I typed up a few notes about the
probable cause affidavit (or a summary of sorts) for my own personal benefit, but I thought maybe it might benefit some of you too.
The FBI and ISP executed a search warrant at the residence of KAK and his father on February 25, 2017 at 12:30 PM.
- KAK and father were inside the home when the warrant was executed
- a warrant was obtained after the FBI sent information to the ISP Cyber Crimes Unit about an adult male soliciting female juveniles on Snapchat and Instagram under the username anthony_shots
- 07/20/2016: anthony_shots registered on Instagram
- 07/14/2016: anthony_shots registered on Snapchat
- KAK interviewed at 1:25 pm and initially denied creating the fake SM accounts and/or talking to underage girls online
- KAK later admitted he created anthony_shots approximately 6 months earlier and used it to chat with underage girls
- found girls on Instagram and then invited them to talk on Snapchat; said he didn't care if the girls were 16 or younger
- KAK said he'd spoken to approximately 15 underage girls and all of them sent pictures; he saved the pictures to his photo gallery
- comments he made during the interview include: “he was *advertiser censored*ed and should have left” and “he packed another bag and took it to Las Vegas”; he also mentioned he planned to leave when his dad was asleep
- 02/25/2017: KAK and his father returned to Peru from Las Vegas
- KAK's primary phone was the white iPhone 5c
- KAK also polygraphed at the Peru State Police Department
- polygraph concluded at 7:30 pm
- received approximately 100 sexual pictures from underage girls
- received approximately 20 sexual videos from underage girls
- devices seized during the execution of search warrant included: Apple iPhone 4, Apple iPhone 3, Samsung Galaxy S5, Samsung Galaxy S4, Nextbook Tablet, and Apple iPod Touch
March 28, 2016 – May 4, 2016
Kik discussions between user
emilyanne45 and unknown party
3 attachments shared
April 1, 2016 – October 2, 2016
Kik discussions between user
emilyanne45 and unknown party
2 attachments shared
April 30, 2016
Kik discussion between user
emilyanne45 and unknown party
1 attachment shared
May 2, 2016
Kik discussion between user
emilyanne45 and unknown party
3 attachments shared
May 4, 2016
2 video files depicting CSAM created
May 14 - 17, 2016
Kik discussions between user
emilyanne45 and unknown party (or parties) and public Dropbox links containing CSAM shared
41 attachments shared
September 7 – October 2, 2016
Kik discussions between user
emilyanne45 and unknown 13-year-old female
5 attachments shared
November 6 – 10, 2016
Snapchat discussion between user
emilyanne45 and unknown party
February 25, 2017
9:19 pm: user of iPhone 5c began to uninstall and delete apps
10:14 pm: user of iPhone 5c uninstalled and deleted Instagram
February 26, 2017
1:12 pm: user of iPhone 5c uninstalled and deleted MeetMe
1:28 pm: user of iPhone 5c uninstalled and deleted Snapchat (the app was reinstalled at some point after it was initially deleted at 9:19 pm the day before)
February 27, 2017
KAK contacted ISP Cyber Crimes Unit to notify them he had "located" the Apple iPhone 5c
9:48 am: user deleted Safari web history and web data from iPhone 5c (some info was recovered but search terms were redacted)
March 2, 2017
Miami Unit obtained iPhone 5c from ISP Peru Post
June 12, 2020
Lead investigator received the digital forensic examination from ISP
June 18, 2020
Multiple LE officials met with the Miami County Prosecutor to discuss the investigation
INFO FOUND ON DEVICES
iPhone 4
- device name: “Kegan’s iPhone”
- last utilized 11/11/2016
- access protected with PIN
- numerous redacted usernames and emails located
- user communicated with female teens and shared media files depicting CSAM
- user portrayed themselves as a female teen using emilyanne45
- communications recovered from Kik and Snapchat
- multiple CSAM media files saved or shared/received
- CSAM files depicted female children approximately 12-17 years old
- several images depicted possible drugs and showed KAK with a black handgun
- 5 images and 2 videos depicting CSAM were saved (date unknown)
iPhone 3G
- device name: “Keggie ”
- last used 5/23/2015
- access secured with PIN
- numerous redacted usernames and emails located
- no chats of evidentiary value were recovered from Skype or Kik
- multiple images of females (ages were indeterminate) found
- multiple screenshots of conversations were found (one referred to the receiver as Kegan, specifically)
- user saved 200+ images and some images contained embedded location data
- approximately 27 images depicting females that appeared to be at least 14-years-old and older were found
- some of the images were geo-located to Indiana cities including Bunker Hill, Galveston, Indianapolis, Kokomo, Monterey, and Royal Center
- web history was recovered but Google search terms were redacted
Samsung Galaxy S5
- device name: “Kline Photography”
- a factory reset was performed on 2/23/2017
- access not secured with password or PIN
- numerous redacted usernames and emails located
- chat messages that took place between February 23 and February 25, 2017 were recovered from MeetMe, FB Messenger, and Snapchat
- recovered messages discussed meeting people in Las Vegas and prostitution
- web history was recovered but Google search terms were redacted
- an unknown *advertiser censored* video (description redacted) is referenced in the affidavit
Samsung Galaxy S4
- device name: “SAMSUNG-SGH-I337”
- last used on approximately 06/25/2015
- the device was powered on multiple times after that day but it was not used
- access secured by a swipe pattern and PIN
- numerous redacted usernames and emails located
- many chat conversations recovered and some appeared to have been with a female teen approximately 12 to 13-years-old
- 2 profiles used to communicate with teens -- Kegan Kline and Emily Anne
- conversations found where a user claiming to be “Emily” discussed having sex with KAK and his father at the same time
- multiple CSAM files saved to the device
- file names indicate images were captured via screenshot and/or received on Snapchat or Skype
- many CSAM files depicted females approximately 12 to 17 years-old
- additional images found depicting possible drugs and drug paraphernalia
- web history was recovered but Google search terms were redacted
Apple iPhone 5c
- last used 02/27/2017
- access secured with PIN
- numerous redacted usernames and emails located
- used Facebook, Instagram, MeetMe, Snapchat, and Twitter accounts to communicate or chat with underage girls
- most of the data had been deleted from the device
- multiple images were saved depicting females of an indeterminate age