Internal TigerSwan Situation Report 2017-05-11

1 TigerSwan . Solutlons to Uncertamty? DAPL SITREP 240 May 12, 2017 a John Porter ENERGY TRANSFE ChiefSecurity Officer INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE. DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS.

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS The Highlights I am a bit late on the SITREP, my apologies. Moving forward, Jessica Reznicek and Ruby Montoya continue to roam freely with no worries. It will come down to someone catching these two individuals at the act or someone in the element known as the ?detachment? Our main effort will be Iowa, Western portion of Illinois and Southern South Dakota. The Details 1. NORTH DAKOTA A. Intel Update 1) Camp Updates: (Cheyenne River North, Approx. 2 miles South of Cannonball Bridge) TigerSwan a. Current 4 Bands Camp leader - is planning on leaving the camp because - is using- 5 name to get funding from and for the camp as well as garner support for the 4 Bands Camp. - is also receiving pressure from Cheyenne River Tribal Council following the event last Saturday with the protester attacking a TigerSwan employee; the council does not want name or reputation tarnished by radical acts of violence. - wants to leave now, but Cheyenne River Tribal Council is encouraging- to remain in 4 Bands Camp to oversee it until it is determined. will succeed in taking over the camp or not. - and -do not get along. - has more involvement with Standing Rock Tribal Council than with Cheyenne River Tribal Council. i. SOURCE COMMENT: - has/is more involved with Standing Rock Tribal Council than with Cheyenne River Tribal council because he has the support of one of the councils and Cheyenne River is not supporting him. . - is currently on the road, working hard to achieve his goal of gathering 300 400 veterans to occupy 4 Bands Camp. If. is able to garner sufficient numbers of participants, his goal is then to retake Oceti Sakowin Camp. - understands that the lease on the 4 Bands Camp expires on 18 August, 2017; he does not want to occupy 4 Bands Camp permanently for this reason. He wants to use 4 Bands Camp as a staging ground to overtake Prepared for Energy Transfer Partners 1

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS d. Oceti Sakowin campgrounds again with the mindset that he has until August to achieve the takeover. If is successful in his goals, the Cheyenne River Tribal Council will remove. and take all of his gear, supplies, and materials back to Cheyenne River Camp in South Dakota; they do not want any part of the radical actions-and his followers will bring. - will be in charge of running his own camp in South Dakota and. will take control of the operations in North Dakota. -had his supplies, materials, and equipment separated from the rest of the camp today (approximately 250 sleeping bags, many cots, and other supplies). He had his goods moved into another tent so that when he is ready to go, he can easily pick up his gear and leave. He will be providing supplies for 3 to 4 camps in South Dakota, acting as a distribution facility for anti KXL camps. Most of-?s people departing today for Cheyenne River Camp in South Dakota. The male press member is going back to Minneapolis to deal with family emergency ?and his girlfriend will be flying home. The only remaining occupants will be- and an elder along with his wife and kids. - is not yet back in the camp. The current lease hold of the property on which 4 Bands Camp is established is a former police officer in Standing Rock Reservation. Ever since the 4 Bands Camp opened, Standing Rock Tribal Council was opposed to the camp presence on the property. The police officer refused to evict the camp, so the tribal council fired the police officer and hired a new one. Once fired, the police officer lost his rights to the property lease, making it unable to be renewed after its expiration on 18 August 2017. The new police officer (name unknown) will take over the rights to the lease and will not be supportive of the camp being on the property. 2) A suspicious late model red Ford Explorer was observed and reported by Mandan a. Municipal Airport staff in the area of the Mandan Municipal Airport. The driver was observed using binoculars to case the Mandan Municipal Airport from HWY 6. When staff members approached the vehicle, it departed at a high rate of speed. Analyst Comment: This event marks the fourth consecutive day suspicious vehicles have been identified observing DAPL property/offices. Expect activity to continue as the weather continues to improve and additional interest is drummed up to support the anti pipeline movement. 3) aka_ remains in the Bismarck/Mandan and Cannonball TigerSwan areas. - posted a live feed with prominent Standing Rock protester- aka,-. The focus of the live feed was supporting Camp Promise in Flint, Prepared for Energy Transfer Partners 2

