I asked around about this and from what I heard it's much more likely they discovered his password (or clues like password length) through surveillance than actually cracked the encryption