v.
Sample
State of Maryland v. Hayes Sample, No. 54, September Term, 2019 MARYLAND RULE 5-901(a) AND (b)(4) – AUTHENTICATING SOCIAL MEDIA EVIDENCE THROUGH CIRCUMSTANTIAL EVIDENCE – “REASONABLE JUROR” TEST – Court of Appeals held that trial court did not abuse its discretion in admitting Facebook-related evidence, as there was sufficient circumstantial evidence under Maryland Rule 5-901(b)(4) for reasonable juror to find that Facebook profiles belonged to defendant, Hayes Sample, and to defendant’s alleged accomplice, Claude Mayo, and to find that defendant unfriended accomplice on Facebook day after attempted armed robbery, in which accomplice was fatally shot. Court of Appeals reaffirmed holding in Sublet v. State, 442 Md. 632, 678, 113 A.3d 695, 722 (2015), and concluded that, to authenticate social media evidence, there must be proof from which reasonable juror could find that it is more likely than not that evidence is what proponent purports it to be. Court of Appeals concluded State was not required to eliminate all possibilities that were inconsistent with authenticity, or prove beyond any question that defendant was one who used Facebook profile to unfriend accomplice’s Facebook profile. Court of Appeals held that there was sufficient circumstantial evidence under Maryland Rule 5-901(b)(4) for trial court to conclude that reasonable juror could find that it was more likely than not that “SoLo Haze” Facebook profile belonged to Sample and that “claude.mayo.[5]” Facebook profile belonged to Mayo. Evidence indicating that SoLo Haze profile belonged to Sample and claude.mayo.[5] profile belonged to Mayo supported conclusion that Sample used SoLo Haze profile to unfriend claude.mayo.[5] profile. Court of Appeals determined that, moreover, additional evidence supporting conclusion that more likely than not Sample used SoLo Haze profile to unfriend claude.mayo.[5] profile included temporal proximity of unfriending to attempted armed robbery, Sample had motive to distance himself from Mayo, and during seventeen-day period after attempted armed robbery, claude.mayo.[5] Facebook profile was only profile that was unfriended from SoLo Haze Facebook profile. All of these circumstances were sufficient for trial court to allow Facebook-related evidence to be presented to jury. Circuit Court for Baltimore County Case No. 03-K-16-000108 Argued: March 9, 2020 IN THE COURT OF APPEALS
OF MARYLAND No. 54
September Term, 2019
STATE OF MARYLAND v. HAYES SAMPLE
Barbera, C.J. McDonald Watts Hotten Getty Booth Biran, JJ.
Opinion by Watts, J.
Filed: May 11, 2020
Pursuant to Maryland Uniform Electronic Legal Materials Act (§§ 10-1601 et seq. of the State Government Article) this document is authentic. Suzanne Johnson 2020-08-19 12:56-04:00 Suzanne C. Johnson, Clerk It is axiomatic that for a trial court to admit evidence, there must be sufficient indicia that the evidence is authentic—i.e., that the evidence “is what its proponent claims.” Md. R. 5-901(a). A party can sufficiently authenticate evidence through “[c]ircumstantial evidence, such as appearance, contents, substance, internal patterns, location, or other distinctive characteristics, that the offered evidence is what it is claimed to be.” Md. R. 5- 901(b)(4). On two prior occasions, this Court has addressed authenticating social media1 evidence through circumstantial evidence under Maryland Rule 5-901(b)(4). In Griffin v. State, 419 Md. 343, 357, 19 A.3d 415, 423-24 (2011), this Court held that a trial court abused its discretion in admitting alleged printouts of the defendant’s girlfriend’s MySpace profile, as the same had not been sufficiently authenticated through circumstantial evidence under Maryland Rule 5-901(b)(4) as belonging to the girlfriend. In Sublet v. State, 442 Md. 632, 672-73, 675-77, 113 A.3d 695, 719, 720-22 (2015), in an opinion that "claude.mayo.[5]”3 and “SoLo Haze”— as well as a “Certificate of Authenticity of Domestic Records of Regularly Conducted Activity[.]” The Facebook Business Records regarding the SoLo Haze Facebook profile indicated that the e-mail address “[email protected]” was registered to that profile. The SoLo Haze Facebook profile identified Baltimore as the “current city,” and listed Edmondson-Westside High School and Towson University as the user’s “[c]onnections[.]” The owner of the SoLo Haze Facebook profile was friends with the owner of a Facebook profile named “Skky DaLimit Lynn[.]” Prior to trial, Sample’s counsel advised the circuit court that a Skkyla Lynn would be called as a defense witness.
