the warrant (the "first Facebook warrant") on November 22, 2016 and required its execution by December 6, 2016.
Attachment A to the first Facebook warrant listed three Facebook accounts to be searched. These accounts were identified by entity display name, entity username, and entity ID. Target Account 1 was for the account with Facebook display name Curtis Allen, username Curtis.allen.102. Target Account 2 was for the account with Facebook display name Gavin Wright, username gavin.wright.792. And Target Account 3 was for the account with Facebook display name Patrick Stein, username Pstein69.
Attachment B to the first Facebook warrant on its face authorized a search only for "fruits, evidence and instrumentalities of violations of Possession of a Firearm by a person who has previously been convicted of a crime of Domestic Violence in violation of 18 U.S.C. § 922(g)(9)." Neither the warrant nor its attachments referenced the crime listed in the affidavit, conspiracy to use a weapon of mass destruction, in violation of 18 U.S.C. § 2332a.
After executing the warrant, the Government obtained approximately 28,000 pages of Facebook records from Defendants' Facebook accounts.
On January 11, 2018, Defendants filed a motion to suppress the first Facebook warrant. Defendants argued that all proceeds of the first Facebook warrant must be suppressed because the Government committed multiple Fourth Amendment violations. Defendants' predominant argument was that the affidavit failed to establish probable cause. Although the affidavit focused on conspiracy to use a weapon of mass destruction, in violation of 18 U.S.C. § 2332a, the warrant authorized permission to search for evidence of a different crime—illegal firearm possession, in violation of 18 U.S.C. § 922(g)(9). Thus, the affidavit did not establish a "fair probability" that evidence of the crime listed in the warrant would be found in the Facebook accounts. Additionally, Defendants argued that the affidavit accompanying the warrant lacked probable cause because it failed to establish a sufficient nexus between the crime under investigation and the defendants' use of Facebook. Defendants further argued that the issuing magistrate did not assess the "`veracity' and `basis of knowledge' of persons supplying hearsay information" to determine probable cause.
In addition to probable cause, Defendants argued that the warrant was overbroad, that the seizure exceeded the scope of the warrant, and that the magistrate judge lacked jurisdiction to issue the warrant. Defendants claimed that these defects rendered the warrant constitutionally invalid, that no good-faith exception applied because it was so lacking in indicia of probable cause as to render official belief in its existence unreasonable, and that suppression of the evidence was required.
After reviewing Defendants' first motion to suppress, and "acknowledging the validity of the questions raised by it, on January 14, 2018 the FBI sent Facebook a new preservation letter" for Defendants' Facebook accounts. Three days later, the Government sought a new search warrant for Defendants' Facebook accounts. FBI Special Agent Amy Kuhn submitted the probable cause affidavit in support of the new warrant.
Magistrate Judge O'Hara signed the warrant on January 17, 2018 (the "second Facebook warrant"). In Attachment A, the "information to be seized" was limited to "fruits, evidence, and instrumentalities" of violations of 18 U.S.C. § 2332a (conspiracy to use a weapon of mass destruction), thus fixing the error contained in the first warrant. However, the second Facebook warrant contained a new, and rather unfortunate error. It authorized the Government to conduct the search on or before January 31, 2016—despite the fact that it was issued in January of 2018.
On January 18, 2018, the day after the warrant was signed, Special Agent Kuhn served the second Facebook warrant on Facebook. After several follow-up attempts, Facebook finally responded with the information sought by the warrant on February 21, 2018.
On that same day, this Court granted Defendants' motion to suppress the first Facebook warrant, reasoning that the original warrant did not specify the correct statute for which there was probable cause to conduct a search. The Court specified that the proceeds of the first Facebook warrant would be suppressed, and reserved the right for Defendants to file a second motion to suppress once the proceeds of the second warrant were obtained. Without ruling on the issue, the Court also noted that Paragraph 33 in the first affidavit was "thin," but "probably a sufficient probable cause showing for the search." Additionally, the Court ordered the Government to produce to Defendants a red-line copy of the first and second affidavit, because it was not known at the time whether the second affidavit contained proceeds obtained from the first search. And, because of the unique nature of this search, the Court deferred ruling on the other issues raised by Defendants, as the Court would be better suited to rule on them in conjunction with the second motion to suppress.