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS however, he had a tangent speaking out against pipeline companies. TigerSwan Intel will continue monitoring his activities while in the area. (3) Analyst Comment: - carries a large social media following and is an influential leader in the anti pipeline movement. B. Past 24 Hours 1) 2) 3) 4) Maintained safety inspections at valves ND 280 to ND 430 using roving patrols. Suspicious vehicle at Mandan Municipal Airport was observed casing the airport and departed at a high rate of speed when approached by staff members. Valve sites inspections: Workers at multiple sites today conducting operations. No significant safety issues identified C. Next 24 Hours 1) 2) 3) Continue monitoring of Open Source information, ISR feeds, and other sources of information to provide accurate assessments of protester activities/migration which may impact DAPL operations. DAPL safety inspectors will continue to rove the valve sites in North Dakota. Michels continues restoration efforts at the H005 and along the ROW. 2. IOWA A. Intel Update 1) 2) Tige rSwan Jessica Reznicek and Ruby Montoya were positively identified today at the Des Moines Catholic Worker protest outside the IA Air National Guard base in Des Moines, IA. They were accompanied by an UI older male with a long beard and long white hair. They arrived in the same white Toyota hatchback. LP now identified as -. Their appearance at the protest in Des Moines suggests they are likely back at one of the local Catholic Worker houses. In addition, Reznicek was sitting on a yellow milk crate exactly like the one seen on the game cameras used to carry welding supplies. Reporting from inside Little Creek Camp states the atmosphere inside the camp is becoming increasingly cult like. Christine Nobiss seems to remain the leader of the camp/cult. Nobiss has convinced Iowa City local David Whiting that he must devote his life to the camp. He has left his family and his full time job, often to maintain the sacred fire while Lakasha is too intoxicated to do so. Whiting further believes that some sort of environmental apocalypse is imminent and Little Creek Camp is the only way to prevent it. Whiting?s house in Iowa City is frequently used by both Nobiss, Lakasha, and other protesters. They use his house for showers and have used much of his personal money for the camp. This is likely why protesters Prepared for Energy Transfer Partners 3

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS frequently geotag themselves in Iowa City. Address now identified as a probable protester safe house and possible location for “the detachment” to stay. 3) A tractor supply store in Millersburg, IA, Jim Elwood Implement, was recently broken into and robbed. The store is just down the street from Little Creek Camp. Locals have reported an increase in robberies since the camp’s inception. Chainsaws, security cameras, a service truck, and other items were reported as stolen. Of note is that the service truck (reported as a Tahoe) was later found completely burned to the point the tires melted. This is significant because the camp may be practicing arson techniques in preparation for their perceived 14 May deadline. Furthermore, the store also sells new and old construction equipment such as skid steers. None have been reported missing at this point, but the camp does have a trailer it could use to transfer such equipment. 4) Eddie Simpson (Suspected of placing the note on IA 440) is back at Little Creek Camp with ActivateNow and members of a traveling pro hemp group. Simpson and Nobiss have stated their current plan is to start more actively recruiting for the camp to gain more members. They intend to drastically increase their social media presence and have ostracized heavy drinkers from the camp. In addition, several members of the camp partook in a class at Grinnell College today as likely another recruitment method. 5) Heather Pearson and other Bold Iowa members are sharing reports of a DAPL leak in SD to bolster their cause in IA B. Past 24 Hours 1) Iowa DAPL Security patrolled the ROW, assessed the condition and security, and interacted with the DAPL security force. 2) Continued to adjust security posture to account for recent attacks. 3) Observed Catholic Worker Protest in Des Moines, IA and identified Reznicek and Montoya on site 4) Notified local LE and LE from the counties with arson events of the location of Reznicek and Montoya 5) Valve inspection updates: NSTR C. Next 24 Hours 1) Continue monitoring of Open Source information, ISR feeds, and other sources of information to provide accurate assessments of protester activities/migration which may impact DAPL operations 2) DAPL security will continue to rove the valve sites in Iowa. Continue to have the field managers patrol the ROW and access security. Assist and mentor DAPL security personnel as required. TigerSwan Prepared for Energy Transfer Partners 4

