57 Misc. 3d 963
N.Y. Sup. Ct.2017Background
- NCMEC notified NYPD that a suspected child‑pornography image was uploaded from a Juno email account on Dec. 26, 2014; Officer Anthony Santilli viewed the image and identified it as child pornography.
- Subpoenas to ISPs (United Online/Juno and Verizon) linked the Juno account to multiple IP addresses and identified the subscriber name “Joseph H.” and an associated business, Pink Label, and defendant Joseph Hayon at a Brooklyn residence.
- Prior warrants (March 23 and May 1, 2015) produced records showing additional child‑pornography traffic and linked several IP addresses to Hayon and Pink Label; Santilli applied for three search warrants (May 15, 2015) for Hayon’s residence and two business offices.
- The May 21, 2015 execution recovered computers, phones, and devices; Hayon was arrested and admitted owning the Juno and Facebook accounts and gave account passwords.
- Hayon moved to controvert the three warrants and suppress evidence, arguing defects in probable cause: (1) some subpoenaed data weren’t tied to child pornography; (2) Santilli viewed only one image; (3) affidavit omitted that others might access an unsecured IP; and (4) information was stale. The court denied the motion.
Issues
| Issue | Plaintiff's Argument | Defendant's Argument | Held |
|---|---|---|---|
| Probable cause for warrants | Warrant application traced email/IP activity stepwise and established nexus to locations; officer expertise and corroboration supported finding | Warrant lacked sufficient connection between ISP records and criminal activity at searched sites | Court: Magistrate’s finding entitled to deference; application provided ample probable cause; motion denied |
| Reliance on IP addresses to link activity to Hayon | IP assignments and subpoena returns tied Juno account and transmissions to IPs assigned to Hayon’s residence and Pink Label, supporting nexus | IP addresses alone don’t conclusively prove who transmitted/viewed files | Court: IP evidence, combined with other records and this investigative trail, furnished a reasonable nexus to premises (citing federal circuits) |
| Sufficiency of Santilli’s personal knowledge/viewing | Officer viewed at least one image, then obtained records and message content confirming exchanges; his training supports inferences about storage/hoarding | Because Santilli personally viewed only one image and said “I am informed” re: other images, affidavit relied on others’ evaluations and weakened probable cause | Court: Whether Santilli read all messages was ultimately irrelevant; affidavit and subsequent records showed active exchanging and personal knowledge sufficient for probable cause |
| Staleness of information | Child‑pornography records and IP activity showed ongoing exchange; digital files are often retained so older events can support current probable cause | Initial upload in Dec. 2014 and gaps thereafter rendered information stale by May 2015 | Court: Given continuing nature of possession/hoarding and digital retention, facts remained timely; staleness objection rejected |
Key Cases Cited
- People v. Castillo, 80 N.Y.2d 578 (presumption of validity attaches to magistrate‑approved warrant)
- People v. Hanlon, 36 N.Y.2d 549 (probable cause judged with practical inferences; magistrate given deference)
- People v. Bigelow, 66 N.Y.2d 417 (probable cause requires reasonable belief evidence may be found at a place)
- People v. Edwards, 69 N.Y.2d 814 (warrant must show evidence likely at specific time and place)
- Brinegar v. United States, 338 U.S. 160 (probable cause involves probabilities, not certainties)
- United States v. Perez, 484 F.3d 735 (IP address linked to residence can support nexus for probable cause)
- United States v. Vosburgh, 602 F.3d 512 (IP‑address evidence can make online access traceable to subscriber and physical address)
- United States v. Irving, 452 F.3d 110 (collectors of child pornography likely hoard images; inference supports non‑staleness)
- United States v. Raymonda, 780 F.3d 105 (staleness analysis—continuing nature of possession and digital retention affects shelf‑life of evidence)