Search warrant for Kahlil Tatum's Gmail account

Police sought to search Tatum's e-mail account, learning that on March 18, the day before police learned of the case, Tatum had used an account linked to his e-mail to pay for parking in the District. He also accessed the account on May 21, two days before police learned Relisha was missing. Coverage of the Relisha Rudd case




(Speci?c Law Enforcement O?icer or Classi?cation of Officer of the Metropolitan Police Department or other Authorized Agency)
Detective Timothy Palchak Badge

Affidavit, herewith attached, having been made before me by
Metropolitan Police Department, Washington, Dc that he has probable cause to believe
that on the I:Iperson IXIpremises EIvehicle I:Iobject, known as
Inc, 1600 Amoitheater Pa_rkwav. Mountain View. CA 94043

in the District of Columbia, there is now being concealed certain property, namely
Evidence of the date, time, and duration of any communication, without geographic limit, to include IP addresses, including IP
addresses associated with access to the account; headers of e-mail messages, including the source and destination network

addresses, but not content located In headers, and Information on any attachments associated with ema? account
and as I am satisified

which is In violation of D.C. Code
(Alleged grounds for eelzure)

that there is probable cause to believe that the property so described is being concealed on the above designated
person IXIpremises EIvehicle EIobject, and that theforegoing grounds for issuance of the warrant exist.

YOU ARE HEREBY AUTHORIZED within 10 days of the date of issuance of this warrant to search in the daytimelat any time of the


day or night, the designated Elperson IZ]premises Elvehicle Elobject, for the property specified and if the property be found there.

YOU ARE COMMANDED T0 SEIZE IT, TO WRITE AND SUBSCRIBE in an inventory of the property seized, to Leave a copy of this
'sexec ti .

warrant and return to file, a further copy of this warrant and return with the Court on the next Court day a

ourt of the'Di?Ict of Columbia

Issued this 22 day of March .20 14
I received the above deta'|ed warrant on ,3 20 1 and have executed it as follows:
On 2 2.. 20 at Arr err. lsearched the
the Ijperson l:]premises Iljvehicles Elobject, described in the warran and I left a copy of the warrant an return with
properly posted.

@105? .6,

(Name of person searched or oIi'ner, occupant. custodian or person present at place of search}

The following is an inventory of the property taken pursuant to this warrantThis inventory was made in the Dresence of at? /(L1/r my
I swear that this is a true and detailed account of all pronertv taken bv me under

Subscribed and sworn to before me this day of
I .

- - I

Form CD

Au. mm



Location to be searched

This af?davit is being submitted in support of an application for authorization for the
installation and use of pen-trap devices to record, decode, and/or capture dialing, routing,
addressing, and signaling information associated with each communication to or from the
following e-mail account: including the date, time,
and duration of the communication, and the following, without geographic limit:

0 IP addresses, including IP addresses associated with access to the account;

0 Headers of e-mail messages, including the source and destination network
addresses, as well as the routes of transmission and size of the messages, but not
content located in headers, such as subject lines; and

0 the number and size of any attachments.

And that the use and installation of the foregoing is authorized for sixty days from the
date of this warrant which is requested to authorize that Google Inc. and any other person or
entity providing wire or electronic communication service in the United States facilitate the
execution of this warrant, furnish information, facilities, and technical assistance necessary to
install the pen-trap devices, including installation and operation of the pen-trap devices
unobtrusively and with minimum disruption of normal service; that the Metropolitan Police
Department or other law enforcement agency reasonably compensate Google Inc. and any other
person or entity whose assistance facilitates execution of this warrant for reasonable expenses
incurred in complying with it; that Google Inc. and any other person or entity whose assistance
may facilitate execution of this warrant notify the applicant and the Metropolitan Police
Department of any changes relating to e-mail account
including changes to subscriber infonnation, and to
provide prior notice to the Metropolitan Police Department before terminating or changing
service to the e-mail account; that the Metropolitan Police Department and the applicant have
access to the information collected by the pen-trap devices as soon as practicable, twenty-four
hours per day, or at such other times as may be acceptable to the Metropolitan Police
Department, for the duration of the Warrant; that Google Inc. and any other person or entity
whose assistance facilitates execution of this Warrant, and their agents and employees, shall not
disclose in any manner, directly or indirectly, by any action or inaction, the existence of the
application and this Warrant, the pen-trap devices, or the investigation to any person, unless and
until otherwise ordered by the Court, except that Google Inc. may disclose this Warrant to an
attorney for Google Inc. for the purpose of receiving legal advice; and that the Clerk of the
Court shall provide the United States Attorney?s Of?ce with three certi?ed copies of this
Warrant, and shall provide copies of this Warrant to the Metropolitan Police Department and
Google Inc. upon request;