[*172]The Facebook Business Records regarding the claude.mayo.[5] Facebook profile also listed Baltimore as the “current city,” and listed Patterson High School as the user’s “[c]onnection[.]” The owner of the claude.mayo.[5] Facebook profile was friends with the owner of a Facebook profile named “Shantell Richardson[.]” Shantell Richardson is Mayo’s mother’s name.
Significantly, the Facebook Business Records regarding the SoLo Haze profile indicate that, the day after Sample and Mayo allegedly attempted to rob the liquor store and Mayo was fatally shot, the claude.mayo.[5] profile was unfriended from the SoLo Haze profile. During the seventeen-day period to which the Facebook Business Records pertained, the claude.mayo.[5] profile was the only one, of 175 profiles with which the SoLo Haze profile was friends, to have been unfriended.
[*173]In the circuit court, Sample filed a motion in limine and a memorandum in support thereof, contending that the State would not be able to sufficiently authenticate the Facebook Business Records. The circuit court denied the motion. At trial, over Sample’s counsel’s objection, the prosecutor elicited testimony from the detective concerning information from the Facebook Business Records, including the circumstance that the Facebook Business Records regarding the SoLo Haze Facebook profile showed that, the day after the attempted armed robbery, the claude.mayo.[5] Facebook profile had been unfriended.
The jury found Sample guilty of attempted robbery with a dangerous weapon and other crimes. Sample appealed, and the Court of Special Appeals reversed the convictions and remanded the case for a new trial, reasoning that the circuit court abused its discretion in admitting the Facebook-related testimony. See Hayes Sample v. State, No. 1715, Sept. Term, 2017, 2019 WL 3451812, at *4-5 (Md. Ct. Spec. App. July 31, 2019). The State filed a petition for a writ of certiorari, which this Court granted. See State v. Sample, 466 Md. 310, 219 A.3d 526 (2019).
Before us, the State contends that there was sufficient circumstantial evidence for a reasonable juror to find that the SoLo Haze Facebook profile belonged to Sample, that the claude.mayo.[5] Facebook profile belonged to Mayo, and that Sample used his profile to unfriend the claude.mayo.[5] profile. According to the State, Sample had a motive to distance himself from Mayo immediately after the crime and did so before his status as a suspect in the attempted armed robbery became publicly known. Sample responds that, despite there being evidence that he created the SoLo Haze Facebook profile, there was insufficient evidence that he was the person who used the profile to unfriend the claude.mayo.[5] profile.
[*174]We hold that the circuit court did not abuse its discretion in admitting the Facebook- related evidence, as there was sufficient circumstantial evidence under Maryland Rule 5- 901(b)(4) for a reasonable juror to find that the SoLo Haze Facebook profile belonged to Sample, that the claude.mayo.[5] Facebook profile belonged to Mayo, and that Sample used the SoLo Haze profile to unfriend the claude.mayo.[5] profile the day after the shooting. We conclude that the standard of proof for authenticating social media evidence is the preponderance of evidence standard, i.e., there must be sufficient circumstantial evidence for a reasonable juror to find that it is more likely than not that the social media evidence is what it is purported to be. Here, the circumstantial evidence supporting the conclusion that the profiles belonged to Sample and Mayo consists of evidence that the SoLo Haze and claude.mayo.[5] Facebook profiles listed Baltimore City as their current cities and the connections listed in the profiles included schools in Baltimore City and the Towson area. The profiles’ lists of friends included people who were either a friend or relative of Sample and Mayo. Moreover, the SoLo Haze Facebook profile name consists of a homophone of Sample’s first name “Hayes,” the “[email protected]” e-mail address registered for the SoLo Haze Facebook profile contains Sample’s last name, and the SoLo Haze profile had been identified as a friend on the claude.mayo.[5] profile. Without more, the evidence indicating that the SoLo Haze profile belonged to Sample and the claude.mayo.[5] profile belonged to Mayo indicates that Sample used the SoLo Haze profile to unfriend the claude.mayo.[5] profile.
[*175]There are, moreover, additional circumstances surrounding the unfriending that establish that a reasonable juror could find more likely than not that Sample was the person who unfriended the claude.mayo.[5] profile. Those circumstances include the temporal proximity of the attempted armed robbery to the unfriending, and that Sample had a motive to distance himself from Mayo. Indicative of a motive to distance himself from Mayo, while speaking with detectives, Sample did not acknowledge being friends with Mayo despite surveillance video that showed Sample and Mayo walking together approximately fourteen minutes before the crime occurred and cellular telephone records that showed that there was a call made by Sample to Mayo approximately an hour before the crime. And, importantly, during the seventeen-day period after the attempted armed robbery, of 175 Facebook profiles listed as friends on the SoLo Haze Facebook profile, the claude.mayo.[5] profile was the only one that was unfriended.