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS 3) Attempt to gain meeting with Iowa County Sheriffs to gather more information on the local robberies 3. SOUTH DAKOTA A. Intel Update 1) Security guard made contact with_ neighbor who lives in vicinity of SD 40.-, Ph. stated he would help watch the area and will let DAPL security know if they see anything suspicious. 2) For the past three days, a vehicle was seen at various valve sites between SD 245 and SD 260. The vehicle was either traveling at a high rate or driver took off when the security guard tried to approach, in which he was unable to get a plate number. 3) At approximately 1745 yesterday, the same vehicle was spotted. Security guard- - pursued the vehicle to obtain a plate number and picture of the vehicle. During his pursuit, the vehicle stopped and pulled over.- approached the vehicle and spoke with the driver. Description of the driver fits Ruby Montoya?s physical features. The woman had a brief conversation with the guard, was very upset, told the guard to stop following her, and sped off. 4) TS- took this information and pushed it to the Minnehaha Sheriff?s department. He had a sheriff come out to SD 250 where the woman was last seen to brief the sheriff on what took place. 5) The sheriff then put a BOLO out on vehicle and plate number. As of today, the vehicle has been found and the sheriff?s department has the driver in custody. The driver was arrested because the plates that were on the vehicle did not belong to that vehicle. We are currently waiting to hear back on the driver?s information to determine the driver?s identity. 8. Past 24 Hours 1) Coordinated responsibilities for the upcoming addition of security guards to the ROW. With the additional guards, this will aid in the amount of security coverage for each valve site. 2) Security guards continue to meet new property and homeowners that live in vicinity of the valve sites, to establish a positive relationship to use as an addition source of information for reporting. 3) Security personnel have been diligently reporting any suspicious vehicles and reporting them on our State BOLO WhatsApp. This has allowed for quick and accurate reporting. All reports at this time have not been anything resulting in malicious activity, all reports have been linked with either curious people or ETP inspectors C. Next 24 Hours TigerSwan Prepared for Energy Transfer Partners 5

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS 1) Continue to establish detailed maps of the Row to issue to oncoming security personnel so they can have accountability of their area of operation. 2) Continue monitoring of Open Source information, ISR feeds, and other sources of 3) information to provide accurate assessments of protester activities/migration which may impact DAPL operations. 4) Continue preparation of briefing for all oncoming security so they are informed of their responsibilities, their area of operations, reporting procedures as well as how to handle any suspicious activity or an attack on a valve site 4. ILLINOIS A. Intel Update 1) Illinois activists have begun to take over the narrative of the 84 gallons of spill at the SD pump station on Wednesday May 10 2017. Chicago activists have seized on the recent spill and are generating the narrative depicting ETP as negligent and that the activists’ predictions are coming true. The first effort to exploit this will be the DIVESTMENT bloc at an upcoming DIVEST rally scheduled for May 12 in Pilsen, a suburb of Chicago. Pilsen is the base of operation for CHIRESISTS the most vocal group for DIVESTMENT in Chicago. ChiResists is heavily supported and influenced by BLM Chicago and has a diverse base of support throughout the Chicago minority community for all of their actions. ChiResists is the front organization heading the push for the City of Chicago to DIVEST from DAPL. The momentum of this event may push the City Council to vote on the symbolic DIVESMENT from DAPL and the motion will likely pass based on the number of Council members that have signed on to vote for it when the action comes to a vote. https://www.facebook.com/events/291230141317724/ 2) The entire Chicago/Illinois social media circle also has seized on the spill as a rallying cry for shutting down DAPL and preventing future pipelines. This effort draws from a myriad of sources all leading to similar conversations calling for upcoming demonstrations in Chicago. This also has a potential to bleed over into actual protests on the ROW within Illinois. Activists have already protested at a few sites in Illinois in the past. It is plausible that this latest incident may spur renewed protests along it. The most likely site of such an action would be the Patoka Pump station in Patoka Illinois. It was the site of the first protest in Illinois. It is also in near proximity of St Louis, the home of the newly formed Earth Coalition, led by former Mississippi Rising organizer, Alex Cohen. Currently neither he nor his group has seized on this incident but since they are members of many of the sites that have been posting on this event, they will have visibility of the incident within the next 24 hours. TigerSwan Prepared for Energy Transfer Partners 6

