annabel melongo, save-a-life foundation case, 10/30/06 police investigative report

8/9/2019 Annabel Melongo, Save-A-Life Foundation case, 10/30/06 police investigative report

1/8

Schiller Park Police Department1. DATE/TIME OF REPORT:

30 Oct 06/1530

2. DATE/TIME OF ORIGINAL REPORT

5 May 06/0947

3. CASE Nl'MBER

06-3219

I. ORIGINAL OFFENSE OR INCIDENT

Computer Tampering

5. CT-ASSIFICATION

Felony

6. OFFENSE CHANGED TO

Same7. VICTIMS NAJVIE

Save-A-Life Foundati

8. VICTIMS ADDRESS. _

9950 Lawrence Av. #300 SP.

9. P H O N E ( H O M E )

847-928-968.110. DEFENDANTS NAME

Melongo, Annabel K.

I I. DEFENDANTS ADDRESS

1218 Long Valley Dr.

12. PHONE (HOME)

630-220-4132 Unk

13. IF ARREST MADE PHOTO

LQ.COI'RT DATE/LOCATION

U PROPERTY RF.CO\ ERED lS.AMOl'NT 16. LEADS Nl'MBER

17. CLEARED 18. RADIO OPERATOR 19. DATE AND TIME

20. STATl'SCLEARED E l I ' NF Ol 'N DE PQ ADMIN CLEARED FAIL TO PROSECT'TE Q FURTHER ACTION Y'ES NO |

121 N V R R A T I Y E RoidhaeBdrtdii|miakUu*1iKcainbqoealto)htfcMottoMlBUatltpoil l> ^n l* u>dicfany pei&ona utesled If offense classificationudunked. explain why Indicate dead}' disposition of piopeily lecoveted and show piopeity wvenloiy mNubcf if in police

(" iSCSSlOll

ignecLthe initial case report 06-3219 reporting an incident o f Computer

[Tampering R/I received copies o f the emails that had Keen sent to and from I _

account The headers on the emails showed that the offender had for war ded the sin

from Ms Spi7.?irri's account o the Ya ho o email account o f melongo

contacted Yahoo Subpoena Compliance Department and left them a message to contact R/T in

iefeience_10-this investigation.

lit, who advised R/l t o fax

i Yahoo asking for a snapshot of the Yahoo account at the time the fay wa s

8 Ma y 06 - I

a-px

received and to advised them that a suhpoena will he forthcoming

9 May 06- Pet Henn #77 fayed the preservation letter to Yahoo asking Yahoo to preserve the

trdsof melongoannahellglyahoo com and take a snapshot o f the account for the last

thirty days and all days that follow until they receive the suhpoena

06-RZL wi th Comcast Cahle Services 1 egal department ahoi it h ow to obtain the

rmatinn related to the IP address that was found in the header o f thq emails

ed to the Yahoo account in question and was_assigned to the offender's computer at

the time o f the intrusion to Save-A-I.ife's computer R/T was advised that R/I would need to fay them

a preservation letter also and then a subpoena t o fol low in order for Comcast t o release

information to R/I

16 May 06- R/I and I t Schn be #30, met wi th Kyle French o f the Illinois Attorney

in reference t o this investigation M r French advised that he was available to

investigation and JiajLalrajdy_seiiLpresejvaiiQn requests to Yahoo^Co

ic Internet found that the snspcciyMs. Annabel Melongo,-

Iniversity M r French felt that it may he necessary for R/I to send another preservation letter to

t to Comcast-

Apt

R/I and I t Sr.hu

#3 A, in Palatine IT.

for M s Melon go 1718 Fst Long1

Ms Melongo's name was on the mailbox hut her vehicle was j

assigned-parking space.