Defendants filed a motion to suppress the second Facebook warrant on March 12, 2018 (Doc. 296). In the motion, Defendants argued that all proceeds from the second Facebook warrant must also be suppressed. The Court held a hearing on the motion on March 22, 2018. At the hearing, the Government admitted it did not produce a red-line affidavit to highlight the discrepancies between the first and second affidavits. However, the Government explained that the first and second affidavits were made on two different forms. Thus, it was impossible to highlight discrepancies line-by-line—every line was different. To remedy this, the Government wrote a lengthy email with an itemized list of the differences between the two affidavits, and in what paragraphs these changes were made.
Defendants identified three substantive differences between the first and second search warrants:
Additionally, Defendants pointed out that the second affidavit "bolstered" the nexus between the crimes charged and Defendants' use of Facebook. Because this was an effort to "cure" potential probable cause deficiencies, the Court specifically excised this portion of the second affidavit in ruling on whether the Government had probable cause to search the Facebook accounts.
At the hearing, the Court denied Defendants' motion for the reasons explained in this Order.
Before addressing the merits, the Court must clarify its prior ruling. During the first suppression hearing, the Court recognized that the search and seizure conducted pursuant to the first Facebook warrant was not valid. In explaining this conclusion, the Court definitively identified just one error—the warrant identified the information to be seized by the government as evidence of a firearms violation (18 U.S.C. § 922(g)(9)), rather than the crime identified in the affidavit—conspiracy to use a weapon of mass destruction (18 U.S.C. § 2332a).
The Court agreed that the typographical error was a "technical" deficiency in the warrant itself, which also led to the seizure exceeding the scope of the warrant. To clarify, this error does not amount to a Fourth Amendment violation.
Unlike traditional physical evidence (such as contraband located in a suspect's house), Facebook records exist indefinitely on Facebook's servers, and are therefore capable of being reproduced over and over again. Thus, shortly after Defendants moved to suppress the Facebook records obtained from the first Facebook warrant, the Government sought to "cure" some of its deficiencies by obtaining a second Facebook warrant. Defendants artfully termed this process the "do-over doctrine."
"The exclusionary rule bars the prosecution from using, in its case-in-chief, evidence obtained in violation of the Fourth Amendment."
Second, "if exclusion of evidence . . . is to have any deterrent effect . . . it must alter the behavior of individual law enforcement officers or the policies of their departments."
Third, the Court must balance the benefits of deterrence against the costs of excluding reliable evidence.
Finally, technical violations of Fed. R. Crim. P. 41 do not always rise to the level of Fourth Amendment violations. A technical violation of Rule 41 does not result in suppression of evidence unless the defendant can also show "prejudice in the sense that the search might not have occurred or would not have been so abrasive if the rule had been followed" or "evidence of intentional and deliberate disregard of a provision in the rule."
At the second suppression hearing, the Court concluded that suppression of proceeds from the second Facebook warrant was not justified based on the context of this case. Despite the Government's ill-advised attempt to bolster probable cause in the second affidavit, the first affidavit still contained a sufficient discussion of the nexus between the crime under investigation and Defendants' Facebook usage. Although Paragraph 33 in the first affidavit is lean, it does say that the Crusaders (of which Defendants were members) used Facebook and Facebook Messenger to communicate, and that they created closed Facebook pages which could only be accessed by members. Additionally, Attachment A to the first Facebook warrant listed three Facebook accounts to be searched, which were particularly identified by their display names, usernames, and entity IDs. Based on this specific identification, it can be reasonably inferred that the Government had actual knowledge of the Defendants' Facebook accounts.