Your af?ant, Detective Timothy Palchak, is currently assigned to the Federal Bureau of
Investigation Innocent Images Task Force where my duties include investigations
pertaining to the sexual exploitation of children and on-line offenses involving children,
including the production, transportation, distribution, receipt and possession of child


I have been a member of the Metropolitan Police Department in the District of Columbia since
1994. In 2000, I was promoted to Detective Grade 2 and am currently serving at this rank.
During my 18 year tenure with the Metropolitan Police Department, I have been assigned to the
Third District Patrol Operations and Prostitution Enforcement Unit. I am currently assigned to
the Northern Virginia Regional Internet Crimes Against Children Task Force. I have received
the following training: Family Violence and Child Protection, Basic Investigator Course,
Interview and Interrogation, Sexual Assault Nurse Examination, Children's Hospital Conference
on Responding to Child Maltreatment, Child Abuse and Child Exploitation Investigation
Techniques, Undercover Internet Crimes Against Children (ICAC) Investigations Course, and
Image Scanning. I have made numerous arrests and interviewed numerous victims, witnesses,
and suspects. I have participated in numerous child abuse investigations, child sex abuse
investigations, and ICAC investigations. In November of 2005, I received cross designation
training from Immigration and Customs Enforcement (ICE) and the FBI and have participated in
numerous online child exploitation investigations and undercover online investigations.

Background Investigation

The following statements are presented for the sole purpose of establishing probable cause for
the af?davit in support of the search warrant application and do not represent the totality of facts
and circumstances known to the af?ant.

On March 19, 2014, a DC Public School social worker reported to members of the Metropolitan
Police Department that an 8-year-old female juvenile had been absent from school for more than
30 days. The social worker reported that IT had received information that the child was absent
because she was being treated by a ?Dr. Tatum,? with a phone number of 202-907-4156. The
social worker called that number and spoke with an adult male who represented himself as ?Dr.
Tatum.? After exchanging several calls with ?Dr. Tatum,? the social worker made arrangements
to meet him to obtain documentation regarding the minor child?s absences. At ?Dr. Tatum?s?
direction, the social worker responded to the DC General Family Emergency Shelter, located at
1901 Massachusetts Avenue, Southeast, in an attempt to meet ?Dr. Tatum.? Once at the location,
unable to locate ?Dr. Tatum,? the social worker contacted a supervisor who indicated that there
was no ?Dr. Tatum? employed as a physician in that building, however, the supervisor indicated
that there was a custodian named Khalil Tatum who worked in that building. Khalil Tatum (DOB
2/6/63) who is employed as a custodial worker at 1901 Massachusetts Ave, SE, was then
contacted by his supervisor and summoned to the supervisor?s of?ce. Tatum did not respond to
the supervisor?s of?ce, but abruptly left work prior to his shift ending, and to date, has never
returned to his place of employment. The phone number 202-907-4156 was registered to Khalil
Tatum, and law enforcement learned through various sources that he was known to use that
phone number. Multiple attempts were made by members of law enforcement to contact Tatum
via his cellular telephone, however the telephone went directly to voicemail. Law enforcement
obtained cellular tower records associated with that phone number, which indicated that the
phone showed no activity after March 19, 2014 at 9:39 and, to date, has not been

A G?z\


Prior to the child?s disappearance, she was residing at the DC General Family Emergency
Shelter, located at 1901 Massachusetts Avenue, SE. Investigation revealed that the child?s parent
had given Kahlil Tatum permission to care for the child, and the child had been seen in his
presence within the last three weeks.