et-with Robert Barnes and-Vincent Davis of Save-A-Life

Name Star 2 9 Date/Time 30 Oct 0 6 / 1 5 3 0

Schiller Park Police2000 Case# 06-3219 Page I
http://sr.hu/http://sr.hu/


2/8

Schiller Park Police Department Supplementary Case # 06-3219

able to give RZLmQreJnfDrmatioji abouLSav

stem Mr Rames informed R/I that the, limes noted Qnthcserver logs areJoc[thai the system has automatic daylight savings time adjustment M L Barnes also gaye R/I more

suspect, Ms Melnngo Mr Barnes stated that Ms Melongo had no_prior

Melongo had no further ar.

ilnyment was terminated, Ms

the computers from within the hnilding and that an emr.

named Christian changed all of the pass codes in eacJLQf-lhe servers after she left the hnilding Mr

Rarnes stated he had no knowledge nf Ms Melnngn having any_olher email accounts other that thehut stated that she does have a laptop that she uses from time to time Mr

[Rarnes also stated that he knew the suspect was aa tu de nt at Roostivelt.IJniversity Mr Barnes also,

believed the intrusion-lo-the come

email server hut he wa^uriSUIaaiaJlOW.thisJIiay.Jiav

the DSI. lines from the servers after |

that the computer system's auto hackiip program was :

[hayeJricked the suspect out of the server jiLthatJ ime

iw_through theweLviaihe_c

Lbecause

sit^minateiLl

to begin at 03?5

Itliat SALFis

Davi

olved in wjth Robert Half and that the suspect was not one of them that he knew of Mr

s believed the suspect had heen monitoring SALF management's email for some time. Mr Dav ia

also gave R/l the name nf the person who they called to repair 1

Technology Solutions

the. pryattempt to perform data

hy Ms.

rilical Technology Solutions and spoke with Don Peters, .

rsstatedJhat on 1 May 06, he was contracted hy SAI F to

es on SAIF's two computer servers Mr Peters advised

ile personnel attempted recovery on the drives prior to|

ould be questionable due

was to move forward with themplete or missing. R/T asked

[Mr. Peters also sent an email to R/T documenting the conversation he liad with Ms .Spizzirri and her

employe :covery.vs. evidence preservation^

R/I then contacted Roosevelt University R/I .spoke with the. C1Q of the I Jni versify, wh o

advised R/I that the suspect is a student there and that she does have an email account

amelQngQ@roosevelf edu He did state.thaLhe could notpmvideJI/Lwithany_Qlher information

about theirj

[advised to speak to.Mike, the owner o f the company. Mila infhrmedJZIihat the company should

have the IP addresses.oany.computer accessing his company's servers and that he would send R/I

the information collected for the dates.oflheintru.sions

18 MayD6-_R/I received the.fax from Mr.feters, whichwaaa copy of the recovery overview that he

Dell server and described the reasons for the inability to recoveranyJiles from the Sony server

A l i iiinauthor]

'Iwas contacted hy Ms Spi?7irn wh jmihe company's American Express

card account information:

t_ MsJipizzirri advised H/L

itainedxm ihe_server pr io rjoJ ii e

Star 29 Date/Time 30 Oct 06/1 5 3 0

Schiller Park Police 2000 Case #06-3219 Page 2


3/8

Schiller Park Police Department Supplementary Case # 06-3219

atrol officer to S Al F lr> take the report from Ms Spizzirri Refer

8Qfi=3714_

19 May OftnJB/Lrftceived a copy of the report made hy Ms Spizzirri on I8 May 06 R/I then .

contacted American Express fr au d J i Rnh Cnn-an who stated he wf

R/I a ro py of the account activity for the dates of 13 May 06 to 18 Mav 06.

R/I then contacted EBay's Fraud Investigation Team ahont the charge tc

R/I was advised that Ms Me lo ng o did have an ac i them .but there

F AmEx account.been no purchases

QvexJil4 made on the account.

_R/Iihen.sentanj

li on thaloccurred-on 18 May i

r information about. J

.R/I .was later

of the transaction record which showed all of the information the offender had to enter in order to

opletelh e transaction, along with, the j

Amazon com

attemptedta purchase from

to T.

