No surprise here. Snowden knew he was the target as soon as Lavabit got shut down.
With how much traffic the NSA was collecting and archiving during that time, it is very likely that they had captured traffic that they thought might contain messages to/from Snowden.