Summary: In March and April 2023, the Python Software Foundation (PSF) received three subpoenas from the United States Department of Justice for PyPI user data. The PSF was not provided with context on the legal circumstances surrounding these subpoenas. In total, user data related to five PyPI usernames were requested, including names, addresses, connection records, session times and durations, and payment information. The PSF determined with the advice of counsel that their only course of action was to provide the requested data. The privacy of PyPI users is of utmost concern to PSF and the PyPI Administrators.