The Court also rejected Defendants' argument that the first Facebook warrant was overbroad. Defendants' argument largely focused on the broad categories of information requested from each Facebook account, which required Facebook to disclose almost every piece of information from each account. However, a warrant may describe the items to be seized in broad or generic terms—so long as the "description is as specific as the circumstances and the nature of the activity under investigation permit."
Indeed, the complex and comprehensive nature of the criminal conspiracy implicated in this case "makes it difficult to list with great particularity the precise items desired to be seized which evidence such activity."
Next, the magistrate judge had jurisdiction to issue the first Facebook warrant. This conclusion does not require much discussion. The issuing magistrate had territorial jurisdiction over the underlying offense, and therefore had jurisdiction to issue the warrant.
Thus, the only deficiency with the first Facebook warrant was the simple fact that Attachment A identified the information to be seized by the Government as evidence of a firearms violation, instead of the crime for which there was probable cause to search—conspiracy to use a weapon of mass destruction. As explained above, this inadvertent error, by itself, does not amount to a Fourth Amendment violation—flagrant or otherwise. Even if it could be considered a constitutional violation, this error is not the type that would invoke the exclusionary rule. "[I]t is the duty of an issuing magistrate to ensure that a warrant corresponds to the content of the supporting affidavit."
Nevertheless, Defendants cite United States v. Cioffi,
The District Court agreed that the Government's search of the entire email account was unconstitutionally overbroad.
The Court rejected the Government's argument, stating:
Reasoning that "[n]o court has ever endorsed the view that it would allow the government to retroactively cure a Fourth Amendment violation," the Cioffi Court suppressed the November 23rd email.
Cioffi is distinguishable from the case at bar, however. In Cioffi, the Government discovered the November 23rd email during the course of an unconstitutionally overbroad search of defendant's entire email account. Of course the Government in that case could "cure" the first warrant's lack of particularity by obtaining a second, valid warrant for the November 23rd email. But only because the Government gained knowledge of the email's existence and its contents during a general rummaging through defendant's entire email account.
Here, however, the Government did not use knowledge gleaned from illegally-obtained evidence to conduct a second, lawful search for the same evidence. To be fair, the Government skirted dangerously close to that line by (1) bolstering the nexus between the crimes charged and Defendants' use of Facebook in the second affidavit; and (2) limiting the second Facebook search to the time period of January 1, 2016 through the present. Upon review, however, the Court concluded that the first affidavit sufficiently established probable cause to search the Facebook accounts, and that the first Facebook search warrant was not overbroad.
Finally, Defendants argued that all evidence obtained from the second Facebook warrant must be suppressed because the Government conducted a de facto warrantless search. Defendants pointed out that the second Facebook warrant was obtained on January 17, 2018, yet the face of the warrant authorized the Government to search the accounts on or before January 31, 2016. Even if this was merely a scrivener's error, and should have read "January 31, 2018," the search was not completed until February 21, 2018. Thus, Defendants argued, the Government conducted a de facto warrantless search in violation of the Fourth Amendment and Rule 41.
The Court disagrees. First, the use of "2016" was clearly an inadvertent scrivener's error, and no reasonable officer would have assumed that the search warrant had been expired for nearly two years. Second, the FBI served the second Facebook warrant the very next day after it was signed, and then followed up several times with Facebook to try to expedite its response. Facebook finally responded with the information sought by the warrant on February 21, 2018. The fact that Facebook did not timely respond does not change the fact that the Government timely executed the warrant.
The context of this case dictates that suppression of the second Facebook warrant's proceeds is not warranted. In both searches of Defendants' Facebook accounts, the Court found only a single technical violation—the first search warrant inadvertently authorized a search for information related to a firearms violation. Despite this violation, both searches were supported by probable cause, and neither of the Facebook search warrants violated the Fourth Amendment's particularity requirement.
The "abuses that give rise to the exclusionary rule are narrow, and most typically involve flagrant police misconduct."