Dear New Jersey Office of Information Technology,

Please accept this electronic request for public records made under OPRA and the common law right of access. I am not required to fill out an official form or use a particular software platform to submit my request per NJSA 47:1A-6(f), which states that an email from a requestor including all of the information required on the adopted form shall suffice in place of a completed form as a valid government record request.

I HAVE NOT been convicted of any indictable offense under the laws of New Jersey, any other state, or the United States.

I WILL NOT use the requested government records for a commercial purpose.

I AM NOT seeking records in connection with a legal proceeding.

Records requested:
1.) All records reflecting the master department code and master section code assigned to the Office of the Public Guardian for Elderly Adults (or any employee thereof) within the state centralized payroll system (NJPIMS/EPIC or successor) for calendar years 2014, 2015, 2016, and 2017. This includes but is not limited to: (a) code assignment records showing any 'Null,' blank, or 'None Listed' values; (b) audit trail or change-log entries showing when any department or section code was modified, added, or deleted for OPG-related personnel; and (c) any memoranda, email communications, or help-desk tickets relating to 'Error 94' exceptions or code correction requests for OPG employees during this period.
---------------------------------------------------------------------------------------------------------------------------------
2.) "Please provide all enterprise email message tracking logs, Microsoft Exchange message trace reports, or equivalent state email routing logs reflecting the sender address, recipient address(es), date, time, subject line, and attachment metadata for any email sent from or received by the following State of New Jersey email accounts: [email address], [email address], [email address], and [email address].

This request is strictly limited to email routing logs where the subject line or attachment title contains any of the following terms: 'Romanov', 'Khazanovich', 'Balevre', or 'S-8455'.

Furthermore, please specifically filter for routing logs showing correspondence between the aforementioned state accounts and any email address ending in @judiciary.nj.gov (Union County Surrogate/Courts), @matuslaw.com (or domains associated with Christine Matus), and @vanarellilaw.com (or domains associated with Donald Vanarelli).

Timeframe: This request is strictly limited to the calendar years 2014, 2015, 2016, and 2017."
-------------------------------------------------------------------------------------------------------------------------------------
3.) Please provide all system audit logs, administrative action reports, or retention metadata generated by the State of New Jersey’s enterprise email archiving/eDiscovery system (e.g., Microsoft Purview, Enterprise Vault) concerning the mailbox accounts belonging to Helen C. Dodick ([email address] / [email address]) and Christopher R. Weldon ([email address] / [email address]).

Specifically, I am requesting:
(a) The system log showing the exact date, time, and creating User ID of any 'Litigation Hold', 'eDiscovery Case', or 'Retention Lock' placed on these specific mailboxes containing the keyword 'Romanov' or 'S-8455' during the specified timeframe.
(b) Any administrative audit logs showing 'Hard Deletes', 'Purges', or manual mailbox destruction events executed within or against these specific mailboxes.

Date Range: January 1, 2014, through December 31, 2017."
----------------------------------------------------------------------------------------------------------------------------------------------------------------
4.) Please provide all Active Directory (AD) authentication logs, Single Sign-On (SSO) logs, or Identity and Access Management (IAM) sign-in logs reflecting the successful and failed network login events for the State of New Jersey UserPrincipalNames (UPNs) or network IDs assigned to Helen C. Dodick and Christopher R. Weldon.

For each login event, please include the timestamp, IP address, and the target application accessed (e.g., NJ eCourts, NJPIMS, NJCFS). I am not seeking any passwords, sensitive credential data, or the contents of the applications accessed—only the objective authentication metadata logs.

Date Range: January 1, 2014, through December 31, 2017.
----------------------------------------------------------------------------------------------------------------------------------------------------------------
5.) Please provide all system audit-trail logs, transaction histories, or database modification logs generated within the New Jersey Comprehensive Financial System (NJCFS), NJSAVE, or equivalent state centralized accounting platform, reflecting the creation, modification, or deletion of any vendor profile, payee profile, or disbursement record containing the names 'Nadia Romanov', 'Leon Epstein', or 'Estate of Nadia Romanov'.

The responsive logs should display the system metadata, including the User ID that initiated the transaction, the timestamp of the transaction, the department/agency code associated with the User ID, and the action taken (e.g., 'Created', 'Modified', 'Deleted', 'Approved'). I am requesting the system IT log metadata of these transactions, not the underlying financial vouchers or banking information.

Date Range: January 1, 2014, through December 31, 2017.
----------------------------------------------------------------------------------------------------------------------------------------------------------------
6.) lease provide all IT Service Management (ITSM) or help-desk ticket records (e.g., ServiceNow, BMC Helix, Remedy) submitted to NJOIT by, or on behalf of, Helen C. Dodick, Christopher R. Weldon, or any user identifying their department as the Office of the Public Guardian (OPG).

This request is limited to tickets where the short description, incident notes, or resolution notes contain any of the following terms: 'Romanov', 'S-8455', 'recover email', 'restore file', 'hard delete', 'purge mailbox', or 'missing folder'.

Please include the ticket number, date created, requesting user's name, assigned technician, and resolution summary.

Date Range: January 1, 2014, through December 31, 2017.
----------------------------------------------------------------------------------------------------------------------------------------------------------------

My preferred delivery method for response(s) to this request is by E-mail as attachments. Please confirm you have received this request. If you are not the custodian of records, please forward my request to that person and provide their email address to me for future reference.