3) 4) Tige rSwan INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS The most likely course of action will be for renewed protest efforts in Chicago to raise awareness, push for DIVESTMENT and to raise funds for future actions against DAPL. There may be small isolated protests at various cities in Illinois and possibly small protests at a small number of DAPL sites. The most dangerous course of action is that organizations such as members of the defunct Mississippi Stand, Earth Defense Coalition, IIYC Chicago and other grass root organizations, garner organizational and financial support from organizations such as Food and Water Watch to conduct a direct action event against one or multiple DAPL facilities within Illinois, creating a large media event and reigniting the momentum of the Standing Rock protests against DAPL, ETP and Pipelines in General. a 350.019 The leak from the Dakota Access pipeline has already occurred - and it's not even fully in operation Hayl: . .. ?It doesn't give us any pleasure to say. told you so But we have said from the that It's not a manor of rt. but when thcguardian Dakota Access pzpeline Ims lirst leak below pipeline 1> fully operational ALI-11 .urxrr- "Mn .A-r I?'l theguardian I If \?htm Dakota Acces pipeline has ?rst leak before it's fully 90V. 4" operational I Int urn-s ?rst run-s hamrds in vm'r'w'w? M11 ??739" rdqr-"rhs 7? a ?nun-tr 350 Ch cago a surrogate of Food and Water Watch dwest 1 Veteran Ch cago Act st Organ zer -lan'i?g Rm "lb- p'st Ii 5 Illinois Against DAPL 1.131le 7CCI- 3 0u? 33-31 stead, sulluduil Iiistuevenluw'imvel. In tel/112;; 3 WI ll?l?DJgh EIIK snake 3121 DAPL 3395 La: Standing Ru It Sioux Tr the Ln: Pap. n1 l'i?Nf- 3 Han when tl-?a?s . . DAFLhantE-m' started er'p n; :i 31: i1 is stead, aspl [3 Standing Rock SlouxTnbe ZAP- doesnt rave a scill response for Standir'c Raw S.D. looking into Dakota Access oil pipeline leak in Spinl: Countv . . Dakota prpelme 15 Dead)? for Oil. wtthout a Spill .. equip.? . =4g4lrn- . 1, . t- :l'n-ri .. response plan for Standing Rock . I eleruenu; smung l1 13113:? IVC a L- Veteran Ch cago Act st se dent ed Stand ng Rock Veteran Prepared for Energy Transfer Partners 7

INFORMATION CONTAINED IN THIS REPORT IS PROPRIETARY AND SENSITIVE DO NOT RELEASE OUTSIDE OF AUTHORIZED AND APPROVED RECIPIENTS https://www.theguardian.com/us news/2017/may/10/dakota access pipeline first oil leak?CMP=Share_AndroidApp_Facebook http://www.esquire.com/news politics/politics/news/a55027/dakota access pipeline leak/ http://www.thepublicopinion.com/news/local news/s d looking into dakota access oil pipeline leak in/article d5cc89d6 3589 11e7 8289 bb5fd634f2d1.html https://insideclimatenews.org/news/10052017/dakota access pipeline oil spill standing rock court battle protests B. Past 24 Hours 1) Continued ROW and facility assessment and update running estimate of the security status 2) Conducted increased presence patrols throughout the AO as a means of active deterrence 3) Conducted successful integrate air/ground security operations across the Illinois ROW 4) Conducted area familiarization patrol with new TS IL team member C. Next 24 Hours 1) Continue to support Sunoco personnel with operations as needed 2) Conduct assessments and photo documentation of the sites across the entire Illinois line 3) Conduct open source monitoring of activist groups 4) Continue with integrated air/ground security operations across the Illinois ROW. 5) Prepare logistics plan and tasking for TS IL Valve Inspectors TigerSwan Prepared for Energy Transfer Partners 8