BACKGROUND
Opposition to Facebook Evidence
On July 24, 2017, Sample raised his opposition to the Facebook evidence during a pretrial hearing. During the hearing, Sample’s counsel advised that he had provided the circuit court with a copy of a letter in which he had informed the prosecutor that he planned to object to certain Facebook-related evidence based on foundation. Sample’s counsel stated that the letter included requests that the prosecutor provide additional information about the Facebook-related evidence and call an employee of Facebook as a witness at trial. The circuit court and Sample’s counsel discussed whether the request for the prosecutor to call a Facebook employee as a witness at trial was timely. Sample’s counsel contended that the Facebook-related evidence included irrelevant hearsay that was not covered by the business records certification that the prosecutor had provided. The circuit court denied Sample’s counsel’s request to require the State to call a Facebook witness at trial, finding that Sample’s counsel’s request was untimely, and not related to authenticating the Facebook-related evidence.
[*176]Motion in Limine
On August 3, 2017, Sample filed a “Motion in Limine to Exclude Facebook Evidence[,]” a memorandum in support of the motion, and Exhibits A through C. (Some capitalization omitted). Exhibits A and B consist of numbered pages, all of which have the heading “Facebook Business Record[,]” and Exhibit C is a “Certificate of Authenticity of Domestic Records of Regularly Conducted Activity[.]” In the motion in limine and the memorandum in support thereof, Sample contended that the Facebook Business Records were inadmissible on multiple grounds. Among other things, Sample argued that the Certificate of Authenticity of Domestic Records of Regularly Conducted Activity did not sufficiently authenticate the Facebook Business Records because it did not establish who authored the Facebook Business Records’ contents. In the memorandum, as to authentication, Sample contended that the State would be unable to authenticate the Facebook Business Records using any of the methods for authenticating social media evidence that this Court set forth in Sublet, 442 Md. at 663, 113 A.3d at 713.
Exhibit A – Facebook Business Records for the SoLo Haze Profile
In Exhibit A, which pertains to the SoLo Haze profile, page 29 states in pertinent part:
[*177]Target 100009404335910 Generated 2015-12-17 19:40:24 UTC[4] Date Range 2015-12-01 00:00:00 UTC to 2015-12-17 23:59:59 UTC
***
Name[5] First SoLo Middle Last Haze
Registered [email protected] E[-]mail [email protected] Addresses
Vanity Name
***
Current City Baltimore, Maryland (112438218775062) Page 36 of Exhibit A states in pertinent part:
Connections Zodiac Signs (1616634441885213) Edmondson-Westside High School (230382833645773) Towson University (33627530544) Page 37 states in pertinent part:
[*178]Removed User Claude Mayo (100009340905913) Friends Time 2015-12-09 02:36:22 UTC Removed By 100009404335910 Below the “Removed Friends” entry on page 37 is the word “Friends[.]” Starting next to that word, and continuing through page 40, there is a list of 174 names and ID numbers. Neither the name “Claude Mayo,” nor the ID number “100009340905913,” appears in the Friends list. The name “Skky DaLimit Lynn” is included in the Friends list.
Exhibit B – Facebook Business Records for the claude.mayo.[5] Profile
In Exhibit B, which pertains to the claude.mayo.[5] profile, page 36 states in pertinent part:
Target 100009340905913 Generated 2015-12-08 16:42:21 UTC
***
Name First Claude Middle Last Mayo
Registered +14438898253 E[-]mail Addresses
Vanity Name claude.mayo.[5]
***
Current City Baltimore, Maryland (112438218775062) Page 37 of Exhibit B states in pertinent part:
[*179]IP Address[6] 2607:fb90:136e:b2a:0:9:3f63:4d01 Time 2015-12-08 16:06:42 UTC Action login_attempt_success
IP Address 2607:fb90:136e:b2a:0:9:3f63:4d01 Time 2015-12-08 16:06:41 UTC Action login_bruteforce_protection_delta_not_vetted
IP Address 2607:fb90:136e:b2a:0:9:3f63:4d01 Time 2015-12-08 16:06:41 UTC Action password_check
IP Address 2607:fb90:136e:b2a:0:9:3f63:4d01 Time 2015-12-08 16:06:41UTC Action login_attempt The above language is the only instance in which Exhibit B includes the words “attempt,” “password,” and “protection.”
Page 38 includes the word “Connections” near the following: “Patterson High School (Baltimore) (407178879346337)[.]” Below that, page 38 includes the word “Friends[.]” Starting next to that word, and continuing through page 41, there is a list of several names and ID numbers. “SoLo Haze (100009404335910)” and “Shantell Richardson” appear in that list.
Page 18 states in pertinent part:
Target 100009340905913 Generated 2015-12-17 19:40:23 UTC