J/I_with the ship to name and

address of lonLSmilly 1QQynthia L a , GlendaleJieights, IT,, and a phone niimher of 630-369-S489

The hill to name was Carol Spizzirri with a phone number of 847-829-2968 Tasha stated that the

offender purchased 13 items that were expedited via Fed Ex and according to Old Navy's records thfil

package was left at the door for pickiip and not signed for Tasha fiirfher stated that four of the i tem

nrchased were gift cards that for some unknown reason were never activated hy the shipper and will

[attempted to contactTriple CrownPuhlishing, GifLCertifk

BakersEootwear, and Carson Pirie Scottin refere

to leave messages with these merchants

.R/I_theaattemptedin

LthatRZLreceiyedfrom Mr Curran. R/I was ahle.to reach a c

ay Inr The representative Amanda advised R/I that she_had

-.nnt niimher dating hack to 7003 R/I J|

stomer research department Tasha was al

chants listed On the AmEx account activity

le toJje activated Tasha stated that if R/I needed more information about the transaction

R/T would have to fax a snhpoena to the charge hack department of Old Navy

R/I then contacted United Airlines, hut got ho answer at their fraud department R/I then

Itants,

Lanly able!

R/I_ihenconIaled M s .Spizzirri and asked if she knew a Toni Smith in Glendale Heights which she

did not, or not she recognized a n y n f j e numbers that were associ th theIraudulenLtransactions.

ctionlhat had22_May 06- R/I spoke with Susan Rnstick of Bakers Shoes ahont the frai

occurred online iuU7.May.Q6 at 18 38 05 POT on their website Ms Bostick sta t

Lof.the order-detail form showing the items.piirchased-alaag-witb. hilling and snipping

on. Ms._Bostick also advised R/I that the shipment had not ye th ee as hi pp ed lQ thexus tomer

becau se her fraud departmenLflagged the order as possibly being fraudulent R/I then asked for her J

not to ship ihfLilems so that R/I could contact Ee d Ex in an at temp ii o set up a controlled delivery

Ms..Bostick stated that she would have tospeak to her superiors before she could authorize the use

of the merchandise for the deliveryJR/I then railed fonsiimerinfo corn's customer service department and spoke with 3_

^a li y ji aj ne d Rose Rose, advised R/ l that the $1 charge ot iihe SALE AmEx a,

Star 29 Date/Time 30 Oct 06/1 53 0



4/8

Schiller Park l'olice Department -Supplementary Case # 06-3219

|preanthori7ation charge and the $5 charge was for a credit score for a particular individuaLilQSE

not give R/I any fiirther information hut she could give it to the customer (i e

1-SAT.F) without a siihpoena R/T then left a message for Ms Spizzirri requesting that she contact

Consumer Tnfo asking for any and all information that was disseminated to the offender

R/I again left messages with the other merchants requesting they, contact R/l in reference tnthe fraudulent charges involving SAT F's AmFx account R/I, usingvarJQus.dataha.ses, was able toresearch the address of 700 Cynthia I n in Glendale Heights, along with the phone numbers g iventQ_

Amazon and Rakers Shoes as contact numbers and the name Toni Smith R/l found no connection to

SAI.F at that time

23 May 06 - R/T received an email from Mr French that contained the Grand Jury Subpoena.reques t

Comcast and Yahoo com R/l then converted the

[so that R/L cou ld fax them to the state's-attoraey'

an investigator for-Experian Credit Bureau _Mr Henry.

Ms Spizzirri who had contacted Fxperian in reference

is owned by Fxperian Mr Henry explained the charges to R/T

also gave R/l the name of the person whose

R/l the name of Saquan fiholar and advised R/l that thecreditsnhject lives in Illinois Mr Henry could not give R/I any fiirther information without a siihpoena Mr

Henfy explained that with a siihpoena, R/I could ohtain more demographic

May 06 - R/T received the response to R/I's request for the Grand Jury subpoenas R/l then faxed |

|the subpoena to Comcast cahle services requesting information on the assigned Internet account of

addresyphysical address, his mother's_maiden name and his actual date of hirth

YS and was able to ohtain a photo of Mr Gholar

[two of their IP addresses for the dates of the intrusion and the purchase fc

siihpoena was sent to Comcast requesting any account information for Ms Melongo and her address |pf I21R Fast I onp Valley Dr Apt #3 A in Palatine II

on Yahoo com requesting;

