Comment by ogre_codes

> Of course, they may have just asked all the authorized users, and had each of them deny it.

Or they could... check the logs, pull the IP, get a warrant, and get the account/ address associated with that IP.

This is basic stuff.

They got a warrant. Judges aren't going to issue a warrant based on asking a bunch of people if they sent a message.