FUJ00203305 -Email chain from Matthew Lenton to John Simpkins, Steve Parker, Mark Wright cc: others. RE: Bug 28 Drop and Go Bug Peaks

Evidence on official site

FUJ00203305

FUJ00203305
From: Lenton, Matthew[/o=Fujitsu Exchange Organization/ou=Exchange Administrative Group
(FYDIBOHF23SPDLT )/cn=Recipients/cn=87f95ed0a28548a8bd569f2cb6f]
Sent: Fri 29/03/2019 1:29:59 PM (UTC)
To:
Cec: Ibbett, Davef~ 7; Newsome, Pete[,_
Subject: RE: Bug 28 Drop and Go Bug [WBDUK-AC.FID123822914] - Peaks
John,

Agreed, we may not want to do that, and I haven’t suggested to WBD that we might... but obviously they will now
realise.

At least we now know what the cut off was.

Matthew Lenton
Post Office Account Document Manager
Business & Application Services

Fujitsu

Lovelace Roas
Phor
Email: [
Web: https://www. fujitsu.com/global/

Bracknell, Berkshire, RG12 BSN

From: Simpkins, John <
Sent: Friday, March 29, 2019 1:18 PM

; Parker, Steve <

; Wright, Mark

Cc: Ibbett, Dave Newsome, Pete <,
Subject: RE: Bug 28 Drop and Go Bug [WBDUK-AC.FID123822914] - Peaks

Matthew,

The last Peak provided was PC0273139, so they would not have access to this.

The latest Peak is PCO277487, so they are ‘missing’ 4,348 Peaks.

Do we really want to start sharing more Peaks unless they request them as I can only expect more requests to deep
dive investigations from them?

Regards
John

From: Lenton, Matthew
Sent: 29 March 20:
To: Parker, Steve impkins, John <j

Cc: Ibbett, Dave < lewsome, Pete <
Subject: FW: Bug 28 Drop and Go Bug [WBDUK-AC.FID123822914] - Peaks

Steve,
In relation to Bug 28 it was suggested to WBD that PC0273234 was another example (originally with a typo as
PC0237234). It looks like WBD don’t have that one; it was raised on 21-Aug-2018, I think that’s almost to the day that

John did the extract which was provided to them.

Could you confirm that is the case that it wasn’t included? I can send a copy of that one to them for now, but just
FUJ00203305
FUJ00203305

wondering if we should clarify with them (and all round) which was the latest Peak we already provided, and how
many new Peaks there are since then, and whether we should update them?

Matthew Lenton
Post Office Account Document Manager
Business & Application Services

Fujitsu

Web: https://www fujitsu.com/global

From: Katie Simmonds < _
Sent: Friday, March 29, 2019 11:30 AM
To: Lenton, Matthew
Cc: Michael Wharton
<

Subject: RE:

bbett, Dave <¢

Newsome, Pete

ug 28 Drop and Go Bug [WBDUK-AC.FID123822914]
Hi Matthew

Thank you for your responses to this summary and confirming the ARQ request has been passed onto the security
team. I can see that you've sent over the correct Peak reference for the 2018 Peak. Can I just check this is a Peak
that WBD have been given? We can't seem to locate PC0273234 on Relativity so wanted to make sure but apologies
if this is something wrong our end.

Kind regards

Katie

Katie Simmonds
Associate
Womble Bond Dickinson (UK) LLP.

Stay informed: sign up to our e-alerts

womblebonddickinson.com

From: Matthew.Lentoné
Sent: 28 March 2019 18:07

To: Katie Simmonds . .
Cc: Michael Wharton; Dave. Ibbett: pete.newsome¢
Subject: RE: Bug 28 Drop and Go Bug [WBDUK-AC.FID123822914]

Katie,
FUJ00203305
FUJ00203305

Please see responses added to the attached summary. I have passed your request for the ARQ data to the security
team.

Matthew Lenton
Post Office Account Document Manager
Business & Application Services

Fujitsu

Cc: Michael Wharton <_
Subject: Bug 28 Drop ani

Matthew,

We have prepared our summary on the Drop and Go Bug, copy attached, and should be grateful for Fujitsu's input.
We have also reached out to Post Office with a request to put us in touch with ATOS to investigate the outcome
further and have also asked Post Office to confirm whether or not a TC was issued here.

Kind regards

Katie

Katie Simmonds
Associate
Womble Bond Dickinson (UK) LLP.

er3zo

Stay informed: sign up to our e-alerts

womblebonddickinson.com

‘OND —
DICKINSON @) (in)

Please consider the environment! Do you need to print this email?

The information in this e-mail and any attachments is confidential and may be legally privileged and protected by law. matthew.lenton: is authorised to
FUJ00203305
FUJ00203305

access this e-mail and any attachments. If you are not matthew. lenton,
Unauth

copies.

ised use, dissemination, distribution, publication or copying of this communication or attachments is prohibited and may be unlawful, Information about how we use
data is in our Privacy Policy on our website.

Content of this email which does not relate to the official business of Womble Bond Dickinson (UK) LLP, is neither given nor endorsed by it.

istered office
n employee

This email is sent by Womble Bond Dickinson (UK) LLP which is a limited liability partnership
is 4 More London Riverside, London, SE1 2AU, where a list of members’ names i
or consultant who is of equivalent standing. Our VAT registration number is GB12

ered in England and Wales under number 0C317661. Our r
pen to inspection, We use the term partner to refer to a member of the LLP, or
3627,

Womble Bond Dickinson (UK) LLP is a member of Womble Bond Dickinson (Intemational) Limite
services in the US, the UK, and elsew round the world. Each Womble Bond Dickinson entit
can bind or obligate, another Womble Bond Dickinson entity. Womble Bond Dickinson (Intemational) Limited does not practice law, Please see
notices for further details.

which consists of independent and autonomous law firms providing
separate legal entity and is not responsible for the aets or omissions of, nor

Womble Bond Dickinson (UK) LLP is authorised and regulated by the Solicitors Regulation Authority.

Unless otherwise stated, this email has been sent from Fujitsu Services Limited (registered in England No
96056); Fujitsu EMEA PLC (registered in England No 2216100) both with registered offices at: 22 Baker
Street, London W1U 3BW; PFU (EMEA) Limited, (registered in England No 1578652) and Fujitsu
Laboratories of Europe Limited (registered in England No. 4153469) both with registered offices at: Hayes
Park Central, Hayes End Road, Hayes, Middlesex, UB4 8FE.

This email is only for the use of its intended recipient. Its contents are subject to a duty of confidence and may
be privileged. Fujitsu does not guarantee that this email has not been intercepted and amended or that it is
virus-free.