Contract analysis

I. Executive Summary The purpose of this memorandum is to summarize the preliminary forensic findings of Pinnacle Forensics LLC ("Pinnacle"), as communicated to Calderwood & Harkness LLP ("C&H") in Pinnacle's preliminary report delivered on February 28, 2025 (the "Preliminary Report"). The Pinnacle engagement is led by Dr. Rajiv Anand, a certified digital forensics examiner with over twenty years of experience in cor

II. Background A. The Departing Employees On February 7, 2025, at 4:47 PM PST, eight senior employees of CRH's merchandising division submitted simultaneous resignation letters via email, each stating that the resignation was effective immediately. The simultaneous timing of the resignations — all eight emails were sent within a sixty-second window — itself suggests a high degree of coordination among the departing e

1. Derek Linden — Vice President, Hardlines Merchandising. Employed by CRH for approximately seven years. Linden oversaw CRH's hardlines merchandising strategy, including vendor relationships, pricing, and competitive positioning across hardware, outdoor, and home improvement categories.

2. Sonia Kaczmarek — Vice President, Softlines Merchandising. Employed by CRH for approximately five years. Kaczmarek managed CRH's softlines merchandising portfolio, including seasonal apparel, home textiles, and related soft goods categories.

3. Amara Osei — Director, Private Label Strategy. Employed by CRH for approximately four years. Osei was responsible for CRH's private-label brand portfolio, including sourcing strategies, manufacturer relationships, cost modeling, and margin architecture for CRH's proprietary brands.

4. Brent Halvorsen — Director, Seasonal Planning & Analytics. Employed by CRH for approximately six years. Halvorsen led CRH's seasonal buying cycle planning, demand forecasting, and inventory optimization functions, utilizing proprietary analytical models and algorithms developed during his tenure.

5. Lucia Fernandez-Gill — Director, Vendor Relations (Domestic). Employed by CRH for approximately five years. Fernandez-Gill managed CRH's domestic vendor relationship portfolio, including vendor negotiations, term sheets, rebate programs, and exclusivity arrangements.

6. Nathan Tsao — Senior Manager, eCommerce Merchandising. Employed by CRH for approximately three years. Tsao was responsible for CRH's ecommerce assortment strategy, pricing optimization algorithms, and online merchandising playbooks for CRH's direct-to-consumer digital platform.

7. Kira Johansson — Senior Manager, Category Analytics. Employed by CRH for approximately four years. Johansson led CRH's category analytics function, producing customer segmentation models, purchase pattern analyses, market share assessments, and lifetime value calculations that informed CRH's merchandising and marketing strategies. All eight departing employees left CRH to join Verdana Commerce Group, Inc. Verdana

1. Device Forensic Imaging. Forensic imaging of all CRH-issued laptops and mobile devices returned by the eight departing employees following their February 7, 2025 resignations. Pinnacle received custody of these devices on February 21, 2025, and completed forensic imaging by February 24, 2025, following chain-of-custody protocols consistent with Federal Rules of Evidence standards.

2. Cloud Environment Access Log Analysis. Analysis of CRH cloud environment access logs for Sundial Systems (CRH's corporate document management system) and Pinnacle Health IT (CRH's vendor relationship management and customer data platform) for the period of October 1, 2024 through February 7, 2025. The analysis window extends back to October 1, 2024 to establish baseline access patterns for each departing employee

3. File Download and Transfer Cataloguing. Identification and cataloguing of all files downloaded, transferred, or accessed in an unusual pattern during the analysis period, with particular attention to bulk downloads, downloads to non-CRH destinations, and downloads outside of normal business hours.

4. USB Device and External Storage Analysis. Analysis of USB device connections and external storage device usage on all CRH-issued devices, including identification of connected device types, connection timestamps, and associated file transfer activity.

5. Email Metadata Review. Review of email metadata and outbound communications from CRH email accounts (Microsoft) for the final thirty days of each departing employee's employment, with a focus on identifying any transmission of confidential files or information to external addresses. Pinnacle delivered its Preliminary Report to Calderwood & Harkness on February 28, 2025. The Preliminary Report addresses all five wo

III. Summary of Forensic Findings A. Overall Data Exfiltration Volume Pinnacle's Preliminary Report identifies a total of 14,327 files exfiltrated from CRH systems during the period of January 10, 2025 through February 4, 2025. The total data volume of the exfiltrated files is approximately 2.8 gigabytes. While the data volume in gigabytes may appear modest in absolute terms, the nature and sensitivity of the files —

IV. Categories of Exfiltrated Data Pinnacle's Preliminary Report classifies the 14,327 exfiltrated files into six principal categories based on subject matter. The following provides a detailed summary of each category, the approximate number of files involved, and the significance of the materials from CRH's competitive standpoint. A. Project Ridgeline Materials A total of 847 files are directly associated with "Pro

V. CRH Device Analysis Following the February 7, 2025 resignations, CRH collected all CRH-issued laptops and mobile devices from the eight departing employees through CRH's standard offboarding process. The devices were secured by CRH's IT department and transferred to Pinnacle Forensics on February 21, 2025 pursuant to chain-of-custody protocols. Pinnacle completed forensic imaging of all devices by February 24, 202

VI. Correlation with Known Recruitment Timeline The exfiltration timeline identified by Pinnacle aligns closely and consistently with the recruitment timeline as independently identified by Aurelian Investigations Group Inc. ("Aurelian"). Aurelian was engaged by C&H on behalf of CRH on February 21, 2025, and is led by Sandra Fielding, a former federal law enforcement investigator. Aurelian's investigation has focused

VII. Implications for Litigation A. Breach of Confidentiality Obligations Each departing employee's employment agreement with CRH contains perpetual confidentiality obligations that survive the termination of employment. These obligations broadly prohibit the unauthorized removal, copying, retention, or disclosure of CRH confidential information, which is defined in each agreement to include trade secrets, business s

VIII. Outstanding Items and Next Steps The following items remain outstanding and require attention in the near term: Pinnacle Supplemental Report. Pinnacle's final supplemental report is expected by approximately March 10, 2025, and will include the following additional analyses: (a) Hash-Value Analysis. Detailed hash-value analysis of specific high-sensitivity files to establish file integrity and confirm that the

IX. Attachments (Referenced but Not Reproduced) The following documents are referenced in this memorandum but are not reproduced herein. All attachments are maintained in the privileged and confidential matter file, 1038-00006. Attachment 1: Pinnacle Forensics LLC Preliminary Forensic Report (dated February 28, 2025). Privileged and confidential; prepared at the direction of counsel in anticipation of litigation. Mai