Yours faithfully,

Andrew Khazanovich

Dear Bowers, Brandon [OIT],

I am in receipt of your request for an extension of time to respond to my Open Public Records Act (OPRA) request. I am writing to formally grant this extension

To assist your office during this extended timeframe and to ensure your IT and database administrators are pulling the correct data, I have refined the search parameters. Please note that the timeframes have been bifurcated: requests targeting baseline database/system anomalies remain strictly 2014 through 2017, while requests targeting specific keyword metadata (e.g., Romanov, S-8455) have been updated to January 1, 2023, to the present.

Please use the updated, authoritative parameters below for your fulfillment of this request moving forward:

UPDATED OPRA REQUEST PARAMETERS:

Please accept this electronic request for public records made under OPRA and the common law right of access. I am not required to fill out an official form or use a particular software platform to submit my request per NJSA 47:1A-6(f), which states that an email from a requestor including all of the information required on the adopted form shall suffice in place of a completed form as a valid government record request.

I HAVE NOT been convicted of any indictable offense under the laws of New Jersey, any other state, or the United States.
I WILL NOT use the requested government records for a commercial purpose.
I AM NOT seeking records in connection with a legal proceeding.

Records requested:

1.) All records reflecting the master department code and master section code assigned to the Office of the Public Guardian for Elderly Adults (or any employee thereof) within the state centralized payroll system (NJPIMS/EPIC or successor) for calendar years 2014, 2015, 2016, and 2017. This includes but is not limited to: (a) code assignment records showing any 'Null,' blank, or 'None Listed' values; (b) audit trail or change-log entries showing when any department or section code was modified, added, or deleted for OPG-related personnel; and (c) any memoranda, email communications, or help-desk tickets relating to 'Error 94' exceptions or code correction requests for OPG employees during this period.
Timeframe: January 1, 2014, through December 31, 2017.

2.) Please provide all enterprise email message tracking logs, Microsoft Exchange message trace reports, or equivalent state email routing logs reflecting the sender address, recipient address(es), date, time, subject line, and attachment metadata for any email sent from or received by the following State of New Jersey email accounts: [email address], [email address], [email address], and [email address].
This request is strictly limited to email routing logs where the subject line or attachment title contains any of the following terms: 'Romanov', 'Khazanovich', 'Balevre', or 'S-8455'.
Furthermore, please specifically filter for routing logs showing correspondence between the aforementioned state accounts and any email address ending in @judiciary.nj.gov (Union County Surrogate/Courts), @matuslaw.com (or domains associated with Christine Matus), and @vanarellilaw.com (or domains associated with Donald Vanarelli).
Timeframe: This request is strictly limited to the period from January 1, 2023, to the present.

3.) Please provide all system audit logs, administrative action reports, or retention metadata generated by the State of New Jersey’s enterprise email archiving/eDiscovery system (e.g., Microsoft Purview, Enterprise Vault) concerning the mailbox accounts belonging to Helen C. Dodick ([email address] / [email address]) and Christopher R. Weldon ([email address] / [email address]).
Specifically, I am requesting:
(a) The system log showing the exact date, time, and creating User ID of any 'Litigation Hold', 'eDiscovery Case', or 'Retention Lock' placed on these specific mailboxes containing the keyword 'Romanov' or 'S-8455' during the specified timeframe.
(b) Any administrative audit logs showing 'Hard Deletes', 'Purges', or manual mailbox destruction events executed within or against these specific mailboxes.
Date Range: January 1, 2023, to the present.

4.) Please provide all Active Directory (AD) authentication logs, Single Sign-On (SSO) logs, or Identity and Access Management (IAM) sign-in logs reflecting the successful and failed network login events for the State of New Jersey UserPrincipalNames (UPNs) or network IDs assigned to Helen C. Dodick and Christopher R. Weldon.
For each login event, please include the timestamp, IP address, and the target application accessed (e.g., NJ eCourts, NJPIMS, NJCFS). I am not seeking any passwords, sensitive credential data, or the contents of the applications accessed—only the objective authentication metadata logs.
Date Range: January 1, 2014, through December 31, 2017.

5.) Please provide all system audit-trail logs, transaction histories, or database modification logs generated within the New Jersey Comprehensive Financial System (NJCFS), NJSAVE, or equivalent state centralized accounting platform, reflecting the creation, modification, or deletion of any vendor profile, payee profile, or disbursement record containing the names 'Nadia Romanov', 'Leon Epstein', or 'Estate of Nadia Romanov'.
The responsive logs should display the system metadata, including the User ID that initiated the transaction, the timestamp of the transaction, the department/agency code associated with the User ID, and the action taken (e.g., 'Created', 'Modified', 'Deleted', 'Approved'). I am requesting the system IT log metadata of these transactions, not the underlying financial vouchers or banking information.
Date Range: January 1, 2023, to the present.

6.) Please provide all IT Service Management (ITSM) or help-desk ticket records (e.g., ServiceNow, BMC Helix, Remedy) submitted to NJOIT by, or on behalf of, Helen C. Dodick, Christopher R. Weldon, or any user identifying their department as the Office of the Public Guardian (OPG).
This request is limited to tickets where the short description, incident notes, or resolution notes contain any of the following terms: 'Romanov', 'S-8455', 'recover email', 'restore file', 'hard delete', 'purge mailbox', or 'missing folder'.
Please include the ticket number, date created, requesting user's name, assigned technician, and resolution summary.
Date Range: January 1, 2023, to the present.

My preferred delivery method for response(s) to this request is by E-mail as attachments. Please confirm you have received this updated clarification and that the extension is noted on your end.

Yours faithfully,

Andrew Khazanovich