To date, the 8-year-old child has not been located and is considered an endangered missing
person. An AMBER Alert was issued on March 20, 2014, throughout the Washington
Metropolitan Area.

On Thursday, March 20, 2014 at approximately 8:01 the Prince George?s County Police
received a request from the Metropolitan Police Department (MPDC) in reference to the missing
8-year-old child, referenced under 14-03 761 1.

Investigation also revealed that Khalil Tatum operates a 2007 Chevrolet Blazer, maroon in
color. PG County Of?cers received information that a burgundy 2007 Chevrolet Blazer with a
Redskin emblem on the back window was parked at the Red Roof Inn located at 6170 Oxon Hill
Road, Oxon Hill, Maryland 20745.

Upon arrival PG County Of?cers located the vehicle in the parking lot directly in front of room
#132. Of?cers obtained information that the registered owner of that vehicle was Kahlil Tatum
and that he was associated with room #132.

PG County Of?cers knocked on the room door and did not get an answer. PG County Of?cers
obtained a key card from management and entered the room. Once inside the room they
discovered a black female, unconscious and unresponsive, lying face down on the bed with what
appeared to be a bullet wound to her head. The decedent, identi?ed as Andrea Tatum, wife of
Khalil Tatum, was pronounced dead by Fire Fighter Morrow #16423 at 9:16 a.m. The decedent
was transported to the Office of the Chief Medical Examiner in Baltimore, Maryland for an

Members of the PG County Homicide Unit and Forensic Services Unit responded to the scene
and assumed their investigative duties. Pursuant to witness interviews and an on-scene
investigation the following account of this incident was established. A witness (hereinafter
referred to as Witness One) reported that decedent checked into the Red Roof Inn on March 19,
2014, at about 10:04 p.m. The decedent, Khalil Tatum, Witness One and two individuals were all
captured on numerous surveillance cameras at the Red Roof Inn in the area of room #132. Less
than an hour after they checked in, Witness One and two of the individuals can be seen leaving
in a vehicle driven by the female individual. The decedent and Kahlil Tatum were the only
people left in the room. Witness One reported at approximately 5:40 a.m. the next morning, IT
returned to the Red Roof Inn and talked to Kahlil Tatum. Witness One stated that IT observed
the decedent lying on the bed when Kahlil Tatum answered the door. Witness One also stated
that Kahlil Tatum refused to allow IT to enter the room.

An interview with an additional witness (hereinafter referred to as Witness Two) revealed that
the decedent was having domestic problems with Kahlil Tatum. Witness Two stated that the
decedent was contemplating leaving Kahlil Tatum. Witness Two also reported within the last

3/ 2; I 4

month IT conducted intemet searches for Khalil Tatum in an attempt to purchase a handgun.

Witness Two reported IT utilized an Apple Ipad and downloaded images of handguns for Khalil

Financial records were obtained for Kahlil Tatum?s banking check card account which revealed
that on 03/18/2014 it was utilized to pay for a parking meter in Washington, D.C. through a
smartphone application for parking meter payments. This charge information further revealed
that the payment was associated with the email account

In response to an administrative subpoena served to Google on 03/21/2014, Google provided IP
log information for which revealed that the account was accessed
on 03/21/2014 at 3:12 a.m. from a location near the Washington, D.C. area.


Based on the foregoing, your af?ant has probable cause to believe that evidence pertaining to
this case is present in the electronic storage and remote computing service of the aforementioned
cell phones. Your af?ant requests that a search warrant be issued for records and data in the
electronic storage and remote computing service of these phones, allowing the search for the
following any call logs, text messages, voicemails, recorded phone history, subscriber
information, owner information, downloads, intemet activity, instant messages, photographs,

videos, ta red within these phones. A

Af?ant United States Attorney



Subscribed and sworn to me this 7 day of

Judge /14,
Superior Co 0 Distric Columbia