^t of TuHge Tohin who signed a request for a search warrant to he served

JUIIII aniJ t

search warrant to Yahoo legal compliance

5Jun 06- R/l received a response '

reco rds for the IP address of 74 IS 20? 102 for the dates and tiines j*

or contained an error associated with the cahle modem or other device Therefore. they

iinplete

couldjiot-

11anyinfbnnation.as.ta which of their customers had that IP address at the times of the

into -SAIFs serversLong Valley

responsive.to R/I's request In response t

af.HJ)7 72 196 on 17 May 06_at20 1

: lalhe_subpoena.fbr account iPalatine, IL, Comcast.slated.

: inforrnatiorifhrJILaddress

eR/l thenaineonil

Andrea Sr acLaddress of 229 S 14th Ave. Apt #J , Maywood, n . 60153, a telephone

number of 7Q8r269_-_2968_ Along withJ [email protected] and

wookie91@comcast net, anda-Comcast account number of 8798200010470727,

7 lun 06- R/I contacted Comcast IP Services ahout them not having any information for Ms

in order fo earch jus t the name and/or just the address_R/Llheii.|

I two separate s

Star 29 Date/Tiiue 30 Oc t 06/1 5 30

http://varjqus.dataha.ses/http://varjqus.dataha.ses/http://anyinfbnnation.as.ta/http://anyinfbnnation.as.ta/mailto:[email protected]:[email protected]:[email protected]://anyinfbnnation.as.ta/http://varjqus.dataha.ses/


5/8

Schiller Park Police Department .Suppiememary Case # 06-3219

le's-Attorney's ilH go in front of therequested and faxed them tr

Grand Jury on 8 Jim 06. .R/I, along with Pe t Koch #11 went to ??9 S 14th Ave in Maywood, TT. and rang the hell

^ j t m * . . . , , . . , , . . . . . > . . . . - >w - , . . .. } - . - .- a

IhuLgol no answer R/I wrote down several license plates of .vehicles parkedJn front of the I

ran those plates hut none came hark to AnHrea Smith ft/I did a check of AndreaE

[through various databases and found a photo of an F/R that had an address oU4_S. 12th St in

Maywood, IT. The phone number gjyenJw Comcast came hack to a cell phone owned hy^BeltyL

Spears.

R/I was contacted hy Mr Barnes from SALP Mr Barnes stated that the companil was _miim.icu \iy miumui;,i mini j n i . r ITIIuni nt.,i ,-iimi.ii mm tin. ni "i i|' u" j iirimii nu

inanthorized automated clearing house (ACH) debit on the company's Chase Rank account monthly

statement The ACH dehit was to Comcast in the amount of S20Q.0Q on 22 May 06 Mr. Barnes then

faxed R/I a ropy of the hank statement showing the dehit in question along with the form sent to himwingjhf deputed charge R/I contacted Chase Rank's Fraud Department in order to

e information ahont the transaction R/I sp ok eio IerjyJWQiking_who advised R/l that she 1

tell for sure whether * was a rher.lr hy phone transaction or if the o

[the payment in person at the Comcast Rill Payment Center Ms Working ditLstate that the hank was_\

in the process of refunding the money to SAIFs account

RZI then contacted Comcast Customer Service The representative that R/I spoke

khat she too could not give an indication how the hilLwas paid hut did State.lhe_acCQunLthat thepayment was applied to was in the i LS 14th Ave, in May

9 J u n 06- R/I went hack to Ms Melongo's address in Palatine but again got na an sw er at the d oor

andlhere wa 1 parking space

14 Inn 06- R/I and Pet Koch went t o 77Q S 14th Ave in Maywood TT. hut again got no answer at

the door.

'I and Del Koch went to the address of 700 Cynthia l.n , in Glendale. Heights R/I wrot

annabel melongo, save-a-life foundation case, 10/30/06 police investigative report

Documents